From 1b9873cae990cf446584f08299fd91037d3e2117 Mon Sep 17 00:00:00 2001
From: Wambugu <wambugumacharia35@gmail.com>
Date: Wed, 26 Oct 2022 18:16:05 +0300
Subject: [PATCH] Renaming IPWhiteList to IPAllowList

---
 .../assets/img/middleware/ipwhitelist.png     | Bin 59469 -> 0 bytes
 docs/content/middlewares/http/chain.md        |  16 ++--
 .../http/{ipwhitelist.md => ipallowlist.md}   |  90 +++++++++---------
 docs/content/middlewares/http/overview.md     |   2 +-
 .../tcp/{ipwhitelist.md => ipallowlist.md}    |  26 ++---
 docs/content/middlewares/tcp/overview.md      |  46 ++++-----
 docs/content/migration/v2-to-v3.md            |  18 ++++
 docs/content/operations/dashboard.md          |   2 +-
 docs/content/providers/file.md                |   2 +-
 .../dynamic-configuration/docker-labels.yml   |   8 +-
 .../reference/dynamic-configuration/file.toml |   6 +-
 .../reference/dynamic-configuration/file.yaml |   4 +-
 .../kubernetes-crd-definition-v1.yml          |  16 ++--
 .../kubernetes-crd-resource.yml               |   2 +-
 .../reference/dynamic-configuration/kv-ref.md |  14 +--
 .../marathon-labels.json                      |   8 +-
 .../traefik.containo.us_middlewares.yaml      |  12 +--
 .../traefik.containo.us_middlewaretcps.yaml   |   4 +-
 .../routing/providers/kubernetes-crd.md       |   8 +-
 docs/content/routing/routers/index.md         |   4 +-
 docs/mkdocs.yml                               |   5 +-
 integration/access_log_test.go                |   8 +-
 integration/fixtures/k8s/01-traefik-crd.yml   |  16 ++--
 ...e_whitelist.toml => simple_allowlist.toml} |   0
 .../{ip-whitelist.toml => ipallowlist.toml}   |   8 +-
 integration/resources/compose/access_log.yml  |  10 +-
 integration/resources/compose/allowlist.yml   |  41 ++++++++
 integration/resources/compose/whitelist.yml   |  41 --------
 integration/simple_test.go                    |  26 ++---
 integration/tcp_test.go                       |   6 +-
 pkg/api/handler_overview_test.go              |  12 +--
 pkg/api/handler_tcp_test.go                   |  68 ++++++-------
 ...st.json => tcpmiddleware-ipallowlist.json} |   8 +-
 .../tcpmiddlewares-filtered-search.json       |  14 +--
 .../tcpmiddlewares-filtered-status.json       |  14 +--
 pkg/api/testdata/tcpmiddlewares-page2.json    |   8 +-
 pkg/api/testdata/tcpmiddlewares.json          |  20 ++--
 pkg/config/dynamic/fixtures/sample.toml       |   6 +-
 pkg/config/dynamic/middlewares.go             |  10 +-
 pkg/config/dynamic/tcp_middlewares.go         |   6 +-
 pkg/config/dynamic/zz_generated.deepcopy.go   |  72 +++++++-------
 pkg/config/label/label_test.go                |  24 ++---
 pkg/ip/checker_test.go                        |  10 +-
 .../ip_allowlist.go}                          |  38 ++++----
 .../ip_allowlist_test.go}                     |  26 ++---
 .../ip_allowlist.go}                          |  32 +++----
 .../ip_allowlist_test.go}                     |  28 +++---
 pkg/provider/consulcatalog/config_test.go     |   4 +-
 pkg/provider/docker/config_test.go            |   4 +-
 pkg/provider/ecs/config_test.go               |   4 +-
 .../crd/fixtures/tcp/with_middleware.yml      |  12 +--
 .../tcp/with_middleware_crossprovider.yml     |  16 ++--
 .../tcp/with_middleware_multiple_hyphens.yml  |   2 +-
 .../with_middleware_with_cross_namespace.yml  |  12 +--
 pkg/provider/kubernetes/crd/kubernetes.go     |   4 +-
 .../kubernetes/crd/kubernetes_test.go         |  44 ++++-----
 .../crd/traefik/v1alpha1/middleware.go        |   2 +-
 .../crd/traefik/v1alpha1/middlewaretcp.go     |   4 +-
 .../traefik/v1alpha1/zz_generated.deepcopy.go |  12 +--
 pkg/provider/kv/kv_test.go                    |  12 +--
 pkg/provider/marathon/config_test.go          |   6 +-
 pkg/provider/nomad/config_test.go             |   4 +-
 pkg/provider/rancher/config_test.go           |   4 +-
 pkg/redactor/redactor_config_test.go          |   2 +-
 .../testdata/anonymized-dynamic-config.json   |   4 +-
 .../testdata/secured-dynamic-config.json      |   4 +-
 pkg/server/middleware/middlewares.go          |   8 +-
 pkg/server/middleware/tcp/middlewares.go      |   8 +-
 .../components/_commons/PanelMiddlewares.vue  |  12 +--
 69 files changed, 523 insertions(+), 506 deletions(-)
 delete mode 100644 docs/content/assets/img/middleware/ipwhitelist.png
 rename docs/content/middlewares/http/{ipwhitelist.md => ipallowlist.md} (68%)
 rename docs/content/middlewares/tcp/{ipwhitelist.md => ipallowlist.md} (66%)
 create mode 100644 docs/content/migration/v2-to-v3.md
 rename integration/fixtures/{simple_whitelist.toml => simple_allowlist.toml} (100%)
 rename integration/fixtures/tcp/{ip-whitelist.toml => ipallowlist.toml} (83%)
 create mode 100644 integration/resources/compose/allowlist.yml
 delete mode 100644 integration/resources/compose/whitelist.yml
 rename pkg/api/testdata/{tcpmiddleware-ipwhitelist.json => tcpmiddleware-ipallowlist.json} (64%)
 rename pkg/middlewares/{ipwhitelist/ip_whitelist.go => ipallowlist/ip_allowlist.go} (59%)
 rename pkg/middlewares/{ipwhitelist/ip_whitelist_test.go => ipallowlist/ip_allowlist_test.go} (73%)
 rename pkg/middlewares/tcp/{ipwhitelist/ip_whitelist.go => ipallowlist/ip_allowlist.go} (54%)
 rename pkg/middlewares/tcp/{ipwhitelist/ip_whitelist_test.go => ipallowlist/ip_allowlist_test.go} (76%)

diff --git a/docs/content/assets/img/middleware/ipwhitelist.png b/docs/content/assets/img/middleware/ipwhitelist.png
deleted file mode 100644
index 8c6b0c97a5a68d4818584110ccd8f38a19f1ba44..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 59469
zcmYhj1z43^^FI85pp=vdNH<8gG)R|#NJt3M-ALy_%1t-YQqs~5(hXA5AT2H3@U87R
z@Av!f>r!#M_lj9F_uO-@c??xil6j0qga$#-V>ww#RR}_Lh9HD&6h!b2>SfYT_#gJN
zT22teN)7*o;Fc@u0znjzoa9S2x76JQZ)crNZ~6-b1v=W-?dY$X)niZ*9Z7f`QJ&2!
zu6EMeKb+1xRYbLw=x$8LY;&qvOHLoeo~1z^GsbG;O2JFAVEV?!h3=y2znAwaB<CNG
z2&17W9sf|H{CDDrq|XajaFL|?zsPF2EyIwsIM1;oy-t7Y{W?OdgAR{wZ=zMccXc(7
zAiw|Rb8v7zVQp>A4$Y(}f2{EeYub-0-p4*L1?&Ici{YJu)p%cUQF}@-N~Yyr@fiYx
zj!sMYlfJHtW~s#?3w)!cn-na$#hin8vWkafl>QB*r`J1?l{?W>q^7mYVz-A4X`V0c
zr;mSQ{clJJ@++(`L5lMF)=<Se)R?Tmhxm5UD}iS*;3yC!b0y2MoW|M*tyuI5FDX*A
z5G7Svm(Dlpg|EM3%b2U$PjTNXl31%3_nLVn!=wMtkQE(gh{n`@>!()dWW_Nb?R;+!
z86zQ=z4=Dp5hrUTzu)DZl)B6m0-QNJC|eWk(M_~{4=04H^Brn~T)D>Ubl%ifraNU9
zpZQr&8C)fFHm8JMD_9)NjvZ}RuLbYys@6_*?4IH=k<Tm6x3ctM=6wK55ph^+<b{<T
zIz0Hlg>*$fM|}ULgGv&rn3cHR#{6TumcFSh@>WX^E5F%F!P-mg2aed$a{rzuj+_g7
z$?fUq22#(+KBdXMdC$x{zJ_lJm>*$Zay|u;*AlMB5s&9~0_zW0aT)&9sx=z9Td)i=
z;N`XKWw}xIuR1t3TW34c&>+LtT&h=Ae_Kgz#(fpA)jd1Hm;KWBqlqI}V?Rk`U-d;X
z!vC$%ATR{tRn|BVmXm=#2%hoozaB>imN2_t+~kX#)%W!}S9)e=V&eA%At%k<hPFPg
z?%w=sJ&xFdza%FN<(Js4!%=IKROT;6e%+ihA~!GevPT@AI0y<ilStNLvb#mXO=V{e
z0(HKT4Yr#tJ@?FW${%f9g?$QKWNx#XN0z*!-roI2`N__ck|<R?VoO$mg|E54^oias
zSJ>WpK4e=OzS6H`H%pSqKKP+=UUdysF5&Oal6KW*Lv?Z*q;)i0qnyeqgtgG?-I8y@
z4=&-KR}Z=W@M6#PoexsfJF&V0n&a1>s7MgNS~BOo<7yG7wP#WM3@j}PO$|=>K0n^L
z>)t-P3QIzPp2~EU-!4-n$H#e$`1a=TS{&~+-(Bo^JL{t#WDOo&J#h+WEg4!9J^ek}
zOyBnb=|l?28JSXqLVn)s#&PAYWc@Vx{9tI1esRN&Ia%RM?AB?m;i2LZ3VcoL|Foog
z94D%6<DrsX9G0P%^5)p#Zdk!jf`PON<$b`+MU?eId;e-#+4Z@#PxPww2TCfx+eY<j
z<-Ju&2+Si_?-m)LT3&UwzgL}{+qld^4XI9rpk!iyB4wo`FCL~BSFoDG$4xXk$Jdl}
zuE%r9xkGNdes<RsusexFL)Uao;cyUubkr_iU3WF?$z;b?7HqfFSksi=a$Q-x|I7bs
z_4-^Wn9~xzS_V$X!ayPV6aq)qvIH8=xJll9Pi=GC_^RV-v(Lr;(!7yQlQo1VKBGg?
zwo55;BDy1%>V{GChhWPol{LN91+9le<X{{z!<^6dB0lwaR8S2etIq-5f762<%(<G`
z6~Ds|fm8#f^Vb?N_m-SUM3Ig(bL<@~Y&@=pBl8b#l0<tJqpt{h1@FHWBNHHtWxb2k
z*Vb!3yK9!cxmyXJ%rNn&xjiLvU!d#^hcBA~Hw_2(_z?U0MSjZH-ft=zjrtm%QR&(1
zy)DX)36!GQ=1<RJw>@rfFOA$!wU0VvLRZ7%WfJM_l;Z5!ZnqvpPgi2(^f6kJz>mc-
zR+d$-@wj{N`pGfVd~B)Awtmzk*{r53gahFrghCpkZ}l1ksp$}-4g@|v4CZIBu1oUz
z=3#Q#KAAg}@aD;CIgx9@#HW$3@odWyNHv-#`|bU=x$Bcw=b}w1b-q>x9~j4Txl>~?
z>js~J=`sy}G)tp4{1cU=tebbAJo)jTYfG$NORS$c8x{o%<#zYBL)|h?HTItnIbM0D
z_fB08J#aoSr8<4|JY>x{s$w=E^!gbVd44eN%HNnl=zCN&KKkOHgK)?GPsY{ZLlq;I
zM0y??cZM4>5AaBmJ2@N<Hu`T(IB+0=v=Ftg_8if=UQTyx`3FsHE|t-fykrHUxf*x<
zuP>k9ybn^X0X}mZY*lcKGf+f6uU+r!WZ}(g!)ABnAd&ZpHfwdGinXpAZZ$C~>)jsZ
z>zZ%;p#$0a0w+SO<kc1{XK(s6W-YYY-*|2{lC?^f#_8*NZ%PZrF$NYF6chme@xEVF
z%+vB>w-N+nK>9~*mVfdN#$J&VBTVc~XD4`X^tQx)Hq(<vf^x$oA+WcBo#kut(xsN`
zea9dazZ-lCrv_@oOgVDan74=9NB0!>G~^8QXDRl9h;h|c2g)C_MVrfA_#N(Rl5Q!U
zG~|ewD@E%>^pSh7^zQKP6uU>lr}Z1cb`ZhQ*7G#8u=zZGN8=mbsP;jSQwfbh=oR|q
zZRjx5WM*F8hR5z0ILOXhofjGs7OT=8{rG>qPsK*HeC2oUdCQ1PiD(vgL451cJeQ3d
zi`ZoYS?dXGy?pMxlx68D&oScVYn5sozqsX<Y=x(b$I&BrS~f-sMm=ogHy?C!p!kn*
zui47<6z26?yj@M#15&6~yQ_Kwu}*|@FgX`0l;4-d{E~1(1?yc8bXNWBb1!ooitRbc
zMOkEHJ%38_{IM}Tf#honJgt-c@biOV=Hi>(+s5%5{*NgCE|d13gUdy2K82RrslDm(
ziq_SM<t1?>=xLDReA12mZFm2iyVA*UBqU2pWA}3L0hbJv`=dg=!XB8Wf&I2b(lIm@
z@nRxtNyPon(?wM%K9nZnWQ}$AhIQ@WvFU075#6P|`kFdcOr}E3`oCfQ>I?9U%pAof
z_tot&to&@dF=8oGGk!)-gyZL87TUlS&Sp=-Cz(J#)qPtZV?oSef)2K)mXuq)g+9JS
zb1Q|-B>ogwF|I+tB{0n(E&@`0rNaA(1mRoaGX6cM3~GDVTEOIs%~o%VLy}9y%ZWC&
z?FcXbT097){+fb=_c&w6Wp_c-)$bf%r_tM0`d9gy5zHWIz0qK}>&{EYgr&zgKccU?
