From 69f37bb11334bb829c81e7c8c3368f446f4ba594 Mon Sep 17 00:00:00 2001
From: Si-ege <92985804+Si-ege@users.noreply.github.com>
Date: Tue, 14 Dec 2021 19:14:23 +0800
Subject: [PATCH 1/3] =?UTF-8?q?chore:=20=E6=8A=8Ablog=E9=87=8C=E7=9A=84?=
=?UTF-8?q?=E5=9B=BE=E7=89=87=E6=94=BE=E5=88=B0CDN=E4=B8=8A?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
...nSource-Commercialization-by-Apache-Way.md | 2 +-
...PISIX-From-OpenSource-Commercialization.md | 2 +-
.../Apache-APISIX-Incubator-Journey.md | 2 +-
.../Apache-APISIX-Kubernetes-Ingress.md | 2 +-
.../Apache-APISIX-in-China-Mobile-Cloud.md | 2 +-
...ache-APISIX-into-a-Service-Mesh-Sidecar.md | 2 +-
...Community-To-Get-Apache-APISIX-Up-Speed.md | 2 +-
...endering-Community-Events-Using-ECharts.md | 2 +-
.../Speed-Limiting-With-Apache-APISIX.md | 2 +-
...pache-APISIX-Resilience-With-Chaos-Mesh.md | 2 +-
website/articles/The-Appeal-of-OpenSource.md | 2 +-
.../The-Evolution-of-Apache-APISIX.md | 2 +-
...-To-Do-Authentication-and-Authorization.md | 2 +-
...ta-Security-and-Privacy-Protection-Team.md | 2 +-
.../2021/05/25/Apache APISIX 2.6.0-Release.md | 2 +-
...h-helps-Apache-APISIX-improve-stability.md | 4 +--
...ntrol-Bypass-Vulnerability-Announcement.md | 2 +-
...ache-APISIX-Ingress-Controller-released.md | 2 +-
...use-Java-to-write-Apache-APISIX-plugins.md | 4 +--
...rce-gateway-and-ingress-controller-fast.md | 16 ++++++------
.../30/etcd3-support-HTTP-access-perfectly.md | 4 +--
website/blog/2021/07/25/apachecon-asia.md | 16 ++++++------
...f-plugin-orchestration-in-Apache-APISIX.md | 14 +++++-----
.../09/Apache-APISIX-in-China-Mobile-Cloud.md | 2 +-
.../blog/2021/08/11/interview-TuZhengsong.md | 4 +--
...-Apache-APISIX-Improve-System-Stability.md | 6 ++---
...he-golden-metric-of-openSource-projects.md | 14 +++++-----
...t-Plugin-for-Centralized-Authentication.md | 24 +++++++++---------
.../18/Auth-with-Casbin-in-Apache-APISIX.md | 2 +-
.../08/19/go-makes-Apache-APISIX-better.md | 2 +-
website/blog/2021/08/21/shanghai-meetup.md | 8 +++---
.../25/Auth-with-Casbin-in-Apache-APISIX.md | 2 +-
...t-Plugin-for-Centralized-Authentication.md | 24 +++++++++---------
...-quickly-with-Apache-APISIX-development.md | 2 +-
...ta-Security-and-Privacy-Protection-Team.md | 2 +-
.../2021/05/25/Apache APISIX 2.6.0-Release.md | 2 +-
...h-helps-Apache-APISIX-improve-stability.md | 4 +--
...ntrol-Bypass-Vulnerability-Announcement.md | 2 +-
...ache-APISIX-Ingress-Controller-released.md | 2 +-
...use-Java-to-write-Apache-APISIX-plugins.md | 4 +--
...rce-gateway-and-ingress-controller-fast.md | 16 ++++++------
.../30/etcd3-support-HTTP-access-perfectly.md | 4 +--
.../2021/07/25/apachecon-asia.md | 16 ++++++------
...f-plugin-orchestration-in-Apache-APISIX.md | 14 +++++-----
.../09/Apache-APISIX-in-China-Mobile-Cloud.md | 2 +-
.../2021/08/11/interview-TuZhengsong.md | 4 +--
...he-golden-metric-of-openSource-projects.md | 14 +++++-----
.../18/Auth-with-Casbin-in-Apache-APISIX.md | 2 +-
.../08/19/go-makes-Apache-APISIX-better.md | 2 +-
.../2021/08/21/shanghai-meetup.md | 8 +++---
...t-Plugin-for-Centralized-Authentication.md | 22 ++++++++--------
...-quickly-with-Apache-APISIX-development.md | 2 +-
website/static/img/blog_img/2021-01-11-1.png | Bin 282192 -> 0 bytes
website/static/img/blog_img/2021-05-25-1.png | Bin 596337 -> 0 bytes
website/static/img/blog_img/2021-05-31-1.png | Bin 1096718 -> 0 bytes
website/static/img/blog_img/2021-06-06-1.webp | Bin 221454 -> 0 bytes
website/static/img/blog_img/2021-06-16-1.png | Bin 490716 -> 0 bytes
website/static/img/blog_img/2021-06-16-2.png | Bin 836754 -> 0 bytes
website/static/img/blog_img/2021-06-17-1.jpeg | Bin 87511 -> 0 bytes
website/static/img/blog_img/2021-06-18-1.png | Bin 296877 -> 0 bytes
website/static/img/blog_img/2021-06-21-1.png | Bin 803139 -> 0 bytes
website/static/img/blog_img/2021-06-21-2.png | Bin 185212 -> 0 bytes
website/static/img/blog_img/2021-06-23-1.png | Bin 64921 -> 0 bytes
website/static/img/blog_img/2021-06-23-2.png | Bin 59614 -> 0 bytes
website/static/img/blog_img/2021-06-23-3.png | Bin 89741 -> 0 bytes
website/static/img/blog_img/2021-06-23-4.png | Bin 219194 -> 0 bytes
website/static/img/blog_img/2021-06-23-5.png | Bin 75989 -> 0 bytes
website/static/img/blog_img/2021-06-23-6.png | Bin 131994 -> 0 bytes
website/static/img/blog_img/2021-06-23-7.png | Bin 117136 -> 0 bytes
website/static/img/blog_img/2021-06-23-8.png | Bin 64843 -> 0 bytes
website/static/img/blog_img/2021-06-30-1.png | Bin 222248 -> 0 bytes
website/static/img/blog_img/2021-06-30-2.png | Bin 199227 -> 0 bytes
website/static/img/blog_img/2021-07-16-1.png | Bin 1096718 -> 0 bytes
website/static/img/blog_img/2021-07-25-1.png | Bin 229238 -> 0 bytes
website/static/img/blog_img/2021-07-25-2.png | Bin 4240937 -> 0 bytes
website/static/img/blog_img/2021-07-25-3.png | Bin 431675 -> 0 bytes
website/static/img/blog_img/2021-07-25-4.png | Bin 2283307 -> 0 bytes
website/static/img/blog_img/2021-07-25-5.png | Bin 1019133 -> 0 bytes
website/static/img/blog_img/2021-07-25-6.png | Bin 1002085 -> 0 bytes
website/static/img/blog_img/2021-07-25-7.png | Bin 927100 -> 0 bytes
website/static/img/blog_img/2021-07-25-8.png | Bin 1076105 -> 0 bytes
website/static/img/blog_img/2021-07-25-9.png | Bin 571016 -> 0 bytes
website/static/img/blog_img/2021-07-27-1.png | Bin 273572 -> 0 bytes
website/static/img/blog_img/2021-07-27-2.png | Bin 30638 -> 0 bytes
website/static/img/blog_img/2021-07-27-3.png | Bin 13029 -> 0 bytes
website/static/img/blog_img/2021-07-27-4.png | Bin 565370 -> 0 bytes
website/static/img/blog_img/2021-07-27-5.png | Bin 124996 -> 0 bytes
website/static/img/blog_img/2021-07-27-6.png | Bin 113655 -> 0 bytes
website/static/img/blog_img/2021-07-27-7.png | Bin 118011 -> 0 bytes
.../img/blog_img/2021-08-09-chenyanshan.png | Bin 1883898 -> 0 bytes
website/static/img/blog_img/2021-08-11-1.webp | Bin 39936 -> 0 bytes
website/static/img/blog_img/2021-08-11-2.webp | Bin 30144 -> 0 bytes
website/static/img/blog_img/2021-08-14-1.webp | Bin 10750 -> 0 bytes
website/static/img/blog_img/2021-08-14-2.webp | Bin 11636 -> 0 bytes
website/static/img/blog_img/2021-08-14-3.webp | Bin 17126 -> 0 bytes
website/static/img/blog_img/2021-08-14-4.webp | Bin 15878 -> 0 bytes
website/static/img/blog_img/2021-08-14-5.webp | Bin 17000 -> 0 bytes
website/static/img/blog_img/2021-08-14-6.webp | Bin 32386 -> 0 bytes
website/static/img/blog_img/2021-08-14-7.webp | Bin 37426 -> 0 bytes
website/static/img/blog_img/2021-08-16-1.png | Bin 218460 -> 0 bytes
website/static/img/blog_img/2021-08-16-10.png | Bin 330969 -> 0 bytes
website/static/img/blog_img/2021-08-16-11.png | Bin 290089 -> 0 bytes
website/static/img/blog_img/2021-08-16-12.png | Bin 151275 -> 0 bytes
website/static/img/blog_img/2021-08-16-2.png | Bin 303675 -> 0 bytes
website/static/img/blog_img/2021-08-16-3.png | Bin 237844 -> 0 bytes
website/static/img/blog_img/2021-08-16-4.png | Bin 58071 -> 0 bytes
website/static/img/blog_img/2021-08-16-5.png | Bin 135951 -> 0 bytes
website/static/img/blog_img/2021-08-16-6.png | Bin 41904 -> 0 bytes
website/static/img/blog_img/2021-08-16-7.png | Bin 74932 -> 0 bytes
website/static/img/blog_img/2021-08-16-8.png | Bin 125095 -> 0 bytes
website/static/img/blog_img/2021-08-16-9.png | Bin 17214 -> 0 bytes
website/static/img/blog_img/2021-08-18-1.png | Bin 315273 -> 0 bytes
website/static/img/blog_img/2021-08-19-1.png | Bin 514166 -> 0 bytes
website/static/img/blog_img/2021-08-21-1.jpg | Bin 1092771 -> 0 bytes
website/static/img/blog_img/2021-08-21-2.png | Bin 89698 -> 0 bytes
website/static/img/blog_img/2021-08-21-3.png | Bin 60870 -> 0 bytes
website/static/img/blog_img/2021-08-21-4.jpg | Bin 101110 -> 0 bytes
website/static/img/blog_img/2021-08-25-1.png | Bin 211416 -> 0 bytes
website/static/img/blog_img/2021-08-27-1.png | Bin 367802 -> 0 bytes
website/static/img/blog_img/2021-08-27-2.png | Bin 124321 -> 0 bytes
website/static/img/blog_img/2021-08-27-3.png | Bin 174762 -> 0 bytes
website/static/img/blog_img/2021-08-27-4.png | Bin 254126 -> 0 bytes
website/static/img/blog_img/2021-08-27-5.png | Bin 144528 -> 0 bytes
website/static/img/blog_img/2021-08-27-6.png | Bin 216355 -> 0 bytes
website/static/img/blog_img/2021-08-27-7.png | Bin 352567 -> 0 bytes
website/static/img/blog_img/2021-09-06-1.png | Bin 516068 -> 0 bytes
website/static/img/blog_img/APISIX-wechat.png | Bin 60870 -> 0 bytes
127 files changed, 152 insertions(+), 152 deletions(-)
delete mode 100644 website/static/img/blog_img/2021-01-11-1.png
delete mode 100644 website/static/img/blog_img/2021-05-25-1.png
delete mode 100644 website/static/img/blog_img/2021-05-31-1.png
delete mode 100644 website/static/img/blog_img/2021-06-06-1.webp
delete mode 100644 website/static/img/blog_img/2021-06-16-1.png
delete mode 100644 website/static/img/blog_img/2021-06-16-2.png
delete mode 100644 website/static/img/blog_img/2021-06-17-1.jpeg
delete mode 100644 website/static/img/blog_img/2021-06-18-1.png
delete mode 100644 website/static/img/blog_img/2021-06-21-1.png
delete mode 100644 website/static/img/blog_img/2021-06-21-2.png
delete mode 100644 website/static/img/blog_img/2021-06-23-1.png
delete mode 100644 website/static/img/blog_img/2021-06-23-2.png
delete mode 100644 website/static/img/blog_img/2021-06-23-3.png
delete mode 100644 website/static/img/blog_img/2021-06-23-4.png
delete mode 100644 website/static/img/blog_img/2021-06-23-5.png
delete mode 100644 website/static/img/blog_img/2021-06-23-6.png
delete mode 100644 website/static/img/blog_img/2021-06-23-7.png
delete mode 100644 website/static/img/blog_img/2021-06-23-8.png
delete mode 100644 website/static/img/blog_img/2021-06-30-1.png
delete mode 100644 website/static/img/blog_img/2021-06-30-2.png
delete mode 100644 website/static/img/blog_img/2021-07-16-1.png
delete mode 100644 website/static/img/blog_img/2021-07-25-1.png
delete mode 100644 website/static/img/blog_img/2021-07-25-2.png
delete mode 100644 website/static/img/blog_img/2021-07-25-3.png
delete mode 100644 website/static/img/blog_img/2021-07-25-4.png
delete mode 100644 website/static/img/blog_img/2021-07-25-5.png
delete mode 100644 website/static/img/blog_img/2021-07-25-6.png
delete mode 100644 website/static/img/blog_img/2021-07-25-7.png
delete mode 100644 website/static/img/blog_img/2021-07-25-8.png
delete mode 100644 website/static/img/blog_img/2021-07-25-9.png
delete mode 100644 website/static/img/blog_img/2021-07-27-1.png
delete mode 100644 website/static/img/blog_img/2021-07-27-2.png
delete mode 100644 website/static/img/blog_img/2021-07-27-3.png
delete mode 100644 website/static/img/blog_img/2021-07-27-4.png
delete mode 100644 website/static/img/blog_img/2021-07-27-5.png
delete mode 100644 website/static/img/blog_img/2021-07-27-6.png
delete mode 100644 website/static/img/blog_img/2021-07-27-7.png
delete mode 100644 website/static/img/blog_img/2021-08-09-chenyanshan.png
delete mode 100644 website/static/img/blog_img/2021-08-11-1.webp
delete mode 100644 website/static/img/blog_img/2021-08-11-2.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-1.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-2.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-3.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-4.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-5.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-6.webp
delete mode 100644 website/static/img/blog_img/2021-08-14-7.webp
delete mode 100644 website/static/img/blog_img/2021-08-16-1.png
delete mode 100644 website/static/img/blog_img/2021-08-16-10.png
delete mode 100644 website/static/img/blog_img/2021-08-16-11.png
delete mode 100644 website/static/img/blog_img/2021-08-16-12.png
delete mode 100644 website/static/img/blog_img/2021-08-16-2.png
delete mode 100644 website/static/img/blog_img/2021-08-16-3.png
delete mode 100644 website/static/img/blog_img/2021-08-16-4.png
delete mode 100644 website/static/img/blog_img/2021-08-16-5.png
delete mode 100644 website/static/img/blog_img/2021-08-16-6.png
delete mode 100644 website/static/img/blog_img/2021-08-16-7.png
delete mode 100644 website/static/img/blog_img/2021-08-16-8.png
delete mode 100644 website/static/img/blog_img/2021-08-16-9.png
delete mode 100644 website/static/img/blog_img/2021-08-18-1.png
delete mode 100644 website/static/img/blog_img/2021-08-19-1.png
delete mode 100644 website/static/img/blog_img/2021-08-21-1.jpg
delete mode 100644 website/static/img/blog_img/2021-08-21-2.png
delete mode 100644 website/static/img/blog_img/2021-08-21-3.png
delete mode 100644 website/static/img/blog_img/2021-08-21-4.jpg
delete mode 100644 website/static/img/blog_img/2021-08-25-1.png
delete mode 100644 website/static/img/blog_img/2021-08-27-1.png
delete mode 100644 website/static/img/blog_img/2021-08-27-2.png
delete mode 100644 website/static/img/blog_img/2021-08-27-3.png
delete mode 100644 website/static/img/blog_img/2021-08-27-4.png
delete mode 100644 website/static/img/blog_img/2021-08-27-5.png
delete mode 100644 website/static/img/blog_img/2021-08-27-6.png
delete mode 100644 website/static/img/blog_img/2021-08-27-7.png
delete mode 100644 website/static/img/blog_img/2021-09-06-1.png
delete mode 100644 website/static/img/blog_img/APISIX-wechat.png
diff --git a/website/articles/Apache-APISIX-From-OpenSource-Commercialization-by-Apache-Way.md b/website/articles/Apache-APISIX-From-OpenSource-Commercialization-by-Apache-Way.md
index c27ea16ecc50f..c7dff9a2eaa71 100644
--- a/website/articles/Apache-APISIX-From-OpenSource-Commercialization-by-Apache-Way.md
+++ b/website/articles/Apache-APISIX-From-OpenSource-Commercialization-by-Apache-Way.md
@@ -25,4 +25,4 @@ Apache Way 是被无数开源项目证实的社区成功之道，那么对于开
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Apache-APISIX-From-OpenSource-Commercialization.md b/website/articles/Apache-APISIX-From-OpenSource-Commercialization.md
index 95d9f23a34e3b..681ace5b24776 100644
--- a/website/articles/Apache-APISIX-From-OpenSource-Commercialization.md
+++ b/website/articles/Apache-APISIX-From-OpenSource-Commercialization.md
@@ -24,4 +24,4 @@ Apache APISIX 从开源项目到商业化之路。
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Apache-APISIX-Incubator-Journey.md b/website/articles/Apache-APISIX-Incubator-Journey.md
index f2457fa644ba6..bcdd54862f8f2 100644
--- a/website/articles/Apache-APISIX-Incubator-Journey.md
+++ b/website/articles/Apache-APISIX-Incubator-Journey.md
@@ -23,4 +23,4 @@ Apache APISIX 的孵化过程。
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Apache-APISIX-Kubernetes-Ingress.md b/website/articles/Apache-APISIX-Kubernetes-Ingress.md
index e054a457c2b76..1ec70ca8b3cba 100644
--- a/website/articles/Apache-APISIX-Kubernetes-Ingress.md
+++ b/website/articles/Apache-APISIX-Kubernetes-Ingress.md
@@ -26,4 +26,4 @@ description: 介绍基于 Apache APISIX 的 Kubernetes Ingress 的优势以及 A
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Apache-APISIX-in-China-Mobile-Cloud.md b/website/articles/Apache-APISIX-in-China-Mobile-Cloud.md
index 75bc13852e59f..4936438cacb11 100644
--- a/website/articles/Apache-APISIX-in-China-Mobile-Cloud.md
+++ b/website/articles/Apache-APISIX-in-China-Mobile-Cloud.md
@@ -25,4 +25,4 @@ description: 该演讲主题主要是讲述 Apache APISIX 在中国移动公有
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/How-To-Extend-Apache-APISIX-into-a-Service-Mesh-Sidecar.md b/website/articles/How-To-Extend-Apache-APISIX-into-a-Service-Mesh-Sidecar.md
index 833e71ac68fb5..784d7566b2776 100644
--- a/website/articles/How-To-Extend-Apache-APISIX-into-a-Service-Mesh-Sidecar.md
+++ b/website/articles/How-To-Extend-Apache-APISIX-into-a-Service-Mesh-Sidecar.md
@@ -24,4 +24,4 @@ description: 在这个主题中将介绍 apisix-mesh-agent 项目，它有一些
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Relying-On-The-Community-To-Get-Apache-APISIX-Up-Speed.md b/website/articles/Relying-On-The-Community-To-Get-Apache-APISIX-Up-Speed.md
index 81e3ccd217eed..a4f7cc5ed5e9e 100644
--- a/website/articles/Relying-On-The-Community-To-Get-Apache-APISIX-Up-Speed.md
+++ b/website/articles/Relying-On-The-Community-To-Get-Apache-APISIX-Up-Speed.md
@@ -26,4 +26,4 @@ description: 在过去的一年里，APISIX 已经成为全世界最活跃的 AP
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Rendering-Community-Events-Using-ECharts.md b/website/articles/Rendering-Community-Events-Using-ECharts.md
index 45de727ee020f..8e4926adc767b 100644
--- a/website/articles/Rendering-Community-Events-Using-ECharts.md
+++ b/website/articles/Rendering-Community-Events-Using-ECharts.md
@@ -25,4 +25,4 @@ description: 通过以下方式分析了开源资源库的情况：1.贡献者
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Speed-Limiting-With-Apache-APISIX.md b/website/articles/Speed-Limiting-With-Apache-APISIX.md
index 72e5ddf0287c3..970dfc389165e 100644
--- a/website/articles/Speed-Limiting-With-Apache-APISIX.md
+++ b/website/articles/Speed-Limiting-With-Apache-APISIX.md
@@ -27,4 +27,4 @@ description: 本次分享将带来如何使用 Apache APISIX 来实现动态、
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Test-Apache-APISIX-Resilience-With-Chaos-Mesh.md b/website/articles/Test-Apache-APISIX-Resilience-With-Chaos-Mesh.md
index f5f479668a805..8dd03a2c24d3c 100644
--- a/website/articles/Test-Apache-APISIX-Resilience-With-Chaos-Mesh.md
+++ b/website/articles/Test-Apache-APISIX-Resilience-With-Chaos-Mesh.md
@@ -28,4 +28,4 @@ Apache APISIX 是领先的 API 网关 OSS 之一。为了确保一切按计划
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/The-Appeal-of-OpenSource.md b/website/articles/The-Appeal-of-OpenSource.md
index 5202d6537d84f..128ba3d0ecc46 100644
--- a/website/articles/The-Appeal-of-OpenSource.md
+++ b/website/articles/The-Appeal-of-OpenSource.md
@@ -26,4 +26,4 @@ Apache 软件基金会顶级项目 Apache APISIX 以及子项目，在过去 30
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/The-Evolution-of-Apache-APISIX.md b/website/articles/The-Evolution-of-Apache-APISIX.md
index 1d6095692ece1..5ea003a7aa60f 100644
--- a/website/articles/The-Evolution-of-Apache-APISIX.md
+++ b/website/articles/The-Evolution-of-Apache-APISIX.md
@@ -25,4 +25,4 @@ Apache APISIX 是最受欢迎的 API 网关之一：https://github.com/apache/ap
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/articles/Using-Apache-APISIX-To-Do-Authentication-and-Authorization.md b/website/articles/Using-Apache-APISIX-To-Do-Authentication-and-Authorization.md
index 89ff551b480cf..1f312a6be4e55 100644
--- a/website/articles/Using-Apache-APISIX-To-Do-Authentication-and-Authorization.md
+++ b/website/articles/Using-Apache-APISIX-To-Do-Authentication-and-Authorization.md
@@ -24,4 +24,4 @@ description: 认证和授权是 API 网关中非常必要的功能。这样一
关注 Apache APISIX 公众号，回复“ApacheCon”下载 PPT。
-
+
diff --git a/website/blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md b/website/blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
index de89c6aef43ef..2f032ba947424 100644
--- a/website/blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
+++ b/website/blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
@@ -43,4 +43,4 @@ Pengcheng Wang is a senior security consultant in PwC South China data security
The first CVE for Apache APISIX: Apache APISIX Admin API Default Token Vulnerability (CVE-2020-13945), see [Security Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2020-13945) for detail.
