| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | package proxy
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | import (
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 	"path/filepath"
 | 
					
						
							|  |  |  | 	"strings"
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	"testing"
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-09-14 09:36:06 +01:00
										 |  |  | 	"github.com/coredns/coredns/plugin/test"
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 	"github.com/mholt/caddy"
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | )
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-02-07 18:01:16 +00:00
										 |  |  | func TestAllowedDomain(t *testing.T) {
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	upstream := &staticUpstream{
 | 
					
						
							| 
									
										
										
										
											2016-03-19 16:11:30 +00:00
										 |  |  | 		from:              "miek.nl.",
 | 
					
						
							| 
									
										
										
										
											2017-02-07 18:01:16 +00:00
										 |  |  | 		IgnoredSubDomains: []string{"download.miek.nl.", "static.miek.nl."}, // closing dot mandatory
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	}
 | 
					
						
							|  |  |  | 	tests := []struct {
 | 
					
						
							| 
									
										
										
										
											2016-03-19 16:11:30 +00:00
										 |  |  | 		name     string
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 		expected bool
 | 
					
						
							|  |  |  | 	}{
 | 
					
						
							| 
									
										
										
										
											2016-03-19 16:11:30 +00:00
										 |  |  | 		{"miek.nl.", true},
 | 
					
						
							|  |  |  | 		{"download.miek.nl.", false},
 | 
					
						
							|  |  |  | 		{"static.miek.nl.", false},
 | 
					
						
							|  |  |  | 		{"blaat.miek.nl.", true},
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	}
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	for i, test := range tests {
 | 
					
						
							| 
									
										
										
										
											2017-02-07 18:01:16 +00:00
										 |  |  | 		isAllowed := upstream.IsAllowedDomain(test.name)
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 		if test.expected != isAllowed {
 | 
					
						
							| 
									
										
										
										
											2016-04-12 22:34:44 +01:00
										 |  |  | 			t.Errorf("Test %d: expected %v found %v for %s", i+1, test.expected, isAllowed, test.name)
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 		}
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 
 | 
					
						
							|  |  |  | func TestProxyParse(t *testing.T) {
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | 	rmFunc, cert, key, ca := getPEMFiles(t)
 | 
					
						
							|  |  |  | 	defer rmFunc()
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	grpc1 := "proxy . 8.8.8.8:53 {\n protocol grpc " + ca + "\n}"
 | 
					
						
							|  |  |  | 	grpc2 := "proxy . 8.8.8.8:53 {\n protocol grpc " + cert + " " + key + "\n}"
 | 
					
						
							|  |  |  | 	grpc3 := "proxy . 8.8.8.8:53 {\n protocol grpc " + cert + " " + key + " " + ca + "\n}"
 | 
					
						
							|  |  |  | 	grpc4 := "proxy . 8.8.8.8:53 {\n protocol grpc " + key + "\n}"
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 	tests := []struct {
 | 
					
						
							|  |  |  | 		inputUpstreams string
 | 
					
						
							|  |  |  | 		shouldErr      bool
 | 
					
						
							|  |  |  | 	}{
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`proxy . 8.8.8.8:53`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 		{
 | 
					
						
							|  |  |  | 			`proxy 10.0.0.0/24 8.8.8.8:53`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     policy round_robin
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     fail_timeout 5s
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     max_fails 10
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     health_check /health:8080
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  |     except miek.nl example.org 10.0.0.0/24
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     spray
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  |     error_option
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . some_bogus_filename`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							| 
									
										
										
										
											2017-01-15 08:12:58 +00:00
										 |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol dns
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol grpc
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol grpc insecure
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							| 
									
										
										
										
											2017-03-14 21:32:21 +00:00
										 |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol dns force_tcp
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol grpc a b c d
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			grpc1,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			grpc2,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			grpc3,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			grpc4,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol foobar
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`proxy`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							| 
									
										
										
										
											2017-01-15 08:12:58 +00:00
										 |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol foobar
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	policy
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	fail_timeout
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	fail_timeout junky
 | 
					
						
							|  |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	health_check
 | 
					
						
							| 
									
										
										
										
											2017-03-14 21:32:21 +00:00
										 |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . 8.8.8.8:53 {
 | 
					
						
							|  |  |  | 	protocol dns force
 | 
					
						
							| 
									
										
										
										
											2017-01-15 08:12:58 +00:00
										 |  |  | }`,
 | 
					
						
							|  |  |  | 			true,
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 	}
 | 
					
						
							|  |  |  | 	for i, test := range tests {
 | 
					
						
							|  |  |  | 		c := caddy.NewTestController("dns", test.inputUpstreams)
 | 
					
						
							|  |  |  | 		_, err := NewStaticUpstreams(&c.Dispenser)
 | 
					
						
							|  |  |  | 		if (err != nil) != test.shouldErr {
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | 			t.Errorf("Test %d expected no error, got %v for %s", i+1, err, test.inputUpstreams)
 | 
					
						
							| 
									
										
										
