0gsphinx.addnodesdocument)}( rawsourcechildren]( translations LanguagesNode)}(hhh](h pending_xref)}(hhh]docutils.nodesTextChinese (Simplified)}parenthsba attributes}(ids]classes]names]dupnames]backrefs] refdomainstdreftypedoc reftarget(/translations/zh_CN/networking/xfrm_syncmodnameN classnameN refexplicitutagnamehhh ubh)}(hhh]hChinese (Traditional)}hh2sbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/zh_TW/networking/xfrm_syncmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hItalian}hhFsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/it_IT/networking/xfrm_syncmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hJapanese}hhZsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/ja_JP/networking/xfrm_syncmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hKorean}hhnsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/ko_KR/networking/xfrm_syncmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hSpanish}hhsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget(/translations/sp_SP/networking/xfrm_syncmodnameN classnameN refexplicituh1hhh ubeh}(h]h ]h"]h$]h&]current_languageEnglishuh1h hh _documenthsourceNlineNubhcomment)}(h SPDX-License-Identifier: GPL-2.0h]h SPDX-License-Identifier: GPL-2.0}hhsbah}(h]h ]h"]h$]h&] xml:spacepreserveuh1hhhhhhB/var/lib/git/docbuild/linux/Documentation/networking/xfrm_sync.rsthKubhsection)}(hhh](htitle)}(hXFRMh]hXFRM}(hhhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhhhhhKubh paragraph)}(hThe sync patches work is based on initial patches from Krisztian and others and additional patches from Jamal .h](hBThe sync patches work is based on initial patches from Krisztian <}(hhhhhNhNubh reference)}(hhidden@balabit.huh]hhidden@balabit.hu}(hhhhhNhNubah}(h]h ]h"]h$]h&]refurimailto:hidden@balabit.huuh1hhhubh0> and others and additional patches from Jamal <}(hhhhhNhNubh)}(hhadi@cyberus.cah]hhadi@cyberus.ca}(hhhhhNhNubah}(h]h ]h"]h$]h&]refurimailto:hadi@cyberus.cauh1hhhubh>.}(hhhhhNhNubeh}(h]h ]h"]h$]h&]uh1hhhhKhhhhubh)}(hX,The end goal for syncing is to be able to insert attributes + generate events so that the SA can be safely moved from one machine to another for HA purposes. The idea is to synchronize the SA so that the takeover machine can do the processing of the SA as accurate as possible if it has access to it.h]hX,The end goal for syncing is to be able to insert attributes + generate events so that the SA can be safely moved from one machine to another for HA purposes. The idea is to synchronize the SA so that the takeover machine can do the processing of the SA as accurate as possible if it has access to it.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK hhhhubh)}(hX6We already have the ability to generate SA add/del/upd events. These patches add ability to sync and have accurate lifetime byte (to ensure proper decay of SAs) and replay counters to avoid replay attacks with as minimal loss at failover time. This way a backup stays as closely up-to-date as an active member.h]hX6We already have the ability to generate SA add/del/upd events. These patches add ability to sync and have accurate lifetime byte (to ensure proper decay of SAs) and replay counters to avoid replay attacks with as minimal loss at failover time. This way a backup stays as closely up-to-date as an active member.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhhhhubh)}(hXBecause the above items change for every packet the SA receives, it is possible for a lot of the events to be generated. For this reason, we also add a nagle-like algorithm to restrict the events. i.e we are going to set thresholds to say "let me know if the replay sequence threshold is reached or 10 secs have passed" These thresholds are set system-wide via sysctls or can be updated per SA.h]hXBecause the above items change for every packet the SA receives, it is possible for a lot of the events to be generated. For this reason, we also add a nagle-like algorithm to restrict the events. i.e we are going to set thresholds to say “let me know if the replay sequence threshold is reached or 10 secs have passed” These thresholds are set system-wide via sysctls or can be updated per SA.