From ee250d35b8476d4f43fd127c748177ff683a4044 Mon Sep 17 00:00:00 2001 From: OpenTelekomCloud Proposal Bot Date: Fri, 19 Jan 2024 09:48:16 +0000 Subject: [PATCH] Update content --- .../images/en-us_image_0000001197228903.png | Bin 28557 -> 22049 bytes ..._between_security_groups_and_firewalls.rst | 38 +++++++++--------- ...rst => firewall_configuration_example.rst} | 4 +- .../firewall/firewall_overview.rst | 4 +- umn/source/access_control/firewall/index.rst | 4 +- ...curity_groups_and_security_group_rules.rst | 10 ++--- umn/source/change_history.rst | 12 ++++-- ..._immediately_for_existing_connections.rst} | 16 ++++---- umn/source/faq/security/index.rst | 4 +- 9 files changed, 48 insertions(+), 44 deletions(-) rename umn/source/access_control/firewall/{firewall_configuration_examples.rst => firewall_configuration_example.rst} (99%) rename umn/source/faq/security/{does_a_security_group_rule_or_a_firewall_rule_immediately_take_effect_for_existing_connections_after_it_is_modified.rst => does_a_modified_security_group_rule_or_a_firewall_rule_take_effect_immediately_for_existing_connections.rst} (50%) diff --git a/umn/source/_static/images/en-us_image_0000001197228903.png b/umn/source/_static/images/en-us_image_0000001197228903.png index 6ef66ec65648eb0cca261df840df2c50f20073b0..a587644528eddf8325e286ba61e8f2701d612583 100644 GIT binary patch literal 22049 zcmdSB2~^T+zXsZ1wav74wR6@68_g-VmLr+FZE9*|IS&~*B!UBhBhp~H_tv1Y)N-IQ zQ=AADakg{^l>?~=2&fq;2I3Hk1A_N&`}@B0oqO)N=iGb0bJn_R>0%-L-}(Iw&-48J z{hX_V@@9?AYu2n$c0BXTg*9u|k%8YmKWqg4a`E|t!@$d0_yvbkYbv|7z5;I)LhW4a z)~q37m6n4x0Phu}&UnMutWjxS{as6qEV;U7&81q$U+gZ%1&9XytAqPd!_uZ3O`4Og zhB0}K?rEC-FD|s4aUYF|D)mb(eRyFvDR_@>mJ0E?C1um2lwTrjUffG5&oqAk*8JQ{ z{AI7E&(G@=*7aE1r|$~a(P+4HBYvSWptTE)Er8ohG$ZE&3R`id=OJAtR5f@fQD+SM z{)(8k(eZ&Een+Y=@PcTM(sz9D0;UGr@A!bO++LyQ_@E)E?vbA3h2vYu5A+-bsUsf1 z%b+pW33y2J|NTSSzmbO$AaVTs*fC#KurAd6{r8^lCd%fRX)CihdEfM?5jy_o*B7X^ z?2kzI@4Z`Y+X`Bqo}R&?m!IFrz1(5Tj(G5WJeyuB*KJad_&(C!n@+ErMYWue(Wkcz z{(3A5B%i^i4X?yXRU7g<7lV@dA z@Fw*r<<*(9>%@E-b|a@`ZFX($mDMHbrTpmCy4V$|g0=qku4(MbMB&}U1rQJq1}0pnG?hGMI9?-#LyK~CpLaEHcw{x z+Z@p6lbG=~gP;=ScoH|J!$6#st+VI8MZ~f4eCzm_x+OuGktOY6bHP;559Ce60O0%S zTBT8qN5_k1cQSq;h!#n~MzQ6qga7Juy`&AQoFLNfP}skDWit-_C~!SjJC;in6C{f7 z6oPAR#vcjmpK;&5xj5PUUi{^L-bDo0a+e^^J01Vp(%h9(TM+1vd&lm>fjZ99ickix z#*>6e;n!&AALw1{Q*o)Q2#Pp*_U4kty>J|Ho7vosG;{9V4V;}410_hAPH{h`aY98D z&@Q@&r#jc=ADJ`rMz(Y?oPm)&)p`=;JEdT#6n}obpQawQEk@ZNUnYv-5?}q6a+%$? zwM-}U!^Lx2LQgCSR@YVEzm%Y(Wdt>qcyWBl6G_zXjqFD3fN_j-KC)7W=x!S-%_9tz z$cZ+tkD{qgHpw=_h&Is?NM;nLn{2~JbTd~Enjr}WEJ&i)PPM~kdHZwjJ_;T|=JSr4 znqgD=@M8a6Fb+xGSD3;{XbGdm=Zm3I;5=y8z>?vdjdhpoy_6GnwheiCm4g|tYF$~r z4*B+&UHnBvyB?BDQ$ZxZR}F2dS=T* zr2JjN)rr4#rj;u$1x6s&_B8_T-)&&K41#|D_{(mei`yq&w&}cV^Vj?w{`!kW_+V93 zqad0>Z%KEeJe|&KuuSVLtA$d#frYUoUuuVnTK};q+NDwH8b_&4%5G+1q>)`_v!vjo z6L%jaG$COF59{(^^94XOcdbwZwiqm!+bloyPjBb5<<*};m zjwExvYrbl*A`8RMp|pbhNXKm6(OjP+QYwMx=}} zJyA{T_I2(J0Y+YrF#5FBX7=MWPj@BGGk*HbrqCi=KJAdpqfI(-my0t*ZtqX1=eEtb z>m)CXc;8!i@0NT_A8Wfb?ixQqq=t2UtMQcmci` z`JvAZ)O^8_!#-Ywu|nqgWLuELy`$CHQ60kh+}6e1_P~|7z^zj)(#a-d&LCc_^SsWYT*2Be5lrEqJbo>ZKGg7OvS;F=o zt>wUS$xWXYW_XQ~zCh1PU|MFcU)BUYys&e3X54LpQkp zPV7M7T;$vrfcp*Y^% z5n!bjqQ1PlKjJ3;;%2y{ll?+wnKUAiMOo@AMXB;rHDN5o@ie0|w+z-kvRa$s+XlIc z7Q{8lmxQsD5*Z@cXMSD4`ibYg8yN^ED;2CF8N8M}^xnnslXhdSv$|3fiGHKLBxBA6 z|0dx)UR(+<9RKD$Up>>NWVB^PKD;6wspl8uGSBoD!57*@+Ob>OnJwnSYR7l|0{Nt^ zME=xmfO>iBC@Qky>wy)sfuF($l@?0h%sGITdMc}2QG#&%&Di{>R!C3s(7^t)m^;Il zoR=_-Mk1*LhZdlfco}XGae01I0PaY*L3si0&jNRIvZuAXYt~8R> z1{bg#ayPztc*E&j7cv=XybA{LS8lsdp14+5sQ|jW!peAo*mU|(22>GiRqNV#dQ z5~i6zJvCa@E2${5@h||x-)m9-kc_d2;OePHVq43la_PV){^3?>W2;ruw-5T_C(*6) zIf4wL_`rPfTbggnvhB?8K?@(#Qb)+>L^a#x5v4nPIx+H#Qq@o}6diMKw=dew7ws<8 z_POf~tg(IA=BYPGt0Kk}xm+XeuzL_$x!FC~d%ROkRQFKAB4uwKb8;BmQ@8c3NJs{f$IF^wOpIJL54IcgZy4s84#VDbm(C!P0n9w=ut z)_|MfWhRM=rVVQT%`QpeNl5Oz$8(R8hsq_q{j!{v52P=VZ6a8?-bIv(8do zS+GfZ!W_kxvvG-2&9NQ~5|g$Oy?ufp7Z6gnqQ>ppFM0Z#>9@{kwwiDggcZ(ctiEF+ z;zXN4Y*_2;{uVp_Pg6V#gwo_t%*eh!w>!aq{8f* zOq5Oa;B84LC*?MG9_feQQUcjOhN$nOJ`GGfJGKLnm>-o}Yj&Nv_)Y6t_L9WQ{h5C@ zB><%PQ*6wl0ZgWAd8XIygf+4AGMpg^!Y=8ChmY5WbI{oxAH?@-c#g@`k~wf~5eCcN1qog3NWbSec zc{o`*u7+4n;O^p0lC`O&h|ae39jF^1*d`9_GxN?kzHY# zvN=)-721=H${;b3^yu<(@3BkkBcwi)e6t5H3e*9=zwT{SRPM={kM>(dn|ICPZyE;O zIrdXsc-$WfYMAN|Nv!O94^RFwT)MIL2pn*7jYbVSyl%UX{i5ll4Whm%aHuskq`e`2 zMK8^M_2;{fs##DK>Kb&;&wJLq*YbJXKHoCmJRpARHdt9gYr&IF`ww@Ep7V?i z_Z$KDrq<2|Wmt!zE8Kplq`IQnRoHk_-CEUrUJkq1W+Th(TK}Tkd#&5hHk9VaHzw6x z7Bkj_)BOcJ`tmMPVauewbjeh=&4AC6xBsU1bv+QyR4VUKz;Y|jI>tGT@4Z*EHbY+D z?y>%CzeL^C9EU8oR1xjy4Oh3aRU>b#O|Yhb{R9GQVSJzAo?0iHXVC&y`p07Bn_8J* zz7{8%1Ap9BM>67==~WRX`Ay#T6c}v>!sfa5dSKSrd1tHnrG(w^_mDSU-l~qhn}ECI zr+I*K%IVS5U!*Bb<|SwEn(RXQly#<=D;TYFL#ZqoY)(Q9l~BQ3#;9(Jf}G1Low*If zj}GW{`$n=%*s_kR%kSd%U#%5p@%k-X-$QnZkTwSe)kbhNt6!~#*@P$IR2EqHClV#I zFc)nP!H2pI7&$h)2CgkB=*p273ZgJtlNCoePZ+JD3c?GJOl=N)W2;r#j; zO7r!JU)y}jBvA5>7voegrTkeQvXh|Q$moMja8;k7ly6?b;1;Lrx?2k(`I+KQ$ZK=R zG~np{YO=sWtYwHlj&acnV`6S7^bA}1lA3 zb(^E|DeGbks$(pZR}7r+`lFkDGn|b(ZFR0W>r&pqDTF!2Owmm5%9r<wZxTq^}j=c98z>a@xT z(#Q6LZYzjUBefd%z(YK|c_&5w;kB9sD?5Fs`AU<-$RXmCl(|omPGrwN)SCm$v)MO( zR`|Ux+#R-C-Tq}`n6kfm_G{vY==gH9N|_{Z6Hn{v0yj0P(NP2;zh85$?$L`mzyML6 z-&<^+LPhc?{gk!JxFk)b=VsFwZB@nN?si!%?ytLHjUo^Qp@(&SpjqTBeH zd#LjD=*CATf|ZYJErwWrLXF-7Z|Zca8P$eb#gg|6k2is9`I#nyhUhH?q1wHwhyYT{ z^OYkviTTa}&P$;IPi=WK?}qn|HQV9np>l*Z<#!^Y43S}Krt8QKN%h6su^w+Go9XF| z*N7CAuQB&p(@|!BW@wWc(MJogcgjql(u4>K&w?k;vADq>sN~m&Sqs7(5^M1U9zQRx zoVuC)BmI~;R1F=$o#o$O{7A0V)YM0@JeiqDI?<&Lg3aX9Z&NcanJ_g@ni4#u388n@ zviVwDN!nQO6e-UX+GhxUg+*G|3O%R=Pq2DW)AkB_$=bc!w{6!8%UpB1Q6r?pIV`*% z1&#U;4OcbTPxbqG@<{lN4{%C2t*ju?iW(kaT|kzqS@Cwf$hv#!?%iBcNV$Tkqz@yT z=z#Q8~jkSR(62+$_@UmmD^ci7111a(vpb~T77;oxR7j42|_RPz%eU6+? zV1L;+(#*fm*PQm(JOlZN7o2#gQ9{A^l7d2hQpmO>C}?5cz%c^_s?-wHp_JWc?~)Il zH3>|%o&MHgG^JJDFTvIp5VxOs>^$~1nH}vX>5uBzM{vkLE)sYlS}t=_S{e?_&6S2H z8V_CMG^EzFKj$&UzexHQ3o&-NTKo2kukkI-|F%2#jopoA&8%;ln{gSJtF{E~ElSNI z@;n~fi`Fllr-9#|FuU9zKNi0{W3rfbkUO{sVbApgy&HIu)vxlk4M+g?u#tZbd#53SUd`0`=F+43;DwB^d!w=idz)Y z=>5At)*iGzy4k#jXXu?68#_^FAn8wj%=Gel1|7SPR0K`%ETn??JtK-*X*?pjCk`Wh*i{x-70jlZ3_?5GV5A0N3Nb!?Z9 zuR17b9|dETD$_c+->&G9MX2liVC?YeAPj%5>74ZZ_T*i6(=3f9dt=Dvd};!{795Vo zWVX1^ndJn-YP!TtDkKo9m(cyYIbuR%4Fny4!^2CaZd!Vr4y3$`%h1*`qJ9FocFe?= zuMmB@>;3yAS}(`)6DavlXh#UydfFZUc(kc9^)vvP0Dxrg&AoJnRT=<1>HRlM)BhfN zdu?*|YhU~CI}WBwr&@=v5IdFr36W5psSc%ell5-W6oBZHy$f*On8u3_497z4d(BO_ zPVj)&MbXLTde9w!i{WqZ)8PL<`hdyXu>59|Zd1wf0u@y7C`~6JEN)>WEzLnE{_5X= z0~-mee0jDQq+JmA`S+1fkaS@BOQxI3LAL^}g5;&IBacH1)C*9Ofz=#Wvj8n$^o}37 zqZ%^$Ry8p1r#Whr{W2gwHLnUD||N3rb#Ih?*Vm z`3okH?THGA9Yj>q+H+R%kc00Sr%Ir=MTJ;fOZ^m|4?HZWMW1CmM|W4YMdm3i0?-Gbpko~%YnDjvH9CkZKpJ011%CZBy_)BPVH>HxZ5fe zG2sj<*zsh?u3mHSHZ?i{z$}_pDjNi)-Xj+5*WT-)1?Z(dT)|xZ*b_*Ih~*$-#a-?! zBeW!V>Tae%2G!d1?P{|$!a0|nODaGPyXoKH3Qn34oO6i)G~#_84ZwP}??<6B~T=sK5$v*YC>Sq&N&@x^+t4(#kRTzgy^7a+ZX z6y;x;3(i-HyLDtree=yn^OUM6XEht-1S>*!ZC0Btn~qHJra1jpWQgjmv|*^-f}Dy_ zu2!sZf0jku5m67eLNbAM83j@e_JM2=x8>Uh}=szrsQ(E+uDLBg#OD%H&I$Cm>b@%*OI-&bwc@ zoHCN)Y0|{6dASm2_XTL2l@!WztIyiuerTAudDyFy+cz=%CVxpr1ke&KN`2hibwg zyInacoTh_cecPd!