-
+
diff --git a/website/blog/2021/05/25/Apache APISIX 2.6.0-Release.md b/website/blog/2021/05/25/Apache APISIX 2.6.0-Release.md
index 70782dedbf741..2d774d484b470 100644
--- a/website/blog/2021/05/25/Apache APISIX 2.6.0-Release.md
+++ b/website/blog/2021/05/25/Apache APISIX 2.6.0-Release.md
@@ -26,7 +26,7 @@ For example, developers are not familiar with Lua and want to write plugins in a
Starting from version 2.6, APISIX supports running plugins written in languages other than Lua with the help of plugin runner. The architecture diagram is as follows.
-
+
APISIX will run the plugin runner as a sidecar.
diff --git a/website/blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md b/website/blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
index 849ecd76efd93..5ebb262fa3591 100644
--- a/website/blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
+++ b/website/blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
@@ -43,7 +43,7 @@ The next two user feedback scenarios are used as examples to introduce the proce
#### Scenario 1
-
+
Describe this scenario in a diagram. Against the five steps above, you first need to find quantifiable metrics that measure the proper functioning of Apache APISIX. The primary method of testing is to use Grafana to monitor Apache APISIX performance metrics. Once measurable metrics are found, the data can be extracted separately from Prometheus in the CI for comparison. Another point is that the logs need to be analyzed. Another point is the need to analyze logs, which for Apache APISIX is to look at Nginx error.log to determine whether errors are reported and whether they are expected.
@@ -51,7 +51,7 @@ In the control group, before Chaos was introduced, we tested that set/get route
#### Scenario 2
-
+
Introducing pod-kill chaos after performing the same control group experiment reproduces the expected error. In the case of randomly deleting a few etcd nodes in the cluster, etcd connectivity exhibited sporadic behavior, and the logs printed a large number of connection denied errors. More interestingly, the setup route returned normally when deleting the first or third node in the etcd endpoint list, and only when deleting the second node in the etcd endpoint list did the setup route report the error "connection refused".
diff --git a/website/blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md b/website/blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
index 894e5f68aa845..c31b847da8990 100644
--- a/website/blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
+++ b/website/blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
@@ -43,7 +43,7 @@ CVE details: https://nvd.nist.gov/vuln/detail/CVE-2021-33190
This vulnerability was discovered by Vern at Ping An Technology Galaxy Security Lab and reported to the Apache Software Foundation. Thanks to Vern and Ping An Technology Galaxy Security Lab for their contributions to the Apache APISIX community.
-
+
## Expanded Reading
diff --git a/website/blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md b/website/blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
index 4a319ccc78423..eb112567f8ed5 100644
--- a/website/blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
+++ b/website/blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
@@ -25,7 +25,7 @@ Supports controlling external traffic access to services deployed in Kubernetes
The overall architecture is as follows.
-
+
## v1.0 latest features
diff --git a/website/blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md b/website/blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
index 90d6fab3b8433..2285f031565b9 100644
--- a/website/blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
+++ b/website/blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
@@ -28,7 +28,7 @@ Now, Apache APISIX supports multi-language development plugins. More importantly
### Multiple Programming Languages Architecture Diagram
-
+
The left side of the diagram shows the workflow of Apache APISIX. The right side of the diagram is the plugin runner, which is a generic term for projects with multiple programming languages support. The apisix-java-plugin-runner is a plugin runner that supports the Java language.
@@ -69,7 +69,7 @@ Before starting the `Mainclass(org.apache.apisix.plugin.runner.PluginRunnerAppli
If you are using IDEA for development, the configured environment variables are shown below.
-
+
apisix-java-plugin-runner is equivalent to the server side and will actively create the `/tmp/runner.sock` file at startup and communicate with Apache APISIX on this file for Unix Domain Socket.
diff --git a/website/blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md b/website/blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
index 83af0211d075c..44f053340841f 100644
--- a/website/blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
+++ b/website/blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
@@ -26,29 +26,29 @@ Visit Rancher’s Tools — Catalogs page.
Click “Edit Catalog”, enter https://github.com/apache/apisix-helm-chart in “Catalog URL” to add the Helm repository for Apache APISIX in Rancher.
-
+
Click “Save” to save the changes.
Select the Apps page, select Launch to see the Apache APISIX repository information. Here we can directly select “apisix” to deploy Apache APISIX.
-
+
-
+
Since we want to **deploy APISIX Ingress controller at the same time**, fill in the `ingress-controller.enabled=true` in the Answers at the bottom. Then click 'Save" to complete the deployment.
-
+
Wait a few moments for the deployment to complete.
-
+
## Step 2: Deploy an Example Project
We use `kennethreitz/httpbin` as a sample project for demonstration purpose. The deployment is also done directly in Rancher.
-
+
## Step 3: Use Apache APISIX as an API Gateway to Proxy Services
@@ -137,13 +137,13 @@ As you can see, **Apache APISIX is able to proxy services within a Kubernetes cl
We can add Ingress directly to Rancher and the Apache APISIX Ingress controller will automatically synchronize the routing rules to Apache APISIX to complete the proxy for the service.
-
+
Note in the bottom right corner, we have added the annotation configuration `kubernetes.io/ingress.class: apisix` to support multiple ingress-controller scenarios in the cluster.
After saving, you can see the following screen.
-
+
Test if the proxy is successful under the terminal：
diff --git a/website/blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md b/website/blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
index 27c6a5cfe9198..9f0d1c068e6ff 100644
--- a/website/blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
+++ b/website/blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
@@ -39,7 +39,7 @@ One idea was to use incremental synchronization to simulate full synchronization
Another idea is to modify etcd. If you can remove the restrictions in etcdctl, why not treat gRPC-gateway the same way? The same change can be made to gRPC-gateway.
We’ve adopted the second option, and have given etcd a PR: [PR #13077](https://github.com/etcd-io/etcd/pull/13077).
-
+
The latest release of v3.5.0 includes this change that we contributed. If you encounter “grpc: received message larger than max”, you may want to try this version. This change has also been back-ported to the 3.4 branch by the etcd developers, and the next release of the 3.4 branch will carry this change as well.
@@ -94,7 +94,7 @@ Note the “TLS Web Server Authentication” here, if we change it to “TLS Web
There is also an issue about this problem on etcd’s repository: Issue [#9785](https://github.com/etcd-io/etcd/issues/9785
).
-
+
## Summary
diff --git a/website/blog/2021/07/25/apachecon-asia.md b/website/blog/2021/07/25/apachecon-asia.md
index 084a4bf27d70b..62ccc25712221 100644
--- a/website/blog/2021/07/25/apachecon-asia.md
+++ b/website/blog/2021/07/25/apachecon-asia.md
@@ -38,7 +38,7 @@ This talk is about the application and practice of Apache APISIX in China Mobile
### Sharing Guests
-
+
Yanshan Chen - After graduation, he has been working on distributed storage software development and architecture design, and has been deeply involved in the construction process of mobile cloud, focusing on the selection of major technology solutions and landing development and construction work related to object storage. At the same time, he has rich practical experience in the field of distributed object storage, and is currently thinking about implementing object storage traffic governance based on APISIX seven-tier gateway to achieve further architectural upgrade.
@@ -54,7 +54,7 @@ This session will show how to use Apache APISIX to achieve dynamic, fine-grained
### Guest Speakers
-
+
Junxu Chen - Internet veteran, worked in Sina, Xunlei, 360 and other well-known Internet companies, Apache APISIX Committer.
@@ -70,7 +70,7 @@ Therefore, here we use Chaos Mesh, a Kubernetes-based chaos engineering platform
### Sharing Guests
-
+
Shuyang Wu - Committer for Apache APISIX and Chaos Mesh, he leads the integration of Chaos Mesh with Apache APISIX CI.
@@ -84,7 +84,7 @@ Authentication and authorization are very necessary features in API gateways. Th
### Sharing Guests
-
+
Xinxin Zhu - Apache APISIX Committer, with years of CDN experience and familiar with gateways.
@@ -98,7 +98,7 @@ In the past year, Apahce APISIX has become the most active API gateway project i
### Guest Speakers
-
+
Yuansheng Wang - Founder and PMC member of open source enthusiast Apache APISIX.
@@ -112,7 +112,7 @@ In this topic I will introduce the apisix-mesh-agent project, which has some cap
### Sharing Guests
-
+
Chao Zhang - Apache APISIX PMC, OpenResty contributor, open source enthusiast, now working on Service Mesh, Kubernetes and API Gateway.
@@ -130,7 +130,7 @@ Apache APISIX is one of the most popular API gateways: https://github.com/apache
### Sharing Guests
-
+
Zexuan Luo - Apache APISIX PMC, OpenResty developer.
@@ -144,7 +144,7 @@ Introducing the benefits of Apache APISIX-based Kubernetes Ingress and the featu
### Sharing Guests
-
+
Wei Jin - Apache APISIX PMC, Apache apisix-ingress-controller Founder, Apache Skywalking Committer.
diff --git a/website/blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md b/website/blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
index b1276db71fe0a..38d10fa6d1bb5 100644
--- a/website/blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
+++ b/website/blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
@@ -22,7 +22,7 @@ Apache APISIX is a dynamic, real-time, high-performance API gateway. Apache APIS
As shown in the architecture diagram below, Apache APISIX is divided into two parts: the data plane (left side) and the control plane (right side): the control plane sends down the configuration to ETCD, and the data plane handles internal and external traffic with the help of rich plug-ins.
-
+
Apache APISIX exposes a set of interfaces that allow us to bind plugins to the API. If we want to add speed-limiting capabilities to the API, we can simply bind the `limit-req` plugin to the API.
@@ -82,7 +82,7 @@ The Web interface lists the currently available plugins and drawing boards, and
So how does Apache APISIX combine with low-code capabilities? This requires the data side Apache APISIX and the control side Apache APISIX Dashboard to work together. The overall process is as follows.
-
+
### Apache APISIX
@@ -102,7 +102,7 @@ Dashboard contains two sub-components, Web and ManagerAPI: Web provides a visual
In order to generate legal and efficient script functions, ManagerAPI chose the DAG directed acyclic graph data structure for the underlying design and developed the `dag-to-lua` [project](https://github.com/api7/dag-to-lua): it takes the root node as the start node and decides the next flow plugin based on the judgment It uses the root node as the start node and decides the next flow plugin based on the judgment condition, which will effectively avoid logical dead loops. The following is a diagram of the DAG data structure.
-
+
Corresponding to the script parameters received by ManagerAPI, the example is as follows.
@@ -150,21 +150,21 @@ After the client converts the final orchestrated data into the above format, Man
On the Web side, after selection, comparison and project validation, we chose Ant Group's open source X6 graph editing engine as the underlying framework for the Web part of the plugin orchestration. In addition to perfect and clear documentation, a series of out-of-the-box interactive components and node customizability are the reasons we chose it.
-
+
In the process of orchestration implementation, we abstract the concept of generic components and plug-in components: generic components are start nodes, end nodes and conditional judgment nodes, while plug-in components are every available Apache APISIX plug-in, and the process of plug-in orchestration is completed by dragging and dropping these components into the drawing board. As shown in the figure.
-
+
During the drag and drop process, we need to restrict a series of boundary conditions, here are a few examples.
When the plugin is not configured, the system will show the error message "There are unconfigured components", which allows you to visually see which plugin does not have configuration data.
-
+
When an API is edited, if the API is already bound with plugin data, when using the plugin orchestration mode, a warning message will appear after detection, and the system can only proceed if the user explicitly confirms that he/she wants to use the orchestration mode. This can effectively prevent the API data from being manipulated by mistake.
-
+
In addition, there are cases such as the start element can only have one output and the conditional judgment element can only have one input. Imagine: if the system allows users to operate without restrictions, unreasonable plugin combinations will be meaningless and generate unpredictable errors, so the continuous enrichment of boundary conditions is also an important consideration when designing the plugin arrangement.
diff --git a/website/blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md b/website/blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
index 4c76bc045b578..091027cf4036b 100644
--- a/website/blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
+++ b/website/blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
@@ -24,7 +24,7 @@ tags: [Interview]
当前，我主要关注于对象存储在交互编排、流量治理等方面的能力，促进我们第四代对象存储产品进一步实现架构升级。同时，我们也希望能够基于 Ingress Controller 的能力，来实现统一流量访问入口，并包括灰度发布、流量管控等功能。这些是我们当前正在做的一些工作。
-
+
**Q：您说的这些内容多少都与 Apache APISIX 有关联，您在今年 ApacheCon 亚洲大会上也有一场分享，想问下您会带来哪些精彩分享?**
diff --git a/website/blog/2021/08/11/interview-TuZhengsong.md b/website/blog/2021/08/11/interview-TuZhengsong.md
index 2e6c056f0cc35..693570eea2a1c 100644
--- a/website/blog/2021/08/11/interview-TuZhengsong.md
+++ b/website/blog/2021/08/11/interview-TuZhengsong.md
@@ -23,7 +23,7 @@ tags: [Interview]
In 282 days, Zhengsong Tu (GitHub ID: tzssangglass) has grown from an open source community nerd to an Apache APISIX committer.
-
+
Zhengsong Tu was elected as Apache APISIX committer on July 22, 2021 for his deep involvement in Apache APISIX development and many contributions in the community.
@@ -80,7 +80,7 @@ After choosing this issue, Zhengsong started discussing details with his communi
Zhengsong was very excited and immediately followed the guide to bring up the PR. Then he accepted the comments from Code Review and further modified the code. Finally, on October 18, the PR was successfully merged into the repository.
-
+
"I was very excited and felt like I was finally substantially involved in the open source community. I could submit code to the Apache Foundation's top projects! As a technical worker, it was a technical confidence."
diff --git a/website/blog/2021/08/12/Chaos-Mesh-Helps-Apache-APISIX-Improve-System-Stability.md b/website/blog/2021/08/12/Chaos-Mesh-Helps-Apache-APISIX-Improve-System-Stability.md
index 5a22e835bf899..fe290e3cf3046 100644
--- a/website/blog/2021/08/12/Chaos-Mesh-Helps-Apache-APISIX-Improve-System-Stability.md
+++ b/website/blog/2021/08/12/Chaos-Mesh-Helps-Apache-APISIX-Improve-System-Stability.md
@@ -19,7 +19,7 @@ tags: [Practical Case]
[Apache APISIX](https://github.com/apache/apisix) is a cloud-native, high-performance, scaling microservices API gateway. It is one of the Apache Software Foundation's top-level projects and serves hundreds of companies around the world, processing their mission-critical traffic, including finance, the Internet, manufacturing, retail, and operators. Our customers include NASA, the European Union’s digital factory, China Mobile, and Tencent.
-
+
As our community grows, Apache APISIX’s features more frequently interact with external components, making our system more complex and increasing the possibility of errors. To identify potential system failures and build confidence in the production environment, we introduced the concept of Chaos Engineering.
@@ -63,7 +63,7 @@ We deployed a Chaos Engineering experiment using the following steps:
3. We used network chaos to add a five second network latency and then retested. This time, `set route` failed, `get route` succeeded, etcd could be connected to, and RPS had no significant change compared to the previous experiment. The experiment met our expectations.
-
+
### Scenario #2
@@ -75,7 +75,7 @@ Our troubleshooting revealed that the etcd Lua API used by Apache APISIX selecte
After we fixed this problem, we added a health check to the etcd Lua API to ensure that a large number of requests would not be sent to the disconnected etcd node. To avoid flooding the log with errors, we added a fallback mechanism when the etcd cluster was completely disconnected.
-
+
## Our future plans
diff --git a/website/blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md b/website/blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
index 587c52f9387b7..2062c76a32e37 100644
--- a/website/blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
+++ b/website/blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
@@ -30,7 +30,7 @@ Star number: This is the most direct indicator, it represents the project has at
Issue and PR counts: Also GitHub provides the Insights feature, shown in the following image.
-
+
You can select the number of new and closed issues and PRs for this open source project, can also filter by period.
@@ -40,7 +40,7 @@ GitHub insights provides a great developer perspective, but it’s not perfect:
The following graph shows the commit frequency statistics of Apache APISIX from it’s first day, which shows that Apache APISIX has maintained a very stable and continuous activities, but this metric is also a bit thin: you can’t see the data of which developers submitted these commits
-
+
after reading so many indicators, still you can’t get your answer, don’t you think that choosing an open source project is so complicated? Wait!
@@ -49,11 +49,11 @@ As maintainers and developers of open source projects, we also need such golden
## Contributor growth
-
+
## Monthly Active Contributors
-
+
As you can clearly see from the two tables above, Apache APISIX has seen a steady growth in contributors since its first day, with about 25 contributors participating each month.
@@ -65,7 +65,7 @@ The contributor growth line plot is based on the date of the first commit by eac
By showing line plot for multiple repo in the same chart at the same time, we can also visually compare the development of different communities.
-
+
In the graph above, we can see that the number of contributors to Apache APISIX is growing at a very fast rate, and in just two years, the number of contributors has almost caught up with or even surpassed other open source API gateway projects.
@@ -73,13 +73,13 @@ The monthly contributor line plot is derived from the number of contributors com
Compared to the contributor growth line plot, the monthly contributors are a better measure of how the community has grown in a short period of time.
-
+
For example, in the graph above, we can see that Apache APISIX has the highest and most consistent number of monthly contributors of any open source API gateway project.
This explains why Apache APISIX has been able to catch up with its friends in terms of total contributors in such a short period of time since it’s first day of open source.
-
+
The above graph is comparison of monthly contributors between different MQ community, which is also widely discussed on Twitter. With this chart, we can see that Apache Pulsar is catching up to Apache Kafka in terms of contributors of the month.
diff --git a/website/blog/2021/08/16/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md b/website/blog/2021/08/16/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
index 30af81b7467c7..b32d7c13a98c7 100644
--- a/website/blog/2021/08/16/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
+++ b/website/blog/2021/08/16/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
@@ -41,7 +41,7 @@ You can see the flow of traditional authentication in the figure below.
First, the user initiates a request, then the gateway receives the request and forwards it to the corresponding application services, and finally, the application services interact with the identity provider to complete the authorization.
-
+
### Centralized Identity Authentication Mode
@@ -49,7 +49,7 @@ Unlike traditional authentication, the centralized identity mode removes user au
First, the user initiates a request, then the gateway itself takes charge of the user authentication process, interacting with the identity provider and sending them an authorization request. The identity provider returns user identity information (user info). After the gateway identifies the user, it forwards the user identity information (user info) to the services in a request header.
-
+
Compared with the traditional authentication mode, centralized identity mode has the following advantages:
@@ -62,7 +62,7 @@ OpenID Connect (OIDC) is a centralized identity authentication mode. The benefit
### OpenID Authentication Process
-
+
1. APISIX initiates an authentication request to the Identity Provider.
2. The user logs in and authenticates on the Identity Provider.
@@ -83,20 +83,20 @@ Have an Okta account ready for use.
### Step 1: Configuring Okta
1. Log in to your Okta account and click "Create App Integration" to create an Okta application.
- 
+ 
2. Select "OIDC-OpenID Connect" for the Sign-in method, and select "Web Application" for the Application type.
- 
+ 
3. Set the redirect URL for login and logout. The "Sign-in redirect URIs" are links a user can go to after a successful login, and the "Sign-out redirect URIs" are links a user goes to after a successful logout. In this example, we set both sign-in and sign-out redirect URIs to `http://127.0.0.1:9080/`.