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhhhhubh)}(hX7The identified items that need to be synchronized are: - the lifetime byte counter note that: lifetime time limit is not important if you assume the failover machine is known ahead of time since the decay of the time countdown is not driven by packet arrival. - the replay sequence for both inbound and outboundh]hX7The identified items that need to be synchronized are: - the lifetime byte counter note that: lifetime time limit is not important if you assume the failover machine is known ahead of time since the decay of the time countdown is not driven by packet arrival. - the replay sequence for both inbound and outbound}(hj-hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhhhhubh)}(hhh](h)}(h1) Message Structureh]h1) Message Structure}(hj>hhhNhNubah}(h]h ]h"]h$]h&]uh1hhj;hhhhhK'ubh)}(h!nlmsghdr:aevent_id:optional-TLVs.h]h!nlmsghdr:aevent_id:optional-TLVs.}(hjLhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK)hj;hhubh)}(hThe netlink message types are:h]hThe netlink message types are:}(hjZhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK+hj;hhubh)}(h"XFRM_MSG_NEWAE and XFRM_MSG_GETAE.h]h"XFRM_MSG_NEWAE and XFRM_MSG_GETAE.}(hjhhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK-hj;hhubh)}(h$A XFRM_MSG_GETAE does not have TLVs.h]h$A XFRM_MSG_GETAE does not have TLVs.}(hjvhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK/hj;hhubh)}(hMA XFRM_MSG_NEWAE will have at least two TLVs (as is discussed further below).h]hMA XFRM_MSG_NEWAE will have at least two TLVs (as is discussed further below).}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK1hj;hhubh)}(h aevent_id structure looks like::h]haevent_id structure looks like:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK4hj;hhubh literal_block)}(hstruct xfrm_aevent_id { struct xfrm_usersa_id sa_id; xfrm_address_t saddr; __u32 flags; __u32 reqid; };h]hstruct xfrm_aevent_id { struct xfrm_usersa_id sa_id; xfrm_address_t saddr; __u32 flags; __u32 reqid; };}hjsbah}(h]h ]h"]h$]h&]hhuh1jhhhK6hj;hhubh)}(hRThe unique SA is identified by the combination of xfrm_usersa_id, reqid and saddr.h]hRThe unique SA is identified by the combination of xfrm_usersa_id, reqid and saddr.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK=hj;hhubh)}(hEflags are used to indicate different things. The possible flags are::h]hDflags are used to indicate different things. The possible flags are:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK@hj;hhubj)}(hX/XFRM_AE_RTHR=1, /* replay threshold*/ XFRM_AE_RVAL=2, /* replay value */ XFRM_AE_LVAL=4, /* lifetime value */ XFRM_AE_ETHR=8, /* expiry timer threshold */ XFRM_AE_CR=16, /* Event cause is replay update */ XFRM_AE_CE=32, /* Event cause is timer expiry */ XFRM_AE_CU=64, /* Event cause is policy update */h]hX/XFRM_AE_RTHR=1, /* replay threshold*/ XFRM_AE_RVAL=2, /* replay value */ XFRM_AE_LVAL=4, /* lifetime value */ XFRM_AE_ETHR=8, /* expiry timer threshold */ XFRM_AE_CR=16, /* Event cause is replay update */ XFRM_AE_CE=32, /* Event cause is timer expiry */ XFRM_AE_CU=64, /* Event cause is policy update */}hjsbah}(h]h ]h"]h$]h&]hhuh1jhhhKChj;hhubh)}(hHow these flags are used is dependent on the direction of the message (kernel<->user) as well the cause (config, query or event). This is described below in the different messages.h]hHow these flags are used is dependent on the direction of the message (kernel<->user) as well the cause (config, query or event). This is described below in the different messages.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKKhj;hhubh)}(hThe pid will be set appropriately in netlink to recognize direction (0 to the kernel and pid = processid that created the event when going from kernel to user space)h]hThe pid will be set appropriately in netlink to recognize direction (0 to the kernel and pid = processid that created the event when going from kernel to user space)}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKOhj;hhubh)}(hbA program needs to subscribe to multicast group XFRMNLGRP_AEVENTS to get notified of these events.h]hbA program needs to subscribe to multicast group XFRMNLGRP_AEVENTS to get notified of these events.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKShj;hhubeh}(h]message-structureah ]h"]1) message structureah$]h&]uh1hhhhhhhhK'ubh)}(hhh](h)}(h)2) TLVS reflect the different parameters:h]h)2) TLVS reflect the different parameters:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhj hhhhhKWubhenumerated_list)}(hhh]h list_item)}(hbyte value (XFRMA_LTIME_VAL) h]h)}(hbyte value (XFRMA_LTIME_VAL)h]hbyte value (XFRMA_LTIME_VAL)}(hj(hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKYhj$ubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubah}(h]h ]h"]h$]h&]enumtype loweralphaprefixhsuffix)uh1jhj hhhhhKYubh)}(hPThis TLV carries the running/current counter for byte lifetime since last event.h]hPThis TLV carries the running/current counter for byte lifetime since last event.