`wto$=DgfN*UrR2m4c8*KTeLqpr{dkmhVFC2;iIwbW*N?miW)XL>)%0O=TsZzuHgXEHfmr$)Ry8AL5@)TemhtGd8%b zyEfS!Vl|Q_;obq-AB(3HYPZ(AfaXH;l}}reiJzX6M2=`pq6GU|9&NYgw@+ii;QNJ zEeUbDG`wbgV#nJiVCgCp3v1rfHpeyb3lc-5_&_sm$XWD*s9-Ptx`LBWaO=K=Dt@v+ zq;Rc3iOvcOv>q-HKdFt}>484s!Ry4*vC1i?T8I zH*ap~wOj?N11ZI>`5LRhRK?NGd^l?-6MURvxe6peq{gwsy1F}ubvHr!rjB3J{_Zi9 z!K!bdNAlWV*6B1tW6C?;&Qm8pOL>>;4>b6FM>mA4-6YhVlge5CNocL3%wMw8f!slS zr8!qf^xdi&KCIiAK83wK`eZ!jyW1&`h1(#7Bd0`CaIAN%O+ehpoyF?(xoJ7;=f6GM zxZQ}6K7p`V^$A6H?w#vMH)=WI6Oiz=sHY9RrRD>=v*zm@3z;?|i_ZDbAdCjMOO=)B ztt-aE?25E`>dU{4jr%B$7;u#!oB==z1A~q>*axpqMS5Q_+O1hG1Zu6-mMLueMTR#v zb{G}Az@plkHvuMF{AAEWUD$PeI8XM|&ErFHV2=Q_Y|cBVGx!d2cHn?bQb|@@n!!v#Fsr`7a~frErFimh-D={D+q)POmC%W=%mq7@-$C zdLGEGwYsQ$Gu>wp1K`zCJBY`wPq&9s-<#(QA(;M3?ct|i?K5^I@#9jQDO(B-W*FwW zt-C5X7NGp_nmhJKut+$gOwJ|#o{l&bp?SIf9Q;l4;%IhSWD-xa8ku5NAkIMs%D-jD z*3Mt}+Z<%GeXDceY#d7A)Mos(vv!~0i2$S9X?r_K2MdtBi7Q$u?bC8Ek2wEDt?Bp@ zTsE;*YEV|WDd-_iuL*F@;wR}9$2^p4n?*jcT8`FM)b(psMG# zdr1>?L>4`Uv2mPu(_~2xfMv#&$KE06Nt?ZPoT=NkGB_+7tc>Cey&rw)}dfMhqBjWdq@b+|U&q_KgOB#ReEn@_#2z;RqGfMXnd2mQk` zVP&p$a=Bdzha=KD4tyvT&d8?FXo+s7LDdH@GZy2dbd^$)w3ce?PZa8n!!mC#b)M2B-G-%{%kHW|^G?hi4$-Q{kB;XP83gygc58ab$Ah8V=)Na*Vu2Kq zV571Q2c&@mW3GlczRT)$3@(zTwc`I8eYCKGtbzr}7m^^{BjD(>0Zavsg6FBDd@GOe zcSW?Kw%A?AuTnNkJ)+Oy)UQ46(1k6&O8&o!IReEu$2y)VXVz;zesIsj9$WyQStDCS zY0hQb|Kv$RQ8K!UwaYN}iEZIld?F8AZo{G9<{jW3OYYW==&Ma-9T9)7{Do3?0V=p+ zvnxbgtx!9_3@ESv4f;8-wKB$Ju^J?;_V!-21weFbXwVc2@iv=aG}b>P@|aa$=T7|4 zq^sgyXEQ!et?C`ZH*-g_hLK|J`pzTZnJ0|PzV;#-S}x89MN`E-+he}M52I$%1Dg)5 zvJ~GpNUH$1e|d@7{!fI&uhScdN6&iHgB_&`Ck*uzIKg1O<-3FD?_L_S&*h>jXm+5M zpL<*TYaK-P@8eBq8n9~Y<&T(~dAfJz!sY`V%@IUcyTKjNvIE$fpc<(&0FzD>mB*M^ zj8A{7#>pbC0TZYlsWkvo3Bi5B=xqy~>M+ouG*Pz*y)w0e^2qWIE+<~jUE^E=UBSSW z8x`xaw?k&}Zm95stZ#V@m$bj%oWH`OxRpNmv*{%Jkt}3QD-bgv+2^UPEreM6!(d*` zO_Q*WJ7JF&Ul|2mKUyBMML;nO1B-Sz;X4+4Fd|FO+OHj|SJ|HKJU<|jBkCxTNpzXt ztNN&^c?|T!0iy$n{@8;BaaUHy>pJ+}McpddAU6Pe`*r+ME@$h9AZeGuFqYfwAM%L! z16dJ>6rn4f{!YqGHLdi8rUTq>N!pv{9^cQh_y@}|w6ZhskToqbQqxa?p-5JYN@1FF z-#$0lZYUh&X#ASpb&%@jPbq^t<|bsQL1@J7S%(#itZ_?S(0tD&_?~Ajl#mscR;5C2 zgBN+EcIbDfoFWWVaQvr;!?{g4TJ(fh8&gz=61~?;$ig?t$=z>!il!R=T4C-IbGz-K zO)_)Ly=M1Un~gX`=M|D9;L}oPsrTb znm(hfi(y|TMODTYAwBu$k818)YZ@CT^a6_=8y{LCDWyR_MPOw`wt#V%l`GvM43~%4=-Jzt!*s^&)@zO9Xfj7IA|qa_{M}G>74ww7P4NGB zUqat*TX__5$)*Wp-euM^y2`UBw0aRb=2#VJN~9_5U~o^u^4q}Wx6`lJZ|x*!3IFrf z+=cg71}7V*TC51(mH!kl_|a5_%~AgdP9FPU(F&Q3YVx+?$UBVuVSs$icqd_|+q*eu&T%*6H9 z!1Eg$*&&r+NSoGP4gyoc$+*8}v!E)g1YRLLZ&0f1iv`%|sm)}e&(HikUn^XK&Vv^n zfco$!g(CAc2VQUU+Mcz2{N7Vj#z9f|N8ch8Aa!D+BQR!%e$}i|J4p3Tkz{yMX@g%n z3%gC=uAs5sEcr-7djE{jJM_ErN#~qGmqgWjsDYP8 z;2Jw)-bb{zv~!Pi++DikX^GpybGLlA8oP9)MfXFkgM3W{Q~<}=Z96MXfYpF2j`1zC z6JSpRDOWM-065`$5k%4fuq!U&?9$7Xhsg3jTD)8Fh;W+wgX>>c>A_phZO*4}I8HyG zZc2SZ9}P?s2X-F(wEy1zEkBNBkqBsmJyg8x{-+!hO4~)vnwQ;#C!1qM@usert|U%; z71m)g3VX-*TsCeC-Kq$II%L7eC!DR=Bz8hE)Z+bp0A5<#i0`8A+d*8NqYrQt{wtN} zg(ML8cfC&`j!>)zJLA;VtbID^%mWgo#rl zERsP{_e}|Iao7;nUZ3&Ih(AN=5dUFOI}cBG=joUuP`>5fCDTKUJ#CWG9WWQ0Xq|FO|w6#2>}wp4UW6J!+ci-uXG$zHwYSQ!O2` zo8*Ava(&s#@Jd`zu52g!0*;wr#H&@)=k;Zo^ksjmUlGgZxhu&d@fZ_?-_nfyYM@O( zKx;yVtP(VCpUcLzES|k-5o{Pgl&o_SEr4_Ji|%S^$&aNhE!F%$k?%Z-sxCcS+(nOd zM~MU$H+VJR(541LH|Y{5x_p)vTFdB15+`I?V55YsS5+1()qD^7p9jo^zUq^u4S7a< zKP^_a(dSy5z?y5GJ;Mz73Pq?kH5AfSHVZR3QeK{lom9;#8BSCs#6J`~(K11Fm;43yTO5qo+ z>@KYBTv9dgv?D5i>stOp48j~9D{cu+bpbyfHE3oAzIQY1i|tl z1$PP_4&}@wO^EOD!Q%HVHHC(JmQL9d4Q#wIuJa};o^URk_YsQ}vAzaUU00T@MaOi& zq1vqB?t@anB1y2!qSf;c`r$Xxs{N_F__4d}N}GB7{2CD(QRM3RGvHjpThH7#T28vw zdq8zeqGTEPZ2*H`Dy@B1BR&ajhqrXrpJX1J8?`lKF6Dkk7DVvZy_fr4ET!)_^b#|O zu`1Fj%r^qVgM4Qbjy_p=Zb4Vlk10p0xP$4u-7=zJnLSs*$#|P%5i8mA*PKraEa?D9WC2SJC5KJm7hhp*tt01Mx|9Lc$#^aTF9hue_n42joA2ju z#!w}Ahhk|BuYd8PJKvar4sZ6EeZR=y*Z9v`j(UZW5vPxFohl?9Y9iGbSzB?XayB^D zl2thpdREq}le~O32J^co zSQ=FmCBff-t;DDEdCwR5NyTI5jQ+6j=&s1ZGs&2Ixfj3~FEPZlWj5SR_B`HDgZzPo z$jGx7xzi9m(Z!hC2}AGVcZ;8{JfHEMb<54T#Q(#x7@15G(UVwIp(j6+N1~R#q}V57 z=9b5^mud)X;yv(rLEX-=0$O4tHdz!W67KX)L%M=x#SDEY#0I`bD$XN@Yi@>IU(Qus z3iZDaXa3X`rB9-?)Tp9HRx{M24@}rb0hH$j)P!iQ+)d*+UQdg1XHvaeR~k_*lPHwD zoa9~rA)>EQ?-DJ7%O!Cc9SaemEl(o@u&2eiC+pR+w-3Ph#zopz@VBL62=)?LJ>7)! z_xWAP^9iIqli>NUx}(b)4!n!MA(<^)d2aHOE*B**;a68!{F@^DVvV?x4Zf64;pJFU z=?m_2>SfxwP^W;_Qk~ZRNna!vnQ=*ad$A|WcAz^+2&a^aN*gNwv2j;!pAKX}6I;B5 z8>*kXH0x(Zi}$J;qstXPYOi!9{whJ8rd+I-S-$al=k1zJ`$K==FYPdA!iG2j` zv}N}c+sxCMEhS>VpJAtQ^kTQ}n=J#Ls~ZWy?UGglbKMPp0qmr{z|?bzIm{h1&5SlZ zD4^JGjkh(|r6Uo`4Tcr?8A`X&@QAnFYnoO`8GOA|AiPKt zz9z;THG+9P6R^9MYcho;sFzFC8-1OI*}i4#hoz|uu#FkZJ^ZP63*FzM#) zWN26k^e`fzCbHc?kc~ba*nL|G1RibcEeN#1A@eL(W@&ZS4$a1wz`QXQoj5fGlV4VT zNrCd6Ie2DaH_oA!%1DhCqPqf&?jfvo;CX*EbZR1$J@R!0OAK7R@h*U2F97Z_pI&!~ zk!EiF&F8922)U1ZETsd>;L*KLB#gfr*d5&ye|qVQmQY9)&yI3Ui#rK2>&rb!FERa< z&ZMxWPV9q4BB4d+VGZHfE?L#DByCz>YrZP{gKa@!zNSc+NDgP-w1uK;MC`fezhqt!kI1D{fn^`l zT0EZv60XELK=u1wq*J13iDI)mZIbf@ES~ks%njAJ*^M;bv{Z zO%ivtJJ^1^KLW=|xznpS767Gg3c*IW(~{Ya53b|?P7LKx z^lRhYAH>{e%|N!2wu(54*@GpaAW`L?(|{t#xI*q~84GyF<6IcUF3mRp2dS(NsS}izAs?+Wdb23<<^WI|k0qq$F#Tf( z3x-tFt>?M$_Je@tbwqP`f%07$Dv0}{BC_9V^Yf~jxZ3iZn-#my4Jb)qKKE4qyNWrq+2X{`3zRa#`oT1DhQ56CgE7BT6i`O8WUv2kC>CDKuMlzjzIH zu5$X(mkW0|OO}(WgyEtslyX{;}G#D!bmWpVqkV4(Y7X z6xzR|H65}p9)2_)11!dlwnIT?u?PqUOvU(LCucMNkgO^R%Q2`LdkU}aa`|jAEg*oO z9guKsp%AoGm@jr=jiSVW27|UvG`!q3yk#{hKLOFKDGsd2)cd;ox-^%QQlnsf%fA4A z-|cdFkWs8h89Vd?E9n?4L%T5_&N)b7SG(ApfVCO$_}n+}uk)!fGb zec~BgyCNXS!zBR;t0^Vosf}z|Q~}h{AQJhtAGDp>2VaxGdS6JfuEl~f0GQJ}bzo1C z?Is!J7NSOUUV1JjptCxaGm$vT;?qy0oQ8I% zHI*agH`VCXT_+UD5lrH)yUp)x=DDUxW2QLuRgHRl*QUC3DH$y#SK|&WlUF3e$mFaw z>^`g<5G=gV-^)GlDLM#%mjwz9DfJQ9J1leKjo=d|BBpu?)X)BAM&{ncc*eVyMC;LKx zIxPPqp1;(&+~5WBncGf2Jqr>P%k7U~98Q+MA*c2Pi{H<Nd<>vyXDw z{rSF#4MM1w*<|a#uT9}(xVJ-rovs?@-fH<;jgf#3l??$J;(@71A??Ro68Wa!2QQq1 z^xG@0Z!^492Sw|g-1ClM{D%e%5~#CU$S`0l0JLESdq(0TnzXPc7g{ky(1u;0g*RJM zeIuI@%;EYw=*?#zTt5uthxNBr$j$Fo{u~hot}IOh+GiSs+HN4d#$Wl<4lrn|g(dAG z!GdUFYDGRpm~9;{%5NpDF6yd1eWC3$-CsUxvL z%)_(lQsG+9b;(EoKAsmXZwg=DpaR(57I}mnFts=TTSbQdb1nyPjQ>^xiHEO}n=PxQ zfVkx^2h%iRbwM6+uG)Z9Sn&IZhk(8)=BKqTceH8&z6HAlJ?nt}IZ4VH*1_n4Z1qp9WXvgXI1*try=Ft|kSFSMufvte0{?IX!quk|q9_vxl4-glKhSC@|$V5m07oH z=sJDz=Vmw{wi)1|fy*BsH~PpkL~7@|G%;th+p#x@*gukG{IEAwzZQOwIGJ0@f1V5! zkkSO4%ii<*^ZK9u3JfTEhvg~|L$`F&d>*r9i3~r9>DyQ#0dh$2Rg494>DaED5+YTn zF|43OSabAxZ>ZOWt;OM)8bYhEGvBOHLM}W0*e>W-cWUkh8X%bU z-b&eB&Jdpk=}-k<-R^~hC$iN>>bMRY2T-D+D<%U>pkQVI3B*_#dmMXf+3cu}x1gZ4 zDbEx(>g?z)#V1hqa`&Hk<-dNw5^O^83i}eT{BpJs1h`!S=e|jdgXw;|ZK5XD%dO~d zhpF~}F{U+b|M~oFevZbkzKDs={rpQbQ|hNhx~2BdnC7Eg%;4LK*vK6)-vNil+gr%r zt7m}1sszB+B^wh4L`B&F8bFDZ{Hmn*bzDHtzm3Xyo6pW~0=Y&fMWCo*c6}!2#6k^?y+VshLj`Pp;k2f^dIJ2*NRPZU^s69 zT2~=E9ABZboeD5P5q!f48Q#um5U4M+*nS1l*r5%h71&rMNvd)A%^RVw?f@mg^xG9% z$bQq1ck2;~VVBx`G`+%6%HEd~`>n_+6w7Q&ES_&5VDp%w%Z)aXr*sk5INjM$VD+;A zMRL-W@aA3kk=lGPkR9UTT}WlJyYTwQ6B4hwidcwey;Uy%Yo>@8)e%1ys`5~l>Pv}4 zXKgEX!xan?M``H0GogwPUg!XED%5^^-R>P9emL_m#Xz9=Q_3A+Yl5sLx6KuQn;^tG z3^)X-)Ld&f0A~!=pI*Avu$)Ee)~>lm+xj>ZbEkHSRhQw31NT@DIQTBrKulj2cv?