zE{O<CTcdE)wjG~4#kO!l`!)1rvO<}B#`7pd7xpt-MGxdwEjd<JICMVt{bO(9!(%kx
zD@TGgL0&djPv9*BzMsk5#DAY?$8z)3P|7cL!8_{W^;)Yf?`j`4qU?NYd|m5c<1s3j
z^U-#O;NqW|f25(yAXthflkWA#(Snwv!1tU>Mv*s=d|S$~S)Yt*UU$g{!R^QwO<qmQ
zl|95F1C3AMlTeTi<=Bt+=;3_GxeI(ULdY}H6t;w;A}7-D)%}Cz)&a<F*+Dp89cX%=
z_UtmFt~D4r5|pAN0VlVKlV!cSzdV;K_zAEzY)HSG1{uoz)n77|FlA=9l-4&<S8XeE
z%Ta&k)-jMVeb2v`cG=IQ+thH<0ju;)xUp}x?IAN7Pvp>N66>RCPU$rp3a_T$2rZa<
zeINRuwN&uNU6<oASR?X>50~v-Gol7&W|wtGzCX!0S38l^h+_mxY3x{vn{Hu(Mp}Eq
zW-SRu6>m<OoyneKtjB<_QH*&}Ip1aYieB223Zo;)lgz2E1E;(}`32U)Mp`L*!9;Ox
ze>ikmX~z=Ajxk=RaN6(iNC^#!i{3d@;Bs9|ebw}mfXB!1elzFR3yw(?2|x25M2jXX
zH-+=cLnKqHiM^eBfWiSTReLaG%|HHfIci&ux297q8hl!PA2=!7;0--40%1z)r%QCG
zzxVVaH?UKU@9as#*Tb*H>$yh4G0xI`9J)>Hw?jn(DT!~>RX+Rd)rGr?LUF-eldeAH
zLelwRA%tLdG3{OT(6!Buvcfx3Ln+8$v=N<&d`Pw-DrtqeF-BK@USF{hkrM|!BdI_O
zDN0KRbAnuyZhR#Xln-L@?_0ac3w)RLy{)mAmJ#~ZPWHtwhL!VdGmNPHvMUnwMenMG
zTBkR0Su6Ss6|!f3+|VxGLMlF`^B#Ky2a&OkTY!MGk?nhJB_a3VfV~|>gA8?-wnUE%
z1K8GjwR<4K<cmX%rs4%FI$+13R<Zf^FVLrO7#D`AzP~yHlytQ}QJL(5L>1%}KQtGE
zE38u1dsjRH1hp7o?|Zk^vYChiHnO`L1sRqPg6A7GFs)#ib%nXt*-2kO*`NJKew@<2
zExTn?UP{M2+%Lht{N|ZUUPbEdDd(+xQYO7xQRwktkAl{Jd)&YY_M9vAi=V9HTB~;+
z;rsTR4(n!4BINL6%-veq&Ct`nL5Pv^`y?p?RWt--2;NoCH{_TSu<E7W#wx&kgN<=A
zE8f+g&PEd49jpbr?zl`4f4;w^Kl8<WL;}XBaD@Bhp9~sN-Lkpz&8OiHkYP~#^1sfX
zc%al;>k_z&z2)%*c(G&{_(HsYni)<Xl^8O}TihZ$@?L*LI@mKrEc>!x%Ws-=I2#&H
zBxqpJ<gc|hO=gy**8?JHUUe=8v+f47p&gj&3?!H-ig}+u6UFw$Z7wR*F*11b%|nsH
zGKzw+<fSk6RhvClS}C-Uz7o=7wHTV;sZOyq>I)xk0xE9pBI;9j_Vb@}HdgQDA$Pl@
zHbzVy;1pUZEyoXm2`v8<-*nxduIX2Ce|{F^Zq?>_msVzWZK7wrzA`p@qThPkx@v@+
zS!kWWzW9fRyp%k?Iw|9xj#WCS(2z5^yQim*Oj${3+qoh2T(4dI<yOb?!}n#*8UrFW
zV_qN5m9!?YP{q2w(A(0hhh>QT%mxM_aR6uMSjAt~7JnagV^4|$iJjJ+-F05flhcxy
z9)J^GP7Lmpfxi5O<JP)~c(1zB1n;XC8TXM**9e)0@PoNH<uaC!FBZ{-`nA~!t!->*
zJu}r959aG*j~8YCv(N7=B$dG5S~~2mfDVWy%Zt3dU5xi_^>VFoNZhVfy5T6rLHbHo
zF9m&>{i2t2XL_{UP+T(#aPvS3`f3a;c~l^wZ%k<FZnNPjdLWZe{S~*PqhmM1#l>Z#
zavZl5O`aU{g&IHn+_tnXVQH;i8@`v*zA=-$G31!pn%4m@S|bxd87KD4-RW*_z}4)9
znWE^vSOtoTx)PaJ*TwFZHML&}6G6biC8Cq>F#BK;{oT!v#ZC9~2V(0+Y<hf)f0EBO
zTSKWa<5`HpExA9NbIYG`W(+6%|5Kl+Ao@+X_f_6kU63A~1NR)xyu$U!01g+|aw%zk
zQW$TLq&acF=`>Qc9D<;h1u$i}`FL_I*zh{r_H{iVnpZ#DwSo*pKKzEs;v*FP1fkaC
zu`&YkTyo2CEG$~I108{J?$00g6s%|A-CjqOsG7*RSi!`FS|Gdqo*XhRcSuA7e$C^#
z^>zd-zsVudvhuV0CE|aJ0Qq#P%o`-h1ZghdY=s}p4~|Jk?l&9q&zQ@GLPDV$6aqPk
ziSBoWi4muN_L2M;9l<Bq$hV9LH^znzl$YEe1d}l)jcgjZvX1=U#w(BSZ+JMv+wIaW
zjGC~a!g){x-v10070Kc@utf&$Re|kg=e&NWx)34U>bSeK0ybYMbGZ^BteMDW%|GO?
zQpcBp@=9jOkZ?mY<M!QR8l>_8oXPsS{#Dw9$s=FCCrBy<z_|n3C}#L`Rg;w^X_gB!
zPnPW^csv2U-PH8yW*@XOf5;(-4zXiYdgkv=Ma=cuJz9go5r!F%;GJ%L4vgcYXc4dE
zM}88X883LflMRw;H%91UV2G=fc&sh%x2+r)PU04TO;f==PP&0wU**5R-@y8V2+)Zj
z<Mix|F}^?bT=n1B3M#Cw;=TPTzHQvec8i(!8iGFW_Y#DSq)WGe`cS3+&fw<|`yfcj
zU^B>%&>+Gf_x<FW1Zk(E<=LHaaU8L3`$LeI2sBEqhilx{U`>JunI6g9`tg&zN=ui0
zUQ{0w5!8~*xf#{X6#jSAGl5o1H1yQYGA(`th>(4%&;?ow+sct7FtaLG2Fj46Z$JBB
zE8o!^A0PCcliSzg-gZ*laC`eGP%%4(L-(eyDKU<P(Up9C0Tlvei_*-1%spubI{~%t
zComad#t1>Ubf3txaOpIq#N#`;e}h-0dNK8WV7;*tKp4oMVVVd~PS*x(+|}pEbXy3n
zjl_l2mind`5LWMw|JFr;NbXfnCnw78DwBz#a<B+M+2^)?hue>jKvA-pZXu|8-+nY3
z_B|dQS~qudOIp|#f{oDVK8+J0vHhw93W3DMxzt~`ZyvRV?BF1XeFt#>@bJaRdser^
zpLtwt@Z!6xvWoXro|5n7j0lDxWKS}CeS@0&Ji6&=)1~)fnj*05nCFtj3>Abzv4Fdn
zDw^Vs<Hz|#k#eqBjqx}%<bShi-?IzG-Ppg=m<tK|3VoxMI8Kb1X#F;$@NDQc$WQVT
zf4a|mksgHr!oi~I<+hc_W^-ux*`DLW5TdCL5=1%DuP>x}FHYrdbu~<k2t$a&@fdDe
zT+{<zdR+5gYEVhT?d!@|BAc^DF1`|OLW0D?d{4{U8uDG(%7!xe86oI<&D@R1{T(5E
zNQC|c8D)l7eZf}aque-RpY5aLSXMqGL)g+SUb^pm-q}C*tME_%8bu7Zm8jg%up`g}
z28R(Ls=dYMT!k%E_Iq5wK6pd%x#XM})I~O(=k5@;m^}9Q8Jpr0R=8uCDo>b&HF-i1
znWx6xm*N_St6^o_J}C_JxW?t>Wq@lg;)yZGm~wT6oa>JDmZ~81n0(9}>aqmNO<?fK
zwnBWvR#`;1k?@i$3}oQ%ybTpqS}cDKgY-LI0-Y4>K<-}rZenZR9t<4`k|GyIw)@8V
zAQKWaJux=j#y-g7EX_je?d{FO!&6dHl4?^ix5rbzy}ix&qYx!=K#DgdyR2+v-Lbsy
z)yvT|mSbj-0ZVm}jL3zpprD7~-xJ%``_>%~u@VN>4e3#sk&be1vaqF(dVl`Zhz|Dj
z@@mS;q8w*pWLmbbtFGqRR5!Wqe@0I3TCYnN8+!i}`_j^^QinsAmB0?!0x6)aO2?#j
zPO8*@u?CDDUB+>Cnz5BjwKsg_C6YLhJ8C}WGx4#*V3C^8LR5%J?oYN7{a+)PSl>Ao
z-u5BuW&wx%_6`tI&3!hzp9DOg?Xe*-!sn7r4PO40YD3-K4{r~qmTosjmdM`>h}@=(
z+{?5*MTFP^ZKT#@zTV-vKZ{-JHpf%rCfeKCIllC=toCqp<Q&hjbuQ%+5a^dC1(^;Q
ztEsD!ou6M$z5;k}-v>pyH+fE1%qc?~&I0Z)6zE7Wt+<IQcym?xxwv92KGw!f7XA+8
zPgTkvGF@F@mggp_p4)4uG%+*F?^(r}=8Y++(`C(7-8yvZd{p}Q@ndW8pL26Nhi-1L
z9N#a+WMi|l{oR@;OpK4f#Jg|Zh0=jnAMW&S+dm3uYiVg=c~cAC$RAI(5N>-P<-6s_
zKKw%X4sFlnI)Nw8a53OyGct*Q-Aw;t?)fs@kc|s1>oSk;*Xj4@^=L0EeQ&~n=-O?j
zoFQ}}zrIHb;m!JHxZF|+oUJU65Uc68zXzy-x70P0r2yLmn#<h~`u*b$EU0~7MAj|;
z?$yHhwa;eP!6>>T6M@;66yevCpY(Bbi6Ka${|m8eLBf<NyM=t#V=S!L{&agjW^AP&
z`NLbS$YfMO0#Zln(Tt@m%IC2^#JyhWVDfdDB|DOGRA|SGeKD$?BPJr^jCVpsc^E(x
zF3qP!GiSk>j1&}yH(mak_TcUW!~*iqWc=rJMhDNx$nXjA@o$-L%xH2=!KVicf16ws
z;nLmN%VfWf?W5V);}Q}o9yRA=N#4UBvwI<OG>pq7pYu!Et<SnPoJ;p660yMLr){n4
zhYyESBQJ!61`Buwohdr)RP#z0tuzyTK<y4kCSx4PQG(94zTrf`2LL@}4ZFNpA5x<6
ztS0n<rpNZvDyThmF4A6Spb!9jlvAFduE5854uv>;F{t!ycg9P5jjk|g;ef!OvG8-t