}(hjGhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK[hj hhubh)}(h!b)replay value (XFRMA_REPLAY_VAL)h]h!b)replay value (XFRMA_REPLAY_VAL)}(hjUhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK^hj hhubh)}(hRThis TLV carries the running/current counter for replay sequence since last event.h]hRThis TLV carries the running/current counter for replay sequence since last event.}(hjchhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK`hj hhubh)}(h(c)replay threshold (XFRMA_REPLAY_THRESH)h]h(c)replay threshold (XFRMA_REPLAY_THRESH)}(hjqhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKchj hhubh)}(hoThis TLV carries the threshold being used by the kernel to trigger events when the replay sequence is exceeded.h]hoThis TLV carries the threshold being used by the kernel to trigger events when the replay sequence is exceeded.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKehj hhubj)}(hhh]j#)}(h#expiry timer (XFRMA_ETIMER_THRESH) h]h)}(h"expiry timer (XFRMA_ETIMER_THRESH)h]h"expiry timer (XFRMA_ETIMER_THRESH)}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhhjubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubah}(h]h ]h"]h$]h&]jBjCjDhjEjFstartKuh1jhj hhhhhKhubh)}(h`This is a timer value in milliseconds which is used as the nagle value to rate limit the events.h]h`This is a timer value in milliseconds which is used as the nagle value to rate limit the events.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKjhj hhubeh}(h]%tlvs-reflect-the-different-parametersah ]h"])2) tlvs reflect the different parameters:ah$]h&]uh1hhhhhhhhKWubh)}(hhh](h)}(h-3) Default configurations for the parameters:h]h-3) Default configurations for the parameters:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhjhhhhhKnubh)}(hBy default these events should be turned off unless there is at least one listener registered to listen to the multicast group XFRMNLGRP_AEVENTS.h]hBy default these events should be turned off unless there is at least one listener registered to listen to the multicast group XFRMNLGRP_AEVENTS.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKphjhhubh)}(hPrograms installing SAs will need to specify the two thresholds, however, in order to not change existing applications such as racoon we also provide default threshold values for these different parameters in case they are not specified.h]hPrograms installing SAs will need to specify the two thresholds, however, in order to not change existing applications such as racoon we also provide default threshold values for these different parameters in case they are not specified.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKthjhhubh)}(h!the two sysctls/proc entries are:h]h!the two sysctls/proc entries are:}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKyhjhhubh)}(ha) /proc/sys/net/core/sysctl_xfrm_aevent_etime used to provide default values for the XFRMA_ETIMER_THRESH in incremental units of time of 100ms. The default is 10 (1 second)h]ha) /proc/sys/net/core/sysctl_xfrm_aevent_etime used to provide default values for the XFRMA_ETIMER_THRESH in incremental units of time of 100ms. The default is 10 (1 second)}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhK{hjhhubh)}(hb) /proc/sys/net/core/sysctl_xfrm_aevent_rseqth used to provide default values for XFRMA_REPLAY_THRESH parameter in incremental packet count. The default is two packets.h]hb) /proc/sys/net/core/sysctl_xfrm_aevent_rseqth used to provide default values for XFRMA_REPLAY_THRESH parameter in incremental packet count. The default is two packets.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjhhubeh}(h])default-configurations-for-the-parametersah ]h"]-3) default configurations for the parameters:ah$]h&]uh1hhhhhhhhKnubh)}(hhh](h)}(h4) Message typesh]h4) Message types}(hj'hhhNhNubah}(h]h ]h"]h$]h&]uh1hhj$hhhhhKubj)}(hhh]j#)}(hPXFRM_MSG_GETAE issued by user-->kernel. XFRM_MSG_GETAE does not carry any TLVs. h]h)}(hOXFRM_MSG_GETAE issued by user-->kernel. XFRM_MSG_GETAE does not carry any TLVs.h]hOXFRM_MSG_GETAE issued by user-->kernel. XFRM_MSG_GETAE does not carry any TLVs.