{t zv;=iZxhRq@*5cO+0w4Y{Cs7k-kqi`1MI6kyHUH6Tx?;qf$B6RfjDpMyCysNU%eH>F z)%s)_P`6DjOKQJ?4rS`iUD0ocDuaF+`R($f#)qQTUf0)}QqRE@#Zx=yps&szD%6`j zpUuz6lr2}B6Aa*Z`?(bf%ip6!B=l8KqcZuj74;nwbKl~*&98~%TFjfJkPITJlFbB% z+Z?h!$RZND@5;-XTsQqbw?Bn}+kTG1u#$euRG>%sQa{fC?8}g1W4X!AEYxa^$I(A8 zI5<9aS+SItsujx*zuL`;2}MpERFWSycD!IzD>+VnKh-;DIcEdt(B?Y1}^fuD1C%rc~M+F{4x2ga zI|^+ zFylQ4uv(4o^M$&yu&T-Y*r5S@;%efASS_xL6}aY|Feys}O1)wQI!V)Sya!kJGrs|- zainG<_%z%wK5_h6S_lGgWgL7WAmiOAx~ z9tYk0{^l8qrWImUAyPg$#|#|CO98uJ>AhMbB%<5M7kJeTo`EPt@#JdxXn(#1JfwJX zRSa4_ncccP>N=R|W^3U+|3RNHL0>JW_n2RmDHKoQiwmCg=i8zZiYLDo;|j_X0kan? zD2N|>>^=CMF>eUPp^zT2K=za0uu3|4%=bDQ0X?oPi!%{MP19|zgR8osGH{?^d_BcQ zo4TF~6rDXO1yAC6d9N*AV&I#EnU)M_DTd^t4N(cWO`l=kU>YHsDnB7ywFxU1wWsdW zXNJ~J713vO)=#z5XXFY~O!|y%K`F1fz|wa8C)4|uw)&sM4=rs&Kf$vtZL#i%q!4#% zsCv?nJ9U1|LckgAVO8L7#V;^Z8q@%2i;VdfoNHjh{WvvP$k|%x$6H~ZB<=0 z!4<+?!1q$meu9-hlp4}TTq&mC! z!L#MqUox_wxXF5cs?}s2*n=ux6=A79npNivV>}0e+uF#kLU~0Et(v|zGi#teZhEy) z?)p%kDZgbB5_K+zXDQ4T69}}TxO}hUjOzj$(*uyfZt;Z*n<;592)WWX z-^5mpudBX0k|o~5Vx)gQVyELi;?Y4Ig8ue7UXx9E)yj{u+7$xvzjX+Dn{=jb)FS9r zCDiKI{z*+Cy56|h4UipIU!alS#?R}(IMc_Fdt7tEsKub7E9JE+bmpgAldZ>2RP5s) zGoK%~;CjsRtSyFbQyN4-LP!c2)pa%8zg{GdK-BI3vq-OVgK8Uh?yByHgpPNwj`A}4 zd7=;$*Xe&@>DWe99iR|EDj?RynV8R+on-RJZ=Ue@YJRV&>-3@QS9Fu&yy>(K-pFNY;CeJg9>82Mei%du=HlLalHKAUPD8`MseXqX2_7Z~Fukst? zNtjbB$fG)tsE~3k9CfxUr=}RhyJ5M`qt^4y+t@*)Y2xlI#JhUq*fBtsa6f;3J5Y=* zs=p;8p|0k$nYX~_?g8A^n|bANl~#Qv z;?Km&^B5|390$f|V=Zer7IX{dTwZBl|LPG4f+=h;q_86Ein_dvH6WbSLlVBB-z|0V z2bEJ@B?MN8vc-Q`bh=1I-HPgFgZSzOTB-(0+CHe6UH72x9}mgP z^R#i0z%f9K0#8~Op6?*SS@a_x(%q}%WlKP0_)2^;LP=_PygT@4*rmMVH}!%FB|-ke zd|yV|I)>reM=f7z`*`PRECro{zLt#-Gx~K3F{C3cYdA)8!N=UjyiAI8c_uIl$PilaxJa~wrxTQ;L|xsAPiu3 z-?w<7je!1!XW=YDZEo=a&fu}LgiQUk92bG5?gLNfSoD#*bstkN$}HJpuT8R;fKMz7 zIm=ij=QzV^*gRW-@}KS`V#$KOU5yo_iiU*j?C7vI|VB183*mQSZ}Aq z9FI79^y7hN&rzQ>B;B39xX6JZmxr<+^~2g}P% zAgRd2pS*9E_a6!CSgIAe2Z|9)EfGYU?!H%aB48-}@ALz7BTlFqJ$`J?&YeKc6?Do`=cty6VW$acP*K>i?XL>n?n~OT=yu116L9$a_ z1=U4YVxl7LDL~s8(wGPUt{#B|O4;3Sf9KP+H2wIfTD zFD1qYe%X81?>a8&+xvW_=;@@RXX)uP0WZ*oUls!#g94Q|mZ+k}3V79n5}N;?dA{pT zKZ0utv%&qZ+hody#SU(B!(@PfJK_u%f<$ub(1VJ;O!3#4D2Y95VbDV9K`3j^Mci>5Hm z6qakK}5g&{EwTH!IJj zsI?`rex{6^1VaM}N!Dx2&o{$!L`?#uO@I|;uRH(MIQJ!Rj7^XxqpW(?MjEwEL3X&q z*qj%$hoENkCPZ*5z)1ck4?Z#b-b+!r|2YcEI!W1t_1<^YO85v!EhTY?rqeG0{#)*T zA|!v_ay*+i+H}mL_VEsaBEcnq2^`^gkx!>S5xyY^JrZhBTx`+rn(u0c&*TO6+n3KwXx^wJtH zD2hx4C5Dz~#3&XOl!t9W&|O!nhg_5Kw7H)g0?k3U4y&!<*ssAit+stu3lg`jo;}_P| zR0#8@9*W;ADf4r0rN-EtmK5FRnrq9mcRA=zU=~+waNHHX>F&0bjbTp*Pzh0>iJ{Yd z>9J^;vQ&p_<>Hz3@NK2;=x+QQ*rm z0)<>>@A?I~h|#B!36zSd!x8>;QjsP-Cw)j(svqb&B;b1NC~3Ktm`M|$d`TMl(YQMY zp-#u#1>#m#HSSZa4&rwukHA;rq+TMrXn=pF_|QdARxqRHQJZbD=HJMUH2``-w3j}= z32oFJU)S`de+i&DQ0O|xRFtW%t@rUI9l>U~SpiUe5#9gMH;0LZqzp-lhA(05kuXZ` zEwb~P2>Tu8-pb`Znosa=XvKy_t?M6F zNDsn28`IM5NIlOq2EUiFUXvP3o@ear_nLyp1-QF zu`3y=%XA`j)l~E3ioS=8(K5P7#VfC^D0HCLprKq+6CL)A=x*k9AvHJOm4{v~U~F3k zJaAJ!b7RMU+L0qVKEnE%jd|JFP9uVOIW1uC%|%4^2AIMg=xS84lq+ow&-xSk8GXfj zW5l%9$qs$X$HiCRjvo%eSh)9axCcr4?@X!oynY|47{PCdxPFvMan@A=86dyVTyS)-nPb+@~MPje(RlRO+=$-Zv0!4?&_Kt}phC3C7 zr<>F}OFZ1p-SSGM-xwlklLHtBuyl~=BNok*H9OEoJ&pnG?NI!brZnj$gcc;QrCye(Et|^#di- zl(6lfY-#cPyi_`xX%nznznw|X7aPR7C{DwH``qe(TnF~LaOI~633+3p_w`6i#z}a( zeP(9Y+9c8J$quTfE&y@$)D!w9+t`D`t;Z_ROd#k~;IVx^M2#d+&lLh5diwI3m%*X@ z(1{bNk6VQs_geO2-SP>O$5(IBhMB*9vaBxHzhtRbIq!WS$`q*N*uX};=Z9;5<+eW- zfAWOr3a7;6kGz8@u`g|WUB-0Xtr+F}xeM`p9)s~in33J8;AT@fvFiWsUeyB9D9P-3 yH17jNnCf@-5{_MbH0_t$`B%PRq1HmjOU=6v6*Gi%LR$MrtXe%|el|Ns8od0p4NLp9WIk`U4pqEILj6=lVH zC=_-H3WYUv77v~=l6uGj4+M_Ny3QyRX*2QN<~pl(<6Ch9IdIjmm;>_n?*awP^OD#!Mivj24vy;w7s z;$WYYshzc}nC_-aw_eE+2SZ7c2-h9ctX-Geo260v9Qm^4WuNWhtlL_1La9H<(%vRv z6}r+l<)U$p_GSXhv16+2*SfA0;}>U%#p;dcw?&-iC)Q6U)``2k>i3-2n-9EYSVE9L zW>#u>lGhdCkBAO&3G&FH|9{q_$lRE{*x}(}lg#AcAb!QD&*+g!0w+5=dnTLf$)T(5 zcr{gx`#LF|&bYmp+xkRAzJA5b;m&eJnZR>hcojSSz1g;?n@&zbd0IRZUhC2->8>^7 z9_w{`56krK8W_CToNb%@SwG_~leX?AsfJj9GN+(`l!}V#>({T1Ki;WgT_^s;$;tV( zy}fGHN3i2OIXQW65jl4L=Z7fN(CRK5(I-?oZH(4mbIQZ3cp4w@+4SG;|JSC6#@)N*TLrkM&&o41v6-Xh%XeFd8j(w} z`ubtOn%A(JvM>7%nI}JdfRmF`PHt|^>PeAB9P$dYaC5x>+<^;`l-O6`V-6jbogCJ_ z#9&e+d_?2Mu~EqqKGd9(xB_XCH5R}Sa;ZabRc{D=Vke@)d5lJeoeLl^Lhhj zxSn0d*h6Cml&0bJ)k}@uo@|e-OAzupR^(VHd+W~F4my;091t%Z# zDj`r8^RQxR_*bQdm%;Jm^FibDgSj$yaVkbHT#K!Db`SFScpBZ7DxdXB0CkA7bs(+cG6?^-F&NUX``!hf8yI}iuQ$$ z54KGgr!Nte~Ny=b0$!$-&)51s5dZVn@;xtOWL`RCf z+5GF9>S56nCO3m|vei?tdRWYi_v6=9Q;oO!<#ie=1AqVK@%U5bs*(F(!^0jgOKf6< z{dBK`j;!%zTo_mpFXi_sT-W~3AC?krj&`4-CW^xR2O*ez7!nz3zc9{zSWHclga z3XNrOgD=J<`FM8S;jwH+&Hy(rk1nr_(J2{*(MfdM?QEOdR#ZdV;CdP!@+81gkUYMuJM@~=h?d{h4 z;b|yVk|=p`)muL@W(G%{GIqtmF65ior5c&zcf?C9J72!mI9uLOB569@n6I<5^27;G z^s-7Y&FM}W3YD)t+QZyaQ8+2f6xAg_Ie1cTJcMVD@d$-jQfdl`ryDDHQIoCAEM|Df zXXanI`x z2uDUFIE=C1t5p$kKiD7c%MdpLAIY2+oe?fMP8>ECa z=;8rD%{)Rj)@%F7BCc7(%$j!^qFk+q1JSO-q0GIX+U4G5f zYw`XXc8{?t!yM+nXHagYbYuNdXR{l8*zBvSckMa|??EXCAO^0$suZgHM@PqB8nD1yF z(RFMR%D$bNY$d{M`Q&-JRhiXorP)R5%+^fr#B;c-g_Ju?D|*#Vw}vBWys`yqwQ-)L z9OBp_w4Z9adEti1qy0?&Es6jC{85#Bne<$HZ-nZgYc-EzmXfy{A(xLv zn9yRij(bqZ8Y?t40X~N<>^U^Iqg=H^lt}jKJq>h=NFI|2Aa8QPH%Y|mW!?66 ziKrP5gs)X#K(}0QE@)tIFt}S5!w8>L=`@SCR)1tahQ^%42$(A>K2v&- zD0f`9$1cOeGb8cg!-t;b9q2JA;tlJ)=~h=)p&KHoiqOkfx_9sVikl=fa->WWfti`? zLd3ZP)~{c`ZnPEsGVMq_jz#YC0j?`HHg;zA+qYYgqZ) z&%PROl>^4bVi2`$oT&4H_wnn6tL5tViZVq@PSWP`u9Q zlcBmgX@`Yyt&spKy}q9L#*G^>uE)zJ&raVAB??<2rzl*ec;QCj;4EB$mAyS4%AmoQ zNmo~QVPWC=lP8~aCayS4NHJb}a;CGh)5^i2ZGUq%diNJiokm#!s%K&%5)5$;x?znE zn)^R1>Vx(s(Ja@|J*!JgO=1lPw{0iu4aeSRW#Le8sWsL<{e#+$A2g`-Ais{TjI?Oj z9{A+4cuz!3EPVa0oSxoD5uR?vXvE~nntOuKBfQ^TDdCls;+xl^+5$d)zm!2g4-ggKUsCaA7Cu6sF)oovtg?sDl@JYejOKQ zI@=mysvCOio&4j+i$!bqFJazDdzEv1#r9Lm`V6lOcEu=iptFA0-X460)6(7&=62N-C=9o(zSVAW^XGuV25E zZ{0F|`Of4|BM#YA0GW*6u&q+uWKg7?ot?P*8Y60ItjamziaFtrA3ywWQGEOMjiW5z zKQE6L&Y*u_;PdQe2q)g&m^0b#`ef9bH}vpb4}X1&)v0>I`7=*9ptMxv1&b{6%_wHv z9<+_5$$Qa}lONizK0my!qC#-%)~$zvv`S`aFw)URpPcK}zQ6Lt)|llmSzT?c2uG%i+dDzyyu!j1o^{N40a%bPD@wmZOqjNWQF$!qR}?{xmV)bmyNMYK zjn_wL>FXM7e#Bcs$g)%#jn)JVR7@==R9J@Pm`n1=%KGCKMh%kdOG%!YElzA^;{ zRp+;)KlUvaS#;9p8P(AT1qFTW>|}C`Q+;=Dde}0pWp{NHNvKYq0S~<#^XgS_ z^>;-M=i)S&iZdm(yuGFBck&%F-o3-Eaa)zw*H79{9$aogl3kSSDeWDp%`*YK#MCV=mNkuI5;_{KV+vi^?$e@oKc~;{Xo!q z%>u9u_ky`Ov*TIW(+g6}WMClw<-x*7-(Fwtu`ZLVSYc=1`di_%o=R-KVYd zYUD+%FRiJ{eZ$9`Z5coO_f`b@2@ZW;VOC@a9R6pV|9|iCUUM~$;*&WS36m>{8ag^> zvwF|IYCn_I$)$S}O4jB~3*7kKvd32vQK*)d7Lz?ly#y7bBq%7}I;B?RuWy-ao(R!L zn2tWPBRC%2wk#Rec<>--W@aXR_OX@KbqK1jt9a)>j9VqBaV@w=P*PHceE*o6dsknd z2$dk|&i|>TM8RG%W;s!f%gn-p9Wp3B8MC5;g8+(EOicTS`_yk6VVj?MMMp5*B+*)g zJ`X|boH_gwajqZlM^6tbsS_`&mv-wZ+Y}Vj(CO^zYWkzy)i0Sh!tqw3z%}Z9jvih~ zLWJOxESt1HK#vqXwx zl|h2I6MH0!Y$Prbb)%I?lSRq&*XRq%ckaZOYD4bY<_ri4X?m2vNzVoG=~ly3R#s+Z zWp&PyAII`Siuy%s8=H*5VMVMcz2H=;4>=t3we3UtBZG_^vP#vgk*H2oeLQq9mP`q@(E*GBxu9*)$GdWUr(l^ zZ!&+*PzY{L{H<}+VUoxHt*#X7w35pZue!R~tc`dBDw-5gO@MUtVHg~MfCo`4)?98Bz{^4OdC)rcslv4wK8c$D84L!ZEl@;4$aVKn} zLhVmo(_ezIP(0cN&5%~_8XA(oi4_ip2jG*LLb|-f$9DrV)yIz?IYtRNaa7}YKR1U` z6x$AedMP~6j@j2G=DsidbYC$jX&<1Luuapj%ROQABBsW{I#GB z^EQi;jIuH+NQxdkwqoSuH(IaYWRky3O(g|`eUBFi=fum;&$qI%31~NyfBN(q*v3{g z$wM3GnZ|ePiqQc7NO)dBK|#|8Vq@dLTUkww*t5$@#B{0u!