zSt&oZG(OH=U5ip(Kbfq}r6vb`wlh1sPRR3%X*J{WE)7w*%ZCrByFBCtC%AenOoSMp
z6`x&a{ODk~Tkk>5sF{zc>NBYcH{c%;7x1e1P~PtTHocSF*27Yo!;>cOizZ=#9|<w>
zKo#CQbB6AORk?%Aq}qDzl01R|GhbvE-nrpY5Xg(sdsm%I4&w*+D3z6vn23uoOY9^s
z9eL@p45(+t4ryax1FqC5<6n51J}y6kIAr-(yr?AE8e{Js@xP%cvQgU?`9z5faYXc1
z4|=8~(s>z*b{9F%SOfR(>*IA6NE<ab9!IR!7UtrrTxSIw6f=8N*6aaISXKuX$Z;4C
z$9V~j8(+nIw{~<?^`a5eR4$yf%pUF4ku0{>l*)ge(;k{JkAa01+_5}5I?6(ghATZ*
z``fu;cvz`HkT!Wd+FLKCBXq0vv&Gt_&cF=KBGvr*WpvEQCVFtkN+gA-Zq7aMo9^yz
zqzI|u8Rg+J5+iv#JGSeIQS&%8`buJD0m}SW1HVsE*eLv*CD!K;oCUT@sOCE4HhQm_
z_F(?L47E8LMO*Li-wM^HJr3?j-P0_ZY<_P1qGS2n$fm-z01euCsAdaDEL+pcaNe_K
z1af&xJ{JA{66WHGHz<_Z6X0o*o4ipn{qd8p5By|-)<)LqV@m0u<$7_vOPvn9MPq3p
z3~gK4Ko&tP2hgI#NnX~HcO8E5i2g}5<BE>SN(Jaq_Uhb9Ns{TgwY7=1bo?SB!^%9}
zZve4QmA)YfcQzYPY}ELuzUAC7I{G?h-M%3!A~G`eqvEfN7&MkE?3^^3kp%InjCx&G
z0p)(0y<R6{_0%2_!Gju^T3E6>2g@C=GjO)GA^u<(Ke;V90aWLBd0KvMXCBHe4xP+~
z7fKah$G0xnz76B03`x^@nb^^<K5sHemQD%KL%sjL9vSO$yo6_2{W(nNl8};3Xt>lw
zpw8WACBDq60EPpgz@CE&T3gj8x!h~@JU<7(05YA{0%aI2aI?{Qc^+PnzY&8-Aj#S0
zH$UqXc*uRfI39-9d_^y^v-7Fg6$}M#b{H{{p)IRu@Lk^j&(@veyj!lST*iztvFM-c
z%p<!#5HXH<Lj&L5w`oebWJrc(XJ@BcOV<THzn{6JL<=9@<HH&>9?-~LwolSWr4M@|
zJvNz)7;nr^!INg8FO;n3rW5lgUV{3A<L=|+8h+(eA-xif<5;N#)dCVy(p-Hdev%!<
z-&5|CE(tzQqeXI?q{ujk!j<x!jEtz?#Gw=iUeLnx|K)$l{5U31@OK!vyHrsduqwFv
z;+@g??SY@0WtUkD))d(M8BSzJm!u=drM**oSNGK_p(=zOsT<86evG&-*N#FzqHfa9
zTcaD4As1rtOYX;U(Fagr3AJk96@5AXQd#Nb=om9@%0-Cb*pNOZ8&6#CAJ=w>?;hqH
zWPIOu(AD2#$JR#~wP+&#C_y?qdZMqqHY8N2>q$~2SFOc8jn}&I7d1xoa_zh6BdgO3
zS$A^JO0_M!tg_(DDYi=|b+dItP!n&3ewxvOD12GMNejqvM7!StfdOy4efw#U!P&v{
z-h)@rS2duvr7Aoi4~CUDzUU(lJ`;%~fS?fixetWPhFK1Dn?(}~idF+$7pd40Z+00J
z+gB<{G-y?7a@81ny1V%VSB@_^X}z4w^OAV;PclPM3FN4UsuY4cmH~x0octom9(YTS
zTKd~zpemn#fZL<qL@AI#hsJZL1$T_DGp6ZwE1W=7Cue*sC*xhriDsQ5*L_;<6uXE>
ziwOd&b!b`>DIC`BCLU+Z2(^Y{GJsH&s*2kVZP3!Mk_m8l1Rb8`f5I(eZ5<X_aj2_{
zs*7uI`w@1C<W~%?wESQZSz_(W?D;L>_d>vkd(?#*MVG=-T&Tev*4lahBd|lOhxSKO
z!=0a)1<szlsgq-S5-vSn8aralIeM8ovROH|M-(0ufhuMC!I?XEe5*H_hbVlv{K@`Q
zKh~GA?cLp+^9kG9V~HOm?OlkZ`=zC<H49&r@)d|#9eD#>=YD>9zH6xU0U>wp6B<d{
zJPP^vyi0<U`PJ3cZ&Vq|N5_X0re+9G0fQ^K&3x_`HeIkoKXKTSXQWqd56LzZ6~7>8
zQqa=R1?c>m1Ms*;a_dFs>wSzMJU|~?B7k^Nt|^Kj+rI8tT~kvL9iUwTA{@Bd@Zcc0
zu^t>8%y~>P{$)H`h+ccZS3NoAX=G2w%udz1>q!S!IBs}s>nCN~T^G+GnTCc2KH^np
z0Vz70WXAj7qfbK0I3E){N@j~%oFSR5J(9cVr_^QDl#qDPs2vl1oM6Z&!$^WTW&Cq?
z_Vd{{$Cb(An%2t7*dfD!w#@IcX!EpscY;M4Mf}h9E-vc&jK|EmSreJ|B*do2W_jRo
zhD-INZsl*58fDIJ8G8V&`8iqqTD3nsTNqMK0C&A!S1-&!z3{gefTIwKVma!oXo@&S
z>|#%iISZ{QX=6-7CEzc3YEV136=FCbUTQtskz{tLbytLoVk9jivqhca(ja(+AI<il
z?|MfdO)0vEfe>SiSaDOwnOAYdih=AFo70ApbRw|BV0aD2uf{5W+8-*N&6)^1R-M{%
zHZn3wj!?=w7tv=YR7@Fm^k6n?ygq4LX~IOFz1g6<Pa8U^zzFWh`JI5_Gy7eS@Lu>W
zExrajNFuUZUv~p1w3Kc@y#q1es_G*_Q2`C4*T4S;+Tg?3?V7MyWGIT~s1LWbHYAG)
z`%1BSV10XMXElD`dL@T0KIes0JL%D-m$lG)ZlW%=Ym=Dc!jJT+Mu$aZA0-k=#yI`W
z2uh!s5D*d*ugdTx|L}euE=}FsCXmKD5_-$GOr=GipJ67#B7E$-9tQGA;XGjEHCT)W
zl{0ko^jx&C8M1j60(`eGioZWNBJxI;ZO*4NWdx=vZLX~u=V4)k(xBA(_s&kNaV67R
zs>|Q4M@ebOP>#5W@=9L{;b<X`kkGDUy&~O{dq#<6yCw*VBAy^X5F0kG4*nf1f=Q5g
zV4F@^=xK@7jSp1>ve5==tmikSDFMd3ypWoxXv6PB(O38pt9-~byYh(-FCF$}2qpGl
z6pE#z;~0p>Go=Ex7zqj2?5BF_vwNW2NVY`iQjDbEcxJ;(+&t@Lm@|+0qB(kXb@gV3
zJY0HpZH<QXpFG;T@b{H7oLv@|*bK^XLb`GGW*-F7dRAwqrwK_(!H*Wype!>8mkxOL
z47pPjjR2nSWu@w`&4HluRkv6iaEj)-9uUj-*9xWioxYzzc^-U41@%t0G(0HS2#joC
zIxyCZ^{Q)`*)TtFBGiU@HCD+!@Ezg@J<c&v+}hh4%ED8A%S~iLO$7>9GqZtI&G<<l
zpmtOY5qB)xa}(u~m#Q(&@a2oWuIgPGWpQOB3LmSVbwfkFaU0kmW*u_{^}*qx11I08
zc~w~%+jvtDB7pjDvIe;q_2L%9#KcW=6%<htv6Muh3KK{>aUdYH5pZ3T%r~^wl1|<n
z#$AhwX4Lsh%(l|Mf<cOktV~U%-@hoDDT#NTk^T)qsuuIP_2p+=7-s5+mtODQy)!)H
z`zyp&y&6V<C|&^JKWPi7;SL9F+57#<4jL6@XV61@$dN0fE-ab}@o$|(o55~32e?W&
zeY8?aAm6}9LF~Zh^CPXNW(NK_!TK~ksCK`n0(y5E`JE09_u1l#1#}%^dc7Fp<r{E^
zH;<$J`z@Df!N!=9Q&R_7v<4qHw<5CDx3q|GZkp)J&j#DOWUxNMbDu!s%|sCp6iid1
zf9I;8=V;!ZfXe^)B~jJ`NH)+}OiTRGaMHeBmnv3D!}bZy18|=JC%gBz3!!$WAi9*6
z-q_ZK@Pdmc+S1zEDbva!fQf&8%*fT02Y)<NwJl;a-O+5QG)XU^KGu4=Nr)N=nW^y?
zDAv?t(o->-)+O1z?L9zXQlu!`Ry4TpD~rc-WA-(ou@KlkzSP#y$wgD?`sIu?bTV;L
z<N)NCG~yUCs^P*3OP=c({A9H80c*{2ie!$sVS-AVRt@(=595la&xN}4;iw=~<a1bv
z>%9;d$&$B|Die8A!kyX7!XqLaTg+$n&b&4TA3_i&JftxByp_oVVWE*5DhQC@cKM$F
zN(~`7xf%82ck;tJ(VK-8Xas@OVpjz-8ySedRq~TeoKn}iFLC^Bdd<F&-i7d|DY;Ao
z-_y`+Q@H5QLJnyA`Sa)eaN;^|E1eml>>?FLtLo2qaket0WuZ?Z5r${7nV2zUnI;h@
z&lEY7JD1Kaqi)#M>+338(9TJLTL8+>-)CrMwwWgA$|pSCw?`IfW^EmI=ka4|s<v4e
z^e!=?Zo>fQh-~k2W7GxR5r(n|kUaKnBavv~v7{N9`*3n1ShXdLG1bieO29UG=Lfp%
z)0j{kjE6J7-V~_Kig5DscGv5sy?b^WbyF~D=`l=}I6&*OuG;K)VfKSCXlr|WMZZ^{
z;-uTm5@B|3ZeT{n6OFj+$kqQ?yT8g5pB|ZQV<#%ohYP>*Q$v%r^@MdxXdIjRwHPFZ
zKtrDCSbpTtkR^~d40yJG5iCradLfaPDEtdtKLP@h&Yih*0R8Njea|a)%*P-njoUw?
zq5o6VXo$D@QG~SVd3=8rg50P^y!two8G;gSwi@FWgDf8xs8?|5inX$K){qLH^1GT8
zmd>fpzK9qyH8RpZe6kCYrvYL2>fsLr#^t}jX{WU{Dx;g}H4flT&-5h5LZ3G^N^tx$
z>Xj6OZjuht$u;fXz(c~I0s~&cAg!0JPoSuY*IMWsy2THHh;b6=Z2Tpd<-8Fj+`F+Z
zE%=Q$gr|SBOyoXH-`+)RCE8IA`H|QYu?DPtQc<T~wsg`_7a_*R3~p>_uvGnc90q{!