}(hj<hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj8ubah}(h]h ]h"]h$]h&]uh1j"hj5hhhhhNubah}(h]h ]h"]h$]h&]jBjCjDhjEjFuh1jhj$hhhhhKubh)}(h]The response is a XFRM_MSG_NEWAE which is formatted based on what XFRM_MSG_GETAE queried for.h]h]The response is a XFRM_MSG_NEWAE which is formatted based on what XFRM_MSG_GETAE queried for.}(hjVhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubh)}(hThe response will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs. * if XFRM_AE_RTHR flag is set, then XFRMA_REPLAY_THRESH is also retrieved * if XFRM_AE_ETHR flag is set, then XFRMA_ETIMER_THRESH is also retrievedh]hThe response will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs. * if XFRM_AE_RTHR flag is set, then XFRMA_REPLAY_THRESH is also retrieved * if XFRM_AE_ETHR flag is set, then XFRMA_ETIMER_THRESH is also retrieved}(hjdhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubj)}(hhh]j#)}(hxXFRM_MSG_NEWAE is issued by either user space to configure or kernel to announce events or respond to a XFRM_MSG_GETAE. h]h)}(hwXFRM_MSG_NEWAE is issued by either user space to configure or kernel to announce events or respond to a XFRM_MSG_GETAE.h]hwXFRM_MSG_NEWAE is issued by either user space to configure or kernel to announce events or respond to a XFRM_MSG_GETAE.}(hjyhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjuubah}(h]h ]h"]h$]h&]uh1j"hjrhhhhhNubah}(h]h ]h"]h$]h&]jBjCjDhjEjFjKuh1jhj$hhhhhKubj)}(hhh]j#)}(h,user --> kernel to configure a specific SA. h]h)}(h+user --> kernel to configure a specific SA.h]h+user --> kernel to configure a specific SA.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubah}(h]h ]h"]h$]h&]jB lowerromanjDhjEjFuh1jhj$hhhhhKubh)}(hXany of the values or threshold parameters can be updated by passing the appropriate TLV.h]hXany of the values or threshold parameters can be updated by passing the appropriate TLV.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubh)}(hUA response is issued back to the sender in user space to indicate success or failure.h]hUA response is issued back to the sender in user space to indicate success or failure.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubh)}(hwIn the case of success, additionally an event with XFRM_MSG_NEWAE is also issued to any listeners as described in iii).h]hwIn the case of success, additionally an event with XFRM_MSG_NEWAE is also issued to any listeners as described in iii).}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubj)}(hhh]j#)}(h7kernel->user direction as a response to XFRM_MSG_GETAE h]h)}(h6kernel->user direction as a response to XFRM_MSG_GETAEh]h6kernel->user direction as a response to XFRM_MSG_GETAE}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubah}(h]h ]h"]h$]h&]jBjjDhjEjFjKuh1jhj$hhhhhKubh)}(hHThe response will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.h]hHThe response will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubh)}(hZThe threshold TLVs will be included if explicitly requested in the XFRM_MSG_GETAE message.h]hZThe threshold TLVs will be included if explicitly requested in the XFRM_MSG_GETAE message.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubj)}(hhh](j#)}(hX8kernel->user to report as event if someone sets any values or thresholds for an SA using XFRM_MSG_NEWAE (as described in #i above). In such a case XFRM_AE_CU flag is set to inform the user that the change happened as a result of an update. The message will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs. h]h)}(hX7kernel->user to report as event if someone sets any values or thresholds for an SA using XFRM_MSG_NEWAE (as described in #i above). In such a case XFRM_AE_CU flag is set to inform the user that the change happened as a result of an update. The message will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.h]hX7kernel->user to report as event if someone sets any values or thresholds for an SA using XFRM_MSG_NEWAE (as described in #i above). In such a case XFRM_AE_CU flag is set to inform the user that the change happened as a result of an update. The message will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.}(hj#hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubj#)}(hMkernel->user to report event when replay threshold or a timeout is exceeded. h]h)}(hLkernel->user to report event when replay threshold or a timeout is exceeded.h]hLkernel->user to report event when replay threshold or a timeout is exceeded.