~Q~6)Rc>ag8d|1nasS4 zL@zu(m0@F(ySIF~LkIi1sVO@obA|HUUMoS%E=F47=jlHJ^xyR@HuoJxTd3W%maZ8m zjZnJqTo)Xn&T9`F700W~?i>2p+PW#0N4w}z8|lh$2|g6-wn(P%!!l0x>Q`X82*1~_ zDKAkHLQ{&Dn3xC{+?;T?Q~)#}&@nVwi9AmkhaNC!boKeLEp_|@ZSAc5e7=u;Ka2`# zE~+Otf?s`^5MmP$AhRyhtF6;apO`QzHcS8TfdGQ#^5x4jf0~HR?d&qCh2BYHCjPvjMtWVU%43CVB8HlHJrR#@{6V@3;m6wZ(r>K{fmp8$YNJ~pwEbH=8 zZ|>k7+Js%DzujYFprOH9PZr0gk5{J0v?=;fQPG9sJ8_7TpJ2_BTMhmL3V>aUJvL1> zwY0)a`Yz;W-H zOgX_sH8%8zTlreEp%+sd+gQ*q#>U3vF#h*lU9UnWq~_D(I55FBIk*rd<&T3;+PLbb zT26Fq5(t?YxfgG#1cq%f5s`Gb#2f(y&avXiz(y9?vxswl{74ApXy#5IY0#%nSKel4 zBc)2=M{2v7zj`*qCl(Wc<)43<4%vUipr}~fDyS-Qwkf!#Z&A_QoYSK74JV#<;h@*( zYIb(^EKEICc6L+>asNti*X8B0QOdqs{mVP1ll4B3)~~y{iPF>4YZw|v%*>e5Mks9_ zEG=1|&h+zLp^wlhw;g_2t_#C9lcd{JthN!|54X^eH4!kym$`4TJa8pS4i1H8O8rnn zralKOtggl$bL2OGH(QC&Lq-WTDTi2va9&(oWZTQuiEHnZtcE`iDAFS zoDl(u%E{uVeZ}mnJ2F^37;~izjfe0Fg7gtFz6Sz(^P3(U(Aq!Tnrnv^*!=6@4|Hu% z{n_=5#>B10;Xb4bA1NcUuh38aKw}X{McCq380*-fmHXg$(d<<_$El{%Lv%=pX@p6f zRRRRkOwHs8Kg1uj2#_~P^R@oY-nh89U%R@Vx0^M64!{pkF9vha65|c6x_Q(YK^+Af zn#?qZ!X-hrk~@O>4Vg{B!op%`ioyPQFPI&=ycu45a62R)M@N&Ft_2cMY^1Dv<6lRA z?X?ntY8EO^k(`il7G*MOV`m4ESH?k%0~6*INXNeMAwlC9bd9<}2fbs20kqm}2hr%fD zZO1@Q@3=Nrl`fcj?*n2#)IwScNt>;x>LL4?^=AgvE-J^^8oIin5DGB(An8R?k^#!& zvv#wXTIMDj&cLT8VFKOyHP8c^qSVyYpKImbfF5MX=`ue*^_RkX9|HCANvl%z^5bgjGr-Ns zbn`!G<+j9ds%Cmh-@kt!t^*QqbZjhccnda4;}YdeJOjqb&f3~vDNF9wtuS$W{&*hK zs*e2aV1PcIEWm>Ti2|W)K&m5W;h_wBDQtiwcC~j!h7TPHd2u%e$H#qCg)N`alm#uL zr?wuoMXG!w2o$6*ke)u!fP8NP=uqM>4LPB)-Dlq^C@9ETSOjFKttO|@dDIGrP1LOg+K}ghqwW~$~lP$RT zbA~Uxy=VUv{(7O9^Nh;k=ciAfGD(#(tnIM^^A+qM$LQ-bAeACti|3~~DF<|If9AW% zBx0FANJF6FZEKw1`2n-}k`phwoXlWicsMjQH5DsLZfeKVX{MO~$@1yx*YkAis38AO z9!>0_wxi^7&d2Ca8?!@i@BfVn)i~`K=)<^gApXq#b7kzQVl~kj@?PbKfMcG$LQ4z{ zRgqpk>d?Wb)Ml`ts0_R$v1r&90Kz9jL=E!f>NJpxLrSuso@E<>lqr3u#!?{;_?FuS( zEC9z;#9?U2f>u$79{|{|+5-VNq@<=s@M}d53h0&pj+9_Gge7RF{__8g$2j(%Osp|k zYisrhQfpKw_S2A!{wg@zTHT%z2M0&+~OmGmu|j#Fjc1qiv( zqJ&LM40&6oc`Hgl!v76re*RV( z(2g>j!6rbftw#ZkW|x&^0cc*~2MbKG8BM?qm|SBdt=%25@mMVzL8W!ss1?Wv90YH)aE7t zjZPe5{i7QXx70WLtuH^Qkis;cM!zXuq_W3z<@oD*P9AZ)mN zdkO)F1IV3m0xP5NEdU3AJ3`E2ql}*ZqT)5G^=Mpup_ClWNs;5f`|2tg!wwCP#L7GVDt1)>!ZMpFsl<>eK{`1Zhtx!*HC zYM(m#?6VoL_=c$d`8_RARkd&>acX&mxGI0+v)AeILHc}G^0fc}5gq}4JXCJS@Z`x8 z$AuoY&8Oil{wya8H+AYfuL4vU4B#h>?zk!{D&R5LsFjI22KaB}9a@D(5h;@HPq-5B z?4VQ6frAEz0)&$3Q>2LC8N%#8Sm`jNfG06H%EH(x4v>Jx{rdsnVJnjjvR2d{oo}wr z`~eGxR;Cyg#&@iZ*os0Uu9hIkW|pq?LDM8a6!Dgj#|cbXgO7gv%ug8k;s5$}QqRe- z<-+NT@LSuFzz=+U38k()tqVJB6%TR;E^%|q1L2?{JpuIAW){ndvQ$|jSI436V_<3k zApv9+z>n)DCK>y*3x#Z@e;FDalvJ$Qg$6%c0F!~}AgxL^J`)OkO>=2Sqw#+Q$D$||su_*QIFS&*FVZb9!ZTr`&}R5ZjTS!Z zJ)V!xg0qB>(-*uKw^hFkm5LxhyN~+CofcHifR zf+4QuTDer+(tC{H`Od1Ve??atVLpk^`Su>-lkFEd^ z2X#U2e**2&pLuuh+LV9|`S@c-QhWei^J?T2-DxK}{jAObU?GD!cJ`>70L0j;UxPb# ze`K(}^}4F!g|L4WtpC+9{$Jz#|E|X{9d|$F$m*IJr|Bl#zjt7cz+OnR1*3?G^2n@* zvXj(XaprqZSfVoCYjQh*7LRmz|3}KjuK7O)rsD+cRR`OBccPP%UjRwbQq2?aV_+Z% z7_+(Gze!cR7|AY222-{vd@L`ghB_mWVy`^%N;3EhR#K;^*{rHNGwA6^N=Zo(_udx-iUT6(cXt}PZCvLVUIQ^84)A95n>S%k|NL&LRuyX5 zd`TZMdskaKI5|0)&8`F}W=Xdd6bkHX`aOS#q4@c(A}ob(|Z&+;_Jj$f^;t+j#(6R?3uI$?{ch2E_FzO+*jZkfEBw_qw&Pn8OV z=K-*v0h+xDRFguFT3_h6^KpR-WjRSnNJu;^)+quGjm_qMP95|cpro^PUmXd8WEZlG zbX9-4Bmq5O_;hl;8I5ZH~jHGRTN9|v~ zUI%F<$Q39>7*0>Jd`6^H$h#&u%$N)J%oxQ-=#}u4{MKr@O+t& z5CT#FwsEm&#^(RKdcoND;iLby#W_~bHTp-OA(!olv`HXNz+S*uNWDx>W=!b(UDO~k z<0uYR1!SFOpcwFMwKN&&oV}!0E+@OncD&OPb2hI~h1QDjx@6Ql9Rh`odiouCc!b$561_<0~SUctWFMs)r zbE-TD1Nr_vmy5gmq|+~IRNI9fD@L-C;TMo@NtR^*)PA9KL6e)x@3bW1W+db1Fe)BL zXlG2u-P89byzX34nRS56(5ZG=4A~7{Q!6GZNlAg$r>EBY+Uu$+jWJgmRO7*S<0jy6 zR{QQKob)J!^euCa0%!~DA<1K72%ibUOAf$;-Tit#Kx5g`+}s38Ym6&sSHRQY#?Aou z^SJLlR21N&)xBll)=(Tf^(X|WYkyMxr_z9bdv~|Blni=j1p@=dTdJy$K4BmlTFe@z z9sediw;IE(^+QJ(&G%Ow(BV7FgW)D_&|vBmo8oR`rNv$_S^V)18U`h2=MuB0AQ=eY zjYvp{qkGZ2EcAF;OU>@F+_(3)krv1Wy-Rmb)UK&Nj#_P`n(C4Ku@fQNrkjh4OCyll zQ4hGOkO;LKEjNLh1&t|`M&g<}%pr1Z;NC{)6W8{~X)t!F$et*8Or7E!aUG*Y%qg}9 z-u7B?nBy1EKt?WKC!pYJww?Uv>ctW}f3r1gd`}y&Zh3RnW+Q;*_&RS1#nR&}>2Pu6 zZd)FbY@=mbmxxHm6P0dv+Wyn%kaZp(EJ!%Au6X_<6Pj6h57@;+h@iW{vNhw8Z{KoU ziv5;85BV^(qeBgl@tcOZZxRy;VsCL06cP{+#L$^x&ZWM7&2cch7ytToAUK2xBEQMW z39-g(56q%(;-sVBi}Lf^E2aFVl1_-z;l?^L2I(V_Ss7mgC{aZUU4Gj&ORbGw) zGE@vCIV3I>e;erQ+*XF30k;mGj2!GeW6AUV)@2;EadB~5q#_#0d2F}!{QM;J_4QguYCi{x;HWl}{ zz`!%Wl5B2|zf+Be)^aVuQ#W0w`QW z0HD1$5$|;3BzjW#x@f-pUt~{&`8`3x6aK{vl-y`{o3%h^Ysw=H&g`8o0$O1v;s34=Pv8rM(5W}!cz%e~<^E52^k{j^W zK&G^t784(I51#MM4?P(tMgRqF0fDHJPl`gV|ETw4{(cCsvhbKG2aVjq(o&eK7+!vE zu8lI9Gjx^>sxkB?mt()>pgm92ryRxQPfMllmhNW}CR8}XO)cG8UR7x5eh1`KApuH_hRDRyg9nh)u z5GvIJT>%-hREWR7f6)=;p}8Qf|KW;@#9hG5bxSO6jL-KrqLZ=PE;F^T_% z=|mjvwgNr|2y`qIP_+OH;g4&i~(nBSlhd&g1N~tc;AW;*lCiNSXyzT^QcHc>@|B)Hc2Z2os)I z^rNZEK$HL=APNQ5`X4pHEeng2Abl1T04hbG#j6}&OW(K*-_Zz+Gz#Te=i4Lv^&eRQ zLZR37Ee3x7)g)HGNpcLBN?@nOt3Xea=T{te@6u*NtGfUPU)5>xCHlfm6bcqM5c>ds z2@q%qaGdSLIcSE)&f#vy?-wG1F;6f)fk{~1U0rc!1|W3;DnzfIO@TsGj?K-@=}xwQ zL_>aK_L#x~EM-&62%DXq@Yz)m#LfZ3JTeltz3l?MA21T17hU8(Xf{0*Y&0!KEs%M^ z#{hwauw@{$0VMl5FtZScGr;?s>>HTYXzqYVgpd68M==L!B-+QS@%DjE(x@q3NVz5hp$dX0bk56CPoAN zl6OHx1x<-%ck5pL9<0;cWbp~~_s51aV+XDr0P8@Y_h2jo>Hw5Q2+$5Bbao$|+tbQT zV2$?YUft1v1s}L(L`Y)H8WtWN;BR{gbg9s*LnxXyiY2N+wr&GeXbasQC>*5zbO-~o z!_@H|WJ6fu!m1+5z^SADvedD+fZ79o%BoBcP6uQrO^Ys&pA|ARSUEXym9p+$Ny-Mu z$5Fg#?SkVjw7UKMnoiUrJUm3u_`y^<^9NC20L07!-V5+9gGdd17$68wpH}VbB(xBl zLAwRz4h5QxU|_pP-NhNd0>+?~8wA}rPO>At3>XD;An;M99%l|M(}Q$x!~LRWi1%^G zr2GI}Nq<5Nf%KJ$Q9L zoq-QT#5JJkQ0PjgAn#p;-70!GVlIQKC%7;byyOMHdJd2Y=(NBAp+FJi;lQxkv*>^# zU$({9GtTZK8R`a?Rbc^QMAJmnVAx;w9}XH&u1(51`Hbr}Hat)eAxp^b_Ac+-vM|Nr zLb{>*2;O!R>P5{p9(xpr1EM>7mu6~@33ucIdng;+t*gN8idy&)V&7_TyGrk1v zot;#w=RAsO$a{Mr4bh*0ZvuQqMfr(Dim6XduT>xrQsAqIDg?Mj6bwkH!#nvvE&>#D zGdYpT>ckPVD)2@_LI=VZ+yFYo546WXO**ZOT|?4RR&U^#`Ug$xY0A_0#6?Yx zfi~i7TWMfCE6WU=L$}nQ7aqjD9d8MD3Qt`-rq6Pog*;TM1Kx7>S$6%iQ@{7X6};(% zQ1spfq-t>yn5|nH4DzgzS~)wTz{tKC1NwW@rGZsinn}CRh{}Q790W}}Nflp~caV}_ z(uEED&@PX#@O|EjfB2d!s1Vl{`SyST>(~yNBjNu-?F9S=(5d;Q9;CQ}T=?Gba(O;7 zF=p@?gfbJDz{X46p=r6kx7nlGbETX0Y#ReEELDY`^bSu6gkR%=_KMk6Gpvz$F+gu|!wWEtr>PVH= zC)R3uaHv535wh^~ld5K2%V*~{Yyi&G&_DsGDDAb2V5gwFoAHDh3i=*IWxnkx&2=Z0 z@rf)L7Ra$SAcLI{{Z1q)JOSE85JOWg+d<}LaH`VECAo$i0H8;vmjlo~j+HfZkVFvq zrrkjWjn40fBJ>Vbr12pknG}E|co(moK}e9^hX_~l{{Z&?kN)239OJTDCFP!c52ip$ z^LhPy(o&y2?G5I#v0dNVn|v|5H51aDGJ{_AxcPVL0~oYx9A~X*;FZ+?o$`c(My|r^t&Y|Tr<`3?SO;dx2-To_fA*paI?F zRkm8w;6ICAulePBRKdW9*?VJ?eQiZtX}NWPzf|Uc)U&$+71Fs+wsRy(y#2J{Jg(nz!t#k|GRS`Rl}6Vx=JIgHVbLGvvUIy& zh0$6VY|1{a&+|)4M<44@eooyTq*a}7qZ$Nuv-Z4+^iqc+=a?qR<0Dd}m|v0R`J0Y# zpw1nwOIwoLk@5YifLfDGK8pZShp0^W%QED40iFpReP}(P^j*DO(?=;w9CkMDg`fLB61C_j)Er}A6Z{tZgN*(cAxyUY>L6N7U)kX19K)b zkcRv0z@a|zYSI~6e@ZcawLGbCSb{_Q8DyIVFl7{WJbTKmLSw#lH~A{B%x4!({&_!FHv{+j$c|I$Jzl9) zv0-vbUCJg+>!pp8bK?5+)}o^QlL3!X2$(S2qc7K8r%&cFzI7>k+Eco;(^ZWpif^2V z_Z(hfCbfE;jw0fVIo+g7FVn6`vu;mY zxATuVR({!yoeM%#7%pkH@_Hvk3EP`{POCd)yv<9a#qKPPmjIVD%qd8dE z#m+W)X?NgYHcM`_;^d2i;B;^lE>kxce8Iz)g^Nii=yH80t>g{-!PF#S7a47`5$)9* zri%(QYBQblhd3|5DHCQ!Uo`)?