zEEI&+u^bMK)>G22D3OqG=(|~(pz*2K?@4~6)dN-Ht`IHQwue!r08phZ&q@IpP2M=2
z_tU1{HPv=a%*L3$KDpsvk&%%El=|F6;U~vqry<-xHsR$>IAiBe8?Is_PE(Ru+IOty
zByF_kQ|xI#lykc4Br)_zw#F*`BUl^5T&y?KB<Uc0%K_wVY%yORb;fw5e6HgP<zL28
zRBY&QMbuB+6O9@JQn`{0f+4!vSj=^Fd7Ye|maD6{Gzz~-f2}I~8uf6QYC)FKrp|<$
zh`$SFaV!P$mz{f_Rd?VEX~?(3oQjEn|2!|e<;Xy>&k{NC>*>Unb8Kwv4d)Qm8Z33y
zmNR*b&OZ4_%6~L_iX>bb*yy4x*Pd^1rUx;81aMi9JY)MNe*B<N83wY_k(>Zm2|ifb
z^!>!x(ufUj%AXg~p8@YGJP-iX+2Q;p;wlp4?t#Y|^9+-H6O>IxlpKMFOxTAwYERKX
z4XR5sE*A`7o;Po7%lQ&dL9V)x#ccfK(u*~*C@af<u}4uDge`ruc;f<C+O!%oQTW;E
z>8J_JIY1>sylIf{3F{Fx6OnLE>ME1Z9MZ7PXcr7#`gD|)0L5Tc(h4NTz;xeoP-&9g
zn{!)oCd1ig7TswX(4cPYr;Issz3Y#rNH8Ai=;&<K<_xS`+Sq{9q)~*9$69fkH);+D
z?F(-1s+yXy)3~<x-^$7&xscU3h>;Viwf6ii$w3*>i@Vt<nO9bkY=2dH+?ou|N!A+4
z{@}q!7!*||vuwC9+>FryuH~oLGl8hb!kMe9vl2{_Jk0l_%M3sOJrLDWt%1N8lwVXd
zU|Ty50}i8Do~m84VQdPPZ{0Bsj4rS`y5+n=tSa}9h^o$p6QJ<n5Bbfa`If(YXOf}N
zRV$iY!AkvDmRbea9)Hn?dR+?zRDN!v#|N~>NFD?H@OM{%bYu;T7z{+c#)Wj3$24JU
z3pXKvh~#X*6*)`(GP9$YjS}i`FPDU;7!UVc1REKZ{>b5;D;}^>7&o%ZfNM76;Nz!i
zzlgQ9Q}4Mqg@|835OaxgEQ%PQ4wG09p*3_HAaeKn_4Z5oH*(^jnASL`Yb|G_|5_4%
z7%W_t1qzMlN-_58$&No1Q<co}r1K<!dYJTC2<R$6mTcs2PK{*VMDBa8vC1+`tJ1_E
zcGKwh=67-^O|a*{?WvnkDs_rQVx<6iV!@|G>#^zSq>F$#0DPesT!HR@*WMHjY&oN0
zSfmT4*r=KVzDU16cN+Q#RIYlU_@LYTf$-09ln@gENCQ?@O!YyLu4eeVE`kU0^yQ8|
zmX2*2;N64tA%*cyJF(fBC!Oyza;vM=Z~Q@?u`@Tvu3XKrLcfox0O{Gkuc>zZEpUCP
zT?+E!jOs{*&EPK?dm@)Zhea`Ka+fxY<K1@7f1+H5#Sdw8<1aQ+1=4J-t(o^q9Zt^9
z(1NAY($YZWA)?!_k$gdELg^}w^>NF4gW8X`IP@i5yg<#dTXgTCf?HkS3q?LtquhmF
z#gDZKidS_eEOeoi!ek?W%Qd$v3W_TsDk&+U*%kh+?VtL{p_lo$ir=w-vD=l~s04c(
z`4cw*s6hDi|MX``K%3Wk>C0aR)~T$1DK@0W10I-q%zreIT0@dE6(XIDb5XMCSl|2b
zQNYV#9=)6w4-Rmit<U>ske0t^XYfIq?tYp|nt$mf5-u&#Q1hqt5(@~T8&BZT)JP))
zhXRU+TjgQ)I8Y`A;hWwv2Y(vBS9G0IJ5j;1W0YLM>L2o=T9MDJ6v!fjciH4#j_nJ2
z?^FD}`m-GPR#;g%4&=nVkk%h_=G>rea}y#P-k7njDKF>n5mgj9t8;d7F|CfY7JO5&
zZgBuG!%&qQh&Xl+JsY)4OqVcI>tMrHU6S&^w!7wp;oVhO(QEdVq~AR}J;z1RIRpgc
zU0BAuL)hwQ9>iPFGRJ&dtas|!a(2{vFP{rWi-?E-lYV<30yOc6Krv4}mqdDc`tj~y
zpl}LpC9pk^a{+QEI7K(1^r|`Q%9&oo88Tf|QK5l>yQ@|8>Q+Gi>6KLC=A`&fXkXo|
zh2oW3aDP?|CpSOgM3hVaCbY`%0quGOWE@=lpbi6no^iq9XCJLyC4b>^9CnI6Z#JHl
z0i*{M&Uex4#AIX}6GUiXNrb6J@WuwiD6#=T4h@JRYb`*XGnh$MNl`9*)O>z=`qu(;
zXEN0{u`Es67Vj?*h$Vjh<jcDuCe<18A^;WS>>>2ah12oh63LENzk5Zghq6ViS*zES
z(TbO7EY&*&yK+ewCMmj_#B8lo{&D%eyE|w(u=O!Txv--|jZtd9@p~x_KgMc8oO~{e
z$pCGo<<|jByJ2!p+<j(u!H{A@Jc)L!k)sOF{9?3oA_#3SNf*XZs<vV_fd4&|rem4C
zk*ww;>tAMFUS3WjP-e=M(M`5CCahHJzW7hz*xVc_j*(k#(XwCg)TSnpv(E0F70Y9J
zi-25elJRcV2tkF`wzw%=;xTk7QHKJldf2VYR~~7y=criz&S-PbL&q)s^bQr30OX&K
zeN?jIM;-9SB4`FT#FsD7N@oLxScE%bTKPO)UP(!s&Wb%*F^5mJL}O%d5bs`vIJ|pa
zpxI0z#-4)&(<w%(T6-Zy{HOB9B^epnFkV~2Q8^gut6I6|i-^7|6gXd%#n0jfvO<Gy
zsX2H5!EF)?s-_eWa_23PvQTJ5=iyVU2kI9jJn-+Ay1N1?6lsGXu~3m^T*^P0^V?0l
zw*R|4oMAMxS%tB(^ke3nwr;mi1M5cs+_D(%{?6w3>79&9J-7o>f0?OiR`cK0BFHRM
zNs+-3eLtR6b3PTtg-K_FqU9#JKD6pZLZIrLqg+k!@cqa93f?>vX80-s&x&uPuAZg0
z`@!i0<VOg4n%I?qk8=5B8Bl_2Dsbyk#l(7I96b4kg<fu*%A1cyS@|`5VigszRrr@6
z==~gXnSRGF&CvNHvf=E`PHiBzb0w3%{wE%GvbdfwEf;fa6Y7LV^GwcTpr@yY|D7uM
zVrHB$4(sAucj8Cz9z6&$2i=Dq?4X+nH2NF8hr}E~$GxEn(^L9$Msp4=kOP$RjqWXK
z=fH)$S@Mw$j8S#8|Fo0-Gvaz7h~*Q}>#Hk8y77w(KD(D-GzR{!x<J$iTPm5{o38cD
z$9Mn`Zbc54^;5B~8e=?=OHZ1CZ4mo3x-xs{|I=m|<*vRef~q_HJEcm|Bq%gmOuW42
zjX5p2i4q3_Tk^noxfsh-@Npp&@GJsu9nk+k8)#hAU{I35OG?CWiLGDq1!{$p+ki2j
zB>-BK>{Xr_54#LD=y=|g@@$!9<OI9rJ^SzDOSczhuihI~tUC+vUs64jYg{NDHMg|1
z1oF}>W^FsRB3ynX0+}O9Y%jtCgBmEuxiOSrPky?imxk<wcwdbaV6nIkWAaLMviSA_
zX}jSqan4MvPfu9ubW7pK78slw7nh(uL4T<mdg&wpPbJOG%@$K@j`bj+J@dExDgjKw
zKmhkxM7Wk|@Yi6VmIBunOHq4a9;t>h9OVf>cc4FJI#gl2w>fqbYML9XoUu;kY+@OG
zZa0i-lJ{uaSs=2f65y|Z0Qiv~hm+&)1r$3qe9fU^ARPaDA-AD^s(2jyk%_><*?#@d
zZQ55l`?Y^XYky_*vv=dkk&4fj6KcHPgQFfYO-W6qc}bmbWXVlb664Md{6(G|7~{Ve
z0}5E8jQkAm^IRqZAl>I<ay|j__!PLt6v4HWpBs7O$eS{><(zOKjc-FJ2rr5^2L~~{
ze`Jq-z2K*Vd!IcvE3ok2m)J{t+_vKOEN}^}Dd6ZR@AHnjge$PwU%!dr&-BeYek%|q
zX02<Ilb`wQQKrSqbJ`i!1NQ)u*NFnd+{)A#7QFqwALsvBAKtK#?+T2-TZDY!!5g<0
zF`u9{XMq_K0CA1Ftcw9TolAZ;uYde-Zu}9fH;7540xZwK4d~#1FBJxW$(Wwt-cJgj
zZOkE4y99scNxTn=utmneI%C_`)o;#D)nVjX*WbTix2OK?IQjLuuC9tVyaTM{-&ahw
zgh(_$`23d+-u&@Coi$X8l)zbQUfwC@p{=ViTNl*X#l0MT7WK)eASq|&^je;CVK^z~
zd6R&r0BG#tJ!^koVvfLToEHrENO+SK5tVWO(!OhDZ~)4gvSq=yf^Rk?M>LZ5oW1#<
z=)cp9;Bg<*c>9T;;e<08)0qyLX!1Qf5LbX_1I-laq2!<;l_qezZ+phok7iz7d}Z10
zei-pD0sx2CI$CB7Y9jhUNsg)pRD*Hp=is6@f(#t-X1Nwe9-g}&EfxXtKBGRkWY5ZK
zGv?&s=0?G*1b4j+Yut0$$rja@fT37pgZKi|jg>0?H=T+lytaU3*|1UgRBwEInemMX
zyARHb)Cxc21&SM#zom*sktTyO!{%FF1au%nf!~^fA`=TUfh1e<O0Erm;f|XGb8hbp
z2=xNk0EbWF!jn<(s@7v);S)7m#V1mr9gKn=DJ=@3aFCjUf`Y&YuTHTs9s*S2bJv+A
z`bh<nb)M7V-_XBEp)lo$E&~3?z@z*T1|I3*6N92sfQ-xT_?<m$Zcn2??O}icdv11i
z$IhuVRWx87_4WJ}ib7=M&z@P>+Pd(O5ORSQx@fPu2qR$4%WpH*;FMCIPVc#lJ*mjc
z3o;HrX(o%5F;1evW(Bv5cgGrxF6>-=ERA1+UESRHIvQS_g1S(_vAv5$!f*^TaUl?_
zc$hnxH|16S_#v65^^HcUg_V65Go7P4aD&{9P<sdc1q2cbsCVd2Sm#F8?-K#6>%`-B
zYdn7jJ36GxFk065{rgPNSW!?A+G1sIk9`RY4iMn<kDJhnQwvZ~S;MkHspfz3n$eJv
znO{<a73kh1#YYY+0@0nKU4Q=AvlFf@q)OMwWsRDz;kBamF24=w5hbzck@<Uy6rs7*
z78o>;?0Tp@&I|-D*ucXatD4o~SyA%2pOcbg1tE{-#btXWM1NTt$HSGbni}4-(zdpj
zCo;f9@TY%({Nn7a#`h8wN^tJmM`bfW6DsOp^b-Bo$8*;4n48q+d+%;oHkYU<YIhln
zWO9W``tgS0JQ<{dT5F<z<s0AY1hnW$he8Xk`0h_yife@s4d{mD?{iqSeH`=zIy#rE
zORB340ati_)`8-b&3fdKJ>w$7JEx3zpFjgAtZT)kv0B@P0-MkCtXP+o9{p{J#$o_`
zh2Yr@z#8C$bM^2K`e>@s=JfRR+FDN1_pl-KE+jRO=d8biTqI?xtws4VS}A|^K$ET;
z?})))Ei^oHOyfGVYyi}G^?P-y1@jf6C8`DBQX0_c1;T3Wq5XyF>9@1t;2j{1u62E1
z;sLZ6ADb|>%8?I$CAx$P26&EQL4Hz~WGR}M_y@rqj#MbB^>cXm;~;~@rn|jb+ndvT
zOz%U`v`nZD^|qbg&-731UbNE(vAa!n@0^~U2wmAd>O;SLzWV*U-=w8F177*tLBn#O
znBsB}VLYt(zPnp2pIdmAg#<Ae_?{&A96LtchYGTQ#ubs$9=6+s#?~J8!GorYcmKO9
zU2ft(@V07$ffV9+cB}uEK%>m-avZ^S9k`a?H(4|-8a%Y*AyZy0V?sJ?6#IVcx!GA$
zGc!`mVDYT?gwk0m=GEF`wDIXSqkAssA}pYbfqqO36@dSuzD$M}7{gFj<ZTDv12NmP
zNitLN+Sr?=_I|vFpfUdA<*g5_tDQ}erlGO1`Z?Ih&S{|<W6`8#`CC31KM7{Myp&8#
z&J7Oma<M*b?Tqd=1iybgOtC)0D?YrAy+$rVGY~5+vjMxSe~H?cx`llZ$BKPaa*zAS
zZEFSbVZb|lDrDa>C+zRrUM08*?VozMqXSfc#MH%<)xh%pnY+L?!hlrWsdRPaSPk9-
zRdd9!JXOT|vy+pK&fNF!VsG9&>0rOTz14d4S@vAg#4fbUun8HS12T_5I|E-o_zAhD
zja_jeqM6VX>RnRucnqFqVb6iXP5v3(i+#gCj4@q?&z?P7-ktgW9U{d(>JT?zj4y0#
zOwrq$pHH2%l)8lnve?s4^aQV){t~~#iCm#@&xwBr45Nf(zm(tA6BpSTF*8MWEdQd1
z+1S`ve@?O~?p-P4$42>+0N)e*<>ys0-x|n)1Qom=2F#|rJD8ZTuOD01fRGLk?eg{x
z1nZscItjy=8l$?Wr=VwmF6;UAZBs5(h)!A_EKXTA1#@ZpcPKzWRsY&G(!E))S+7jB
zz_2{2%P>@u>ZZ-Y%4&S)v?;~O;qJ!$s-Rk%B?4KkM3&~L*7v%$tmz01_2Sm&eqsXe
z8OD+6pr!U3KXE>AA>aM<zoE(0S;6ypYPTxj@7a@<a_V2Y43j^9{?xO2!x5ch9nFS^
zmL-l}_(bk!N=nK*R!s#3SeM~z20YB*Y=FWA1$}=r%f^Q3pe(o&kI#3J5srW>rjXc-
zyBg@ZtqU@G1i8a6_fZDkG2<V5H2aJBP2lnJ@Bn8nn;OUq11G8)&*J!{6Ii5mi5vw9
z4-MH)%MWeMrI7_6Hn(S*f(0-lFE3App_4sq#yUMI={=#Tt!>1~W7BMJZ!|qzU>^j`
zJ#VsL9QeeU%)L996)B<ofU^5hzEXLLhMasFHF))NYz!AIaNgFH2AAJyLlH<^zP_z<
zdkL0xi2h;<3h3Sgz)E@VK5oAhNOROX#tfFoQt340z~!h|IdoH29(n(%?fut+f>F>s
z)|_5RDE5+c=3EYg{qJ72=2~UKAD}?>(UYWx<iYT%3*Rx|jqRM~@H&{A%a%>W)?*Es
zay_R~W5D}~XYr`tnm6{6bZeu?!pt3s!8KZzCQkg0PF9Xeu$=0;1;lf%Dl#I%S$Oi#
zi3v5}_`*1=#CA=GGb28{3l-4VTM!{Mf9X%Z+RY+MkioXgeg^`QpBD{z@z1?^7+i5E
z1WpzafjNwlG_(;O9!@pr_f>`A#6#Gk4NWDwNv~{fZ-XYp3s_%5LIV75t@FM_W9R((
z@xuppGd<HxP>7w^DzSFS&pj8<X1zf1myYrfD(ya-As<4f*tW}V*AL+7cxo$mEWie9
zb{5`ONs6$VuMoxKF?;^#PKzE#U~Oi6^yW6l`qZ?65<VyL7)H6V!1zJNM=H;N1J79R
zZ*9#u`gB&Bjc79`oSnIF=29tK2or`&^B-pEm5~z>jpcn+V+1Wiryj2#W5m4GPU#jy
z1a|)_8iDZ8uMjs>5^Q7XAir$qF%lwUJem`Dd{S&n0wAVr0Jm-gJ;B!SfJ(n%IbrJ-
zRkFK-PR*=g`R~)K*8A($&4mXl2_U5d>+0yF%<Yj85%pK012fR9ZYuME#5J7C-;r)b
zF{B2(K#0uF%8EL$byo|uSx<Sx%9)SEm{l5AeWepgmg@5T(+6;wog!3)VeR}H1YrJ?