}(hj;hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj7ubah}(h]h ]h"]h$]h&]uh1j"hjhhhhhNubeh}(h]h ]h"]h$]h&]jBjjDhjEjFjKuh1jhj$hhhhhKubh)}(hIn such a case either XFRM_AE_CR (replay exceeded) or XFRM_AE_CE (timeout happened) is set to inform the user what happened. Note the two flags are mutually exclusive. The message will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.h]hIn such a case either XFRM_AE_CR (replay exceeded) or XFRM_AE_CE (timeout happened) is set to inform the user what happened. Note the two flags are mutually exclusive. The message will always have XFRMA_LTIME_VAL and XFRMA_REPLAY_VAL TLVs.}(hjUhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj$hhubeh}(h] message-typesah ]h"]4) message typesah$]h&]uh1hhhhhhhhKubh)}(hhh](h)}(h Exceptions to threshold settingsh]h Exceptions to threshold settings}(hjnhhhNhNubah}(h]h ]h"]h$]h&]uh1hhjkhhhhhKubh)}(hXIf you have an SA that is getting hit by traffic in bursts such that there is a period where the timer threshold expires with no packets seen, then an odd behavior is seen as follows: The first packet arrival after a timer expiry will trigger a timeout event; i.e we don't wait for a timeout period or a packet threshold to be reached. This is done for simplicity and efficiency reasons.h]hXIf you have an SA that is getting hit by traffic in bursts such that there is a period where the timer threshold expires with no packets seen, then an odd behavior is seen as follows: The first packet arrival after a timer expiry will trigger a timeout event; i.e we don’t wait for a timeout period or a packet threshold to be reached. This is done for simplicity and efficiency reasons.}(hj|hhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjkhhubh)}(h-JHSh]h-JHS}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhjkhhubeh}(h] exceptions-to-threshold-settingsah ]h"] exceptions to threshold settingsah$]h&]uh1hhhhhhhhKubeh}(h]xfrmah ]h"]xfrmah$]h&]uh1hhhhhhhhKubeh}(h]h ]h"]h$]h&]sourcehuh1hcurrent_sourceN current_lineNsettingsdocutils.frontendValues)}(hN generatorN datestampN source_linkN source_urlN toc_backlinksentryfootnote_backlinksK sectnum_xformKstrip_commentsNstrip_elements_with_classesN strip_classesN report_levelK halt_levelKexit_status_levelKdebugNwarning_streamN tracebackinput_encoding utf-8-siginput_encoding_error_handlerstrictoutput_encodingutf-8output_encoding_error_handlerjerror_encodingutf-8error_encoding_error_handlerbackslashreplace language_codeenrecord_dependenciesNconfigN id_prefixhauto_id_prefixid dump_settingsNdump_internalsNdump_transformsNdump_pseudo_xmlNexpose_internalsNstrict_visitorN_disable_configN_sourceh _destinationN _config_files]7/var/lib/git/docbuild/linux/Documentation/docutils.confafile_insertion_enabled raw_enabledKline_length_limitM'pep_referencesN pep_base_urlhttps://peps.python.org/pep_file_url_templatepep-%04drfc_referencesN rfc_base_url&https://datatracker.ietf.org/doc/html/ tab_widthKtrim_footnote_reference_spacesyntax_highlightlong smart_quotessmartquotes_locales]character_level_inline_markupdoctitle_xform docinfo_xformKsectsubtitle_xform image_loadinglinkembed_stylesheetcloak_email_addressessection_self_linkenvNubreporterNindirect_targets]substitution_defs}substitution_names}refnames}refids}nameids}(jjj jjjj!jjhjejju nametypes}(jj jj!jhjuh}(jhjj;jj jjjej$jjku footnote_refs} citation_refs} autofootnotes]autofootnote_refs]symbol_footnotes]symbol_footnote_refs] footnotes] citations]autofootnote_startKsymbol_footnote_startK id_counter collectionsCounter}Rparse_messages](hsystem_message)}(hhh]h)}(h:Enumerated list start value not ordinal-1: "d" (ordinal 4)h]h>Enumerated list start value not ordinal-1: “d” (ordinal 4)}(hj2hhhNhNubah}(h]h ]h"]h$]h&]uh1hhj/ubah}(h]h ]h"]h$]h&]levelKtypeINFOsourcehlineKuh1j-hj hhhhhKhubj.)}(hhh]h)}(h:Enumerated list start value not ordinal-1: "b" (ordinal 2)h]h>Enumerated list start value not ordinal-1: “b” (ordinal 2)}(hjNhhhNhNubah}(h]h ]h"]h$]h&]uh1hhjKubah}(h]h ]h"]h$]h&]levelKtypejHsourcehlineKuh1j-hj$hhhhhKubj.)}(hhh]h)}(h;Enumerated list start value not ordinal-1: "ii" (ordinal 2)h]h?Enumerated list start value not ordinal-1: “ii” (ordinal 2)}(hjihhhNhNubah}(h]h ]h"]h$]h&]uh1hhjfubah}(h]h ]h"]h$]h&]levelKtypejHsourcehlineKuh1j-hj$hhhhhKubj.)}(hhh]h)}(h