=6Je)3H-Wo)8Pnl%lG@D3K;cJjyx|llAhC1Z`zuP zz^!Rwm$jU#YwzP31>NdGRanq01=5zBg*P8!W<@rYPg^Q7xVx0Tom$FAx?3I)aA0Oe zD|20?Ygxo@$$z_ED1h4TH*6j1--K@@?)*e&rGH?9yhb?}jWrR)ue6fZJrFVRhYxvP z?Qs7Hd0wpGDaUHtWvU(rW9-g8VGiNl(?b0mU()`9MmYPftyk~`bsoeilGf?T@qe%A zO|~WL)4?ko>pEPK7yLqI``mv?AaoUT*#?@*Yc*&6OIcqO_dXO3uGt3z_Nbu~I zIgb)RUWz`pqpO*qJR;o=RyL{qv1Hs>HYoc#utNi_|11#2yFFU9c%c}*X)LxKwOHHn za+Wjjr{lWVi6kd2X2yHdR=0BRI)uQ~NhP^^S;5U8Q8XFZYg>MW*V=JF5+Qh3T7t^y z&6(zTH6?F#Zd7{q8X<~R#_|e^)ydp^blP_KQ1Al22>*%{fmeLd8Z^=`KD`Qa)LR{MCDE6+=pjzKsXZd#Xu(UTNgw6`? z+B3Z-vs4`Ly#xl~I9d6S^G%TbL^^OOYQy~QiDHi}iPOKd0B)Gwk{22>$=a(aR&!MB6^(S{&q8L_k?;;y2p9? zt5cg%fO? zhRNgcu6>?)^UR7(Zrj;Y98@|wo5Pl=xW`h=Q0%@8<}OB;H#@X0Kt+c1 zsrX|wJZnVTVRoR1rSaR-#F@*Ljwg$DwgKG(0phpizxrKsyT{(jVPn5rSf-l%;hx#; zGZ2%*0+3Q(?njkCR#tFaJ>a;ce5RZSx{Hu(f;KhAyNC~(LWX~9!prV?o@oVtq? zu4`-y{Mc8zU?6*>Cy`~XeThy8Qla>5Y-j*D>4N1}-OnmYp2Dq1KryFQsA9J<)o3Ip z-o*i@yTYYQv4vf0^^G2TymAD$ExdsyU`c*f*CooO@<*{BbMJ@}?y>NDzeQ;^s zylH+Z?u^v5W}R$?;ss6d$X(Mx@!L|Ay6t!K8SHBVuLN05I80CAJj!0kT*7H5Lxivz z-d$$fqUE7GF3`>pK8+4@d~+wK4A=f=bYx0qxbbMU{!H}eCsi>>WZCi;%`h~X zoLS9~61zh~MAJSVseHl`vNx-=X(}|`Z&iv|sT*xvAweB|crC%r!C+P1@}PZmWL+bq z{G?I;T0~;{`2gEH&B4ansQjnmM;=_^;Q*>g%;YBjXlEx`so7I&7Q% zmYkMZAxFQE#Z;)gUZK2>wL>wyz$<&%C}d&8S=5YyLl%*?%RSRHuoMWpOQ-6{*KUw#y;n0^{a#@D!eH;aCT%**}{G=(m9^| zrYM!#a&{`eFt!PP{Ved>qVh22g^qsqXsO0ZLs1>tQA;i9OedzArHh3nmQj03eB8DI z{d~Ug^0E-*Czm9e%;os2jySGRi_?z2ZagHcy^ z1=L@m##=A83>xh1&ZIk@yIqrUNO!wtso}ev<$=mj>k0n(-)|osV^WFsF#WilKXD^x zAGTgpr-%}gxQcX>D)?F?hn1&juRRv32Pqh`;|~NK=}p98pk>F&&q(J=UuI8=wR%^X zy7Sc{?dz5Mhwt_`UmawnStKPKT{hr$Pj`DY_Uh)>Kp%( zP&BNoE6DhCtcup58Nx<-8JrH@;=&VZj5V{}xwCtEnBa>uGh*7KSMUmI6*S9gKAuPr zA8ZS4hcD<{b*nHkidGo+ZP+1V;f>Uf75%ch=jS52Ds*- zf*lzj*j9Sd()a4`p3vdtA!M8BKe37YAKh5~Kkan`-F+0SnG;!n?BbI$HUa?LJ2pm) zq7{6Ivak9@J?1uQM=Rly6Ktuhs5qC`4S-RBhv#|4IbG1{B1>d|{vGbEM}7UOObn1O z%5iH>1^9$nPzxdYDMV_)!ootr_20#luIktKNGpwP*r?tdRfP;o@TR}|gS$YdW)Q^vk)%O5gD|+0=)sZI4B9T&{ zKibva{u%ULpu@$t!`ai`^gI! z72IKHXy~{simY#WCnPi!tA|=Jo>$i&ByV9t?$*}U8)MGh@Ou)&(n7Z@kYz8>#y2-B zf_)7FN0Ie#v2hm)(j1Yi=tE?TNxmy7JjB|yA_Lcy9(%b&N_`GBLAbj$F3 ztOFnp&O<$R3?L(fi3bR=`IGtgYQq$1mxXh9WXvyeaxS6lrgy&!G&IAyek3BER8&E5g9vFXYgq-DK>^XQmc{q)--SH4tx(rt{}Ne%VE+E?TT{HTF99kf zB7!Qaib0G%VyN^n1!&;0v9XgsW=2M-Jm>+XawvD!xV`(wgx1zp1knVB6xJ({SKhmS zpB$uKz^ua>3ASUwLy5HuV8ZV)ofP%?QgzVGEorrs`rr;brM%lqudS{9BB7e6l{@Mh69BNZDNv4JHbgROj5*W> z0{MDY@6@k&V|{ct(X|^*L;zQ|!J4sT zo~7m6YtMs%Ldh(EyGGPKc*L}R;L$UnK>%il#c^}y#-;?&6h%dX$R-&G1POyOlXAf+ zTu#1zx?%%A#{{ZL2-@bhwlARh3DX2$1wJ0M!N}e~?f_v{?}FPH;8j4m0$&7l=2;>l z*a_eQ!vZh~Tmy(4V26jSOm9^aw@fb|IQ!Gxwn+GdG-y)r_O zZNi@0>Xx@bez2xWUS6J}j!uHkJm@J%M;$BFpSa9@B`0POC5EtqU0C$-EDOjjE`BVJ zNl2irJzA?_4|)Fl`R>)xPq+q2P~G;0>7ygL5~Z^2e>SFipxQN31uX#M3cadV~Tn(99x3gd;SME3(J_X zu&|gS`<(1k@?RNv3d34N&(P4N`iT-tG6e0dj|>Z2I%i=g%3$PsV4giMy+0Ko=KCq7 z(s3Gl0*&!80A&IZ4L_wU4tPdg1n(DHSZDb5{X0T3WN$(?P`r8bi`kXXwzqwAYptCY zCHE^Gi63&kT72XD7%ik}=~KEIkkilAD>LSzB(Z7_D&fK9=$9{9nQdf^%k)lOsbj6f zhO(sl8l|y&_D)904uG46)v_OQU1L;p#3agUYKo?&nF|fTFo#4&x?P))*+}fP0MQ)E57s4mvu=)e zy(=yzhhI4`<^LgNaQ70WPMP(CV8Sd-x;1_4I3*lz%uo2^~|ev(211VEN)K0jAQA$Vl= zr*N`s*Z^^7=i8w@p;1Fn%7Tyl)CZz3 z0+~&AzaP))r%!zz2Nn%Bl_$f>9X9?^V+M#l9yx+`u$y9+jv;a6wG zLD?FAnr!FjShW8V!hP;Bu(@YI4Psd1hH!`{M|(HT%s8Htv5=y~pKftL8bJ7PPzYl| zR$KWIpoi zgYo2xJooaj)&Hx!^A5+d|NHoUv@W=0vA4T;Js*}Ah=WzV7raW_QSyNoU} zZ-k6A6h&Ftm5>z)m+`#M`+4qvpX2!b`5ez59ajfAFJ0&N`~9r<`*k|5H1WpCTUNbU zaqhRQeK^t)K{5BXllk`U_>ULw`{X}7tXg_~*?GjJq=I_FH^m=r*@_j2lU~0@Q2& zlczxKy;@n8A8f+ODX8}I+U`U(gVQrYc|PA-UivwJYVkyxU=rXM;LwiNfnD$W?Gv{xqm3l+Ur-1T*(vg8f_V5QK2vtD_rul z{uXJs;Q4&ynOLOH2Pm!ak+ccbE-oxsz^h1fE1#Nx9^13eJKM`lPmi4#Q4zhK5*{AD z*%HSo%l`fQy{4aU7#tq{N44Ku$wep%*iLvTkQ4>gVEWXGif*U4m6GyLzPdYZJH;Wo zkrUVMfQ_&ivb20(x_yn*II;2bGpFn?x4CfP%AVGWw6;;?jp8O#k5}!_<;yz0dDXaA zJl|u}4(qfdmYoF_e$+%Z_T7mkVczi0aGSlUe9fu5r zGhf^IKjZ1SbZKU!Bv*rIULEns^BFt-M@)EtpMS7rXpCrWqBBq&P!sl*ft#?0EZYb1909*VWz+uH5NMH(L9BG9lMRWp1HxsALP! zKX?npneXc|oSIes{J1gub=3jNo|-k&P?^8xW96+Ma(kB4P~Jodc|X5vWy(JyZt#jf zcX;xJ?;QvGtUT#iIMPAdDj7g7};b6!o@aTUNTA5(A0E) zbPDFWt%StIW^N#OghWNP^vn52I9XW-<__5f!irO$q8i*#p1X3;Fq3~|K;8z~02I6R zEiEk*UM_%r>?$U*0D1PagT*8IZ>A(+uoT3%~Qh+mN*hNRGM&kZNXTYAT3!)PDPN; zd_APZRKYk*E&$D8B+EK<(*HC^1XXeWMpNZzF}hRYZ-CtcRzfm zKac$>A6R`Z;Yk0&(nZ??>N6+1RLN!B=J08df5idkWW<t6J4yPh_rt`qa}7RBX7)aPEWFR4`5RX=I%5*t$1SqV;hv8KUXWy}Gw> zyz~BD#@vteM62x$E3*%d$ zJTlz!iVg(=hcH>%CXWz*>iqML4lbl(oY~78n79c7JKzq3 zHdF?}gdBbl+z1rqnkWHq07_WDV4|g`CtWG#>U1z+Eiu)UO;WFO33x=q&sZa z-Q%=PxGoJL;5V&`RGUr0!QP%+<~`1p%s_iBJIBgTQVI%A>1VmEF5sMGW-y$<;Lb?QL*!vLGUuD+Dp06q-SJkD7IXXBL59iX?d^d z?O4tPoCQb-VMUDSc=+}rNDCrRFafUuL#r^~?wvbTDIL}@|3jC`MootE79x$hx;j#w z1RtOdH9I520$Uxe1F>k`CA#II2yyhg*4gIfWo2fn!fXSnK3qX-1t_|4@%2Qhb8k2b zHP3bjsb9Vs<8Mr-UPSw%3oLdg(D*$M&3Ssw-8H|_WT|Vx<>|L z=UJLBGKPn1N$w2T5>z_ojN|qZMNZ_(S&2=D*S0`UvfprT*2!ng*df7>=a~qV+>Lb& z8;5Vt2Hfu~bzYE=thp^xf7;vyX+?d`lNZsscU7mSXV;1o&UWxd!Y4(<(xH5pB$4XA2OF1@BBt* zlCRxz;vuT;tCFYF6LN~8s0woiJOI0-e56%r)cj*f^C!~mM_+}GR>@guCXqU$jm*fz7G!K!b)CP$Y(aN@%K`-UIEj)n<}o z@!^EFBjY~o7~%>28M`&q)2OPkYtxV1x`xm}h9KMfD2VdRYeb<{5BmzEjb8rM)UGkBpXZp?pvQaPnI}?84tR=+-22KgyfBIrxq8+0oz-{heeuIt@}0 z;(}*|ing&h!GH#KDVyA$tuO9oTjVGO&yK{;#K%)grT_M+K}fJh3Wr`b*!EPD#6x+bfl>p;*WzjdrO{r9vo8PafT%*@Pe z?d@S{j?o*(Zdea%valI^`JPiG}{Wl}WqkbO-J#KW66eq&hVMIiM*l5r~a@2 zlJ(3PVYQs$$L=@VlL(arXV3Po0DxskyY5U0fEdtn8oYa=rLBEs(<^j%ttw$K)oBuB zW!)Zd&I1j|$!W&pn?66m!j;rJ8iywdtdh?NAUA{myN5C-n)7p$0(WuhuKu1))5_2n zonDrH+}nM`CG{h%(18ODqX*o4Q9bdR`<|H7(=z&AnRaH;`giEsmA~`*Kj+oU^&48L z1e%A?Zb)5JWAvEl3Vq%qr|Dzl_*POGkI`nHWkLc=a*XaP!UA zP*G7STkRhbn+pvI89-y2zV%atXvvXs-romC_vKnMUWZ2m!MEz!GbKfZF}tS@(g>_% z=)}k*rDL4zCS$AuDJ9}PP?WI-Y$+4$InbTLK88-Tu!snae6lfIqo7QDk{Nm56;M}S z-&l$uO5&&5Mon&58DX}=L?7H1XU)2yyRNjD^!mXCwDzNt1E*=&>!Q6F#teBy2`Gu? zw3>eGH@eC7$%L6Ao_Aa`uz%9L`4jK4Y}XFOn!Y`?$Pq8)R2}U8eVnFxXauJ7dm`NZM zug2VEM9qWdL+3ARcY{rn9};TB6u#+uyB}En^oQS!=0?$69l|#En0VllW}LQ7!S}-K z2Km-c*^WhBCQ-gW)se9?I9D%TgbT!!`l=V1%m#!V5=2-C=`tGqYB*(sd~p8>rh}- zd-^uImuVAkoXaZn?G@%3dnP=fI30vF6moSTjKvDzl+K>tOt#Fb%5L|m6a0PkC~;uQ z@w(*GzWxH&#Y_R=CP5#hqo5j*yf3|}58}CKQD$$l2Z2p_b-@}sX<9mW#jm2*zdFDR zfxOB}8Bv8&y(9`G4<;bs&g^;tp)fOKv}m)=#G%X4WknD$XF@dXI(8gRz@WDm$zCM7 zWh8rK7)(c!5nTE4;y`%&rR^pANcz_DH3@Deh|0IL82rJJNN?_Wgo)*OdcY3*G0_qGv~C#tV>vTOrSJ<88f~6C^wLF`14fpkwjBTieYYn)#9*@^_k4m-7j1M53~Q? z_12@yO2Sh|cxYE+ctDpMdlu>n(Nal#<-o&KZaGWQ04nuCoV;ZB#Qw^R?FSK8vRPOX zpP4^7#>G^+rXu8Y83z$MQ;NHEBLBH$ZqlMO@~ZtwaOAi&NEmL>B`B0?2VSnX$ogxm`k{)k#wU#X0Jm&ZmDe0u68jEf}&~$G{Dl zRwKSb=ICI;;96zF&s6pGIdC8$5~6xDiQFcmHMgs&sVO4qJLW3|HuFX)|BlXkh3InT zjXv-)(PL1-ig7v_wLIBTlph5?Z>zW&pdULYRY;_P+rz3A(~U56pTe;FsDL*uO#h|j z>#sFhv6VI75o@^Q-m$L9t;x)Y(D4)^MdRAL*fA8n@|N0MQMp%*+LSRvj>vcJw5-1Y zq6Vs-z?cp-bE?BPwUdz`+u)u)q{L$E@TYY;j~RpNch3nWq>92CMD6bz3Lbpa9?=d{${u45c{%)sBJ^^dslq#e>*%|j$3PDu^D-r7;X9K5 zcJ%*)*RhgyeL8godwCmcgcc(jt*coyL^4MIq^(M9x70pAyU%a3s*7E(+H$j?a^z@R zc0?eY6f-aR0FSmP>hkgH*U*@p77t=OO*yb5P_k+yE`_cKpb%|?0sNc8Mu>v48; zBsuV8s~yh@(s#^-uMOiNe)vOt0P_?cbLY^jb88IPSgN}>@r8J@a~&sj=RyNBm$mU#pPC8Y9rk_Vquj!MY=R21(dq&6fp)8uUVE_URfaxo!