- 
+ 
4. After finishing the settings, click "Save" to save the changes.
- 
+ 
5. Visit the General page of the application to obtain the following configuration, which is required to configure Apache APISIX OpenID Connect.
- Client ID: OAuth client ID, the application ID, which corresponds to client_id and {YOUR_CLIENT_ID} below.
- Client secret: OAuth client secret, the application key, which corresponds to client_secret and {YOUR_CLIENT_SECRET} below.
- Okta domain: The domain name used by the application, corresponding to {YOUR_ISSUER} below.
-
+
### Step 2: Install Apache APISIX
@@ -222,7 +222,7 @@ curl -XPOST 127.0.0.1:9080/apisix/admin/routes -H "X-Api-Key: edd1c9f034335f136
### Step 4: Access Apache APISIX
1. Visit "http://127.0.0.1:9080/get" and the page is redirected to the Okta login page because the OpenID Connect plugin is enabled.
- 
+ 
2. Enter the username and password for the user's Okta account and click "Sign In" to log in to your Okta account.
3. After successful login, you can access the get page in "httpbin.org". The "httpbin.org/get" page will return the requested data with X-Access-Token,X-Id-Token, and X-Userinfo as follows.
@@ -234,15 +234,15 @@ curl -XPOST 127.0.0.1:9080/apisix/admin/routes -H "X-Api-Key: edd1c9f034335f136
**X-Access-Token**: Apache APISIX puts the access token obtained from the user provider into the X-Access-Token request header, optionally via the access_token_in_authorization_header in the plugin configuration Authorization request header.
-
+
**X-Id-Token**: Apache APISIX will get the Id token from the user provider through the base64 encoding into the X-Id-Token request header, you can choose whether to enable this function through the set_id_token_header in the plugin configuration, the default is enabled.
-
+
**X-Userinfo**: Apache APISIX will get the user information from the user provider and put it into X-Userinfo after encoding it with Base64, you can choose whether to enable this feature through set_userinfo_header in the plugin configuration, it is set to be on by default.
-
+
As you can see, Apache APISIX will carry the X-Access-Token, X-Id-Token, and X-Userinfo request headers to the upstream. The upstream can parse these headers to get the user IDid information and user metadata.
diff --git a/website/blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md b/website/blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
index ee81dd39d8fee..2721e6e082998 100644
--- a/website/blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
+++ b/website/blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
@@ -40,7 +40,7 @@ The authz-casbin plugin can decouple the two functions of route matching and req
The authz-casbin plugin uses three parameters for authorization: subject, object and action. subject is the user name, which refers to the user in the request; object is the URL link that will be accessed, i.e. the resource that will be accessed; action is the action that is requested for authorization, such as read or write. (write).
If we want to create a model to access three resources: /, /res1, /res2, we want a model like this
-
+
In this model, all users, such as Jack, have access to the main page (/). And users like Alice and Bob with admin rights have access to all pages and resources (/res1, /res2, /). Thus, we need to restrict users without administrator privileges to access specific resources using the GET request method. The required model is as follows.
diff --git a/website/blog/2021/08/19/go-makes-Apache-APISIX-better.md b/website/blog/2021/08/19/go-makes-Apache-APISIX-better.md
index c9558bb314990..d9faf88b69942 100644
--- a/website/blog/2021/08/19/go-makes-Apache-APISIX-better.md
+++ b/website/blog/2021/08/19/go-makes-Apache-APISIX-better.md
@@ -143,7 +143,7 @@ The application will listen to `/tmp/runner.sock` when it runs.
The first step is to install Apache APISIX, which needs to be on the same instance as Go Runner.
-
+
The above diagram shows the workflow of Apache APISIX on the left, and the plugin runner on the right is responsible for running external plugins written in different languages. apisix-go-plugin-runner is such a runner that supports the Go language.
diff --git a/website/blog/2021/08/21/shanghai-meetup.md b/website/blog/2021/08/21/shanghai-meetup.md
index e98b801f5cda3..ec93047c99823 100644
--- a/website/blog/2021/08/21/shanghai-meetup.md
+++ b/website/blog/2021/08/21/shanghai-meetup.md
@@ -30,7 +30,7 @@ Tips: We will control the size of the event as the epidemic is not relaxed, so r
## Event Schedule
-
+
## Introduction to the topic
@@ -78,7 +78,7 @@ Apache APISIX has been growing as a community since the first day of open source
Join the Meetup, interact with the instructors, and get a chance to win the latest Apache APISIX gifts: mouse pads, coffee mugs, Apache APISIX badges, and umbrellas.
-
+
## How to participate
@@ -90,10 +90,10 @@ Scan the event poster QR code above to sign up!
If you can't make it to the Meetup, follow the Apache APISIX video to watch the live stream.
-
+
## Join the group to communicate
Follow the Apache APISIX public page and reply with the keyword "Shanghai" in the background to join the Apache APISIX Shanghai group.
-
+
diff --git a/website/blog/2021/08/25/Auth-with-Casbin-in-Apache-APISIX.md b/website/blog/2021/08/25/Auth-with-Casbin-in-Apache-APISIX.md
index 1d515cac1d76e..c6dd05a2031b1 100644
--- a/website/blog/2021/08/25/Auth-with-Casbin-in-Apache-APISIX.md
+++ b/website/blog/2021/08/25/Auth-with-Casbin-in-Apache-APISIX.md
@@ -44,7 +44,7 @@ The authz-casbin plugin uses three parameters for authorization: `subject`, `obj
For example, if you want to create a model to access three resources: main page`/`, resource1 `/res1`, and resource2 `/res2`, you will need a model that looks like the figure below:
-
+
In this model, all users, including Jack, have access to the main page `/`. Users with administrator privileges, such as Alice and Bob, can access all pages and resources (main page `/`, resource1 `/res1`, and resource 2 `/res2`). Thus, you need to restrict users without administrator privileges to access specific resources using the GET request method. The required model is shown in the code block below:
diff --git a/website/blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md b/website/blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
index aa962f210b499..0261e656eb3ae 100644
--- a/website/blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
+++ b/website/blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
@@ -29,13 +29,13 @@ Authentication refers to the verification of a user's identity through certain m
In traditional authentication mode, each application service needs to support authentication separately, such as accessing the login interface when the user is not logged in, and the interface returns a 301 jump page. The application needs to develop the logic for maintaining the Session and the authentication interaction with the identity provider. The flow of the traditional authentication model is shown in the figure below: first, the user initiates a request, then the gateway receives the request and forwards it to the corresponding application service, and finally the application service interfaces with the identity provider to complete the authentication.
-
+
### Centralized authentication mode
Unlike the traditional authentication model, the centralized authentication model takes user authentication out of the application service. Take Apache APISIX as an example, the centralized authentication process is shown in the following diagram: first, the user initiates a request, and then the front gateway is responsible for the user authentication process, interfacing with the identity provider and sending the identity provider an authorization) request to the identity provider. The identity provider returns user info. After the gateway identifies the user, it forwards the user identity information to the back-end application in the form of a request header.
-
+
Compared with the traditional authentication mode, the centralized authentication mode has the following advantages.
@@ -58,7 +58,7 @@ The OpenID authentication process has the following 7 steps, as shown in the fig
6. APISIX sends the Access Token to the Identity Provider's User Endpoint to obtain the user's identity.
7. After authentication, the User Endpoint sends the User info to APISIX to complete the authentication.
-
+
## How to configure Okta authentication using the OpenID Connect plugin for Apache APISIX
@@ -71,20 +71,20 @@ An Okta account already exists.
### Step 1: Configure Okta
1. Login to your Okta account and create an Okta application, select the OIDC login mode and the Web Application application type.
- 
-  2.
+ 
+  2.
2. Set the login and logout jump URLs.
The "Sign-in redirect URIs" are the links that are allowed to be redirected after successful login, and the "Sign-out redirect URIs" are the links that are redirected after logging out. In this example, we set both the sign-in redirect and sign-out redirect URLs to `http://127.0.0.1:9080/`.
- 
+ 
3. Click "Save" to save the changes after finishing the settings.
- 
+ 
Visit the General page of the application to get the following configuration, which is required to configure Apache APISIX OpenID Connect.
- Client ID: OAuth client ID, which is the ID of the application, corresponding to `client_id` and `{YOUR_CLIENT_ID}` below.
- Client secret: OAuth client secret, i.e. application key, corresponds to `client_secret` and `{YOUR_CLIENT_SECRET}` below.
- Okta domain: The domain name used by the application, corresponds to `{YOUR_ISSUER}` in discovery below.
-
+
### Installing Apache APISIX
@@ -213,7 +213,7 @@ curl -XPOST 127.0.0.1:9080/apisix/admin/routes -H "X-Api-Key: edd1c9f034335f136f
1. Visit http://127.0.0.1:9080/get and the page is redirected to the Okta login page because the OpenID Connect plugin is turned on.
-
+
2. Enter the password you registered with Okta and click "Sign in" to log in to your Okta account. 3.
@@ -229,15 +229,15 @@ In which:
**X-Access-Token**: Apache APISIX puts the access token obtained from the user provider into the X-Access-Token request header, which can be optionally put into the Authorization request header via access_token_in_authorization_header in the plugin configuration.
-
+
**X-Id-Token**: Apache APISIX will put the ID token obtained from the user provider into the X-Id-Token request header after base64 encoding, you can choose whether to enable this feature by using the set_id_token_header in the plugin configuration.
-
+
**X-Userinfo**: Apache APISIX will get the user information from the user provider and put it into X-Userinfo after base64 encoding, you can choose whether to turn it on or not by using set_userinfo_header in the plugin configuration, the default is on.
-
+
As you can see, Apache APISIX will carry the X-Access-Token, X-Id-Token, and X-Userinfo request headers to the upstream. The upstream can parse these headers to get the user ID information and user metadata.
diff --git a/website/blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md b/website/blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
index 2817a0c859dbe..721648da87531 100644
--- a/website/blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
+++ b/website/blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
@@ -37,7 +37,7 @@ and `Python`.
The most important thing is to let more `Python developers` who are interested in `Apache APISIX` and `API gateways` to learn more about the use of `Apache APISIX` and `API gateways` through this project.
The following is a diagram of the architecture of `Apache APISIX` multi-language support.
-
+
The above diagram shows the workflow of `Apache APISIX` on the left, and the `Plugin Runner` on the right is the plug-in runner for each language, the `apisix-python-plugin-runner` introduced in this article is the one that supports `Python`.
language.
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
index 25b8517550529..aa8cbaeb675cf 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/01/11/interview-Apache-APISIX-contributor-Wang-Pengcheng-Senior-Security-Advisor-of-PwC-South-China-Data-Security-and-Privacy-Protection-Team.md
@@ -43,4 +43,4 @@ tags: [Interview]
Apache APISIX 的第一个 CVE：Apache APISIX Admin API 默认 Token 漏洞（CVE-2020-13945）。[安全漏洞详情](https://nvd.nist.gov/vuln/detail/CVE-2020-13945)
-
+
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/05/25/Apache APISIX 2.6.0-Release.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/05/25/Apache APISIX 2.6.0-Release.md
index 66e1a6237a9e6..05773ab40e004 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/05/25/Apache APISIX 2.6.0-Release.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/05/25/Apache APISIX 2.6.0-Release.md
@@ -26,7 +26,7 @@ APISIX 现在支持通过 Lua 语言编写插件，在代理请求的过程中
从 2.6 版本开始，借助 plugin runner，APISIX 支持运行非 Lua 语言编写的插件。架构图如下：
-
+
APISIX 会以 sidecar 的形式运行 plugin runner。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
index 4822ccf7386dd..e7a046f3ee9f3 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/16/Chaos-Mesh-helps-Apache-APISIX-improve-stability.md
@@ -44,7 +44,7 @@ Apache APISIX 是 Apache 基金会下的顶级项目，目前在生产环境中
#### 场景一
-
+
用一幅图来描述这个场景。对照上面的五个步骤，首先需要找到衡量 Apache APISIX 正常运行的可量化指标。在测试时最主要的方法是利用 Grafana 对 Apache APISIX 运行指标进行监测，找到可衡量的指标后，在 CI 中就可以从 Prometheus 中单独提取数据进行比较判断，这里使用了路由转发的 Request per Second（RPS）和 etcd 的可连接性 作为评价指标。另一点就是需要对日志进行分析，对于 Apache APISIX 就是查看 Nginx 的 error.log 判断是否有报错以及报错是否符合预期。
@@ -52,7 +52,7 @@ Apache APISIX 是 Apache 基金会下的顶级项目，目前在生产环境中
#### 场景二
-
+
进行同样的对照组实验之后引入 pod-kill chaos，复现了预期的错误。在随机删除集群中少数 etcd 节点的情况下，etcd 可连接性表现出时有时无，日志则打印出了大量连接拒绝的报错。更加有趣的是，在删除 etcd 端点列表的第一个或第三个节点时，设置路由正常返回，而只有在删除 etcd 端点列表中的第二个节点时，设置路由会报错 “connection refused”。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
index 3c0088a9f640e..5360bffb8adb6 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/17/Apache-APISIX-Dashboard-Access-Control-Bypass-Vulnerability-Announcement.md
@@ -42,7 +42,7 @@ CVE 详细信息：https://nvd.nist.gov/vuln/detail/CVE-2021-33190
该漏洞是由平安科技银河安全实验室的 Vern 发现，并向 Apache 软件基金会上报该漏洞。感谢 Vern 和平安科技银河安全实验室对 Apache APISIX 社区的贡献。
-
+
## 拓展阅读
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
index d8f674b5b6d5e..0c4b25b2815ab 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/18/first-GA-version-v1.0-of-Apache-APISIX-Ingress-Controller-released.md
@@ -25,7 +25,7 @@ Apache APISIX Ingress Controller 是一个使用 Apache APISIX 作为数据面
整体架构如下：
-
+
## v1.0 最新特性
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
index 6f803f87691cd..945341218b56b 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/21/use-Java-to-write-Apache-APISIX-plugins.md
@@ -29,7 +29,7 @@ Apache APISIX 支持多语言编写插件了！不会 Lua 也没关系，现在
### 1.2 Apache APISIX 多语言支持架构图
-
+
上图左边是 Apache APISIX 的工作流程，右边的 plugin runner 是指插件运行器，泛指多语言支持的项目。本文档下面提到的 apisix-java-plugin-runner 项目就是支持 Java 语言的 plugin runner。
@@ -71,7 +71,7 @@ ext-plugin:
如果你是使用 IDEA 进行开发，那么配置好的环境变量示意如下：
-
+
apisix-java-plugin-runner 相当于 server 端，在启动时会主动创建 `/tmp/runner.sock` 文件，并在这个文件上与 Apache APISIX 进行 Unix Domain Socket 通信。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
index eec2422f0cf1c..7f3b9611ea665 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/23/deploy-great-open-source-gateway-and-ingress-controller-fast.md
@@ -30,27 +30,27 @@ Apache APISIX 是一款开源的高性能、动态云原生网关，由深圳支
在 Rancher 的 *Tools - Catalogs* 页面可以进行商店（catalogs）的配置，我们在这里[添加 Apache APISIX 的 Helm 仓库](https://github.com/apache/apisix-helm-chart)。
-
+
保存完成后，即可选择 *Apps* 页面进行 Apache APISIX 的部署了。选择 *Launch* 便可看到 Apache APISIX 的仓库信息了。这里我们直接选择 apisix 即可。