zP%t1Np}DOst2i+wfC3?#AlNZ#>IX#Vt9`WWM_rr(Wy-!s^jg*y7Rz`_PoF%mJ-WUX
zy;;UeOi19Pjfd8|_FQ6PUM_1oy1Leab6U7Txwc*ZrMsX=XHG&wVoaD<Qetx~5a}j_
zjS`h_3Jdt_3h#-#49jI{aA94D{(j<FKP;=QD`Z=mD`P8&F@oUcok55o1g*rMFWr8F
zv+4(^G&VMC+F^oWQBba3V!e#Fl}(5isK)qI7)#gJSM<3j<55kK8sk+4K5TtbQ~&m&
zN0gPM4~pX}nv|y!^Vd8Apls_Pl22?&f&G5q2|XQMFF9Hu6<Aa2%*U}k7pv;oDt}sd
zfB;7kBFis36!yM4sdw6}(k_{_6!yIns#lF_#(SHq8hYtY2I~S{w5+(H462OQKsw4f
zm8^T)m`&D!4qb}PRpA<!zm=Aj?sa*Lff2<?SE4a6-1&21K~k?7(20M00ru?q_$c*9
zzl|td2^6XozH4-`F+!mAQ>)Tuai;}7e8<=)1ZzsE#77Inc=+J{H7O}+(_9izFY!3V
zMIv^uX}aN0*o!s2MZ27to0yQy;|Ekvqv(UJ?JzhFEv(+t7Q|PtILmYFOGQ2kJ;y^E
zBYW7I4naslQcLhw|Kvnau^vg#!(P35#TYMNHl@RiU!oz%!!x<CAS@`jbLvscq?O~z
z8xa;}UOoGkxu$vUK@@%2l!8Y>3>UI?Nlku!uwJe%Ypd5~g<5qzWBm4DG8YRAOOq#=
zg#x9o?|I`=*N73^ntm%NaEJetuJbNSMUo09hB>B%+M1HOe*WiQ4zlb%E|C@Wf)+Ql
zZo#%_@)JK%u2f#_)Xu3z*%KCh@c$9SR|x{~{cMWdEaU7s2_obt4}$f?qghm{Y^t)4
zs)OCh$w^pP*t9Zv@S*Gee7$POAs$*6$eEX(mX=^=+2<&6Y_P7e@o@=NuM!O_cEaBq
z9mb|_V)*2%VQ7KvmeoPxSpakf64^3@JrlxlQHv&tP>=v$=_7tj!1DmU2|S{LSKNdc
zhi>x+=dmp>;c?+18zU9rCM3ea!NJMN$;aomJ@GtHeA%9FI!NL#-+jxBA20u5d!is6
zuSBB=FhAS#Ky(7Poq#65EZl?^$H$Gz-!jrQz7mnF<bZmo_VZ14iQv_*8fFZ$lA@w>
z&bP`k9LM^m=H@irNkSAPd3qyzK9WQ>eY(CL0RQb+3~w-l13E9)njm@&8kUg0t^wp(
zQLw}Ew}}4VyI=$}#DW3>vP(w69WRF+{*VDN{aaeZzF_F#Bfowz?erjV%6NHDs7aoM
zhUdvXH3HDxTn79hwdg@8*ccz*^!&Va`CHlB`Cq?&_4cBWD#k1gn^w-))@HlC);6uw
zVoi)CQ}Afkt4qLxGCe@2&bR9;ybak0&{sl#vG11Ejy}oUJUnT_o@ev*PQV3j=w277
z<^Cj!PD_h$4tjZqU_y_F_81d0ro`6HZZnnhJ>drMBE7O&zQFoavu6N28oyCBfn|e&
z?4uZkJ+ScDLY$3@yw6_66ak=pyreYaagtQgViaPI%r2?{H8nN<{{ClYXW)nE=;-ux
zvf<p0-PvAejPkb_OUJZ5m|GJQ69sSbr{93uT1+S~XaItqc34&mkYG0JjqIzqy1Fvp
zQ8m8-S+?Gpgp`P=J<wl8Z~CMZkcXYqu~wmV$4g*X7)f$%ZSD9y$+KtCmI*Rnm5xIP
z_>LeI24X@jh`}x=@cAXG{nd$ufEJB@*OmoApX(`%fNg9%&aHWIW@ZLB+jkif%;2R1
zEF?tZtAM*ZA6`G>zsy!V9fx2`K7uPfAOLhh;hQl+nf+1+te|NRq$}v@Klh}yxw&w}
z6?<JYnc!0~JvP>U7hZ&z6$ad`29?phOp6&`wMmvvD~I}?3c#vQt0+-8CI-g0O^PVC
zzkE*?;8y3VL+xBzO<k0(x9mOW9qc$bck-b~8Zz~tc>(}$Ztre1(#IG?%3OY4UT+gd
z=Z_!Q78*z~V8B$Po&@$Us4S3L$-4r6g1*xpxKKqj!l>6NYs+?~iIjW<r&`v$i3$Z&
zFJD-}p|hn-Vhd0)z^w1&d;#}6A_MUY&;mKl_%&g@p8#&?H=Nbp-jKOHd@pSHaYG^E
ztbeMtOBNOul1<5;5fX+-QpKDw->%V%USi$<!K$pRG#gIMVjIlWD$%$z>4~bW(lm>~
z?G~f>-k5JavH!IPh6p)=r+<p~vq!LjfI|^}$=A|~|8&cte*?+3Hs$6MphuMakLKcY
zbwQn{g!hSDO63ZqlQd@BwGx@U+odzVj0i%x6go%Bf4U4``e3b0W?F&#2z`$&)ob2%
zX#}7(wX=Tj5kIgFLNeh-vtB-zs`WN|^fyQv4<A09ot>Swr9E^@9qs@kh6mz0wM|_w
z`yin1ZSQ~VoUS#DIkpXlxd1FSshWXQET=0U{52#oF}WcPOs;4$rtc{bL^X;|J(_c#
z7y;UyTu3>d_$%fqtP2PkjDJ*K22%0BQZLm)aBl+TsJa1u)mBxVoScCDv@QYS4G4{3
z3c3~`b_u6ab?X3ODc0c?H-k+1+ua@gdx1+ir4}jR$d&x$76vf|sjmUBwp;TGl0=A6
zV8goL2w1iA=FJ=HOu)t-K6(_*wxO7-YQl(XLTGAe_@%zSKCB_<|6}UC<Ei|^|M5dx
zqBvF&Ar6i$dnK~>JXsMLmAz*O8Ic_s*%?trHc7INohX!bY;lb2@1^(W^ZEVGA3f^P
zIp@C5eZOAU^?W|B=XKpMnqtH56rvpqJ+%9zBkgxiLRfqTEJvc?cG3iRQvnh*K$d$y
zO0GwGI@OI6PL2^MDWQ-`hUE%K&k(tFg`M=()z!?*Opng?_V!=D?#s)EHs9AkA^n;r
z9}7OP{h9?~!$JwWQ9DBe`ZKhJQtKd4++GcS0IXN49|*qgpzvOvIe$i#au=@H<XV%*
zx;fCWU%wbe$;vL-SlxA~8z%}ToRq1usJs_U1%XAUKu5uW;0@7<aEoF!DIIw%$dRBF
z)Z7P2!rl{p^4KKttW2hc14{<?U_7!gVDzyXobDL?lihviYcWFi+}(xz$rVU%2Fqj)
z+wML|dm~+}w**1CM&L9MLtSM(cT|QkE3VH|=oA78KQ<*Lg^?q=ZF)1w3K%L2?`UE(
zq__a-UsJ6SKu;i>e#w~eZX8+4^?nGjZ=*q==GB+(B%0_p#V^l~sR^WYM~SJ(JLG6x
z5KqZ)TVA^Cx&ZTc@wib=ODjEwi;wr0?L4Or-ru&ri&D+hKv70)?d;&IAa2=QQ@{Bf
zJ|Trq?scF{>YANV9r^Yxq?}j|F5Ik>r}*`?`FZJxA$B2m-y`>?O?o%U!-{?N<A`TW
zyn8{;O$T9dVi|sW$9stp?pCwj`26F|Qvbnv{6fAvym95x<nvbY;UiHFMHpv+tHD@k
z@%lU?l)eINq<plyCgo+Ll1kCA-F`2Dp!s7!rd5%Vk+4SL&zC9?!tTA(8&FT!vGxd*
z$yD&RVVV5-(@0&Nl<_XeLa%?Di+hsG(;_x1njd3<pFKajI>2;E_j?hE&Eo=de}DfD
zH*;h(o`QC=3+6HC6e=)(ZVIf-%?)1BH`;5&r>#L9*^8f(^5W=U5Ai7W+N>LKvoEc#
z(a_v@_ej}6Ea}@rk1E|X4yofa7mgeM{>W0}v0U0|I(lK&>u*Ut$8juw{Bz4w@tX)-
zhT|Va#%qoHBrQBq0rr1ZOMU$Ryt8jO+IwUnbUaULJkhl0U+8dIX|i$5$2$v@L68NV
zz5?R?bA0U*f+4{Gou^g60+@3T!UFhxl<`wCeqR(GS}f1czk;;^G;!Z^s@B8|b7*zu
z3KK$yv_kF-qF^XTP12;rLkVst#JQm6Pi{t;a9`sJ`uFztyJ~N+N0_4J8j~KJ6-KfB
zLo!Z&W}UN6O_Qc~hg%?%gF?0`n-3(myMAiRi`P<tx1Zh-;L_QkX4}fdG2NMtXqLyN
z_nb#?b)sU5e|H+zj(T289kSZUPj&YCufsnt?e|_=Q*_?KDVYZ!?mwXSPIvbo#u#G?