|)x;mHKxdNm?ry9yM{ zS;gO|4i~2DSqi~I@ca2{xA1r8zAAF=+dy{y(R%^LogaRbg*WD_*YNZN3$Qx5<(&Cs zUHY0otrH$A!A?CU`-56j&vNTs>TA!w{PI1W{p!+VJgcj#)4x3fBf+()CuI#Y2?GNb z*-b$F!)CN8l3Q|}$dO2*b?cq@`1r;S(9Pr^P7Pz0!2Va!Hj(qu9trW^em~wROpzKF0MQaKET3&r+$Nkh9_>W0(LP>W zWfUF}dXl^R$M0$X?b~WUMpTIf_WzK|lT}`0GmgkfG@CtvpL2zV#{$DTKriWu_fy-r zxjR#hdjQ6Pp2WeqqrYDe#U_!>%P>e z?K#eU&tH)K&;AWW!4$Q$P4?Ogqj_=_(N-PYKr|$>esKn`gLJ_Qcz?4M~iJ@ z!(QH9f{gBKc=m2U{M~a}HtFi7HZfH`Eo^H#p``^swU4cA4Ie~Fl9G~1N%U;5IC@Ac zFT%jT;ov`b{cbaw%kzD7&s^9OzHA^G#Z1au*B32*CFKodN%7C2wfde`c`. @@ -25,20 +25,20 @@ For details, see :ref:`Figure 1 `. .. table:: **Table 1** Differences between security groups firewalls - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - | Category | Security Group | Firewall | - +=======================+=================================================================================================================================================================================+===========================================================================================================================================================================================================================================================+ - | Protection Scope | Protects instances in a security group, such as ECSs, databases, and CCI. | Protects subnets and all the instances in the subnets. | - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - | Rules | Does not support **Allow** or **Deny** rules. | Supports both **Allow** and **Deny** rules. | - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - | Priority | If there are conflicting rules, they are combined and applied together. | If rules conflict, the rule with the highest priority takes effect. | - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - | Usage | - When creating an instance, such as an ECS, you must select a security group. If you do not have a security group, the system automatically creates a default security group. | Selecting a firewall is not allowed when you create a subnet. You must create a firewall, add inbound and outbound rules, associate subnets with it, and enable firewall. The firewall then protects the associated subnets and instances in the subnets. | - | | - After creating an instance, you can: | | - | | | | - | | - Add or remove instances on the security group console. | | - | | - Add or remove a security group for an instance on the instance console. | | - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - | Packets | Only packet filtering based on the 3-tuple (protocol, port, and peer IP address) is supported. | Only packet filtering based on the 5-tuple (protocol, source port, destination port, source IP address, and destination IP address) is supported. | - +-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + | Category | Security Group | Firewall | + +=======================+========================================================================================================================================================================+===========================================================================================================================================================================================================================================================+ + | Protection Scope | Protects instances in a security group, such as ECSs, databases, and CCI. | Protects subnets and all the instances in the subnets. | + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + | Rules | Does not support **Allow** or **Deny** rules. | Supports both **Allow** and **Deny** rules. | + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + | Matching Order | If there are conflicting rules, they are combined and applied together. | If rules conflict, the rule with the highest priority takes effect. | + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + | Usage | - When creating an instance, such as an ECS, you must select a security group. If you do not have a security group, a default security group will be created for you. | Selecting a firewall is not allowed when you create a subnet. You must create a firewall, add inbound and outbound rules, associate subnets with it, and enable firewall. The firewall then protects the associated subnets and instances in the subnets. | + | | - After creating an instance, you can: | | + | | | | + | | - Add or remove the instance to or from the security group on the security group console. | | + | | - Associate or disassociate a security group with or from the instance on the instance console. | | + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ + | Packets | Packet filtering based on the 3-tuple (protocol, port, and source/destination) is supported. | Packet filtering based on the 5-tuple (protocol, source port, destination port, and source/destination) is supported. | + +-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ diff --git a/umn/source/access_control/firewall/firewall_configuration_examples.rst b/umn/source/access_control/firewall/firewall_configuration_example.rst similarity index 99% rename from umn/source/access_control/firewall/firewall_configuration_examples.rst rename to umn/source/access_control/firewall/firewall_configuration_example.rst index 4f6d744..beb86b7 100644 --- a/umn/source/access_control/firewall/firewall_configuration_examples.rst +++ b/umn/source/access_control/firewall/firewall_configuration_example.rst @@ -2,8 +2,8 @@ .. _acl_0002: -Firewall Configuration Examples -=============================== +Firewall Configuration Example +============================== This section provides examples for configuring firewalls. diff --git a/umn/source/access_control/firewall/firewall_overview.rst b/umn/source/access_control/firewall/firewall_overview.rst index 6bd67c6..53fb1b1 100644 --- a/umn/source/access_control/firewall/firewall_overview.rst +++ b/umn/source/access_control/firewall/firewall_overview.rst @@ -31,11 +31,11 @@ Firewall Basics - Firewalls use connection tracking to track traffic to and from instances. Changes to inbound and outbound rules do not take effect immediately for the existing traffic. - If you add, modify, or delete a firewall rule, or add or remove a subnet to or from a firewall, all the inbound and outbound persistent connections will not be disconnected New rules only apply to the new connections. + If you add, modify, or delete a firewall rule, or associate or diassociate a subnet with or from a firewall, all the inbound and outbound persistent connections will not be disconnected New rules will only be applied for the new connections. .. important:: - After a persistent connection is disconnected, new connection will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period