-
+
-
+
接下来着只需要在此页面中进行简单的配置即可。 **因为我们想要同时部署 APISIX Ingress controller，所以在底部的 Answers 中填入 `ingress-controller.enabled=true` 这个配置项** 。保存即可完成部署。
-
+
稍等片刻即可完成部署。
-
+
## 部署示例项目
我们使用 `kennethreitz/httpbin` 作为示例项目进行演示。这里也直接在 Rancher 中完成部署。
-
+
## 使用 Apache APISIX 作为网关代理
@@ -139,13 +139,13 @@ root@apisix:~$ curl http://172.18.0.2:32763/get -H "HOST: httpbin.org"
我们可以直接在 Rancher 中添加 Ingress ，Apache APISIX Ingress controller 会自动将路由规则同步至 Apache APISIX 中，完成服务的代理。
-
+
注意右下角， 我们添加了 `kubernetes.io/ingress.class: apisix` 的 annotation 配置，用于支持集群内多 ingress-controller 的场景。
保存后，可看到如下界面：
-
+
在终端下测试是否代理成功：
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
index 8ffa80e78cfd0..b3b2b442a59ac 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/06/30/etcd3-support-HTTP-access-perfectly.md
@@ -41,7 +41,7 @@ Apache APISIX 开始用 etcd 的时候，用的是 etcd v2 的 API。从 Apache
我们采用了第二种方案，给 etcd 提了个 PR：https://github.com/etcd-io/etcd/pull/13077
-
+
最新发布的 v3.5.0 版本就包含了我们贡献的这个改动。如果你遇到 “grpc: received message larger than max”，不妨试一下这个版本。这一改动也被 etcd 开发者 backport 到 3.4 分支上了。3.4 分支的下一个发布，也会带上这个改动。
@@ -95,7 +95,7 @@ TLS Web Server Authentication
etcd 上也有关于这个问题的 issue：https://github.com/etcd-io/etcd/issues/9785
-
+
### 结语
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/25/apachecon-asia.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/25/apachecon-asia.md
index e671176860651..386f8ea021db5 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/25/apachecon-asia.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/25/apachecon-asia.md
@@ -38,7 +38,7 @@ Apache APISIX 是 Apache 顶级项目，也是全球最活跃的开源网关项
### 分享嘉宾
-
+
陈焱山 — 毕业后一直从事分布式存储软件开发及架构方案设计工作，深度参与了移动云建设过程，重点完成了对象存储相关的主要技术方案选型及落地开发建设工作。同时，在分布式对象存储领域拥有丰富的实战经验，目前正在思考基于 APISIX 七层网关实现对象存储流量治理工作，实现架构进一步升级。
@@ -56,7 +56,7 @@ Apache APISIX 是 Apache 顶级项目，也是全球最活跃的开源网关项
### 分享嘉宾
-
+
陈军旭 — 互联网老兵，曾任职于新浪、迅雷、360 等知名互联网公司，Apache APISIX Committer。
@@ -74,7 +74,7 @@ Apache APISIX 是领先的 API 网关 OSS 之一。为了确保一切按计划
### 分享嘉宾
-
+
吴舒旸 — Apache APISIX 和 Chaos Mesh 的 Committer，他领导了 Chaos Mesh 与 Apache APISIX CI 的整合工作。
@@ -90,7 +90,7 @@ Apache APISIX 是领先的 API 网关 OSS 之一。为了确保一切按计划
### 分享嘉宾
-
+
朱欣欣 — Apache APISIX Committer，有多年 CDN 工作经验，熟悉网关。
@@ -106,7 +106,7 @@ Apache APISIX 是领先的 API 网关 OSS 之一。为了确保一切按计划
### 分享嘉宾
-
+
王院生 — 开源爱好者 Apache APISIX 创始人和 PMC 成员。
@@ -122,7 +122,7 @@ Apache APISIX 是领先的 API 网关 OSS 之一。为了确保一切按计划
### 分享嘉宾
-
+
张超 — Apache APISIX PMC，OpenResty 贡献者，开源爱好者，现在正在研究 Service Mesh、Kubernetes 和 API Gateway。
@@ -142,7 +142,7 @@ Apache APISIX 是最受欢迎的 API 网关之一：https://github.com/apache/ap
### 分享嘉宾
-
+
罗泽轩 — Apache APISIX PMC，OpenResty 开发者。
@@ -158,7 +158,7 @@ Apache APISIX 是最受欢迎的 API 网关之一：https://github.com/apache/ap
### 分享嘉宾
-
+
金卫 — Apache APISIX PMC，Apache apisix-ingress-controller Founder，Apache Skywalking Committer。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
index 1d1e69a729d2a..40900d4d6aaa9 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/07/27/use-of-plugin-orchestration-in-Apache-APISIX.md
@@ -24,7 +24,7 @@ Apache APISIX 是一个生产可用的七层全流量处理平台，可作为 AP
如下方架构图所示，Apache APISIX 分为数据面（左侧）与控制面（右侧）两部分：通过控制面下发配置到 ETCD，数据面借助丰富的插件处理内外流量。
-
+
Apache APISIX 暴露了一组接口，方便我们为 API 绑定插件。如果我们希望为 API 增加限速能力，只需为 API 绑定 `limit-req` 插件：
@@ -80,7 +80,7 @@ curl -X PUT http://127.0.0.1:9080/apisix/admin/routes/1 -d '
那么 Apache APISIX 是如何与低代码能力结合的呢？这需要数据面 Apache APISIX 与控制面 Apache APISIX Dashboard 共同配合完成。整体流程如下：
-
+
### Apache APISIX
@@ -100,7 +100,7 @@ curl -X PUT http://127.0.0.1:9080/apisix/admin/routes/1 -d '
为了生成合法、有效的 script 函数，ManagerAPI 选择了 DAG 有向无环图的数据结构进行底层设计，并自主研发了 `dag-to-lua` [项目](https://github.com/api7/dag-to-lua)：它将根节点作为开始节点，根据判断条件决定下一个流转插件，这将有效避免逻辑死循环。如下为 DAG 数据结构的示意图：
-
+
对应到 ManagerAPI 接收的 `script` 参数上，示例如下：
@@ -148,21 +148,21 @@ curl -X PUT http://127.0.0.1:9080/apisix/admin/routes/1 -d '
在 Web 侧，经过挑选、对比与项目验证，我们选择了蚂蚁金服开源的 X6 图编辑引擎作为插件编排 Web 部分的底层框架，除了完善、清晰的文档外，一系列开箱即用的交互组件以及节点可定制化能力也是我们选择它的原因。
-
+
在编排实现过程中，我们抽象出了通用元件与插件元件的概念：通用元件是指开始节点、结束节点与条件判断节点，插件元件则是每一个可用的 Apache APISIX 插件，通过将这些元件拖拽到画板中来完成插件编排的流程。如图所示：
-
+
在拖拽过程中，我们需要限制一系列的边界条件，这里有几个例子：
当插件未配置时，系统将出现「存在未配置的元件」的错误提示，可以直观地看到哪个插件没有配置数据：
-
+
当编辑某条 API 时，若该 API 已经绑定了插件数据，当使用插件编排模式时，系统在检测后将出现警告信息，只有用户明确确认希望使用编排模式时，系统才能继续进行。这可以有效避免 API 数据被误操作的情况。
-
+
此外，还存在诸如开始元件只能有一个输出、条件判断元件只能有一个输入等情况。试想：如果系统不加限制地让用户操作，不合理的插件组合既无意义，又会产生无法预料的错误，因此不断丰富边界条件，也是在设计插件编排时需要着重考虑的问题。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
index 4c76bc045b578..091027cf4036b 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/09/Apache-APISIX-in-China-Mobile-Cloud.md
@@ -24,7 +24,7 @@ tags: [Interview]
当前，我主要关注于对象存储在交互编排、流量治理等方面的能力，促进我们第四代对象存储产品进一步实现架构升级。同时，我们也希望能够基于 Ingress Controller 的能力，来实现统一流量访问入口，并包括灰度发布、流量管控等功能。这些是我们当前正在做的一些工作。
-
+
**Q：您说的这些内容多少都与 Apache APISIX 有关联，您在今年 ApacheCon 亚洲大会上也有一场分享，想问下您会带来哪些精彩分享?**
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/11/interview-TuZhengsong.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/11/interview-TuZhengsong.md
index 8b9885c06dd40..694f6bc6ad209 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/11/interview-TuZhengsong.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/11/interview-TuZhengsong.md
@@ -23,7 +23,7 @@ tags: [Interview]
历时 282 天，屠正松（GitHub ID：tzssangglass）从开源社区的小白成长为了 Apache APISIX 的 committer。
-
+
屠正松因深度参与 Apache APISIX 的开发，在社区中贡献很多，2021 年 7 月 22 日被推选为 Apache APISIX committer。
@@ -80,7 +80,7 @@ tags: [Interview]
当时正松内心非常的兴奋，马上按照那个新手指南的引导把 PR 提上去了。然后接受 Code Review 的意见，进一步修改代码。终于，在 10 月 18 号，PR 顺利地 merge 进了仓库。
-
+
“当时我非常的激动，感觉自己终于实质性地参与到开源社区里面去了。我可以给 Apache 基金会的顶级项目提交代码了！作为一个技术工作者，这是一种技术上的自信。”
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
index df8eab5e2c6fb..0963ab81ae7d2 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/14/contributors-the-golden-metric-of-openSource-projects.md
@@ -28,7 +28,7 @@ tags: [Community]
- Issue 和 PR 数：GitHub 提供了 Insights 功能，如下图所示：
-
+
可以选择最近一周、最近一个月的时间内，这个开源项目的 Issue 和 PR 的新建和关闭数。上图是 Apache APISIX 最近一个月的数据。
@@ -36,7 +36,7 @@ GitHub insights 提供了一个非常棒的开发者视角，但还不够完美
- Commit 频率和数据：下图是 Apache APISIX 从项目创建到现在的 Commit 频率统计，可以看出 Apache APISIX 保持了非常稳定和持续的开发，但这个指标也略显单薄：看不到提交这些 Commit 的开发者的数据；
-
+
看到这里，你是不是觉得选择一个开源项目好复杂，看了这么多指标都得不出答案。有没有一个“金指标”，一个通过 marketing 砸不出来的指标？一个能够体现“开发者为核心”的指标？
@@ -44,11 +44,11 @@ GitHub insights 提供了一个非常棒的开发者视角，但还不够完美
## 贡献者增长
-
+
## 月度活跃贡献者
-
+
通过上面两个表格，你可以清晰的看到 Apache APISIX 从创办至今，贡献者都保持着稳定的增长，每个月都有 25 个左右的代码贡献者参与其中。
@@ -60,7 +60,7 @@ GitHub insights 提供了一个非常棒的开发者视角，但还不够完美
通过同时展示同一领域中的多个仓库，我们也可以直观比较不同社区的发展情况。
-
+
在上图中，我们可以看到 Apache APISIX 的贡献者人数以非常快的速度增长，仅仅用了两年时间，贡献者人数就基本赶上甚至超越了其他开源网关项目。
@@ -68,13 +68,13 @@ GitHub insights 提供了一个非常棒的开发者视角，但还不够完美
相比贡献者增长曲线，月度贡献者可以更好衡量短时间内的社区发展情况。
-
+
例如在上图中，我们可以看到如今 Apache APISIX 是多个开源网关项目中的月度贡献者人数最多、最稳定的。
这也解释了为何 Apache APISIX 可以在开源后如此短的时间内在总贡献者人数上赶上友商们。
-
+
上面这张比较开源消息中间件社区的月度贡献者的图，曾在推特引发热议。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
index 093590af959cf..f188c25795ac4 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/18/Auth-with-Casbin-in-Apache-APISIX.md
@@ -40,7 +40,7 @@ authz-casbin 插件可以把路由匹配和请求授权这两个功能很好地
authz-casbin 插件使用三个参数来进行授权：subject、object 和 action。subject 是用户名，代指请求中的用户；object 是将要被访问的 URL 链接也就是将被访问的资源；action 是请求授权的行为，比如读操作（read）或者是写操作（write）。
假如，我们想要创建一个模型来访问三个资源：/，/res1，/res2，我们想要一个类似于这样的模型：
-
+
在这个模型中，所有的用户，例如 Jack，可以访问主页面（/）。而像 Alice 和 Bob 具有管理员权限的用户则可以访问所有的页面和资源（/res1，/res2，/）。这样，我们就需要来限制没有管理员权限的用户只能使用 GET 请求方法访问特定的资源。所需要的模型如下：
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/19/go-makes-Apache-APISIX-better.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/19/go-makes-Apache-APISIX-better.md
index 1dd7ad27b8937..2046fee7733bc 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/19/go-makes-Apache-APISIX-better.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/19/go-makes-Apache-APISIX-better.md
@@ -143,7 +143,7 @@ APISIX_LISTEN_ADDRESS=unix:/tmp/runner.sock APISIX_CONF_EXPIRE_TIME=3600 ./go-ru
首先要安装 Apache APISIX，需要和 Go Runner 位于同一实例上。
-
+
上图左边是 Apache APISIX 的工作流程，右边的 plugin runner 负责运行不同语言编写的外部插件。apisix-go-plugin-runner 就是这样支持 Go 语言的 runner。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/21/shanghai-meetup.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/21/shanghai-meetup.md
index f7e853739105d..1b551f5668e6a 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/21/shanghai-meetup.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/21/shanghai-meetup.md
@@ -30,7 +30,7 @@ tips：疫情防控不放松，我们将会控制现场活动规模，名额有
## 活动安排
-
+
## 议题介绍
@@ -78,7 +78,7 @@ Apache APISIX 从开源第一天就以社区方式成长，短短两年时间产
参加 Meetup，与讲师互动，有机会获得 Apache APISIX 最新周边：超大鼠标垫、精致马克杯、Apache APISIX 徽章、定制雨伞。
-
+
## 参与方式
@@ -90,10 +90,10 @@ Apache APISIX 从开源第一天就以社区方式成长，短短两年时间产
如果不能到现场参加 Meetup，关注 Apache APISIX 视频号观看直播。
-
+
## 入群交流
欢迎关注 Apache APISIX 公众号，在后台回复关键字“上海”，加入 Apache APISIX 上海交流群。
-
+
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
index 61f1b20381ca8..d47d6323eb371 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/08/25/Using-the-Apache-APISIX-OpenID-Connect-Plugin-for-Centralized-Authentication.md
@@ -29,13 +29,13 @@ tags: [Practical Case]
在传统认证模式下，各个应用服务需要单独支持身份认证，例如当用户未登录时访问登录接口，接口返回 301 跳转页面。应用需要开发维护 Session 以及和身份提供商的认证交互等逻辑。传统认证模式的流程如下图所示：首先由用户发起请求（request），然后由网关接收请求并将其转发至对应的应用服务，最后由应用服务与身份提供方对接，完成身份认证（authorization）。
-
+
### 集中认证模式
与传统认证模式不同，集中身份认证模式把用户认证从应用服务中抽离了出来，以 Apache APISIX 为例，集中认证的流程如下图所示：首先由用户发起请求（request），然后由前置的网关负责用户认证流程，与身份提供方对接，向身份提供方发送身份认证（authorization）请求。身份提供方返回用户身份信息（user info）。网关完成用户身份识别后，将用户身份信息通过请求头的形式转发至后端应用。
-
+
相比较传统认证模式，集中认证模式下有如下优点：
@@ -58,7 +58,7 @@ OpenID 认证过程有以下 7 个步骤，如下图所示。
6. APISIX 将 Access Token 发送到 Identity Provider 的 User Endpoint，以进行获取用户身份。
7. 通过认证后，User Endpoint 将 User info 发送到 APISIX，完成身份验证。
-
+
## 如何使用 Apache APISIX 的 OpenID Connect 插件配置 Okta 认证
@@ -71,11 +71,11 @@ OpenID 认证过程有以下 7 个步骤，如下图所示。
### 步骤一：配置 Okta
1. 登录你的 Okta 账号，并创建一个 Okta 应用，选择 OIDC 登录模式以及 Web Application 应用类型。
- 
- 
+ 
+ 
2. 设置登录和登出的跳转 URL。
其中 “Sign-in redirect URIs” 为登录成功允许跳转的链接地址，“Sign-out redirect URIs” 表示登出之后跳转的链接地址。在这个示例中，我们将登录成功跳转和登出之后跳转的链接地址都设置为 `http://127.0.0.1:9080/`。
- 
+ 
3. 完成设置以后，单击“Save”保存修改。
4. 访问应用的 General 页面，获取以下配置，配置 Apache APISIX OpenID Connect 时需要提供这些信息：
@@ -84,7 +84,7 @@ OpenID 认证过程有以下 7 个步骤，如下图所示。
- Client secret：OAuth client secret，即应用密钥，与下文的 `client_secret` 和 `{YOUR_CLIENT_SECRET}` 对应。
- Okta domain：应用使用的域名，与下文的 discovery 中的 `{YOUR_ISSUER}` 对应。
-
+
### 安装 Apache APISIX
@@ -213,7 +213,7 @@ curl -XPOST 127.0.0.1:9080/apisix/admin/routes -H "X-Api-Key: edd1c9f034335f136
1. 访问 http://127.0.0.1:9080/get ，因为开启了 OpenID Connect 插件，所以页面被重定向到 Okta 登录页面。
-
+
2. 输入用户在 Okta 注册的账号密码，单击“Sign in”，登录 Okta 账户。
@@ -229,15 +229,15 @@ curl -XPOST 127.0.0.1:9080/apisix/admin/routes -H "X-Api-Key: edd1c9f034335f136
**X-Access-Token**：Apache APISIX 将从用户提供商获取到的 access token 放入 X-Access-Token 请求头，可以通过插件配置中的 access_token_in_authorization_header 来选择是否放入 Authorization 请求头中。
-
+
**X-Id-Token**：Apache APISIX 将从用户提供商获取到的 ID token 通过 base64 编码之后放入 X-Id-Token 请求头，可以通过插件配置中的 set_id_token_header 来选择是否开启该功能，默认为为开启状态。
-
+
**X-Userinfo**： Apache APISIX 将从用户提供商获取到的用户信息，通过 base64 编码之后放入 X-Userinfo，你可以通过插件配置中的 set_userinfo_header 来选择是否开启该功能，默认为开启状态。
-
+
由此可以看到，Apache APISIX 将会携带 X-Access-Token,X-Id-Token,X-Userinfo 三个请求头传递至上游。上游可以通过解析这几个头部，从而获取到用户 ID 信息和用户的元数据。
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md b/website/i18n/zh/docusaurus-plugin-content-blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
index a40154eb4f6c6..0f370bc9c54d5 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2021/09/06/python-helps-you-quickly-with-Apache-APISIX-development.md
@@ -39,7 +39,7 @@ tags: [Practical Case]
之间的一道桥梁，通过 `Python Runner` 可以把 `Python` 直接应用到 `APISIX` 的插件开发中，最重要的还是希望让更多对 `Apache APISIX` 和 `API 网关` 感兴趣的 `Python开发者`
通过这个项目更多的了解使用 `Apache APISIX`，以下为 `Apache APISIX` 多语言支持的架构图。
-
+
上图左边是 `Apache APISIX` 的工作流程，右边的 `Plugin Runner` 是各语言的插件运行器，本文介绍的 `apisix-python-plugin-runner` 就是支持 `Python`
语言的 `Plugin Runner`。
diff --git a/website/static/img/blog_img/2021-01-11-1.png b/website/static/img/blog_img/2021-01-11-1.png
deleted file mode 100644
index dd765847fc749a6e550d0652e6f1a605ad2b3ab1..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 282192
zcmX_obzD?!)a?k;-QAsnl%$k&gVK%C;Q-Pi-Q6jm)Jr!*35axqbT`u7a38+!-uv?p
zJ!j6$Ip>MJ*IsLF!_-t{F;GcSArJ_LyqvTK1OjIXfxx>VBZ4z-cn@OWua}k*$`TMr
zRSep_DFQgAHkZ>-hCnUG-t)yfENp$DGJ*FeERmd%
z1Q9bKF&m0$YBiFW`Gr|&03uq*^igPHG*^?^9%%TuJr$|UF8YPgo$CtT(3I&99s{tNc`Uq
zj$wYBzi@>H%*L*^c!$kQ-!2gOK3FdY{Qp~QBi3&k|AMYZ1}!ZeTQ5gEe_#=)R4)0N
z`@%Yc=J|I>a8ABZhx|ZBLstZhVJ*(8C5Xz*DpmZ1bgq8^?P2bYU=M>lf&`?tcdab)M4s8Is;
z+;s}HJ8aT}mQUu@*icJnsxWtazuX8keig}0?-W_PxyrIgDF
z?i^rL{yqFQwf}RPbWg~y>QZ1!^khSUu3tbDy{;o&T}5?XnAqOy=D!|orNh-^0irIe
z(NtUYrb9B4#rnQo78fe7)9}Oqm>E(j-~3M9dK^T=KBQdEAqqygNp>{!=2!VABMZ8#
z<3H0x`*T6A0+uZ?R_y_P6L%F>Eoe4hI`nFijD+`HI~F}x!qH=GS(wmZy
zFu`n~Dlfh7L-EsII~=D$}$At+j{hmkk1J
z6j~F@7Nyg&`n5?l%(SJDM9MNd`>Kv_OAo)S(Wm3`Fuq%~x9&YhW2Pkg&tV)gyq@&M
zntwTLfAP$q#>HZq|FW2^ul2e;a4_6Q7i(XwyW>yp`{$cUeaQU-9{Z%+9L+O_&~sR>
zuE73g+O(`q{apAv%DNJ>JJb_3_e4zkUh13=rU9Ro&u)+FF_*F8FgxO5h@dBIfTS)#=SYDEwg+Zi62lB@>jHLOmN=G3J&g}b&%_BFxEP+mb$e;PTF{RP7
z!A-49h#@&OiDM@!Dyq3>2UH(hJuK<2ydx>Vuk^q2iRmYad5Mh?85(`nBTLzA79e4j
zi1N8kM#`w~(;Kp*pT4s2l!4t|Ig{z&M^3YU+hzQ%OV)2hw9Fu~N1|#nW1!=O1Zj~b
z9Actpd7XquA?9}AT{dBp9|X7MklO@AJsyHFZ#_C3_?KSFoz~}cfo0G>I=fv%Nwi8y
z3NB0|R>>d&aUgs`9V{C=SL3w55b`7I;O0#??RycndXY}eEeqAj4T954xGJBwcwLe5
zgxY5N>}{*2|DnZCXoey#xENJJjiUU%aJXPT&wlzr%;{yDRa~NS+9M4o{c%1ZSAvfuNT5SBoPhZU}`Gaaqo_RpML$4Kuar?j0NJQs9
zn4ZgKWEi&RI=1yg^X|CwvAubrK{CY)s8KJ#&gs;eb9yHu_4O}*lT}xwTx;u#eA}a7
zc3Fh^>iKcPnAC+%43>n2;cj7^@`c2|aMc{m7}ezOWsZpVtm_Qj&^(v3mi_Uw`#Xqv
z6%1eSdDnho>gV6@`02GrK!Oo8;E15%TzRzNY&}wv^NDDGpkB(pveV$}dS;;ZnS<}?uLf^>*7+C+@6C*v&IeIW2
zzxz_S^h(c_C^Fh}WA4A427y7?*RGbZM?W;;y*DqVPA(=*c!d6$R=!P7I!$7W>aEaW
zVr6;>wHZ>`NV3arK+@h(XMo;$E{9m3cs7mb^pl#h>VAGl8Q&5=6^Q7pEol9Xmzeua-ar8-I{zF4U(k%r89&-&(YT&X+eM
z!0P|=7~lwm-OJpH@CXX_E*&ZXO0%qOhgcCv&J!8Js5N_D@2^fvVX{v?#DExX|bq<&7{
znx$w4MvCgY0YO;SHbcS){0V|@T+UXiN~x%;@UGE`w~+szd<6mFTfyIGW!Rm
zo+3x55fLu;Nk8{|b(Y#LNAaHr^g#k)wWddX=F(pjTh$yO0^^-ny$tTu>m~TlBg$1`
zi1Q8E7b$agL=7~r+Os#e(Qm^;D-!xe`AEJ^X&}NR5rP=87`HEa$M9)I9=SQ0@@5}C
z*pxoN6RkMhU=S`Jb19Ivb+?u~o3xx^(66PKGM5Hv*mhdY|N7XH46?Jrls5s``~3$F
zqA#bzd^h?;MfotI#w0fRQ+!NSV2V=%(
z*fy+CbNK{w)b=csG~dLaX)hr3{P#*TMp*>6y*FQg+vQR_6afk6#MP|yjKe^MHJ4Ag
zN-h~bX$kIZ?IMS0ICE7R-FU&k9p^a7IR>|M0Fn3IUYgAvp4qtqgd4(+TUDOTKR
zLd1{mo+3jV;G_4BBzET<+dp`*5%xtnHSEh~n~OrVnshhu6XriZh%y^o7J@bKEm30p
zsRPZap`|w=BWqbN0X{i=C^Sei74`hng?^L&CYNBv_ThS~ufI}xS3Jj4MEO`wA^dul
z^utR%^I1~>mFLiWwQO1bW=u-`^RO;6XF*G*5~c6*s6v(ZwC8$-$KNWjZPSO|`8
zz6yrfq2(nQb@>P6P4nZI1&qN+A)_ZDPeB7=EQ!7+rf)tR$w>VDPEAVObKT?Ep;1Kw
zzL$!6Q=RSX=>@May^Lnwhst{O9I|`92Ugr+Jr6YT8qevE{9;2bU38dK%p1DTudJCl-D0#+#!@5Li(-b4RB577-&g8Oo3k_tn$8npbqN2p2`
z9@tjKY8WudAo3(ku=dqR`ms-I!wwgr`8W*IM~E6tZX5SCl~YS9SBJ%Y5Jp+ff~dNs
zC5Yv^gGx`~d2c(?ub(3l=H>Y#b~dlYx7BI+CAMppJSp(gMTk*tiyuDckIsJ(PkB30
z(03#>)Mu@aVE8p?$4!iHgv2)0mC6e@Oa~jx0d5ubg+D-5=N1MnP$sinb(@QBe@+)l
z&sa;oo_}9{FIH29y}63z^9YJ%!@|Eb;NAAJ;&h_~n}@{L`h@{=_G)@=|Z%`Q^GO)x-(
zz4aTwzuqKI>6Wt8owwm(k3U3G*aUBktPcrDc)(;PSIfLa9HCv?%dPmx)^IHSANMpI
zgm&qJdo!j<-jnFk?zqMja)1vD;&2PI=WE(u6em|;R5r5|f)1~wMVc?)f|n#OIa+}Y
ziXJGp;EA$bS2eRrgsWS%{DKiP81&%xJsYgUZJg}QV%KN=zK*!pk;aK>@xaTjbyscfj{y?Z(
z;Vi*?Wgy6I@wH}eeAbiF;|OMBLjJS&MeqzEy+LCIJgE4E3Ez;w76O^w^90aU~P#mY3Dh2
zZ46J@vKY8AZnNGxf)P@Gdt!AY|Ij8nWS(6%Y`Wyawlo!>y6u3&`nZ&8_!Y;`8K*EYmiyz
zATYwklVqh^38O0fK#(>9d;465LoGZQ*TzCjfGDMnP?kU^Ft$o@nz66s^w_|8RYw3^OnO;$2
zVBY~)OzMsIAF>w~G9B{!Q{I~?){Dfxr&Q)$@tZRVs{2GHgmv_%H$T8StX#qHs|+m2
z6e$-DI~Z=}?w^kvm7`A)#)m}57Pk){skKirx=yk`flYDRd7C>HvrX=pyN1gO!QDz^
z(~4!A6!{}GclnwTG2OaRWcou8fTzPA5R~XlNoYFSULvnI#zSE?f<|{fyDXnGGQQvn
zO~4v%@W((w`wcZ*a>1bCNh21KZ?PWqfvMaoxEG33OS0d04T1vzSd+-O@Ng@rf)1<&9nvr#iXT}mu-i8`YOSu#p&Piav$h;b#3B!>ypuT%A5Is-=u(!X*?GhB
zZVhAEv{H%faycLK{$Axc&0-qOsbIE+*1g!R|?TaU1DkWzb{C+YSnWZ2(?O54G;WizrOX#|&!