										
											2016-09-16 23:49:35 -07:00
										 |  |  | 		}
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 
 | 
					
						
							|  |  |  | func TestResolvParse(t *testing.T) {
 | 
					
						
							|  |  |  | 	tests := []struct {
 | 
					
						
							|  |  |  | 		inputUpstreams string
 | 
					
						
							|  |  |  | 		filedata       string
 | 
					
						
							|  |  |  | 		shouldErr      bool
 | 
					
						
							|  |  |  | 		expected       []string
 | 
					
						
							|  |  |  | 	}{
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy . FILE
 | 
					
						
							|  |  |  | `,
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | nameserver 1.2.3.4
 | 
					
						
							|  |  |  | nameserver 4.3.2.1
 | 
					
						
							|  |  |  | `,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 			[]string{"1.2.3.4:53", "4.3.2.1:53"},
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy example.com 1.1.1.1:5000
 | 
					
						
							|  |  |  | proxy . FILE
 | 
					
						
							|  |  |  | proxy example.org 2.2.2.2:1234
 | 
					
						
							|  |  |  | `,
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | nameserver 1.2.3.4
 | 
					
						
							|  |  |  | `,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 			[]string{"1.1.1.1:5000", "1.2.3.4:53", "2.2.2.2:1234"},
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 		{
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							|  |  |  | proxy example.com 1.1.1.1:5000
 | 
					
						
							|  |  |  | proxy . FILE
 | 
					
						
							|  |  |  | proxy example.org 2.2.2.2:1234
 | 
					
						
							|  |  |  | `,
 | 
					
						
							|  |  |  | 			`
 | 
					
						
							| 
									
										
										
										
											2018-01-08 15:03:42 +00:00
										 |  |  | junky resolv.conf
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | `,
 | 
					
						
							|  |  |  | 			false,
 | 
					
						
							|  |  |  | 			[]string{"1.1.1.1:5000", "2.2.2.2:1234"},
 | 
					
						
							|  |  |  | 		},
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 	for i, tc := range tests {
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 		path, rm, err := test.TempFile(".", tc.filedata)
 | 
					
						
							|  |  |  | 		if err != nil {
 | 
					
						
							| 
									
										
										
										
											2018-08-14 17:55:55 +02:00
										 |  |  | 			t.Fatalf("Test %d could not create temp file %v", i, err)
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 		}
 | 
					
						
							|  |  |  | 		defer rm()
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 		config := strings.Replace(tc.inputUpstreams, "FILE", path, -1)
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 		c := caddy.NewTestController("dns", config)
 | 
					
						
							|  |  |  | 		upstreams, err := NewStaticUpstreams(&c.Dispenser)
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 		if (err != nil) != tc.shouldErr {
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 			t.Errorf("Test %d expected no error, got %v", i+1, err)
 | 
					
						
							|  |  |  | 		}
 | 
					
						
							|  |  |  | 		var hosts []string
 | 
					
						
							|  |  |  | 		for _, u := range upstreams {
 | 
					
						
							|  |  |  | 			for _, h := range u.(*staticUpstream).Hosts {
 | 
					
						
							|  |  |  | 				hosts = append(hosts, h.Name)
 | 
					
						
							|  |  |  | 			}
 | 
					
						
							|  |  |  | 		}
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 		if !tc.shouldErr {
 | 
					
						
							|  |  |  | 			if len(hosts) != len(tc.expected) {
 | 
					
						
							|  |  |  | 				t.Errorf("Test %d expected %d hosts got %d", i+1, len(tc.expected), len(upstreams))
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 			} else {
 | 
					
						
							|  |  |  | 				ok := true
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 				for i, v := range tc.expected {
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 					if v != hosts[i] {
 | 
					
						
							|  |  |  | 						ok = false
 | 
					
						
							|  |  |  | 					}
 | 
					
						
							|  |  |  | 				}
 | 
					
						
							|  |  |  | 				if !ok {
 | 
					
						
							| 
									
										
										
										
											2017-08-13 18:16:25 +01:00
										 |  |  | 					t.Errorf("Test %d expected %v got %v", i+1, tc.expected, upstreams)
 | 
					
						
							| 
									
										
										
										
											2016-10-22 10:52:10 -04:00
										 |  |  | 				}
 | 
					
						
							|  |  |  | 			}
 | 
					
						
							|  |  |  | 		}
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-01-08 15:03:42 +00:00
										 |  |  | func TestMaxTo(t *testing.T) {
 | 
					
						
							|  |  |  | 	// Has 16 IP addresses.
 | 
					
						
							|  |  |  | 	config := `proxy . 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1 1.1.1.1`
 | 
					
						
							|  |  |  | 	c := caddy.NewTestController("dns", config)
 | 
					
						
							|  |  |  | 	_, err := NewStaticUpstreams(&c.Dispenser)
 | 
					
						
							|  |  |  | 	if err == nil {
 | 
					
						
							|  |  |  | 		t.Error("Expected to many TOs configured, but nil")
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-02-14 22:20:20 -05:00
										 |  |  | func getPEMFiles(t *testing.T) (rmFunc func(), cert, key, ca string) {
 | 
					
						
							|  |  |  | 	tempDir, rmFunc, err := test.WritePEMFiles("")
 | 
					
						
							|  |  |  | 	if err != nil {
 | 
					
						
							|  |  |  | 		t.Fatalf("Could not write PEM files: %s", err)
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	cert = filepath.Join(tempDir, "cert.pem")
 | 
					
						
							|  |  |  | 	key = filepath.Join(tempDir, "key.pem")
 | 
					
						
							|  |  |  | 	ca = filepath.Join(tempDir, "ca.pem")
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	return
 | 
					
						
							|  |  |  | }
 |