expires(30s). + After a persistent connection is disconnected, new connections will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period (30s) expires. - The timeout period of connection tracking varies by protocol. The timeout period of a TCP connection in the established state is 600s, and that of an ICMP connection is 30s. For other protocols, if packets are received in both inbound and outbound directions, the connection tracking timeout period is 180s. If packets are received only in one direction, the connection tracking timeout period is 30s. - The timeout period of TCP connections varies by connection status. The timeout period of a TCP connection in the established state is 600s, and that of a TCP connection in the FIN-WAIT state is 30s. diff --git a/umn/source/access_control/firewall/index.rst b/umn/source/access_control/firewall/index.rst index 2f4cc01..b8a8143 100644 --- a/umn/source/access_control/firewall/index.rst +++ b/umn/source/access_control/firewall/index.rst @@ -6,7 +6,7 @@ Firewall ======== - :ref:`Firewall Overview ` -- :ref:`Firewall Configuration Examples ` +- :ref:`Firewall Configuration Example ` - :ref:`Creating a Firewall ` - :ref:`Adding a Firewall Rule ` - :ref:`Associating Subnets with a Firewall ` @@ -25,7 +25,7 @@ Firewall :hidden: firewall_overview - firewall_configuration_examples + firewall_configuration_example creating_a_firewall adding_a_firewall_rule associating_subnets_with_a_firewall diff --git a/umn/source/access_control/security_group/security_groups_and_security_group_rules.rst b/umn/source/access_control/security_group/security_groups_and_security_group_rules.rst index 3998611..9d23011 100644 --- a/umn/source/access_control/security_group/security_groups_and_security_group_rules.rst +++ b/umn/source/access_control/security_group/security_groups_and_security_group_rules.rst @@ -17,16 +17,16 @@ Security Group Basics - Security groups are stateful. If you send a request from your instance and the outbound traffic is allowed, the response traffic for that request is allowed to flow in regardless of inbound security group rules. Similarly, if inbound traffic is allowed, responses to allowed inbound traffic are allowed to flow out, regardless of outbound rules. -- Security groups use connection tracking to track traffic to and from instances. If the inbound rule of a security group is modified, the new rule immediately takes effect for the existing traffic. Changes to outbound security group rules do not affect existing persistent connections and take effect only for new connections. +- Security groups use connection tracking to track traffic to and from instances. If an inbound rule is modified, the modified rule immediately takes effect for the existing traffic. Changes to outbound security group rules do not affect existing persistent connections and take effect only for new connections. - If you add, modify, or delete a security group rule, or add or remove an instance to or from a security group, the inbound connection of all instances in the security group will be automatically cleared. + If you add, modify, or delete a security group rule, or add or remove an instance to or from a security group, the inbound connections of all instances in the security group will be automatically cleared. - - The existing inbound persistent connections are disconnected. All the new connections matches against the new rules. - - The existing outbound persistent connections will not be disconnected. All the new connections matches against the new rules. + - The existing inbound persistent connections will be disconnected. All the new connections will match the new rules. + - The existing outbound persistent connections will not be disconnected, and the original rule will still be applied. All the new connections will match the new rules. .. important:: - After a persistent connection is disconnected, new connection will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period expires(30s). + After a persistent connection is disconnected, new connections will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period (30s) expires. - The timeout period of connection tracking varies by protocol. The timeout period of a TCP connection in the established state is 600s, and that of an ICMP connection is 30s. For other protocols, if packets are received in both inbound and outbound directions, the connection tracking timeout period is 180s. If packets are received only in one direction, the connection tracking timeout period is 30s. - The timeout period of TCP connections varies by connection status. The timeout period of a TCP connection in the established state is 600s, and that of a TCP connection in the FIN-WAIT state is 30s. diff --git a/umn/source/change_history.rst b/umn/source/change_history.rst index b48bd6b..35c0cd7 100644 --- a/umn/source/change_history.rst +++ b/umn/source/change_history.rst @@ -8,6 +8,10 @@ Change History +-----------------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Released On | Description | +===================================+====================================================================================================================================================================================================================================================================================================================================+ +| 2024-01-16 | This release incorporates the following changes: | +| | | +| | Modified the figure for creating a subnet in :ref:`Creating a Subnet for the VPC `, :ref:`Step 2: Create a Subnet for the VPC `, and :ref:`Step 2: Create a Subnet for the VPC `. | ++-----------------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2024-01-02 | This release incorporates the following changes: | | | | | | Modified the parameter descriptions in sections :ref:`Adding a Security Group Rule ` and :ref:`Adding a Firewall Rule `. | @@ -207,8 +211,8 @@ Change History | | | | | Modified the following content: | | | | -| | - Added rules in :ref:`Firewall Configuration Examples `. | -| | - Modified :ref:`Does a Security Group Rule or a Firewall Rule Immediately Take Effect for Existing Connections After It Is Modified? ` | +| | - Added rules in :ref:`Firewall Configuration Example `. | +| | - Modified :ref:`Does a Modified Security Group Rule or a Firewall Rule Take Effect Immediately for Existing Connections? ` | | | - Modified :ref:`Why Can't I Delete My VPCs and Subnets? ` | +-----------------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2020-02-25 | Added the following content: | @@ -235,7 +239,7 @@ Change History | | | | | - Updated screenshots in :ref:`Adding a Security Group Rule ` and :ref:`Fast-Adding Security Group Rules `. | | | - Optimized figure examples in this