z!M;w#Donn831G@|9)<0rsaYwz;GuXK9@n;^&sQ6&k?m)e2orE7vPA*-_nRyEn62%0
z$%|Im0k@6TnQlZ~)o_0zPTjqEX{)b{PcT-$5mmws$@O=}K)ramnnb~f&^5uJotKOTAn##5kVsD
zToSuB?D2r^p|QF{uLRyo_(otLU~d$;^wv#xOuONx;HfJic&;9ZVb)b;5_OL2*>DR&
zQNUSxGa7uY<(H5~biVGlV#q(7pVRUr3}G~Vz|_dw$Ho`MB0NkA!ocvL6K_s1xoKsULXTW$cXoRRjHhNBc
zdTjJYo15a|N6}X%fU{SevwnDm0n#B8!|hbEyL@Y#Yv~5@fkS`M0iS)g{Z6#512d>R
zw!kV-gosOUT>eS|Kw{@vA}7J(pQfASNom7jm2Sj-eps=;ESznYtWEV=vI{=N@};4G
zkjo5v#BACMU1&QD&~m8yPpz!ak6f9CF+}xjW4La53_BUjyAHj;C-h{3d?+300scqdE+BH%E{8jD2Vzi+fz;fLqw%=7Qc5&
zG*LzGbv0=LfnAa|xn&SlYzO^*??Lc99tw^f*FC;n=acxS8VZKRJaoUHJc&YR5EFp(
z8ACGO9i{vv9L#qPgeEvOsBI%}X0t_7p+$|mS_2dhXfdBhGxqq+QP(tMAGAen(Xyvt
zu!aE$%HKN*$@k`XHMzKW&P?0J@9DT{e9yU<5xNlEImesjELa@4q$j`a>#)iy?JboW
z9eH{g59*@pyY!+#RAtJnE69q?S4_`&RGogeEjfghp7c_6VKp2fT0DWb*_1)ext{j8|Sys{I=TF~#8T)XlPa
z-Y*mY`*Sn?w(t7Bs66KcAn3~BGmP!}{poXkHOD?CLb
zinyE&sc)(yAjT=bFIO9D`Bvo1JY@A;U!J>6kc;I-%FVV}pM20MX@Edld@Q*Hz0=vg
zT(7x#7`1@#`Frs+Lw7S;7S4rct7u5e4+r*p$#jE&qXz`KLUh84Lc}Tq`yXWg&L?>n
zQoaI)lLN#HRvy8dpq}xh5D=cn{`)1a{$TI24+xeWpQrDudt$wJcBT&$lPhK)jpzp?
zXtRGRTtI2V+uQqirLs5j-aYtO%ly{LN%?A&{3EaW8i~{7IKVi^;y@{SLuXqZ)W!yn
zLroPY=t0?T-vfUg*)P>ad{{zBT8ihF1$*9Xm3q;;3zM3)HOS$=DwDVGtDElsfH2K!NIzL;(^NEk7&piYt%#x&I}J}ZuRVZ(=RHRt
zn9MPs{+UXXu3b&?QD9+Y9{$fpG6>v;cYL7|wosG%^|#}Ds#;;C5p
zm;5@;TnytMLiVv%t3D*!H>R{r`Tiry3uyrm;+(=au|eB()6M!(mzdwjF)2t-#6gKtNKyHUDGxcSxoB0jO-e)t`jInS8;TSIY6ZaD?$D@O
zrWF?vOb8bI(Klt+Wf5AE%)+CzRp!}Y7dl|U4qnX
zltDUMZP_Wz{=F%UJ{&Au+yYN^AHR<6S{kxc4|h@-!^8QWF*S3VZr>H~7Qe51lwBfa
zIVq$^s;Fr8DS|=J0er*67&5IG(fO1Dv+E6V^cP86XwLSv=5e#ib6IBIr?9l3IzJ+&
zC}T;8l?{5+_MAKNB#t%vKOq&%@PPP}3wn)LMg8iW2*Vw4
zDu#MHru^k>$;Ui`qCxIms^9SxljX1h`l}D1aQWH`)ncBnL<-nOh;=fUWKHSAC#Y&Cc22_{gtm>66porE36N{Zk+u0a
z_3>(meLd9cL&;Ymt(>4{`+4#()b09b7~xAaKc9XbiZ_**{YTiC`3%J9M8Zbj0Hy-bY?FnT4
zkYSM_{S*VEh^z)Iz+}gUBDjx0YShF)Y1?u^h7oxzHQ|4sEj<|Xn4n7CC87#S7@Oa}
zcO2$IRwF8YgBs03kag0|7ymbhW8T4vREuDIHd$|wW!Lq08BPj(jQ2GoSjD1=7kSo$
z?_0LhLvP0J4#kY-5c*aPk*L7v83ISosMe-a)Za->xvCD5uqSIo>%$1{7vFf~PMB+4#x;!iAS!j3CTYs_2=n?@<)pWsZt25wp?%=Yf1XTLJdKM^huM?c+6bm&pOT_)-pDOJ%ewI8$}@*BrTRcO+6F@oNLeM{Ld~!
zOx(ga5f&G)=c(woQvtiA@=`4N18rR>sJfEvJieWNU@*hkLH*PsBWc7y==@o)Dp(2X
z8J>ci&LaQaPGz4~mUZ=eMx&bsC&TI+WZ2hGZx06J-Z?e7U$S5Sb7jQLk{*0zgAFh4
zHX$bD8(JmrUIJLDWHvtQ76taMYZo2lZOfUx^dv33;-TVZYpM}y#=dIs6!9gFg$B=8
zc*uz*AI}ak2nZ7a{i@}L@e_K$td?#-qxX6%@tZT;rWjFq3;|Gx>XZnCMK@?zDy+XZ
zi|bQsBn=&M)aWu}vEBHrU8VLqcjm6g6*shbld3H1Qj8m&Gz|w*+`H^z4aK
zD}U5Ihpm%$xC}qJ2|urD;%th|uWEUd*UZDq&Kt>eE%ykgvhX6#q}Ye}%zjZnWT7n?
z?i`^bbMU~cip{Vr9eU@&F?bNAgnl;lQ>R*3BiLhdd4wl)cPUHb`scCVao``xHjjhF
zvoXP{*jFVZC?GFfDwWNKttAPw9OWE)E-Z=u;F)b<%Pk-Lu#Mc~1^5K_O%;$%bM9sm
zcqTQ9Tj}xE;vgI@czNLbIXTs4xTS_C7s)p25k4tA5KwSGKV~u>O?aJLy(w
z>a)sq8j9pGOF~8A>5KZu{!yIOP8)2~ycYrsWk}T8|E$fvIMrs5x&r-)IJ|;rv0c9N
zzDu0v6^ju%P<0|*+XAH7-&FK{sRPT9B+OmMCGL*6oTaWqsDw#8)UKDcuSUGT*OZ{c
z;18l%MCLd4OC^&&#Gt}d70kG;BZxmKC#DkT+vtQTfjOeG!mG#+>h2
zTqu_Y=nS%s+>J3_IP;re$(>O+R;R?SQA}|)k4F>FQm@%>lC+ij5xO)S3zZF$7i@Lc
zB@4fSqAvFM=NSrtq1wzJpw~C~iE*e{@p&xT<8Vl)M|#0#%#DFCx+h4yOE
zU}ZW|;@l@fb516v!Vc$(W5#uNRi3rnlgMgBK)S3Ka8DPId;-IHGSf~|y%X?bvE^#^
zm#(>=mTL7X9Ib%YKZd8PFBIQEP68VCPT91CJ^NPHx!iZYx~exr?P1rR?ztx*WPk7$21l~-#!(z#QHZk^;vJYPm2y*JWv!k(~c2hmEh}Z88=R_|%*$VS@
zQh|BJyu~#6gppLV#6@^r
z#GyvugyI}VU-6!afSP&gnFdRe*|BGv@Wf|YQwJJu=&hkOfxj8F2J!6{ms#M^bAoo=
zRc@&|x%j^AAu(fF#xL}4TW0bo&l=z0^{v1JI*;i^ZLCwGyKqfmhsY8@FyQn36mVTyGJ%48KGs-*{Mr!JYM&jTaUQ3>=EP7d5^(5K2V`brOp1!
zbhi>&cdt>8wR4RII@jn9(TYo=zCIlOQSXJXs@}Y+yF`pcdjWh%~WjCBl%6U8Emws
zaf83~suGQjLz@BxS)PrW+wkY-V)Nb7(4E&8!F0KZV?T8XOw861B#p)nO2TSx%{
zpqj@z-DH4_J2@V=Z}>Jw-hwT-QJjAHWMN+!zm5lx3%)LOq`u=_$z4zCyHjk$(v^};
z{^9ROk}^xZ&n$I$So?2GOK+ezUn8=^h@_iSkvEnX
z#~*;K>6j^Io%LHt0N|kwR1V9X!PisJeC{DGedH`W;-;6#LM)ZQqQkuG{z}aIfl|EE
z4X>O#*TGUM)nX9P@_ff2$ht}cmK3Dqj=%SC_@s1zzimu6&e^32+~Xm2qQi+9zrn_E
zf1|ovJ#S?LkMgnkRV)AYLe?t_w6A{>{fk;oa6q2j7L~@`()y=#40uXET252!lA8_Z
z^DaL3LjvOPyYFNlavZ|=SHOImme2S}4}Ry)
zBqVMT$M~g`i@i3S1(c2FAXcv0tH5J=5`5=j&%8C)D`&-0VZlSYG!?lz0G64JcomZY
zHvq|_+rf#J7W|atkQPngX9(!$h}^4zrZ~0`kviMkNM*$Zx#fLnP=gQQ`=^VIl?-Cs
zJvyJDD(Pp{K=4amrTo;#
z#I<{vv#!zfm{AkWr!DU$@Gw8I)YZ%Js3ed3OXKJ#;>=*pO1Cg2%Jcg55#{Mq9tFXt
zNd-V<_9dsMQYe~ei5;`%HQ9zEz!ay-SW@M@v|Mk_>~u-7CHq-<2R|hUlOB(LuKMfq
z@dNBkfnW27NqH>wjWXDA47Nw`#0(5C)tkV-GU{SJ(o#wS0KFV$xpU!c|DL&Mmak+1
zSfwVJO*TK>JoS2+K`qx_SZscZimtuM3O55ro_IGO=ReW9o1A(+Sc^XZOj&Hk^FJoI
z^8%@>c#Tnp7{cs|aJ~#2QZ7f?Y%j@A>djUL70(?3ZZmrQU;rH{aGnvpRd7`)xB$fW
zp9w+mz3qJGyceo6SyEr=5{7Y3#}P!S3asMWQn+gsE=%lOF$EiYfJ8In3Fhc-xb8g-
zDRF_Z(?7+ZA?xvZRjy?q#~PucBO!j5^l)5T^4!}Ii#>c-&P5eoqZ
zBA06ACgE}PJYa|NNC?hyiRNpLLqXtcPR-<2W%ced-Pu1AfhA06KCc?6@P}p0{3Uq-
zm9p8sj9wf^wvlhASOzOBryy4z_i-5nA!i1Nrqj+!
z=X1bE2h`vKC@?fBf$_inT>YzuR0w=cs+j2Q3`lb=t<6VWJT6Cslx<)~Md$F=IRKks
zETDJ5l0E0K<1-yy^v`?mc7pzP)g3F_E6CFZAXc-Dade+(^9u?REH6oz<%A$m6M;MC
zypC;5u(Pvx)s+=QUrxk3@r*0`Wqh$z&F
z>0Kauiy_h|fVe<;oD&S%H;(?>;EceyiUPb?U4V4>+`IuyIhj&Z3ksD{%(jn#6v
zJITb1u&c`HCh?L4{wnb+swbSPQQ|U#-M2R{vnIQI%3m=TJ`r&KA^;-SH)#=6Akak)
z^G!nE+nkxWO#TL@r~}7?EFKnp^gwxHf90^8v(W&pFs~ID0kgU!LJdrLMjImo=#wn)tb$^d~(@#ziIZJ|8hCi^jf%
zRA2q}x^fMpU1&{okqpf(9DKdPrM02ANI2BBsP(2^^3{P~zA{=-{-#L2<~
zV=tsg0vG~mP@Z}k$k`Gd&O%@Q=huM-e0iip#pf5_3s>L1jsfDHG8xkpb?pa7-1jDS
z6IQvoFB!u!7qvD~39^nX9^)+ZrW8qtTfXHH7%=mY9;?An-oW+ySVL>bfO=a}v{3qj
z>auBkim$mU-h+BTeZq%+`U66%{m1mNph=X)s#{DU#_W1G<_ICVrKwybk7fC;dl9J+
zZ)0Rro=;VE2R2{*ws#XYi;Cj`b^$!jS)^(82ii8yrY%^dJk^Lk2t+37M09VU;f3xI
z9~L+{ulj}EhsuM_F#r?Qz5>&B&wc}wRPISBwdM{=4@KC$%Z%e5M7s&^6CLwS?B^Iz
z&$Y_Gc2B4!L`FCL;Bff}BVrRdA0qp
ze|3iGMQ>_={N>T&hcnnaU38C;LLnyOi!WO387PdwvH@v)Bqv>Q8}Rb#S#;W@9zr2}
zfi!u}K<;=v)7pM^NvdQ?ZJ{VmiDnGbnCI~cPq<*tn)AHlZyY9A?gmc|ytpvb>%?pp
z5EXMzC_#Kxd;D{hb6X(m{w2(yILLn1-sNdeq=g6%9$0r3X|%1lT^<>lrv4)CWybm2
zRhiJ&{*Py@EgD#eo{8qtb?jujN6yIMzd-zu0fwlQ1Oo3+kX%tAkGi`
z4&1#~(L8?+h0-@I?*2M`J2=YUM+usWEedf}`Tzn-1Lcru6T4
zJ`Q0sFIx;9HS0Y9>8e+Q2Nxo`rpLM?gh_>*q4ljTXkpo;?1ICe6(R5l4;K#wf
z1=dj$7GqhqjL35jr>Jqugp3D{+y$T}4R`;_87T+S?7Qz|y9Lym>CE!ZKxQ@1@>OzW
zVh(87_5rS$xX_^3ALF0NZfF_MFKy;^-`T@sXfmj&GengIJ^f8Wp>B
zR{djhK{sIfO5^#|>43V>5>K;66{z6or{E}M)q(_kS7AEHU|<=8#R8X_@JY?NK`@D*
zP*1Pr=%yT*R}>*)zNwH*kWHIGIln}lv2n~ZUlBUN8{5N%voC}B8|^_~`>pKs0EJd<
zJ8864C@oYXzrn<8M=F)5B1AGFg^;FC#$kNyU4FyQKKt?+31J10WVpN^VUg3O%`8BS
zm4(VFWZ-}AZxe9}w#03D$DftCYqK5NMX8Vc(|~c561l+R0#3=9=VA96Ht49{Q)+$u}e}A=TFJ^
zOm(X<-d#K)Oyvu7Y_w1Ulh&x7&8oFen9jb@;mkI_~
zEUK6%J*|cq0R64b@B*@WVzfcHT+
z*eoT1DoGIrKM>6d5d*q+ax!d1UcWHG;WTbTFY9~p)Q*r!BruvF@w^9`sDsSASh?zb
z5ZDAvZH7NM03#yMe8Y0FV6-@8C}ZEqSX&XGL8KF!tN6bXC_2U*jF8{Wlz-%e1)(ZA
zI*Lnd4)*z$9{kmos}DGIS>nkmL^V^@onJ2;_HGDLDAQ_-a4w!R{VME
z-~n<&u;(P0_HD!!vwn`uPY@qse8~S_yIcex+~rDK-#5$6PgvAlqiNZw66WlZCdafu
z#OWolIW*Z5inwPGpe8*w@nl8zk+{hW!6Y0*!Fq4f`5S5eMcz{Y(d&8(DH~(jGS}W0
zfoN%cZ(t$wRy`OHATD+2XsB*7W{25rMhC%>U?~Ha@VjQX^VTQT8Y4w_h&tImuztt(
z5sapjBcuDi1YSYmQyL#gfpe%Yr?}o#gHJg&p#(
zX!*~NM`EEfUbp~D^`=V);PRF(DFFir5TcxlszffgWbzLM+kT}(Wpnn;I2zohFi_iA
zqty1n!h^pkedH;h2eJwrdWnEn7BGw@E@pE<6R>%DXnNjj$C&|RcW}F${(rQ8;OlZ@
zw=j@@W7hPEx?Fk??;9W#7uWhVjh>ZQ{^tUy=q&~TQ(S==+Z}hWxeTi};anC#PiLOs
zwQgch%wX_W>i(VR(CM?wXEV8}?T`->zDeRK_tx-9kaswx=V=zR}O9IX3XGjQkxM!!p(&zYZQaG3U{jrd5*KhMg#sC*qbt`nPLe~E_
z73fCjq{~yZs|62)ezFo59~*W}zbl!LqfDFA8T6S^}=o=oTUO|`AIc~8tk
zWOQ9q!1@U6mdqDCeM1R{(WRS|_FiddSQWF%&c1Q9>kOv3pfXGp(zL;p+1(D@_zzsp
zTku*P7C={M)q`I)D^GFA+z&rhNtJnaQD$EtgYDn1e3^<2ZSp
zv{|%k+lk$px?q8I{DmT?maHJ2fLQ2vt7G|0M}n|^);jnmm~v)AFM-8ZpvF$h7_`oF
z#yw%K{Zz=D>sBws^vjIGFk$PIY}ZoMK4j;XKV>#H}i`Cpu$Gy$$(<}N7JYyPLpI8(i=#3
z&j&iuPExzVnltQjqzOB@F#S4*CaXh}G8UNBH}->VcF>Z*N?mMGBSn+noE)3XbU}+jj-dOhQ|R6kg>}
zG}Xn8n#%=esT|%~X-zVgoG6~`StT`z3Lc0-jy)^+y>G
zm_C-p&m0*vABlX-g_sdfl{W6~fwzD?i
z_zrMT?jcy3vohu5Q`|f;JwnTUauRfm0=q^MR_uV}0XrTr%u?lL;dICi(-0O0_k3uK
zD|sGtTac7{Zp%N{{S#%vQnVR9Z|MS{wSnk4ey^5X?nf@!ctWu?MD^upc#<(D&l9h6
ziDCzE7oy%kaPI|nbucJsdCm&cJ^_bBrNC1Q2qwd-VVs2d9RsPJxY!V)*G;LdzJqzr
zy)}dyC{;osqM5_8+p&q*AGRy8*MlPvMXV{pEd+syshec&z#SiyU9fuA$^C1Rhs-&h
z$aW{T19qNI<$s(8GPsiX)uLqxH?Xth+w4C7?M?$dIPgMKpF;)S06(%qD+TC+gdS=H
zQ~jB^#02{p6h7jXEbC^?hnPTcUu8hBFiva=9G7qvWQbp`<^>
z*<>)F??fu(pD{76r%D%)p7H{t`3CJ{vijY*WDb)i*Wn;-OIH)2
z2J*sGaJtdy)fM`-^
z`>lB4w)-jFO-3dIu0*t|6}9w*&Wqo}3C}D)kp3{KK&2?Orxb7y_IRaM`;Rl*lrb^m
z80WLhASP%&`T02^uCDhqo8}LDG=BaIL07bCdN!WowcF#1ALqvsm)M3KxVK6mZjK{c
z1^tDBhL-w3R4+qfp(k9=<;9e#Us%>zB5&Yj%XyDO71ra#y9GO;cVh`(|J}ri)orwE
zRc+!dd74!e^Uvgr5*IB5nk4d#wyU+#uf_2$_1^R!=+uxs+ftwjl(k(u87|I7>8DXV
z1~F+v@OX=xGUGW0D
zmoQL7Bl^jxzrvo6uY8jPf$`)l1I
zcFkx7#smQ^=HkdGBZ4-CChVM*#z%^#dYt{%dh=&ZA}y(t`S_xQhc@UtVR+BvMY&6*
zB(l4iL8(#}!2I9?4JAx?rEgI8xc~r<1i!{g-Br2Y@4v*#cUpl)IY8J;6!Ud}*x`!W
zKnExk0ebEk-tN4}4}1eEgQS)wlKFD)vsf;MYc;4Jh?!7#?k|k9G>d~sQ
zP#$tG;yViy0mIigT(UYJ%1712$jW9>l#OW4>xFI~yTqO6d}!+4gf4(}4^Z{o-N^qm
z;<2I|duR14^D_d1WRq$Cgk9g4cSS;EO_r8&)x$e*ol(<@<-s3xJ(TCfZ|Ty!&&w_Y
z1t}upod)X_08iWtr;Op+hd&*>99|@yY?LotnrEM=5cb-wmyK@yp0A_on+)zFMGcHl
z()mN*as~Pf;eM9^YXOKtYM^6-oq&wn$@49P7=5>s$XcPZS>vWM=%!HkG+;kz@Ld=t
zDW#fjw$7pbPm{oMAy~eNta49vhFOpdrks!Qys`jy6$q>aHs}d>LfnIiLS!TJl8JN~
z(j18SOT*@SQ}h1-skBOqce#ewf8d-IWKf)&^Z_(un~b*-NNqPd{Q{bww1~g7h(g7?