zwr{-Em=R+Zd0@vw?T|>zer;^TK0<*RG_;<Fa0EOgjJgXs;UD5lZ4|EYmMKW72Q@!s
zRzWP>irqaD`2HM}pKNg?f}P?s6yeF_h$t5(IV%zqDV?_cA3VtBi<R3*0M6b}SGNz4
zz-6wPl#bw|J~LUS;f<J(EXy4kP_f{5J=x&Db<1^ca{=&5QXqf1T=vM)>y(svE9l(O
zD$sdL&&hWD_gFP{uZa+2;1O-I{`tkVSn=M@#py({t38erhq|~wzkPn#%LL4b=wB?T
zx3{$wbze<2;*y_b)ZvL}W&E?mO&M`U%VS4+6^M#SslA<@r0<@9g#3j}b+$u#!p~Qj
zlFy5ih5fNB(E?PM{+{9Td8l5~hM3#gt!^$1=7=MK6eOJc4RVyt4XP{v8gLuef|M#M
zD&kw~?L_|UA42%Ctt2{lcos!C@K@kT)o%mz-EgW7sji}H?B@!!ne)v>+<!|Ls2uD)
z=DV0}Qp#Phcp9@pF!6-pMYg<um<g$|<15ly4fU_yuTRBC$!_RL{>U1(oplmPKF<j&
zP)dh@JqV;E#RA35rh?c$-hbL0+zl?I*1A{2*`OPPJ0C!@*w~|xX8Z~S*Qw+&lc^*q
z0Jh8Rbp<swo)#9*Xx$-y^HBT!38Mc)iHwL36%-OOL?^EF9P!3o0ZL8pdheHGH3~Wm
zzY`)Jb65RPWqi@x++1;OU}C~=dwEm?r4!S^cxgEN{R;&HkE4U#3f7AXcXAY%2Zn|O
zcz86TZbi^qxWlSmc-@;J6<zcwf@RS2Pgq!(cD`DIT9VEvmyWMQ>`T<agOwk3N$#&t
zPk666o?$+|8feSI&wuzuxNBSYH-pZFh*q-bHjth4id4OyTt<@6Y^y9>yj|t<^rtXw
zR7}j3y-ad)^2eQ!&mcS2pbHurd_fZ5irB^P9|DP3Sy@T`Jf>2WBn)2^Cj0lw^w3be
zNokupVmkuJ?Kj)X8DDn*sZ8=we-eAJ09hcJ+g6&Cx*Il5JYZo$v}ZW&Xu8pX$K6+b
z+JXQvV@F>|vq5?Ov|5HFaK66{dJ1_U8XWrh=Q;OLgs46GgFhSI{o4TmS&flh<vkJI
z&mRmT>o0*2%}nMfOq&q1$$=!Q`T?9wSx5=IqWy1m3IX7%^xmz_$vSQ3P3ODeqGf*b
z#>$+4gm>f-uIKeYca5<Bq3He&_n}s!)tAmI`N{7dXA~2i%T#)~+zE%$dKSd>GJJ9k
z5)k}kNOn1MY?KiTTYI2_$GXOxy7CWT{ApmMHz^ewoXyWEx|A#;Mi%yRY8(X7^3nPg
zORd=`pZ6BE7MU>Jr`Z2>{tIfri52&rBnaV-JM|l7j)Vc`K{{;VvFc49wyj)iI+nB_
zHBwPkjai@`B~=99P4GYcWv}c^`=#CA@{RRnAn00ISt-8KTptb>*xMoYBfG;Z#~6dh
z^_CB!7Pq{-7FmF%Hq%4{&Uz8sF4bVdZGQ!Y{7v&&f&XTLQgDz~v)|!}shPW-rCds<
zLam+snj~_CmrsXFk1Ijxgx3lQ<!coH!}hw5B=OEnkjb2f==<swgZeEYA^FBzF@{s?
ze*u92KREhBdfd0-*0eqLC{yEn67d}9pcmr()Kpc0O7pFlLWEOSR|lLjvUD@_(|w*_
z`*-XV@+~*kVdL%k%5pr=*}cN_Bef~eKcvl^H?*Z$DsYA<Y|a08f4O3FMr%!);XV)b
z>Udq7q4sLKSiB3KYk7hYfh7LiTIe>5Yx+CVWHYh5Iry>E_rdC(&sgT=^2oofP|@Dt
zNNXsEfl6FS8Dj2Gy3oUQToG+be*L;7`8?{X6UG<B4ezW0sxiZNdcQBfB?P7ku&`^^
zX}~mU{6_tyi=Z$)9<6i&;AAw{Ek!{{@id*>Q7*i*-9Y^I$O^?<yshW$YJ*W)l5@M!
zNl+9he6$fB68{Apqo9!krScHRdd?LTun9h5#-@qwB$WEJ{&qO{YJYGR-v48TWn2u{
z^S#+%F~A^CDlUh~!Zus*vK4&2o2?qrHVvC^^Vy+GF5UiNW@lG_S*`}E`yoi?*9tmk
z57^h%*3=EL26+l!Jm$J-wwLC=e0lZ{EGO(##vu(zfhq2s**_a8%a|G6cdG!`o57l<
zsh%p_Y=~Kf)x&L4PaP)P*LjUdws7!B7)MHYnM<$KKz#ky{)mbH;jIv}BS_Uv$6NM)
zLS?%7rl?LSTqF;PW0y!!YW;@(SXC8AB1n;8W-$fY3`J^yG@|(|GT@)w#%O7=OuE1>
zejBX3rvjcDapec;mXAg{Yn{1SR<5_s^i|d=#{HT?v|7@FTb_tvwPTQ<^%40QT?BJ+
zuA+&%M(heCBf??hm(d33hd@Qop0dI=aRO5tC=$GU9`N4W+}vQkdURx@ijRf0_4977
z?h-b#uz0LROEAD_AWO~n8Tv^)KN_Itw!HlJ1~bZRDATUS9-FwhyMt%}b1&SOzyO>s
z=3W8?0<{p~ACj=7JNx@WG{v<VsKR7n)l1|6<DwXygJc5$B_M!cFL(&xE}30ui{@Ra
zjx&P8j|HLdTFz$i@#4m{&;#xc?JciEV7m)W!~9m*;?h#QUg9mjC;kFgZ}w`vOgr~-
zwL%KJd*>cBEnf^{dlsR)a?T&eN`L9gPUF51)lu7V7tLkfuIHx24DZ-8WW#+j0qii0
zWOdGNz}JD&Uo_mQr>cA7Nc|R^L8T@K@|;MGGqC23$FRLp)$?t|u7Jwl!L@(r7uo`~
zV8~H_*Hm9>=nZZo`OPDljL<}0YO=LyHdso^iEMhWscHJ6S06e@6Stb*b6U8D=6KyJ
z8Xg-OdbTWkFXw#-Imd>fY@V-w%*P3^jNRw?GtKo4P>SL$G^O%C!1A)yyx^}-3^96_
zMwpKec5(+5C!g_bQE6i*X&0ahY`TQ<fIL*6@}hIT!sc^|z0vqzhSF{MGpG0()=jZq
zkx6Mj-k8r@CV6!v5vl_ht}HaZ$?;N8D0}haZXVJyX2bzad14SlE2`z^_{PLNkoOXc
zE23}bii_iCHf63W7+F$m`3?exGY;!$a#qCp(IYYM?Z-D&e~{*?{I{-chF3gXI_4f$
zSJ$&N+v}smntw4{#o3E{x|X+Fe&Ig*GI4UPw2%@%bMeEE6);>71!n=lI80W}n__Lc
zQM6n45KS2&%Sgp-lH*U&+tU-XOX?AEN`VPU<cRg`*N@#hJc6{V`@@GiNA)Fa09sn+
zeB>Fmi!w(L;+2(^^@?s>VG>~tRBv~3|NF<xjda3yC(S^768m<OY9rcrc{k50dY!TW
z;({tsP4U>-%*bw5W`)xoI5Y9<RBtf>k7F)Iem@t(_In{R;3ptPc){hpckdpAl#}cV
z`Y%>HO;PchFZ7}x9xsny^0~H^%)J*wH+5eu{er5D3YmbK465{M9H)kwH#61Poj32=
zo_N-1y!2TJF#M?VpmY3V-LkDu;*+H7;ccACq{}_>4{B#mVLnZNM2|KWe|?gqb??vH
zdd{%s?E054b3B;ExJlG}rM|_fgwS9<P>d$No7{;b{hl3DysLb*ryK8|o)4}D60_~i
z&AtTR-f+A;Bxg!7D9J-b4f~X_%@OPnetGX1TTSti2;bAhEzmNK?gAT)J@qT|WbxkK
zcd`}9vaT+%9Twi+-r%IcTV}OS)k_)Tgw=G1VK3tH4K$IMM620n&xw)+1q1{{(3r9>
zI6UynrP8Je9^!okgUhGAhMiXLEZ4+J?e#}5*J=0_GAm9b$GfSrt*ORAQv-R}Y28Gw
zy<dnKo#L*e>N(Qg7w4$tqpr8tk#wt1#2!XSNGPzBV`ubFwTDd$?-Pd;&CT3<l&+zx
zd-)k`E?9G*nC+L}xeyUz7VrEq>qQq)u#6kQS1{m=^f{8K@V*b*@U^i($-an{*PdPU
zfJ3Iy2@6L7G;}t<6CN=wY&??2pF|<o?>fG_nzc|>Ev!qeFZ=#I2Z@`>^YXV>yTeu2
z+gA6#9bQxu>)Bdsv>$I`JNh0!6+CfjxnQipyUI8EtFj<+o1sEPXp+p0)Bh-#s<-Kv
zjBVpot>W%c%fyveGg52WPr{`HckArKrRGKh$p!7|zm+e~Y&<R)Ow2fR(mvp|RhT}I
z=WY<{7Ex_EGlc3|+sTe{|L`i$MxB%BY|yDwr{a0-Q}QO)fcL(c@)PfsXS{MNg6oTN
zY>v$sXa;gLLCyEklyPO~E+u9%x9^V`J1olJ_NPnmlg{-C3*FX?@8}*K5O|lJ{eaI*
zj#c#eE#f<x0Ck+Me;H_o0@bO-i8_Ns%g~tmH7(KXou4*-S(0gCvVjkqG%G4W8pGi)
z1WMcZm*4|!7!?O(GpNRLH6*z>Kahsl&@-NwK_RntFDF`V0ZZQA_S-5lZ2%Oq!ob_+
zSV4{#Ke!O=t75%+W;l5J=XstN_4#BIkGAB9FG<(Xh={5fMwY#uT_Vq@9;jKlCS>A$
zh%+?G=1q2GX}T({M%#8XPVx5Tx6<<mBwSjK{v)5E6xza5FK5qyB+@j{)I^GwD(4Sc
znk2+1xwD6piDG$(Q>+z*7HYZ96B?hD@o_9nrEh_r3Q^BIUgBVxGIY|4NM>OnXk31F
zj~+d;wRLK&QyCl*xWxO8?E_jl(J~#k;+w*(D4DU=e2!i`A#`PN(bn4fjUI3Mwcqi@
z;zg3j<Jv#medfxi=&B}J+MK?4&wOui|LON*AeUaN@%TON>jNW+EA9>DKgv6Y>hahx
zo7N&dUxp|BN>+_WJ>FEQZev!G9CH^u?ZTz*zMg*fbW{C!Q{AwtQL#tg#P{%$_wHPN
z-CB*<qGwKrlf+n2X_I5yN|ox-s`fq4Se7xZAFyIJ_%kS^d{>6yu&>J>BQulyR>p4a
z_%8YN8b^p5N$=iGw7g-UCA;0a0|iP^?QBX*7iI><SdL)8<swOavRZ|@)2Y{m`gti_
z$z8Z??CtaQ`m#`3H^{?Hy;eof86<AmA8*@le?hO2+krzUZMhFI7wxI?Oii3E$<e`q
z2k2$cZTlCeyB%CLk-=PfknM~|7M{g_nO^66Jbatp%?j(tL!A?SBaQ2ppx~a5WC}ek
zQ7~#=!LiNUR|oInoxmJs5)T_!6yauk?*lr5jCUmkoL!sVllv3#1M0U_@gW8q+3y*9
z8rtg^KUJW<S^68{LsPfuJR&HWstp?L9yM&m$P4w)P5QMZ(R<DBPh`I87L7B#G}lnr
znF5WKQ56uj;QsO@r<OL$r3kT~4=m5qV7LtByOg}&4$h27J(sz~1bn|pFzFzsp$$$`
zD@R^emq^r!R-RwQGo4B<MkYG_ToCCSN4!b(g|k6!p~rjxN}!`-`4Q2A%e`1;Z>{qW
zr`0HW@xZ_ebUM4kWf{R$1Kk&^&Kb_eI-JrlFkx6J_eeKak`mv#=68I~{(i?&dR;ce
z2`o)-(f%*=FO`Sw<((Hw8;`!iU6+WEl2$(mJ$!VCu@bTO+M`*iBaLjUP4`|M9hv;g
z-D@1}I44=l&R|KK^gUJGb?LRC1S$U+*fVvVS1fv@&YSEylj~>rezY3xP_4+7h2WFX
zxV_j>zv;AWVxMK^82YH>M-12JNR+J@6;Uv_)IXdOmqYeuU-tt?JtzT<dZ@Q=3K!Y*
zLUeR*#V8Oz9KE;@({Om@t>tuVF|@A@NLl4n(No;3pxO{`^29&1zpX<?5}LpEDsEbM
zP@q8LWf7XQvrtTAkaB^p1Vtog0T#&}i%g%sHqi42#80Id&7)InGqPYjN2Qe}fwrk0
z3d#PfI({ORyeBDltZBg|1-A<f+(TT=`z$7L!C`D|hm@GOPditeLK6vX??kUk#dCXE
zK8I@%g}aW@j~v{{huO8(ynzvxD<8iZ%1`?HZyxT@`^|fkyP75cw;-yN7fU(bgckWq
z><w|}Cz7OSD(A9!rtj?fKuH5qq1!2k#pK%`7=6$iZ_IK!`s0OlKPE>ES$+1V353$0
zCi2W}9^yN?x+z??Nxz?1TmSMjiOq3(L?i6EDTv3)=D9PdUA%C!b!;{h6)4A+t|QRl
zO#14jZ$XUHB^yyUfvY{*n>K|53j$lES!0N57X#6BpQ&~G<7xML^|l1s<ovV_xbwlE
zT7||v8iWii%LiyWtC*~O|1_s*wrJysYedB4)jBQ-O>DMjzxMmv(nj<s0#!A+1OLj~
z_X_2xe(Q7mn{AfPZzo{i*l~9BYKbSBEX+Cu+!!(=NnO6eY5~lOAgc}ieHmW*Oy-6t
zOa7fe?PK!IS3{QrVzaEZsM2oCNtK}1JDlS$DqPUTRzEK+1T%9Ms<v?nlen_Fn!Z|i
zD#VOAPH|AcnA=n|Ee}<OyFMGdVV=fn)L{{emAIt}-f&Bk+o4(S!n68rquU(g>=k;;
z(7tbt>nv3VPv8Et>r)~0=j;`m?zD3s+;|f_#7k_ho_Wd^oWjmO_^z<f&E1`9NgP{N
zEM5?&_OI=U)JzU_rL}fB`q9xZicSCEM9x1yPa`y{3B9Vrv%ZgwDV>XAm3V>n6&UX4
z%AK0s*|)^prC;lKWMh;0RU}5?OUcC?RA>EK)>^z&nZlWDP%n)yre#1o-EcCznF%BO
z+mWo?x^F(5Iqhs$nTn=iuS6%Z@_xMK=$0R(6CfQuJv{;iSwBN<$l(0<54R)9_wR)<
zoQK}q!a`dMiyQ-gj${=rZ51Oc?yMW?XI~Glxclt>4sEpJ{(j)Hqw%mE^8sH+`qRIQ
zQ^?fg$P?>bgB=bH36&u2*1%4w3Ylc!9NV#^Us>{RHF5I0Fy41FTzVI=L|OM0SC5zU
zX`M})*i9&v+-oOAO|G&^rEjdKKhnAA@C}nMdLGNE`egEVINI)~$Gh(vHNF07IZsV(
z_oGY?_%dCk;#f-^_d<$NHOClxCf*PZ%}O$A=c9;b2M6`V6GSV}kM`8e-cn^dE25B2
zzM25{3ZJ}E%7tJ6^5cP@R6}E)4d}ko3>ri?&8%&&s;)cUTFK^~f?%C+Gg$q9y#Tnq
zp>U_OYEOt;cvRzXp5aWOt^MeIHWuGkq@l-(;S%qyQ>zBq7*!qBo}~<hlM_>rgUwVm
z|J5Y5d^Yz)ze;pOtk()kOf@L`t$42d4^`>qUyNO4@jN|cXbMBSCr>Ofg4d&Q;`@Kp
zu5o_1;5zZ^)Mm}roI%`|yaWE5@DSsQtf!$<!cim=Y+eE**>)3QZ$IAW5hfLM2+^eF
zg}ak|yR&ytKou!hSM&KGZ%MQlUxpUDxTqE@^ix6eZn!L*b41p2p_~ZkZ-U0E94%kj
zS>;w(<uqN4Rp&e4jD<_{NV(e_OWFl)`SPm9nO6u@h4ck0z=Xry4)vo0oYaoENkCxp
z{p4j%<#3MYaxWAmk44tGo18}C)Wy{<o)`+eg94XEG9Kk$BO#rQGWEk>n{+u!!8=li
zI8um7*z~ri+EQ_2EB`XH*nTN{u<zDewlKSBi1|LJl2eCc#Ts7sc&}Z%q=q9q9xbwm
zoCiTJ!~b_HmH%<5_iB{n(U*r1*B6LK>TiT+`JP9H$!dHwD}2lG9<K%qH9tQe;9f`u
zEL-fatdgbpT?^_EOH3d`Un*-|V?!2-pB|HAWoczZ6Y^VB)ag1>L@1PynV+_M+H;}|
zEvX#KZ1sviO>Iy_26RYS##uMC6(-S_c~0gErq`U>-(Gv#-?nhk2S2Eyhl^hVhpe0?