document. | -| | - Optimized descriptions in :ref:`Firewall Configuration Examples `. | +| | - Optimized descriptions in :ref:`Firewall Configuration Example `. | | | - Optimized descriptions in :ref:`Firewall Overview `. | | | - Changed the position of :ref:`Access Control `. | | | - Optimized :ref:`What Is a Quota? ` | @@ -268,7 +272,7 @@ Change History | | - Optimized description about the scenario in :ref:`Creating an Alarm Rule `. | | | - Updated screenshots in :ref:`Adding a Security Group Rule ` and :ref:`Fast-Adding Security Group Rules `. | | | - Optimized figure examples in this document. | -| | - Optimized descriptions in :ref:`Firewall Configuration Examples `. | +| | - Optimized descriptions in :ref:`Firewall Configuration Example `. | | | - Optimized descriptions in :ref:`Firewall Overview `. | | | - Changed the position of :ref:`Access Control `. | | | | diff --git a/umn/source/faq/security/does_a_security_group_rule_or_a_firewall_rule_immediately_take_effect_for_existing_connections_after_it_is_modified.rst b/umn/source/faq/security/does_a_modified_security_group_rule_or_a_firewall_rule_take_effect_immediately_for_existing_connections.rst similarity index 50% rename from umn/source/faq/security/does_a_security_group_rule_or_a_firewall_rule_immediately_take_effect_for_existing_connections_after_it_is_modified.rst rename to umn/source/faq/security/does_a_modified_security_group_rule_or_a_firewall_rule_take_effect_immediately_for_existing_connections.rst index f712623..bbc1a33 100644 --- a/umn/source/faq/security/does_a_security_group_rule_or_a_firewall_rule_immediately_take_effect_for_existing_connections_after_it_is_modified.rst +++ b/umn/source/faq/security/does_a_modified_security_group_rule_or_a_firewall_rule_take_effect_immediately_for_existing_connections.rst @@ -2,23 +2,23 @@ .. _vpc_faq_0074: -Does a Security Group Rule or a Firewall Rule Immediately Take Effect for Existing Connections After It Is Modified? -==================================================================================================================== +Does a Modified Security Group Rule or a Firewall Rule Take Effect Immediately for Existing Connections? +======================================================================================================== -- Security groups use connection tracking to track traffic to and from instances. If the inbound rule of a security group is modified, the new rule immediately takes effect for the existing traffic. Changes to outbound security group rules do not affect existing persistent connections and take effect only for new connections. +- Security groups use connection tracking to track traffic to and from instances. If an inbound rule is modified, the modified rule immediately takes effect for the existing traffic. Changes to outbound security group rules do not affect existing persistent connections and take effect only for new connections. - If you add, modify, or delete a security group rule, or add or remove an instance to or from a security group, the inbound connection of all instances in the security group will be automatically cleared. + If you add, modify, or delete a security group rule, or add or remove an instance to or from a security group, the inbound connections of all instances in the security group will be automatically cleared. - - The existing inbound persistent connections are disconnected. All the new connections matches against the new rules. - - The existing outbound persistent connections will not be disconnected. All the new connections matches against the new rules. + - The existing inbound persistent connections will be disconnected. All the new connections will match the new rules. + - The existing outbound persistent connections will not be disconnected, and the original rule will still be applied. All the new connections will match the new rules. - Firewalls use connection tracking to track traffic to and from instances. Changes to inbound and outbound rules do not take effect immediately for the existing traffic. - If you add, modify, or delete a firewall rule, or add or remove a subnet to or from a firewall, all the inbound and outbound persistent connections will not be disconnected New rules only apply to the new connections. + If you add, modify, or delete a firewall rule, or associate or diassociate a subnet with or from a firewall, all the inbound and outbound persistent connections will not be disconnected New rules will only be applied for the new connections. .. important:: - After a persistent connection is disconnected, new connection will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period expires(30s). + After a persistent connection is disconnected, new connections will not be established immediately until the timeout period of connection tracking expires. For example, after an ICMP persistent connection is disconnected, a new connection will be established and a new rule will apply when the timeout period (30s) expires. - The timeout period of connection tracking varies by protocol. The timeout period of a TCP connection in the established state is 600s, and that of an ICMP connection is 30s. For other protocols, if packets are received in both inbound and outbound directions, the connection tracking timeout period is 180s. If packets are received only in one direction, the connection tracking timeout period is 30s. - The timeout period of TCP connections varies by connection status. The timeout period of a TCP connection in the established state is 600s, and that of a TCP connection in the FIN-WAIT state is 30s. diff --git a/umn/source/faq/security/index.rst b/umn/source/faq/security/index.rst index 8db4944..cbe924f 100644 --- a/umn/source/faq/security/index.rst +++ b/umn/source/faq/security/index.rst @@ -8,7 +8,7 @@ Security - :ref:`Why Can't I Delete a Security Group? ` - :ref:`Can I Change the Security Group of an ECS? ` - :ref:`How Do I Configure a Security Group for Multi-Channel Protocols? ` -- :ref:`Does a Security Group Rule or a Firewall Rule Immediately Take Effect for Existing Connections After It Is Modified? ` +- :ref:`Does a Modified Security Group Rule or a Firewall Rule Take Effect Immediately for Existing Connections? ` - :ref:`Which Security Group Rule Has a High Priority When Multiple Security Group Rules Conflict? ` .. toctree:: @@ -18,5 +18,5 @@ Security why_cant_i_delete_a_security_group can_i_change_the_security_group_of_an_ecs how_do_i_configure_a_security_group_for_multi-channel_protocols - does_a_security_group_rule_or_a_firewall_rule_immediately_take_effect_for_existing_connections_after_it_is_modified + does_a_modified_security_group_rule_or_a_firewall_rule_take_effect_immediately_for_existing_connections which_security_group_rule_has_a_high_priority_when_multiple_security_group_rules_conflict