z4Uli;N=5*QH`ko}@rg)y6*!mMa2y>?5*<9>v#rXQ;aoO>wFwK{)p}Y0j0I@njPrB}
zyi!3YANNjI`_|PdMsJ2gSt6{zi@3F-fJ)u#OasO7gkOuJp{9IQ&NUFFGlK+hU39}(
zM^({P>ysj@05@*$6Uv_Gz|_d)^2gbyAShd%$3kO)2!7X|_|}Wu4wG#J>zl4}!`DlJ
zzWpW@9Xit}E&>NX=$A@A!v|kvUvxneCC3DNytc&KJ#hX8O9GLE2a07Rmyj`tXI6?U
z`;x>_(*K{e7m^QCc3R4CAAN(9C`(-dFX(a@+7SDEpK{---`E}2q1>&n^h{GdH?Q)~
z6y0ZEGG-6cOo~*+#$56Z(*x&g>_f~#2CD|TSj
zkBJcp&Le1`dovdW{8Qw*S7|BCBXqj~Lo!F*Ld&_oq_(&PEeue~=iboWpxTj9|Adb8
z$_zW`0L_8-9uK(FxCtd}znGQQp!8Xnx58a3u8Kb2{UKBdosP=|1=ap*dJp~lV>aj**{RXCLSOJ#C6Nu>
z6v06oT}Zs?HLN$qx`!v?az9K;9FxUw=K^+v9DbpR4MH(lZeT4~*%M4}O3rXldbv@%
z3;w79r^ef2d&
zfT{W*|KHx*k-nb5pEGK9T|F%0@@}%-RoFbyvns@Z7t{D!Q#p+QlY|G%Cuno1xI=we
zHu34Vj-{qeONd5y8lUnuwUj{U?ABG%zs#Hdp?~E3SFtK}Epq<|lk*FbeU
z%(Q7K1=y(EDrWmR3Y=e?)*gI(W+E!21VD5kC|RS*CeOq?mxPEt
zBc!8E#>mpk9i@X29#s^DUbp({dOh!kBeTIIaQX?mxP`1P7uzNP1B{z0XS6Dlc$w4X
zPdRZF_|9dz))C}sY_euX`LI&kCZL6YuXUYC;y%vWIvwhor>l#r^q+)&Z<_7v1Y{Sb
z2g73OCq`Nn0eZ8qMhROty+c{_eAdtsj37A`*=-I1`Eo|*5c^@pnd81XAPL{9h#~d-
zJ0FtYC!zZ@3!n(-LJ7&Op+5QUJ1c-8k?Cb52
zp9)r|B=}?^SW|>(eXXeM;bJku_tfh9nh%s34kk3sVrsc}Cb2@j14*91F*#`}eY(rD
zN&G3G1k3hyx#rKAzq3e^l2nJ^YQv0c9Z@E}kqLjjfz$*+KGVL~h(H8k15
z1-8XN&^+aAvbV@cc1D@mJF+9Yki9DJadkiU{d@m-?mz0GYn<149^?D{9Gk_n`Dk({tZ~>M
zf`zu6dFSO>Cd^xjC{rXph7)#JrGl$5F+L9i(f&unJ%CWrTK!7k4kLN>9f
z%-x?iK4aSnu0dTJSIfm?kQZUbJT(Wuq1VS(eS)mKt46AwdA3NzpEIm41^1#|-YNfn
z7Va{;O2;};klh1S{J5cX*=mhfa7|v)%b?~4)go`R)`?Dic^utQf5og6=pz&>XaU!8
z{%#A5lx-kd!0ntpvs9hR@2RRdW>DSMbGDqvY62t#LMJ$&Byzfvct!`BIaT{~6~9JM
zpg5PdJkynu!nTI$!Oz|JPo|CA$>**<1~p}HM9wGs~BF62Kmohk6cI!-C$z@
zk&@Y)8Raoi=sbsjvo6==ifkijl-b|Ry7C0yP72(gYt;AUf=X}GT-e5Z8Shn%hN`*7
z5SJ>#{Z*slK?>+=mkm=xJ8)pgh$%xd`cTQmdX!&kTh(x_Kl)zXOY6NzP#_gjSG?Li
z9Cj8cuD5LUBDFBP>F`_yKaK%U?4%hv==7X1b)(+!4u*FMXnyW=dH~gBLOdxV%AIEt
z7E&$(*zVs^-+!cC_mokIh8EiZ|GPwcnb7HGv{)6E3YVPNhQ1j=E3`DVe%W!~-m#ej_b=MSNM^_^<
z0N10b0dyCEd#|TDYxdRQebjHvS|xl0Jx2IR*!oGlBR*?$U=A<=vT+%&a8UlFA&ULD
zyzKXk!3<|*a9l#hqI{_ggRTxzD7g6)vR=T|tW$GM4DK2|ulazQ;Hs^#t(~|OoRsE9
z#m=v*-q88JssD4)i+~?&ldH)q<7B*iTeIhxDOuld6EtL~G6Y(Pc_zcg76*
z+CLpMvyDBOw|VEMHmNuo;yH=epy)GH@K!>jbklEnR2+PG!wpI)H@^Jj`mW8O-UvFK
z{3GWgl9M9!R`p`>eZcd
z>JP+7>`_kR;A(zeh?R8-M?-}gM^(*2(6B-NxvJURK(zgz=IULYO>EP$smnF3nRa>F
z$@<&lwh41IauRoNB+Q6o(ZAlTM**F8#L3l3r+Xc@xnev72?=6z-fmkN6G$rR)35xd
zKkj;72WtfuIDjK^hpP7!7f2i)N_6pp5bKb3dDUzMd`Gq}vOdC1yU#rYK>})4HiZoh
zM1}oR!M0r|M&`JK9anR}!
z1QohCwE^=#VX_5jX{#ScG*J*z9>@qy1D~n!<9(`rA
z0GeDV4yUj@{b~nQB#KHl{#+sYYi$B2gt3pDAQ1rpj&Xm+UE7Rxe*#m!9W5$Dr)K>2
zYbHfGQm_$M`%~IySE9#PGw|KIX8#*oH3qav#bNy#6LROTq3W*Ss!jLM2Z_27y{NG=
z(rr7@WWQRWpvZjdn1A9)(2F?YJ$XdHnK;{q^{J+3u`56;CccMJm$G>GI;`rpPhhNo
z^Z3UTv#p(o0l!=XfJ
zouC}>XdLuAwpaz|kglwQsfEh^sU}6lJBz-#5SQZ&AAEQZ=`ZegwUHnt@M(OJj_a~}
zX+#%Br+LRZG0j`%-iWoF1cpSzRBxkR_sfyj
z+`2zZ>x&+7|G0*8Dz(2Z$HGeN$nxO$Wp#*}=}!q6wtMD3h(v^+OL>Kk2A0crb(=+z
zxlPz*-bOU3CJ0i
z#V7dvMLr0QrKcXY?eFI#?@h36s9!&N{~DDK!i4dzrD{oTa_Y*D!_rqPW_uD0%ZK-{
zDLR%J&j}V?=(Vn*m&SvHQ|{qt3bRMo)DqsYW<$>(sYvIJuCyO>3J*kpqp;rs5;^O+
z#!Hefp<IqAR?-A`Jji|9X{#*9llPLUy{)ykfpfhA>xGt%V+!dxch3JYxp94p=&p45>;tK
z5PusbJJ+Wv>Kr)=)kitkXkX|Qt-f~_rPC6y%&;9$Nd#dx5~{K;udY;+NT0a$8`xK`PfkCT6CVQNGWQ*Pzsy^oNnN#uzP?UJie
zqoWRi_ixExLUF0UoPMV&UrCgEzI`9FvYHZUavWpPE(34KI?2%fY3`$TYUng@Y;4Qj
zJ<&z*Lebisut(Tq3QoVm{x;A(z_|g{nD-P3*!+t=gbASPRO53m6hftg&BwAgYN^M-
z(PT${I{0PxOOu)yzvp+|31a-Bhu1$Hcve1ORf?J%o0RX)U@BD7Rsw|_2pgl|%hEu5
z2tTBtlp?>4oGL!MpI>o4entv%xY(1#8)L5*q=h?zMWX|R=rz%Fc^(uZ6@o)Pi^V+Q2Pu>8Jw!kgIXITK&f8a=i)x_b$
zvUzmC@$oQ3%m#mQ=Z^0BUMfS;E7(5|yU667o}UwjHJgKsN`mE6LVT)GTW6U#nsDs)}i9q$CJ*}yg_
znTaD$`YJxn(0}A3W<{$&qw&5%i`e9Wj~o6-l5UCX7dy3_LE53fn7H`JC+4Qm5o+3{
zy@CB@5*%}VGduG0H~AR|w{Yr5GzTz)&>EVVpuVk;$!uiA9>@MMTJ$ClfYiP#KU^K
zbRH_((1;vgVuR8@2=Sonj<&~Ax94KkC1B0$0i+MuAQ=()buZ-z$XGYKLTNnX9XLqI
zo8qR`8WhA8J7wOhSLUeZ^QQb#@N0K@@hlfGfm*fkjvql1nFn?wv0i(*mUhlA5`DQ*
z3kXAO1WyQeg1Z>Y-`y<)JO>fZdnSMK8RKV6IA}|hj5PA^rM7>SIJgmkV)gl8oj-bm
zM(pU5g|E9SL|qGI^BUHD=MaPc&a@!?Ej8uOVG&agGnw#
z$vOT6bxra+@o!yW%eg~0Ca9sEEUx9Z;e8;$a3Dec9V?4eBaLuoFFJb8rX=LnOo=Tt
zM$K~!&K}hA5T8dQj%DcK*wu5mW8AR7U)6Js^%NSoVvM4Qn0L
zHg_WusU5bVxN)1yHPw1jN{ARC9gYh^@$T#C`rY}nUPuh(g_NTvEvolp!!cynPl)cJ
zy-EwN%%m!WEo0Q?R(FqKIk!e$)X&PwUuO9UVQN^=b(Z?&Yin#*TZOi3{K7~Zlbbcoi#!`ynOsA2;}UX-{q(fmk|%9=?!;Q3Cs0j>;^*};6UG{$%;z_TjK5A
z{)&N$mJq+tVcrK2(Ysy_^-<2@_^5N7RDB#W!ShPb(wRn1>8g%%M-ZEr#??!^obfyH
zn*4zkv96DMU9=L75(|(nHE_4qh%E3kJSn{lZ#;U^7{6wd{{SugFx{kql*r^-?5~RN
z-Np<{w1^5AU<#FS*L`<}xPR+xZdJ=Nrg$_!o9%Y02ZPw{(xE5G&vlJ^R;$k$h4;d7
zjWE9ZrSv%kL+%70FE0E8H*b1IdtFg_cs&R9JBKuA0ewpFMk)}gYeMqcKdYM)j?NXD
z6Bs{KHL1bjz3y5>`fT?V=ME$c=&~vUZc#Q)KuGHoYB*OF351MW=3%!hw?uK($iPD|
zd~#EnznO^vawYr71$D;lM<#+C4LuSWZtla&?k}>;+{X8t2;DM^%B9Pd_vX9nX{G(-
znl6FdRUsqh`@k!MQn)%?#HHM&bs5ZE$dyB-OL$;y`o6UENy*0p9}Dj<#QG2$Zt4#r
zjJ~>}ts6G|+FGF?-q>AM>5xPkx=Dr(Z$XXP4%@)$b3a%maNh#Tj&wzk_dqk$4Obta
zeueun{kG7mexD4;&ezAmrC9m69=y7x5UbOXxo9@fx3Ib0m{QzN0Rbtx?BJN@Qz2rp
zwHeW+>9zZmQ0c&HF2jc!N})wz4-0aUhvAjpmz)xmw`d_TI&fWfrqx1&9k3uww0z@G
zWL^mGz2WfFuQP6?dyvP&w?20%7nJ~^^GIEIYdIDShR(Ymk8q5UYMDc7+O(VNa<|dJ
zYOqk{kHyxN4SQ*pov#y?%tcsAVWe$ONWm)8msI1#>ljYoP0X4vWVZd0#~BvhoGk{kQJBQ
zmn4%pXf~!5z7{Jb3RP9#RSAMT|F1zd;@CN3YS*nwOnQ7sqkg^(rPG*KH&2Otd~5Iu
zPMa$kc**7YUjCGSQMXoN1H_r8R`u(O8U$tvc1A3m*t7nb;;6O_AEPRq+@hRAoe4BbYBmQ@%+%~{rG$F`gnkw|H)++2ZG@tSd~%0
z`cyBp0a8>Zju08;%9phW+|OxWZB4M@j|3LJxVVmb>*xtz-90WiwpQd}*R@k7w--(6
zooakG$TwPXkIZGv*b$)p+_@-rwlLw!<0FLF7H
z3lswS>)fCGrFjaY8jkl2Fla5S&rV&rN58(i`49a`r^%(TBOr^^R
z0Q&+&F^P6PbG=g}w_?0K1j6`2=XLA|H_IkzfyeN1d%)?lT_
zk~P3ZPkz7oCYUTfD!=Dx903AwnM+7LcLYl+-u1XJ>5}~~=d^cIzo^-Q_ON9>LFlQY
ziv)v^7L9VnE1lbLm3lty?diA8vtLbe<^rSy#4#^xPvpK#XjG!k`9E4sx&$H7x^;=2
ze%u%)R#Ln*Dfusy+V75wF@hQ$N%=40w-OYD%m4?BTfj@;aAjzur*xS7tw;Osb%A%+
zns@fz9LwDlhQJT{t>1b;hyjw#qA@xA_>$F-kL}FRz8FkXh9Wm+5}%7%)nL1KF&h16
zbvRVMI*k6f9B0x~Ltt(g9A`IVV|srpUwS))r@wy8t@Q)E4_;jaPm}1Avos3QLeY>;Tgq7wQ
zrfIxVS`oFjA*HZe)u5w(L6Z?{`2e^pLXsYEhJe?tvnC)iY|-)bMgcu@X(I)ZiE8TX
za-7(*m1IlD$-}iI;5s@vU`jRxF6yM(cN&X=AMd*Yupg5Kq#Rv-MxH%rs!raEInD)*
zO~KY&#~0o&_SwL&ebPT4^>)iMY|Q%i_7<~d*^jvRBNg1zgKY*Dryr&I}yVW0TS
zkD>;I>~*0g_jv)?V)s$c{^$0!0%38D)_JY~*~9b_=~q}Aep}`W08?2{Z$6H9kY|G)
zGRzKK!^MmYPO%wT(rAl$8`1I1%R%1wly
z2fRbOkc3&n%AL1nX;7{!3JH+I6id!qT3HKFPh}8K!Fv`b-ND!ns6+5-ZbV3|2VqD)
z2^dG;f(RW-S|hVrqlXJp!@kc$pNG%3?fH#HO6G86BS`@Em11dhMtM%6SPhkHNTXo1
zThSm|_7@X0gq?^mTfNlkl{efE(C_rABlgY3EdjB1W!UwioaA15gC)AT0@N^zJ<2VL
zxa>#5FML>(EYi$rk?0?zU=s_9*7LS7K@Ny)A*|X^32b$QSde
z7&a}EE?d19yV;dH+VdxvW6me!J9Pk9K;XA?C(t>sA8>2`%`N_NpZ%AkN<&W-#M|oC
zOHVUrTSVACMQXia{ATu^v1ir{#}(*>6}fT!;yR8`t3ZM;1NXa{0o$n>ut$MAzP3ft
zM(oD>$R3ngg`M`r<`QtW$37Dd;
z8N(|O+kOMN`#2$^MbY>*^@fO?cCVm#I|)_4I;i=BmPO04JZTnl$9SqG5G3YE+H(wb
zHE;reP5#GiM!v1Zl6$!_1RT6Qfl|qN5~tTbBrx(}J$rG!barc~n+Q~pI6OF6{NEp|
zb`;qJUV0^3wKd0ZjR(B7JYGOV5M#aHq4*er8_Pct8&od@!72pB=aAd01+H>z%p?4A
zD9$P3kJQVsYX^4qKQWg@Pg)85*k`VQ5z0r{=@QDLn!3ID
z{pyz1b8i98$n2u)28y>_v;=IF@evdtM@EOu_cxfhRG+l6br0OxOmt}O9XbQKmgA)L
zo|I@&9Usk5CG|u>T{aY`f%ms>gAV9=pb|&=@hyD^`WiRrkpTc~YTQH(!t=9JAolwD
z$FpAf2i6NcuXWKw)~l&#SMPqn0AwKMb3a^@V?n0Zt9y9B+I6n`73yb_)05{S4G3H+
zZ`_w8T#xrh50B~nd+<>78Fqe?9MrBbm1OPet-N+qTgOH&E1NSB6a+vl1n@8Qi2OZs
z@$Ca4(sk+Qg@j;$aS4e$ZuH#|#+Mus_)8A+X&!*BB=|3nt}jr@wha(c8;7K+Leqa3
zp+NidprUvd>I_kQzj$06J|CQc1-)L%r>m@Ncv<}6*S)UpC)!>(E;zchWY}sD_N%Bj
zfKco#EemKwPMIhNXio|GH?vF0#q+E_K)cNp?<@sY2(G72epgFuMe!e
ze#7!X{d9ONX2L#Zr0-NF#Y)v-bAHp5RsR`S(ZH^hQ!{Q3bjl2OfP5XeBhN;Q>J#~=
zl=4~Tm^SLTX}h2Vo@dT{(i
zfGs#agKJ`MeGQmn?UR$ZCMH~9tkK|)2X-VM-R4f7OIX)~gO+ZOze>-=CsIB)+ow)m
z!iuYJ3nMTA-KvRNVC7&P5xHZ*hR;tAuo7w;`2tu
zE!<2?_Xz+e7N=XCE>iJmnNgZ~OkEUek%~JHVWk5F9Ui!0N1Hf29N?6}le#4K>?gUk
z4}&>LN@i-|ap(3N$hZO}Gy_1g2@vmR;F>VuN-=CvY`8#%uw%
z13-`_MuDQWFBTA5gq0l?j?e$51}1C#2TLvhLS_$>wgEIRTA=8|=>~U3g09;Q)iq1b
zcZGR=VlXDdGr4Q*zFR_thb
zR=6_Fazg;vnV1go?@#=~fS_k@A`@1d?ZOzsfc}v3XUjbU=%AR*4y10Uq`AlM*7soK
z3kQzGx8`+`w%tGDTfeT&d*7}21%&8-#v;hG&=Yt+C??~%IWWZ-Qcug%rNQJzHsWW9
z9_+4As-cDZ=pm-(*KZF#tslz|zEsMQ2Jx81@}ob}=Z4-;s`DTdE+$4xU?M*pawDPn
zobZVMp8ePG-KT+Am-hF9rI??{72uvX!d7ZipaG|Ziz-o@(s2IZ!bma~a7;cYEE_}o
ztB@dnVg%o}LK@Cgud+(Ot{jTPl@>g9sVviyV7&&(yqoIoe1^jE*E&C90Ov5XR*Xop
zaOmyloaM7+Zfb~CE58!%7{ea%{`rp(BirR&QD|s{gPWv5$}=y)FDu<;idhP6FS_Fl
zn>cQl&@Z$M|JJ0nKOY&@(i{s5-!3Q7o?OmsJ~m__QjC=?LFlDK9h_t5XG3F~YVRDU
z{GQ6)imx)B&*4&)grEsq)m%&I;AX*sYF9htS2C>Y3U4IPH3ukn55td0Ei10$G
zwQZ`o_#U~(FEyG=(&Rgk_S~ea=73aQRx)pxj)Gt;(&`0$N9Z`#fCL>`fA@||BBw?U
zZ}O}8HGwpBN2g;mCIklL%<}>ALA{aq!g}zAaW(H)}KT#YY_esic|I-h9;L
ztEYE^dA3oWg}au107h-(HF!MQ};0T
zN{wuW@pmtq`MC}47S#_@^?ks%Ka9y;&}aV^?JH+V@`B}%g0Jq4_}{4`EuIvX62Sb1
zz~`>A8D?5{ZxW^P3=@0W9aMXE8lH$RGPMdB5xRr8RwTDQZ?{?6FaCakHJI#yvtrfm
z)3(5Hou;poPAe4fQJJ%p7DV?xT%qH}ZS%HnrPK!MfdNOD-u?_rJRsA$`jkl$48QOy
zrZBKkDZU_}pGdfyR!N-sGuW&MdJv$bRduYC>CAtF!htze*en4CN*l-UpD01N%E{Lh
z92co*x-fF`3F-S7OiA1vo-}$g#J}>>v|wGL$o|3gjK)W@oQV81yso?x-$zQGMBtM7
zazx-ka=#lnsXhL{C`Z6js@q9>naWuTtk<%Z7trb(S$i1{p_YpJ>ibws&6y`kKfjOD`8gRTd;4-E0yo8;cHS#i{UpgIp@4h^OfCVj1(KV4sDGv8@O(0=v#z~
z^>bxnRUO*0zMe|@Oi6oLWbs44jAM>^$WYv1D{GiNM*}!fOqmQalV+u!^S<2`rC~2YN4*m7XKdeq
z*EtzwY|-NKsZGR~xz%SmbEqW><4Ysft16?ML51z1$U$0}mqs~%wA}C;x_pi=LeS)M
z%vnr&gqBD%3XZG_=AT2yFAfGX0bsH{s?Axd#?J0_eEV>bd3rp_rSEsln(yR)%Bb2^
zF;1};c~&@1DhAS}q&qkp{0aXK<@y7Yr*g(;#vVnU-VY4Vk#0&2W(y%VLh(3#Qg-3x
zZ?J95+cl-VpHB2Y%#t3hOXeqNTh{JXLAf4sM7xuV7=&h^z5Yr8$M90BEP%WfC}IZL!4b2w_#f$
z%n=j087|A{aX<`uda1TMIM&6B^GM9r_oLi|#c}zXQND7j{yo6(#s4A0DAY
zq7MaVP|g$tKZh=}d9hVPRbV2SVjRulKE|CjrJ&%U+lc~W>BXuN?W}3xlsOFIB^UQ9
zS@h0mKy(CzJ18|tvaaXObB^ZKLS6j83n6xpeok5{iKzktlG6LSQL49*cVkUKn*z#%
zSi#VP-m819nEL)vI&;zwf(^JP*Pb^&&Tq?M=wVyhLI{#}4F+%c23|3d$DXWlfBick
z58g)>-dh<}#<=-r)9z%f@6Ysf>2mVAL35?>a2z3nTGPOUAwcivLSwU9K{Gk8?ZsUJ
zQy{;B!UuY)xwZy98^zW0&HJrE%jt)FqS7(+WmB)Z_WF;|EwAX>eC|!^s&3W&OT^Ef
zzrScIbBX%zOpa`Rodp;iF{N#|zV)5V9P{7H!2ys2W~J#udR7&vCTgVU@6PCPTA76>
zc=Th|i!{WLJA9kZ0tl5}x3VAu!gmGf2~aE}K{tpP_nIbbuiEXO3b%r
z{qGfJ2?=e5Ew-F|*B1qDM{&-|&3Z8h9CJZJm_mWHSF3rF^j@Mt9X)dksyut?qJXx0
z`jeJAp8p*~?9gQ#oiZ#GC{gAX6iKuzm6pX4f)ZTU7Vvr>flp@hvE9Cb9h@^xgrJT@
zm@*ob;wAHm|LiOxYwTb|!7IzD8XBAYG`;ZkFa)GSsKp0&%yzTiZoZJFTfN3J49c5e
zhy^Pm%4i!`pXpRSyH@f;@RZ8;K{>b8lbF{Fh&C3}8vy^~ZZx7IdwQuH_a`1>$|be2
zN%6n=XUHJUVigW_C*t-}D=~r@O4e+h&@{{xK{X2Bz8dgp^ekYXA2S9mbG+^z26)L8
zA@T7lgVL3?!>9ghljHZ{uRM3>;Vp=j51aKQUja*x^>j>U5Pj}sM93`21Zg=ra6`I2
z@^m-~qktt5nL`FSm1OZ6>wI`!5`JdR$(g;U_rG7ODiL%9y}Cd#bSdA-r4t|OOaxI*
z9^^e9XV4h;n?F(?7N{K^0A``P0&8y~>v1~tmuy)IeA#{?TDl&BE5ASijeV55p-
zssCA2Zi-b=$zREz`{$Jr2k`LLOh;2Q)Hb7rkN?~&o*aPDS`Fr(f)*xuxCRv{kAK>5
zb9P#STD6$;Q_9WtCVb!*W9u$Y2Y&gHh$DEHgCl_2fpru
z8gMAu9ysPWD@Rws9IeEryYS=02YQ5gy|5op&g0@5%i%3Yo88j1K}CUt$*lMbW_}6(
z3@pELdhZcf^Jh?|t{av4{%A4a-^gYlbP}REAhvydZ+rRr&kA@{h>ML3fnU8)$cA)#wH(tik6@-TE8a&EN}0DUQ1>UuJ*_*PsI?