z%GMh5ErPpozFRxT?*;N}_ESr5?|tYU;}jqcvcwpV6dbZ|AvKUUX-Rs!iDM6%<q|Cy
zl!9@ITJbca{H*D$h;9m01Q9|`TVGefp}&NLwQGZxbL=7Y*(ZU8g(6H5;8loGn6HhJ
zRwH=(Q4xCFpn;MmTW2>;t8>mPQ%ZHv$&N5>5)cQwZAv+@GQ(xCn1soiFIPiafr6d2
zz~aunL{S|8RSkVXc7{Z}O}Dqphfj@xEQ(rSRBGs7_n^%f4eJ{|ZIwZBZD4vnRtdyL
zQ1>4diW$Ft6Kx12>LGt$Ym$SoPtUCpkL&iG28p?D+(W#NSU%FwI-UI>{IO(o{oag<
z%Hw*AphLXa+6*e9c6Y%}|7z;D!$>R6+WoNVvAr!ErQT<2$0zTsMrrka_KY54#kPBe
zetN`ll+C-q?pJaj7uh@7CvUxyS&h1tdcCZw%Dq-u6)RO(I7j@U`=AQ8udSUOxS#;h
zfYD}1Db>V0oJFewW|xQIJc;gkTz}xDsS-S4^F_=Bc_zjZGvc~80hNHLwrS*-v|WMQ
z;q6+ec4wwLY)!Lzj0xEDPU#N)-reQIYL`z3OiTcl-`a9@aRJHWo;4=XSxbgJA#3n-
zI&RX@C-f{KLCOm&>bqDS1*Wc&WR>!rx8yy<^`dz;wPi2Tviec3>N`KRviO+RunGA@
z2xr2;2n5gm>DyqZ2b{ze!XKJPtsTH1O5ki<53v=*<9nV=(fRiS8K44J>kju}{M~J2
zYkGRRh;P49Yz~xIY(wXaN>H71J+E&ncG56aOzMZ2X%Hs+lD9c#q1eOCQyzkoi{Fkn
z#zk~|czAeVpv<C!?Dl2G7=>h6ng!<f(B7*hV$-rhbpJV8?QEN4N}gsMGj0*8HI^nK
z;e^|;t|%ikoe&g^*`*h1g=OyKEO{};ynj#u*VZ->cO(C)<tUUmD00JHn=RLduCXW8
zbe#U+R5E=aFsov;pNSiQv8WRJi%a$%dI!?;T{PvXa-M}jSh)zg8x|vW?@@E34zuop
z?urvX^1F90aRG<AjcjMbjcD*tr|w?9=&F(Z@NxW%ye@$c2?z+t3Wtw|uk~~YB!T7F
zB{D1SlBPpz*MEh$f|s9w^36W<)JwG?msl}C>)Ew^B0n=^wUj31uIXru<I<1Kfxd6k
zcravahw6;DTG=ZXD$Dvx8zibSlR*i}F6{%ulq`#qVa|5=?6;CLh)-vl<q)U~W$1H+
z0niUfM8_7+*FUPJn5pJ5gjLc+iamjLH87fJ2XUmnNEP++?rQ;}#}cQQVj#-H!{hFp
zV}Z%j&|^=4hUQt%bo0eT%djku{gtZ01SHNFnk2-pXUyz}v$(U8UFbBqN=ut#lao%N
zuD}u}-ka1idPVhyyPEpy;-Zt=UZ$5u`u=Sam)zc?XR$!<ca1~1dL#Yn49IU9XiqUv
zs4$gmEg0G}KzJGyxcD|eCAIGPl;2DFyUsJ;6JCGjJ2slwy`P}QZ6%>=|G4AzM+Lw2
zu4h&>)5`-pG0NO{@i=mum|$I%G@4dlyND$xi+IZ7#-lIJ-kUM>kNs-Bx7#j8Is1j>
z58CMSOSM19D$T^u+~Mk~`J!g9nZ?IiL8!XqSTc1u^$}h4^Z|wO2s8v0Y-Q)!0GJG9
z5GG~ABwjijguQSsK>AH~cF^3JL>+k`+Ro`$`@~t-u5^h%#OMiJ-Lj*1UEf59#5wpn
zEyO2I9Bhux2(K2GW1ZBVtt>1oEHA6%4}u+uClVZ`-ycMWWht~(l<ya;WAEL^e1z}q
ztnku12Y!O{T!hk!Z#K|yH1I^^=H^1o7l@u-`9pfMSJQ%*n%Fi4aQof-C;=u?%lUBS
z5m)_th=kJQY&PJ)wO1J-)92-}s1DBOL{N^cF^UGTy_tf_e^zojZJXv#*ga6=QS#p`
zmP{AGkR*{gebrdGc;~mncW;slp63JaQ->_k-3*@+r~aBsf6i7`pr4p}&-RxvwhX<m
z#d4EFqmLJ7d0xq(n_om!N~{=!?)tSSs4E34V%HC)NPqOsmUT%^`I=xohX1bL6`ek)
zv<j>W#ha~&jWt|j?Ti(dvv0UHxLYiuEn@Xa*3fG>K^1FiU%S31*0eE<Gxg{%XH5P1
zE0b34srs2-JhtoGga*0Fm!qrUce5d+1ggUr7Npvfx38q=dO})$r_!|Oyc#NLd|L<#
zlniBB8%;<iDxBfGaw0ktl_IpN;NHC}$E~OZK1wFHtK?SK<eDbcpCp{QeIFwTojAO$
zWU2PRB5hK@zke%MU_C~uE~(>On=Wz4X+na|_^o0RZSpW#n3%UL(yYU~^*faQn=6!p
z!J2=j94xYO%kwQx>#bCSH<L!`o~-#q+~={bY6S=N88JTL_Onl8rPt+%Mn;p&l^3li
zB*k2B=?SRDT_v8Ww;+}?Ym!*rU>jm_;7VVc6}jf<Do-x=0p^RAp>JOfugr~SNl?l~
z9sPdHs}R=+4H?<});1=m*#JyI`PbdfPhP%Fwv=Q>zBQaF=KKrxo0l~xjVJaKE{g>P
zOdN!mEl)O0);y>xA704LK@k~;^Qp!?)P0>d`s2r=6qc?ssKqqx&b?lU+T2a+P8cn?
zYjNn;gzi$P;Pibx745qdu=bsx>BY6uhCc`R`rfgGdsWUOTv6|`GfsdCYlg?qMn$_O
z^{8=WDf{ugxfAhXQQg>Pa&Pb2@vKj3YCyO446%t?hH;cpFD~8Nt=T4Dbu-_tdOgqn
zu*G+mTt)w#(E`TJiTp{y@$xXK_;=6Van@Ml>%KGRq9r$i;J_4ylJ2lHb~A{D=|t`w
zY|bk%n<wR9`I$}|Eq|V)ZR^0K>prB{y_suoyXa+29a2<$lTJ!3dJ`-RM!iNOTO}nW
z_jx>eC3bwEMv)hsXERWtDY`c8nSS-018qJkoLN!Fzp}D&Sd7HYoUxT#qAH0|H2kII
z=&<8UOH5bU@?Cel3E11a%C_sCTVix|uV7MHwnr0R>2|6Qk1hpRVlau0h3BEM)%y*7
zas)y{2K7{SJRkbM7mUuod8rN}g=pGGrU-P`*sMCP@50PaIsT}Xg33*j%)9HkO{&`h
z4z>fy<wf$swA*fl<fm__6TJNlQeDQ?eveufw7Z)dNUwbf@w-V~3grax=n++bF!>Sr
zpI?9eJ~3g3BZ_C~+y+F4!{4GCd6`?dnAEs=Geu9PcN_#-K1;sj$F{avdFqgKTn<yX
zK0DEljE&jKQ?mAoiHMTcRWUL~+?<d4VQ=U#W`p%V5uEt%x+;G>eyKk`C5kIc6I0(*
zU0&Gza9IA+Z<5orzN2O?+W+VD!PX1XvsCzV!?oUie42{AjNh)DkQTU+*mu~q4%X{C
ziJ{{)MeVx|Tm#1Ll7H^!Kl%*`)ElI(cgA%OVHL1V`g?#d+Iy&0^8R;9UE)YF_nvdU
zFOys*5top$osO>S-0uWQrGNp~@v>q-cd~j=+8kHBaZK6wbwm7kLES&)D!BvgNME0{
z^V)oUv?z<#-xpptQ}UAe%jQ$%1gg}CJ=67dhev0l1e;{N?oeJ#3!W7(niA%sCLU|^
zMt5aR-MqYyPUpj%+`V4{PA=3ZIg*pM%_fC1x($<<OX5&Y_8qhVq#V0H`*|6_iR!&!
zU2eb}b)J&Us#{UZu`S~#EciwzCRRDkwTX->FHxZlq}MDIW1UPEPU^THuEs)$9e&7y
z%a8Oj{8(Ap6K%p2%M86d={TTc^ADD;LdRPagQ{kG+0T&?tC8$%23q4tj>>!`{5s$P
zCllpdCo|}i1KkN3p2u#5bp;owz*WfdE@#*QI^51rO)62d-4G)n;=qpQm0POWHLdOS
zR?W}`=@wy~j%t@Y9-}LL+uZ4^Cr$jisO&c~8ulLT_>7xu%ri+jgk*<=sLuq9J4~y(
z?Pd3fw9THVS0GeyTva-@t6lf%bxzfcpi;k4i}{%t9>+ZHnjdqJ{nO7BI}8e@Qq0_b
zqia)9J7+bzxOf{arW>!K-exR9>iWs1#8e0;9A)02E#UwHD-2wNFbs*WL*zL6>gQ2b
zx{^_wq57xcZP<k}`b>>>o=6Zf_cd6p!uG?6Iua!{k;bFR*cW7SF(#%>lhN&r(C$4?