zNP|&uPu-5;L~Mh0AtiXcsglV6Vd7i06=d*oI5L0&bfTBw!|l69ek?TI+Vu0>$Vg6P
z4C&f6@MXZ*6`F@k`u4S`cjn(o^{e7>zLMzUTE>JR6NY})`&m90WQUkUx?4?_!~d-YrK&0z3O{2_%QSlR&_OdKu2JR
z+9vk;GqFg4OLzJv)ta#79vA#OJX9nLGsX`+KV6vB@KPmKc)JXEW_Flr7z28AFQK@z
z$o6T2(idI~d;|awAG=xxo*o_E0SRpDrIl(*
zcST5xVAO_PxM(l~3OztvMTG?;bFj3?L9-&Jv3Z}~0nC(w6vcQtu>a?(Qa+q%o7wM69TAtTmn}x
zykkg_;^5tt5kXxNPIQ=oav2;2%L>A1^bYJWmd|b6qTeVAmNo3t!-a)NEsVg-Jliv8
zE%4u!%@qVMQScJ!#9TBWD02by4YGi7He{5`Z=c~gv=CnC)qRL?W#kc+7Nj7$LfFH<
zU(MGF3Ol*SC6(hhIxi6+mfS{fo>#k*_yH7o*u6;A7prhhN|=-g0^HnuWKZ;>7arYP7x%evMYsik#YZ@DPHu2b2pIyLbeepGH6htMo9<3ZYC{F0;@2p3o`gfqWWdHJV&p?3~w%!BCDk`&aK(PTRU3Bo5Ha9Pp;8w%23p4am
zf*W8WCnt&o;s~$NE{LwofDg(PL^8_?co5!9H!_2u7=ZIYyL1T7G^xP@v6?uzUt!XO
z2Kr+`&q*lS09@ms<`u@jXTlIJwCzI;=kuQi)_7^A{sxRa3>rg_=QX!ME-u$WH_oo8
zqDsp?8miZQrC=}^8cC77veq!>4$-hf*g*&}8R+!^&G8XPW7RiK5@WcQcwj%Rp1ie4
z-*=fSl#(wXKZv9_y$XbVAXK>mg;RmA$cf{(qH`v^HwTkQa|b4GAzw8TJE_KL-I;k(
z_wz@P2LlS=6=1Su4s-(G3xXEp70`L6$GF3QU3^$u&;&rqrmjB~b9k$v`l@J)5D`U#
znHKha(iwVPhja*o$L-0;-*=FZ-BIMGbl#t4cnd8BuwDE!)K~3#=|LmI)WW1UG0JOg
zJGXHFf#x31`Ep2i{EZdbRJ+|b(xcv*U%Jb4E4nc_Lf7M)ISmYi
z@IZ&=d*$2MZ!G#=BthG*OfcRO-XB7ZW91G_y&?Jy59sFDup*EhHugm4-*Ep_28N=h
z=7~HL1~jACLeH8S@KUbAhXVmO$d5oQ65Mqjpp_<%GX9m0SCO|CN23!J#Y3t(c>GA=
zEsdEn2Vdq|UftJ6O|FAGFUXz7MKMDL(KLIoH#O4T+|}qSKmmP41IvdqMCV|dVd4=}
zsWim9J!1b$(EeOPc7@6O^bo-Ag6o#jrX%Vy3J8_&iNel;3h(X3E;~?L^lJify&r^o
z@W*Ds{Z?o
zC}4iH7#=bw6P9=|kWis~2?0zJ=U^%PN&*-M{Py0A3cbVbPx68#6qJmDtI%@;z!V}X
z2f@}J6*5?PapfHm5Dtd_EP^aYEiX21+V~Dxw1Nfv^T>64J9&MM4N{31SPL+t4jax5
z7~mjB)I}7l18>N#wTm7V(Ar3}2BICnai)IZgUuUVwvp(chI!5he$bqox6*=8o@VJg
z(rRYXjew_GH-Bfu_TR6V9$&@W+EXOLjLSJhwhI6NYbYn1IewRz6vdu?D47BNzA%7u$_UXk^r8Vocr7Qdd@4}+VVdZxSAWNK!+vwpK?|XN84{R-Qw_Jdb%R#is{}wEIN<=B+nU$bT`?O85jE!pOZBN-hi0+HA90$b
z13=G+<8cEy1{jjHmKqTIE*v<^P(W#CH{9_Woq1h$mpqr6V$E|vo{|4#rGAW^s^E9tMvWkKjH7*|Im;Z~0e|;brZ4#n%*0igD
zmtTXmjLqX~5+0uQW*jb1y=4N@7*~}XDpK%%PRsf7riETbMVvj3r*lEGlR=c$D9E;P
zsUYgRORm@vbln;ixF^Pk*rW^UN2SK+(TG904YUy8fOjR
z9{?ek5Xv9V`2(UV_9U0Ve0XUxs8fW+tg@Z1_eslI!UR$n=WdL*Ruk&IwNoYob`1HB
zJ_am(*mKF8>Td$s#Ol{CATJcx*fOp5>PzNjR9Ev*Q%l0C^6L~pINI>JA&ldxJ(Lx3
z`k#j_1O??Naw~8CiwG}Z)Cz(!;1M)~ge5r=4~0Y;jzic<3NoU?%iyN-NmC(t`lp-$
zQ!=cU`MKajD<~zBlSYNkhQYA6zVi@8AlQV)@27V*H>02gpvX&!Ye9O0d|W6rL~Cnt
zz}nbXP=TtuBYVy1L1X2x&1Rz}IF8MmieC9;I*=exYWRo|XK*uF$iEM7AM1sMN?S5g
zim43)@KLBf_t#c%y@Nxles$ICW)0k%-E`p{7*PVdep3$}8C77HQD0w%Nw+g&E6;9v
zU@)KRPSJxo&?y8nKZTat4FeRyqxXNs3pWbp?@T*$6X8e{42zFZmSBa=Wfm$D!
zXzh@D(M++EmZ3=4KTe|f?=F2I0;3ntcHmP)W_%7x63{_!eq3hIH0rEjQyx5D$kQB8
z{rX){x;+KLvOu$PKEB7ev?~$U!DssLC361Jk$rtaZo0p6jd-&EK0O~V@P4N4ieW4T
zZl*T|@MJ?YoK)#;H8;0%Cr46x3CV4r0c!yc6R0CW-fdp+@ofsig)Wd`pqUbRJoM`MD-;6$Ai)pUE`|JqX$KBsswG5F&#dIa2&pWcAoxV
z{KAk99vpjO2&54{^T7`6j5&3m2YNF5ToUh8pE{d(#Y9~xDq)312Q#w+AyVJ*t~J=+
zfyP64-J!w4|0SLs9+Mn2oli=}hq#$_H#1&O{aIJ~N4b+AJ*&}7#bIrq19P}4p@5imFOu;97Oyt$bd7Mf7H0U;!-J@q3
zE_YpSKw97zt7iYdbB0*tLkhUD5D+nFDMoq)5p^le=Ud@CAK_v_>$(-v0|P`+={$Gk
zC_Lf&?&0cxpH{yB!x_I$34z^^tb?Q4wCfez(hVxaEDeZ*)zrA6Gh@1kTE#K9gkI8I
z7qk*z>O>qdVV}T6*!8AGte2e?uw6Imr*K984XD>HA^SG>P>psD%nz5DF)pmVglemy
zvNs0ekD6QITf~&VQ;u(d$zpYo{-Fs{K7pwR;1_9pJpeP`hrNI8zF{WTBm5Ta@JUKR
zEB>7n%t8hK0kls?fK%SF`BZb~C46#_L>^>$kwMT6-y^Uxs)dqp(bFESZ3&=&tXM(r
z`fja6IrrYuM{`oL|AOY*a6O?pHWURTavkju&WOD^r{Z2^9?@b3MWkJ0Ky|>Th|&ey
z>nRNIu^l)qag3$Bv0)ST6z0DHxg8RrPW(VbG?2cxvb1DD5flOw<&r3nVF)$7G>Cdc
zM_oL@Fn@39;aF-0kSdQ6r)HkRJxxvn*!#@QvRsbJIK!5yWF*)46>uR$0V(8Kfi9rGnO;&vj6&Cb*nN+G
z{!meaNCM6?Ag8lDUwZHlOeb^%W`>}mAeABjN4B&;y82(-frzfxSm4{X7;prC2P7tm
z?1Mnrd9!(?U>*ww$=jq{z0=OR?idKt^{(j!J?D9%f8Ve*0pyp7@6rCIShRN^#y}cm
z4hIay23vgzK*ZqHQtGloAlw0!0~8d<8sOIh1Q4mKpjhm~%m-xt?eNwK1*}X68nQAU
z%Xmn2D^J6#rRIX%3EVl*AC}n462=ed67!UUG6<5dz?ln!;jidFk2Gk6bq<5-$CHt27PJIcQj~uZHQ{?MYhY?Zl&S1{M37?H
zhQvUfmlT~)#@LL%1j0TOCsI&!LD_QOLoQBX@20)~B_!~qkBOU*Fl~-B8=VV;6c?zi
zKYNV;dA9e)DX>wxSM-0omPjnr7Mq$X5yurQ3*?5OIs@OCLWZc3i1)YjNeIWC>!{^$
z!tDBMssj)ixz_wixXsRh6sybU;~LX03XVuQ3OhLPxY_%Oy2w}ynmLmUG^gF=Z?b?e
z8ASJ?IVtq72F6i@0sap+(KSs#N9IObVOeGKIk=}mfphSmVnp!Jojt0JE*;1~k#h;e
zjL3W$*p+~mm-0CQv3!xg4~_`5$}EZw0jog%kLv|3;nPg?FY!m)0wElEk5;ZoG-Kr3
zQg8Q-mHUh+uB2sr<~kx3PU+>PXFov&qb4fE^mr0^>DM2#@!gEL=uMJ=iUAbSgBU9a
z*a~Xz5$6I>c)v+Cjqj=dcXx-t>Xih`*?V~64dw)hfx^O*{i=y7y-$S4RWPE!
z&?`<#OIFM*eW9f=qvE291nePz;lZvHDkAyK*VUMd1Xw#b(D)E?xdO{TVRAkO2=GWP
z0#Pn#JQ!cd`dkCa;@+FOs4hROdY@XvfQO7GhJXct3^aGyOkrL``O*K?ZqymRnT<@!
z6N}!V=Kf+Y!xq!I4YJKAdD$Pxp9A=
z?tR+P?wK_z09Bv<|EW_4j9nUFkz`K%;`>9sBSE$ai7v$XUc)5VBI+GKflnkUQ
zIZ_Nb=0WI{i$Jrp8VoppLA3%w(M!D?qPLf14rQ_Id1&#rEj0g!GDfH&5#{gjmvKdZ
zL6lp*zAKSJ4?B^R?R~it(n=0F4tmr|-*V^@5F(;;5Y|8+5fud-5VDuwa3rIl
zY*EuBcVrby1o>jZz7G&H4!6rq3b^3Igo!?&6`{@QYr>+m3c
z1{6)ajt+K^iMQL2T#ZF%cV3l7g0ph&T=PD9sM=rGj&
zcjR1wIt`T4c=|CfHjJKAn#aZsky!NU9Fy7=IY(a*wC|4?ibZC?Q8oJ7lx}rsUF*F@
zw@7i|n0`I679{nVW~(>r13*T-5d%PssMXBB7S{92aPI6FKrjm8h)7k2fbBxxMC$?Q
zp+GQ}HSX|VO#2X=g7+tWPMyn#6hcaU{L~l~7Ny}9
z?Q9^b*36Ud4lG0%4ZFrnhemEHDf{^GY_gTvQP(o)p^iD0>xC0x@0fn)P$iQuy8ilF
zrN7G*B==QM&lAJh*lZw(w!+LIl-v2-7V+cqPGyL?;pg1^I#p
z^khd5oBUwF35@P2_HF&MUDL+HHwd;4@e5^KF0d|w+Pumj15^ZOJO8wvjQWBTi&%d=
zL6ZCe&xP5S#+Nkaxu971|HqE#kGlYo>9L{I@p`YCkCtB;0|v$0n4&`&1sXxJTckLT
zyC`hMdn6F<^8j19c>>1~*qYSufy^Rx6{(%wIeLH(30shcb>3Do6my^eCwql!X^XH~
zrDGDq`Wv!r<5u)Iz~@c8%l@d(@fm0cEX~QGM1ypMS=S~0nP6USx)G$S_Fss39gZlj
zfo?&3)MECchF>yZPJyY<2q+B9vXT(ez(@x=I9rBBpqHnNLzpB`zT@5@+R-SIw&uuW
z(ADSk5~>4G_&I24bZXuCp6ZFjPp|D1(Jm;wx!epKQ?rvVul~9^AFyqH?or3t$gRXo&Ko|6Y3_f
zC+`Bo4c;S;p9y3rEYKuN*n(r8(>p)n6I_^wv!$e
z%IfPhM3i`(_1FV7iWC2yUq0_4Ucn#_ItO2CcCGA}@404jFneVp)dAdp?YoJ0#>aI4
zeU-!e1qB5_3ju1b?Bf*ZP@00L@sth)#eP6Xz2y0uRvs*Svhg3ei~Z0xt~fO)KuZ#!=Ah3DBB*%%~1I0z{xM5u(j$H>Zr
z5kXQuRzry^uaU7swmQ;pwsU2Sg^1;T)c5*q?`8ZqXR#U|{&5x^vBD9fs@;HhjzJL(yF^#vx?DeBW^-%FVnjn~zgzM0f*HOT%<>m>LFl79bbzMjTO>)&->
z&)x4m^Fu99q4L4=pZfW*Dd0n^;mzMSYRN@7{Pr(C#Yxi9_8S8Wq{JNK8S-lqj>-G>nZsCO#n{4Fu@0xTJVJXBS67Lqm&)$X5aGnrE-
z!5>9jGZtH3c^Us>C+pNt9*ev2Decan;5DP-PggFppB4EFtgUI8{Ncp*JCU5XZ)x`C
z@Lg5X`C#Gq$J1uAtZ%bwKje7#6UX8Cg7u-kzC6|sr`vuVDLy4~D&}7gID~5b$=_V}kDQ52+CO=Bt?0s;@a0>q_uOexSQKZw
zUkLo4%}}<)d_H4gH$ap9`L$#r_iVv0veBN5jxt-O{4r%w%P(yok`JBtDkj8mjNA4X
z&QXn>FMa&5Sm)$_Db0$h2t8(}^
zy9hGZ+p^}}`6#j1su)GYDZZJZ1R#PfGIWg%jgD+OO;8pqifI
zgJ+0a2{=Je0EJFBbV-_;IFh|2i&?}v_$+J)pAAo*i{N$|={pGR-OQ5|<0Nj?vc7G8
z_ilJi4Xxi2`jDCd)74)y9||a}^9Y0jP8QoYIKeD%FqTEPx7Ww?<--v5m95y10>ay@^0(!jDAFWeh3Mnf4wd+>D4hgB;N{o7+o{3b#1y~(D^Q+{v!Bvm6q)||SA!OV=bFM@S
zJLt)vptJvXLvn*kv~P`1&Gwuw$TUA({N~~4ck}-}X=~O}JgB1H9(~)|UsT3@N5;qb
z=NL67N`Td=%j=e3E2Sc7KXzn)4(DL}{tf%a$Nxvub;rXMZCz535Ist?AWGEeo#+G+
zA<+qv30OB!WLa`;DQU_K4jHoki4{m%n+nh_i4#
z_;5qiO!#E!39G9MFDjo4$!p})63|l}FOz=kYJ0R4%d=7ceD%TX5sYnUxot&t67mQ>
zwj*Dvd$UAz@6WhsMhA4IsZ62pmU1TP1Z%N94;$86=8h86#A2c54~W^k
z6m^dV?L^*uJ*tT_xT}i`2FJy`
zg54IcK>h?)8X&it{+o}rNHYJM&cdr&FTz%4pg->KRK%6E*$-5~iz?HOtQKN76)~+IoXLr5>WKxo|ngh
z*E%m8-qB>n@84Isr9bHQfA)9GB&NS;``!3(AeLK9G?gD!82Ly=Tvh|6DYVEuCk(^LC^}@BW$7){bL5F?|ghF3V
zg6sKRwPvh+V?9jB*1vZ#PtN+BCUelC3oHt6z8BV>>^_@4nuFPONgV!Yn0Mes%WfPZ
z*Li=Uzg_w4mO5=OqVKF5`#pp}Pbvyqr2b^_#6noZKJ@HP!5gX3tA`HK&ea6Mo)2Tt
zM;y&B^pkj}f+zhh?S0o5sgBOX;Q3N5AL)z`bTJ*!#YL_+NywdLFsBWGU(n(TISaBsAkoAH>g|KYzQ2KX_N|@
zvcUOWRhGcmY+e7DYN2xcpw=dO{660xsL4NTy}Rp-jC~mPX|D~)k69xzBfyJDF`-X{Z6p)ND
zXvA4GMxV1-d?)HBd!I_s=rMoa7YmPH-kHY*4M%scEu!q*U8GQ+dIvM{PnXXbj)b6b
z=bPssWl%=7x3-|z^VDIedx~n*#~mR&*R6Lar(Q;6uGVo6F-E#lWjG)eIhr>-U~)%u
zEvrI@6eC9;PBb3g8jCD5~;4kXvyyf?_wXD^({)o
ztV;Rdpsxz0T8Cg>tO1){pHt@HnZXs#o6tr5QR8oq7eZT*JewkGtpn-n6$9yDE6Y!~
ze;Z#qkis(!&OK#w9Xul=-N7`VZErx|Ku4%+#bZW{?#Zq~+n_C3I1!f~5A7YeoJgX=*F5qQl5{D0zu4JeVkzurJz7YI*bZXu(j6%Sc
z5jEo+N*cZ6t+z*)kl$)ppe6s-!4y^Z5X=q`Z)nx(W6?l
zN+{GX{9pIpxRAshFpRRh{&nlV)a{BAYIjoEXtocQLhuRC%vM|<>M{CVzVL0i>=L-SAEiXW5?n3|
z4Y)HGoUb3?5BG~{C=3iXm8`zG>Jv|!yxpq>Pb=2ONbkmviM85Yc-
z7K2Wv8(%l@Hc0+HTKQM%klLfeOeB8#%w6h|Dy^5oy+4p5SRF|WE#K(7)J70EZ4b2c
zQ6GGJoV|>Kt!^1(N-f@KU-m9XYi;qaH+dadr@cZT*&o<46YY6EA~--H@JzG@sOej+
zJ5f$d8Ds3N>lmWO$mghw)}By{)2po>;iEt5$2OK2rWU0Iij
zh^`mDYnGP>vd-d1sftdCp*`#(z7*)w4K%+8tEO=fr^jJOYVjh5A1c50$|rG
z0S3H%>*tWtKrV0vfdgY-{_>79NEI#uBcfMC7-hcNVE@qLGsmrJdxafB*vAn6C(*XB
z9Ylks!-D`I6ajiqj)7Jh6oy}o>*6PA+4kJpCOvk36^#!uw6nZ+GRjw{`2CGIsrkJ4
zev89azSMn;q~_x&^_z^XCTso|$g_N1a%@%cYgVlxNuRETEPyBE{E)jvQjUI?%l8{5
z?H*Nv|2jYy7b`_Z{&=@E7JcX8i&j9gwsJ4Rvd0?M0++
z#BF>nZ3O6JaSUd3Z`pk*qp!mo@7lo+WPPW28Qr6cNS=j~OA)`1eQ8Uah4oa>q~_Es
zBW!#rB)oRlc?q={vyv$E-h7#pCv&H|r6aWue|5VB&F0{TfG#175kpq37z(eEgj5r0
z8zFKP3OkhFqzan@TP|0m?b63p;M39$9f{6|9+tgu1{~_PEltN2-)@3GnZ`(RfJzTP
z%o|Gt?^8y+_=Z!BG!{QwGzvP^Zt3dK5A5Q?{6y_X28B-E^+c!)t*mgPscg=8pM?x9
z4Uj;Ta7rhTSk1`c2nr_dMg)rv-zCR_GURadHaP@#?!M$#*>xZvRA1P&I;nA;4v7R6hvnc6zr^0n{u25N$NDf-O$4
zbj;XkkAbPGebVQf;(@TDGYcUxEN~2~cNIWMwNZH;2+CJWdv`BOgUc
zfZTLkMc3ON8z+!5Xsgyd3vu4DgvJ;zw=9J$qV8BWG9jF|3ZOx!VsH$!r^}c1dIgh#
zwWrZHTZl{A<_Hq?xfDpoTNjFa)Rl5$VCjk#;uYSFlUP60MY4}O0GH3$n^MXe@>m_&
z;h2S9hW0csZZK>XdMsy{gFzT))U?h9SCE$Tkwuffd8sb3OIy47o5`b=Q_VTU%BKV?
zDId=0YUt5)70qoT4
z(Eue^SxmA$t#;A|2JVFeZ(Hc3`m7AYI;QNe(9fT!UWU&l9Kndns&Q3%F)_eVLKPs<+nE^A&6kSz87~s8D3*P
zX}%%MC_zhI9@xlClXM&$55crved;TIovA!1A_9vWZaisjTo6$4>l)G?I+GjU)AGAvARvXL
zwv>(>{iqSH*n1KfBhDW@WO!qdE*>=5I%YW-q~yzy*EyxA=VZuV%;
z`wYwB(v86XALD^Hck8iKj`mH$0D;jsbZz8Xpp?@mI0aQbs%mzwqW%`j5%ksQUXAay
zX5(>ZJ8e$;??R%(TNGt`mOhR$k=fM32pQ;eVf>Z4w4>gDk=>)`X|qXwS(5GW;*zOYH?|?RQ^fYo
z&#LTLyZr+DXM?(xy*Aq%kq0H#H2RFy90xzF3JMXVQD7SvVqz65gOg
zIlY`sUG$D9lde5(u&b7qmz0J1U4Ps4)#~ib^ji9YDZn=sO)XvFwEQ_*jG{hw+E=m?
z{pb8K%+=y1s-L8#3jPsuxm~X|5sF+@zwy+6HY9!}nzyNm^9vQpVvH6$A3N#nfSRHv
z==j#>=utO2++HE(;#V77WS`XHd-G2aEpxq<2`!fk(C0q{8qx!BZ4Vr4pCiwwn$5Lwp{Czsdu^vu;i4G*7-de*PgHFZB7+M&PGay(r+@K({Vjn*Lg
zedP${e4w6sS|Mkrg(x@;hEaTa{%FH+LxA*#0aOFn)&iW)igo|UOxaL)wgb|CUHpBt
z%8T=Oi_W`r*jl>5yGWSJ3ze^z=~{{UVA%IRON$m%pwhIe7#n#D)gy)2Cy2gkxu$Wq
zrF^9(KBD6`wJ
z#=*C=wWv)}@ihN#%_ToHR6=Dsz0}oIMhbHZIZzc6lc$&OSZ_{yB4#NS0DwAjtr5JwAPdy#r0V~B*};9P7yG^*9L
z=6sq`oR$5NW6tEnYUBBSTgr+z4I}$s&728AoVzo0U$btc>0*2o9fEdmWGp$SKU35j
zMo5jwy(Yh(&|#5vec8jGc<3IHJC;lFcGJtkafn!qEvS{y=sh*Y-%P@C>r5^vwk5nt
zMrqEja)jgozRFSWM4jl2HJj8c`vsqa!dS16OV9m+GK#hXx8sXi|)UN5vg9UG0B-P1adqj3>lD7F?&!yrEJ=^kR(Dt^drV2wJ)WxOv^9I
zx&7^N_IJN?u{3vFuyRcK5?wAL+~h2anK^h;N4iPBr+BtRYSijXRX^J6dIY&z?|Yy0
z0LP-L-ZG<(^*z;f2yM3aXN|vk`56o+rOSxv&=^$@FY^S6fFQJ2h21sO^T@CB*+|{p#!44#A_B?Q
z@DT~|5OZ=VbT7{aa?glN9)E9rC%R|JZTt=VFvySb7mZF~gs?M5Vt`Nc(r{Sm)#W0u
z!{u^1M+@k-mrciV@yp;p7@@;&8!gQrbK%AzWAJO%l5I8
zyhr(LAoUamcSh0M2MyLuICMwgo7~6c#_UNce2R+vP%bNiyiDxmMdcFR%_zr_#eLyh1@V|!9
znvi-NJ`ct19QCu0(B-SL65r}XlU32*vnTLcPOk7V9d96@_m?10Is$n)_}N
zv@BIiN`3e7$nz-8Ct#0saDU8<54q;zZibTi>lLuF21k~6TCZn}W(=rj==*O6NS$8k
z!UHK3hMX4R-G#meGZ5aO!VQj)g=uvW#y9Y_Umqt)q*ik0N^*HET#T=YVjKn!D<4ww
zlf6b=5hWN&MD3zB>9iD#2RzW5rKFQ|O97j7Yt_~o|6ZO+er0#de*g2&eCS(}fm&M_
z;XXgeu9|Kib84Hqlfu9;IQE~gsyA#fvRM{iUwzTG=IE8qn#lgApy6sN=D9QQZ9{@9
zI%ZFK2&aeervy*qh~A}-ZyfwSp@PVHprlvW&lj^CZv64I&v?yvN}}D_@ar0021;*$
z@cZ#09FFD4WK$p>%^*CJdd?zk(Sj&A1$sqR(47Mi!-W-13q`|H0Qm$TQ{4py_
zuJMwgP3o%mbG6VsL}-9Y2;WK{nr&GB=_Lbk>-F`nuv(rGouibiMeDggB+9CunutT>
zCiwK8qcPoR7h^x)MCf3-(yuYwIsw@j-lxI4i;~N>m`k@0Z*e29X7DK${AtJ@?BwRx
z{R8^x312}e6d_eN%6}1gWW!Lfu{Dilkny@UBs^n1%;PoQYKO}5)PK~y+
z>7tb9W(~K;^ugrKas(TenF#{+S?>^kO4yDJWMJhaFPQoc&!>L8y$RltyJ|$F2b31H
zF*#jG5%#3+_vr-M<|-B9hPJeKNA-=e&k`1o^50Qf
z@sIql@Pr)M=9OPZVK4Q~gKcay>$HTnCapUjXT17qNB
zYN;nQKf2efefjn$OHvP`MG@iV)jdJK<`Z&BTjvD7KRbsl?UoY7V4N@H5USjnKFO;#
z+b83lA~0>+NyI%mZ|nKVjFbRU7FRsve%v}_ud1Z
z8Ll{tXVekRPi@#|$5ZogtBmj~eiyQsHSm_@A%B~+
zOs>F({>GeHp0Vpsc-FWQn;){WGSNkUUmp2XRth=>Z0*n`Bt_+(l&N?2C5>2<3|kaD
zj<|fH;?lX_9%t!NQeCEx_~r47U)WUq(S3bkZT--usxU!Uk=w+;eJ>+xTU#_y&(atQ
zZ2ENJ{#4k@8diG=R!q
z{x!J18s&IofiyKjZxI~eJo#J|?oT4h9I=}8(du7w&!Kxe64!ARwL*S%wIiQCi?}Z~
zp5M%@esvdh(;o%7jImbMKUeW%+N;=vpl$~7^Pq5+dmjfjvKApP+xber={rZKYF5s-
zcNkX(7>N<(}
zRIm8Po5cWGv7kt~oDuxB%7sSX(&DrqLU8og9#;g+d-OW(O;sMTQZ~L|{D<(Z#&REr
zw$Ca$E-k=}GOh1xKa~k5jv*`*uKcpqTQjQVO<4Ea^?hF7$W9JP;Ql+k0IMhZ&Q^EL
z$i@9%*#fi7@{W}v8KDwL^HpAlSHjYrul1i}#r=wb?g=G^5_wVKFs5OE;_BqVeYOCZ
zuEn4inH?5H4K!!HDqrv43(sI&03{Ro?hN>*v&ZCI0X*Z6-+MfoDY5Utv}$K{)Se|JaCRI$wyDJZHyS|bh1wRzAdai
znPFEAB?bXO9NPnSj>yz5D7rr7P`sx2kmsG@kjL)p1%x%0G3r{7_bocaFd<`sm20M-
zxrip?p1C65xf`d!lTQf`&Ja0tdhl(fEc`Iyrfx00yH7gqg}X}x6FmBH
z{t-hynufs{#Z)Ug^FYlB`?Fo1rYTvO?N>#moRxxfa=FF285w}zSGg7B(sXU{|LJ^N
z_4EJy^4rFFI@_;5^Q^zr>?<2C@&@K~b@r_6TTLnmGsHF1$e!W}r#qc`cXN5lX_Y(*
z5_^NCSR1qaz}Beu)0km~EnbQU$!dw=-4w^?c$4mD{LvQoz7~uJN+QobSG)OMP)?+$
zD+C0T4-OX_No4MG-N*9Y$7Zv^9{jMOdLalUa*F?bg_t~@I&j@;L5eQgd4|eAfAw&&
zd0_Xh;!vkl$nl<(-yk@~xh+;+&2s&8*UNAH%uiALQ5AhA3Fq^^408{d?M>yRtMfZ(
zFFQL+w!tM^Pa5y1ij3T`1?lzR5M8c3wgG;m
zab~J`P~@0!wrNG}#vqH=MfG<~UyAXH-4ScnyZ%az_S}=Q+queYQKn>VgGx#
z+x~m^foWr)!-~C6-9;DOX>qx<)mzJok6lBTEotgkqaBk3T(5SNrC^s!*0f&8W-fot
z%y@r~Lz&XIwJ_uOzi`xC_sXp0SI?0g3yFbW`|CZG0U?p(2wzBf^6Rj;AO=1%zU7T`
z)mpD6tGE#xHb#Eu65;zVhac{IWu4)uy0^WmVKXP4Gt>AeJNQVT!DH1>>~O~_UwrdX
zONn`B%FACalO)s$tb+rQspSbLcS~13T~2)U%ICxM?;vg+%?e|wfA4k%ac&vr;rl86
zTe(Pcw@A%4p8*a53nq|x@O(}v^Z0k-Gv0w#V%+K>Nh&bcEFy}5IXD!ven?Cb5qW*%
z%OGfw^yT8qYWE}0$~g0RQGbhpC*R$IFM`Oq*byYNS+aL$Uh|lTFJ@FU9PfSD;)TZE
zOF%jcHCK=aJEjirQ=3~CT~~fX;fpj@Jz8qawm2OQUd3xp(FkTX$1Kb+eqp*fF+TBe
z{FD-6Ku$Sxf9UP>a@};tr#r*nes9qWdcsf61og)@lZGx_{6@VzJ3a+RCww=Tg8zW|
z$f&hfNi8=K1iJlw5S`q=xBY_kWgY!5Eb2VgP*Z)f_eku~ylY?o1?lUN1lo#$~a4
zG}echJ@bb)|lRL|xF*3%KdP?4Y?gk$37XUX31*$apKa#h~+oLD|@QqtEphyYgX<)2dTf3NBfIn>+=A{(B$7~?=>me>`9~KeY*Jb
zUfH(3-FIl$ycgs{gCHIE(wCQ-=>A5%_9`mo!|sz0C*+K5gMp33^y3nB9H0z{SJdlW
zL{Yp_`y>P-G&$WfHVIDBjInUqKg;ftEF1!yS&JI
zWxkj6S@3y}a&@mif5vPWjC`G2@7QOKJcp)fZ}oAHdhQk@9cBS?xGPz5&?D9Sbn}oq
zWf9`hTA(++)(e)EjEqb>o$$Uzc>^y%tr{d#s`+Kfudh@I+WE+MmFN!nGUuq&X-jYPk>vh%2t0O+{1$uiy`Bo?og8exqgFFCqAt4rONPV#zF8J%zHi&^W
zZH6QjB0fNB!+AXI;a0IrnC1^EAEabYZnQT>Hb%^gT8i#slw96>vzvWKY`ZGwtT*au
zN=x=NSNonh(BlXdcR5XU{-&#q&q0<)>V7WMZUibyN(Lx?vi|175lO|qUD=56vRv+}PaDC1leTO==S|=6MA08KXqlaH`#G1ZcVHuB
z2_F4)&XT(G`!_|C-E>)uE4`JJYw!#m(&`OSTU(60PI8%4iN2EV`fBTU&>(s)2GpP7G2XuB_
zVIBulse%;^!b4h>QNPnXy2vrr5x<;{O)KVBN%YjrSE!5nDC>-*ShHLX5?g+34_iLWN1>QMc7E
zX*J&h+lZnnxH|ACXgTio)9hb}M0Ig<&DJYEco5bHtG}UHvS#47D7nYI|5;I0AYtuI
zqh&h9{>cQff2eH%x_h%W<yyj@^
zV^!k~Z(hS;o_pIJwzrxE^%r_OFkhD`DRN%7C;YC=*B%SUDxH7ntjM^i-+OB!k%z`d
zpYm2KhJJ!i;vhB7XL;SfRFoo~d`;!p`3XLshFIsuw##JC)Ty)zWbh|@DCH9r&*Q(|
zcAky!RyquwOKPsn*SAz?C)={T)=CTfn$NB-@;Nai7n#sD|Q@3=Akx|54P}Py9k)BBT
zXpBSdi?Fs+QFpOK$pv-t2bv>-8peR~%u+X!alLZTU{Aa86nIy+3%U31{5S>@4N!8A
z*4$O@SW?|LARow?Y}gN(7l?~z@78@NVFS=VR@3^?vjGU9*~Y82S2W-+
z0LH|bK$g3Ad9S%SMA7426$p^r2t7W>k2V4(+|9xqu`6uc`N#l*;PX`*8wM+kfKsIL
zaDTF#-IP-=PG#2hx89W%9OOt0*Tr@W4j{imJ&(JHLUCpa=5Fqt!ip`o9Y`+l#qu=a
zZMz=7-Cdstq{-qNH+FXH5}b>^?|FAgkb!>t1v%|8ZMMC?Rpom%#jOjQovm3Hd??h^
zmH7OfIATIu2jk9f&r7NrZY|qE*UlKPXr%qY?4r1MU!SP7j^iU-l*Vg)MQr=^mZv9+
zw#h9QtAlO3e!7a}AD?qTKXK7Pywe6_oXHbpVW%UUeLCMM#Lp7ThfbSPEM5DX7jzfJ
zRo}lPh)I@O_YoL6X~ho8m~0NQ-$+TUoYSX)A$6w(CrG2Hto(Jw?pGbPr)2R*P^
zf%Roo<=pk@(H2J^F*a6Ov2goxG!hJ~l|ZBIRcOuJ-cQDUS=hD8J?nkC(2L?Z4E1*@
zJ51)dbM2en1S|c5REc)&DU~Ge@`*vzJ-k}_0*mt)Fy?Xl^x^PD`Dser9I};J*@1Ml)ve?P#8BXHHOEPsk=X3?#KL&tHwP|UGq1r1M3YUr&kr(f8+1p
zGgV6O0m+0U)*YN3f2dKpTj0PpNtMf-QA=qH(XwBURnxIOy@p703Eh(_i(q;iNU#)9
zcku=P8Qr$)Nb^y9CL9+~-0Z*K_^ky}ewgmDB}iM(O7z=swoJ@Yu8XbWMtD|S3;oQ{_{PHYSP^u({owstdWZz{FFqPhE`XzJ=!atga
zJSgxs^w`PE_-A1b1){(GoVZP-d}3qR_iG;topx3idRd=W`gI#U57Tp!Qb$#W!{O;}
zxDE78mRP5vAx@M3I3gkYn>KA)_hQW$BsNQ#?8oT}Zq81gFg+#~qJ#Wn2!|Ju+)v?h
zCtf9!h?4YDE=4?;pt5Yy0bO+TUTved+MUQjK~DN###C0RqhD5fyXlynB+qu#5O|MU
z46ng+4I664mE94?D>x19*HN8W+3ftD+muV&s3169Y)-oG9iBomE0*6?SS4q{!Hk?O
zeX+6A1L$x$5)s3j5f*NGz+bPH_+*SxWspe>8PM#1UvE@#y-Ix6Ur%Sa_d}B9k8!jC
z#~0>^2wC*yD)~DDR#Vg4{i!08X`RSLqm?3ZR6Pq4y=S@lZ0VnsmEq>2JKc*Y_s#|K
zl9UQ+a|X>GFO|DY8oCj>%>91i2nxP;Mga!`M=V8E_p?|LaLkwCb8^3)r1U-)+^
z=f)z-&P{DJ?eO5r0*h)o-BiM=ueS>&d=Qsz2{YJf{>q=_w_EczFOU4}I?w$1jmXIZ
zqZZEly3olP1SBi9i-e^pY3OSDtASVuw()0}M0qs1Usaqu_q^=HXXXc66tMKR11K!p
z{pVq_q_O4UF40HR7=k=T{P%za}U1~BFWp;8uyZas#74*PlRD;7me_PvfuX%z}%
zte!SAL%ygYosNV3FIZ2tcPL!XS8o?X;RPj|ACV>4gOW16K5Nqd=CC1p`VDVkX!@&J
zx}1^^G3w3>R%Q=_$GpJH8Bv{Js{^@0y(h44g#x^yW8tmJzs8=f9>7-)i5IhD%B$ja
z6G$EvR>>NJZ*NYcP^Gok=txEribep^5lehVnT$LHmDT1`Y5eQnNAoPmGB}smfySA{
zaN3F{7HPkh-n_HbYJ|dE+;%e)Nh$L2wC<%}n9?}VbTkvWyCE!q&NuMnLN_vgJJ}sVhW2%3S;P}X&(NXt6t%S?)A`clV6;6e
z%2hOmf)V8%sKBj#-))iNIul9_$(UqeR7gWu?KQS|-G#ysYp!2OmAc+3>u#yUpE#)K
zTIw~m;44!Hzd&+Qx?}IPrkkg>tY1E7HCkT#q&Jlogsno81~=7F@c{|Zk{74_?!|Vw
zXSue+BT9pOr^-l_g~pkix^0Q2?pWx|5B!_>;ZDR4I