zdxMr_+L!?Gk{s}+M)*9R3z{;U@dbZs+Fi~s1z(M!wT6zUtZsb}troACOo24b+0=_w
zVNquG?B^jaY`)p$q}+9mi&koDNIN{sgM*}hzp%8_{$t4;s44yZ&G>rf!m_x@wTwai
zl;UX^;R98X6}Cm4^AX?7FdyscuEn%6X7v`}_jL62Pp0+VBH&DWq?LtIbD@bD;DR;>
z7?5(B5ELgQ-;itCRSodY+U8hL$>(x&*D>ECs89M+|M~YHXm>+*{Uu4szV7KV*x-M-
z6_#Gd(b^YvMbvqt(XDr+VB(=O-YSj5edplI(e4iS5%y>oROX!nIu`zQu_i>xvo6L?
zemyRTlp>n#ZnagLpYgqQJEcvMKqsVp-MW~f?P`C2eJx(Z<Fq`%QBqAvN5fhsakvqa
zeNH~yn09!#XO&YQAv@xVNwnd!OkevV@};EvH*{VEH8c1IsbAP)TLU5mWr)5&y86xi
z!y)pt>1qSCpwz^JSZ10KGkvm?p*FS1Z6cSu(>10A{KP?vr2TRE3WbNMy1Ka?Ndf`X
zyvz)nnZQKe##}`FDoc5ibLOJB5CJ0o^dkO-Vr&+wun?sDj!x%dsa+DEJR7B0*<8)#
zC6f5Ao8eh#n7NYjFkP!@HSWmfm16va(hZZ^^D=a|g`-}#jyyMqz?veXhmD{@wmE%V
zXUOeC_t@Qw!<FCB^=JDjiIY6z_J|fI6E(e@`T!}JA}R0}b|Cg(wI@qZusnVH2}Te5
zOpfT6P0C%<)7zCYwdduMz9Z#$Rm-a{5N*%Qhe5KpVj!PO{IT|TBjl3*`fhL71hWil
z)H}nbBcr;fi{FHzb%hRBPfdOpDSHsEZ{)WC+MR`vxzFaYIBm^V#O7aL?k0;;Q&ZEm
zT`@U5A#Jvx?6syfj9~VLJzHf%{kyGi^oQ>sb@lq~n%XxmEVoyK&TCq`a_o1si^Dga
z>l~dp^&`A)E0E#)VS;u6vXxZ)Q9>P<*bcVW_YXIheje6lZt#0i($$H+PKwByM=Qk1
zV^6t?vIF_TI=6UkH%@t`i(&@6nUYn&OfP!xBRZlifI_arc~v8D-sn?_w#++$1)G69
zkzNwS^3GjTQ+g~p0b)ZMBp0Qt!&Sf}du$&+&Us3oww{7<iJjirU!WBx3;WL60*p-U
zH9kHT%f29U2S6l$H*}mWw!>JlyR50<S<kZ!I^TWnOtr*hYP^NouH`698p7QNH-P$5
z#|`864r=bh0zJCRL!NRWTz7<-B7mq&aizDV-^xOb9m=MG9l_hXu7Lrh1B2af+VajX
ztL(-Xm8e&i#lJB|q*&c&T-?koKx}WZ?TM9(>9>#&iAsG&cMTjp;}Y+et8fur>6Uq)
z!QbP%F8-&W6W>wxI>*Z{AelcmB@u}CV6@+>y6rJV$UaySuGR02X=bl_)ZKq5pFj}~
zuBIWs$cLI0K@m`>+1=zHd-ATT5g-iqC@RT#JLbS2A8<~LYUG>kc(3@*&+_zZnbP|H
zi=9PMu9nJptJP!du^;e@Y7?f&#mE@u4!daFC1gNRM;0_!Idi1&3+0ElrAy&*Y_3|;
z3^e;-_0G5`Fob9AjLV#R;aq{5*U_}g$U;Gx0oHb5`FG4~=Owx<loD8v7%soh4;CT)
zlgi(Lc${amSSy+Ti0%}k8*!S7;EnayBXL2xAe$7H%D#N<FECu?#$|m5W-#+I#)REt
zV<x+>e;}V|NpzPe@V>liA{z6#>@mzrTy+m*U=YjslANa)gRno7ufUvz3ioA^rXmD)
zvE~#F61UxW%Ge`4zla}JVed1`(b%5AO8x^K-5$>Zz)#+Zye_^0WIhsA-F&*bc%%JS
zh5-X2FXjT<%ZgD-qG_w$M5hTW^xggLJ`Bl1VWsITOWDI^GBk`wpl7haU{%FWhjsDF
z@Xw!-_f&E}?Hk9n6(H%1eYZ!qdyy-H<gB(?g8mMR-T5W81IY_-U8S5sI&In?UrSpu
z0;M%wYJ-5YCu2RMLDcHYBmCgF+mBX8Hvt#B>4P~b@2wV6-{=(cfsn?{0eUAA*Xy(V
zMuWGJa$?obXXLm?jA-_pa#|kt*5U(RS=yfu*0d31??F+VZeDG`-Rj@i4S%Q|mW5K(
zg33<MPVSQ)=cmS6srVmnFAA&5xL()0;dNT%_X`3956uZNy8@MLekSk5LOtaA?SeXB
zT!vM4J=%OxmYCa@nH8NLVn$tz^YQe?BQR8I#pR~$szUSieMY{rJ9DQoiK>I$G|G8r
zZ(wf@3Fo{=yrNUhkye<g2FVQQ+PnFkeb025?p@MFbMyJMFk6>^s_Gz8&e3-Y?gGv6
zdo<8vT<BX_jfDsH3QsLDg%w7f+-(PU*Z^MiS0LDnatqnzrr5r;<Lk@!><AJ(T#c)K
zh;E2;ca<#-AWqnn84{C|aj8W^x3avPANHI>Luu+QP30Uv^o-6Ih1Xqs&Qi-p??KoS
z<Er#KtSR{zNNec6f9#xZ?2WI%rH>!DRE-zJ@X<;5o4ILZv}?zYHD;rt`CBCSM<4FX
z<vbpWONn@mNfC~EWM`KrLxo*r`K4;;GB=;p`-90UkV#mR>4|NnHNB2@UsSks{072_
z7UvarEyRo-quHd=Jqc|gDC(0uZ?Ry0jw&rqh2HP4*`ct$6Gaby8fqeYsTSQ8Vg~hS
z;fpsI?QPVu-^*eh$}Tq8P=|~*`tHB0nph-)34gr(txyGr@ep8<LU$!v!t)%!ScfA%
zRjuKMPS8o2Z&s%4#Um|q3?lMuDjGml1tS^GEqBnSQ;nkl?_B5#)7&gEc7UOS1Ei$~
z1-j+ZC`z~_!CT?9VZA2NPxABT<@0?BP<>4uDMux$#B{+73siW5+&+<FEaWOE+FK@1
z)P|TrV$s!I(BBh%vzX0)EV%7QbHnVzW6qLyu6BE*bk5e0{7pUOb8~n3v0wc*CJ$G}
zDwmc`rJNQl)4d~$9$@xy#%s&zrJ2Q<-7l?1(GG65K1=V8v^<n7<t{%1^?p--TZT>H
zmAGQ;{NIeIZ(d$ru!9XAu#FHp3Yz5R+p06=5%R|}tIEHF2Wvd#(+r@xiU`jwS?pf8
zu3UTe9V*<68m5#$p%B`l6Df#-g`+O2orn$%4dWD;XP(lDv;Qi0&}ImVIK$=k8r21K
zI_`LN?Ff4flass*iW}|cyC1><$fZnO4U+{?NL@Xeql`MD6>6$5E&31|*hED|p$$c4
zPzPzLX4(Oz7fs}#0MKe-+K1&-*)XLNLLQt2lrEwSVCHT?v1zArRI7PyiT3B4U1h+`
zd5C2xt*BZv!B%pMFVpD$KDmn)6sgAMMPFan{Pc=3LVzNz(C}j5n?hR{zGi&v^szrz
z<lKb%e6i1MVduaCMvkrEjpFm=Uz15ZwDQTM@6|Zv;`OcQzZ8``-T)b7ilu7O>bMqi
zGPbT-CPDDq6{FO)Jnm)}CB7)?eE!Xg{6Tq{3@_)*Q|4qX{}4D$d76xD!B5^h`=Oi~
z5c}I6&l0g7mK4J|aS0fxnZ=}DH_s7O2^}tKXZTJ+_IEj}o<H{o<bEsanP<9Pee2DC
ztl??sT@Hy%KsC|Q-pPzFIfptk3pGK@c5iBDzrZ8g5(Bk+y|_G^SY}W9m+%wE6FyTz
zVD0*pV9c-7m1SE2GN(&Iv&p-nqKL(8Ez)b@2+!+}Sy15v!^4(MqA7W><i*4sKNmZ1
zH(v^tnOLk8#Kpt2gd(twg|CI|-6R7W)Om=5xY$3Smxx0R6Lm#B1F#m>7T*$!yU#iQ
zTBIDA^~`f4|3YZwH!ANm0es&+>)^9tqemQV-AK8|PfK#~G4nQjZ?}h+X?pK|#aPWF
z{eJqRT`H6MsSRbQdjBHz{~L7pXnd%pw)~b6{%kKE-33MBnntnCIGYrm7vfeG6s$@P
zTJfJz;aT|a#YIKRg95*W7w;Pr+2>=iSh&ErSQpVJ^hcRA&?WzgO=gY}5f8@E<}Qgf
z&0@zaH!pAvLsf60J&Q9z2?lm+sl;@$UJdCV7>MOBgS_OcrPMPscSylORIT;V+S!?3
z_l~Pc22}J53%M|5IsZg;UEK!qWPq^OIiKyNk8yIQEm+6NQ(zYCAyM+mvFATdVWDuB
z`;;dDRvD2zXkx>WLqXA18+ZcHf$^B@W`}!QSc<nu!C_UfVGS8*4ptPE)GEa?FXkJF
zIuEayoA+BIlPhm_(HW(Fj2He7Q}&wAk!Q5Wd{i*%h)|<S_fNN?iMzy=?s1fy8Hw9|
zkXKM_{V*}hvUNOlXqyga>hRnD_^-d%ao|OvR{HXRnovi8k_*I#YC3NPqfe^CK`b(G
zyZ@67{`yERwi|}rF|+93Q3Hq9(zme2U;-nLbRl9U$_Npv{K18Zi3zyCAR=m@n8UNG
z*t?0rg$I755)0oHg+);s=!|~)nc-wG6aIx6b)F5hX#|$W!UW5)!Kw!5dq5fvc{mzI
zl?db<ZmC|QrUv1JhD3!WPQc40A+xg5wIlW>Qg}ufh7)VDSi=JW<lKo{-smXU){G1f
z%Mpx=8x|B6?xegaEJQBkL<)4`q1<SzY;Jx#EW1-D&jy+V0YA2xe*jm|KAs~y%O(XP
z6vP2fPsoZ&sjdkMxfNsJJ%`@_0B~o2Wg~xQ!n?FcT8~XbH^FigM(goM=OCBGs^6tf
zMAyuQeWDl#drs~3jcu{UR4IwoMDB?h%-5d|52Au|8XG5$YM#FQAsbLZwnKls-o<EV
z<KC-|l5<`9CbU+4_%T;m$_3B)8w_JwKivC>PHY{%leNc#BPJ{L`q;6L@86d_yw~<L
zN&;j;F#nzkkOsxv-oDrWJ?}9{Iw^VM;os|g$$Pp_wJRphLX&8DyPLheJ(Rhiu)V9L
zlg&sL*8M#cD~ZmzyMYy|M}-Uc4;fNJTRtL>2-FG0EBm)yDJ4sJHc(O*5)x8>c&b3(
zoH6E&NjlQ6&viU`4%%aBquXw&X0Q5AT-LA2<acY~frz_dk*@jcC7~aL%B$0woe)xD
znW2hBqzDv2-(K8G;JH_6?a^stwDO5!zcyMPO8K#(LgQ{Wj^=h45DKn6>y*16zQR5f
zlh91G+<$T9#a&n9d>wt;sqg*$zYpF+T><)lquUB(N*n5jHV6xTFg}UEebsXGa3NYb
zi{sEgZ8wYA@)UHL{`yFwEALZ6SQk$>Rny<r1NR+}B*5!aLrM9PSxB)&CT&+f`}wyL
z<MLk>gBu4wHp+c|w}8$l-s`*K|2kv!;~HNsr|(8s8{81VeMO>x2;*5>dXM+cSw;hV
zRat`aA6H#2%f&RxpY+R~p%RJ8wuiJ`z#uPhl@7#HYU(%HrnKKa>+}=6!t+eb?d(7J
z@Cxr!SX5N>;Y0tZMeRIs3)C;k!octNJyf@_P?Yq;yuK_Y?1OMZ37AW9Uotz7A-*TC
zu&`Y0d{>!xuXax74~`h8U$UCSrwQXdaKzR<b}<=bvJ_t}FoMKEwlC+<%uBMI{%@ZZ
zJQ5#VZ~+}jm^Kf^ROyj}P1-c~ydL?1`%2#6g6ZL+J_Hr$8fY;S&`usid9C~;ynPw6
zt-XDzukQ1yn0Qq&c~iS*pKw{JHCJ1wl<dT8#u#hfZRx$+PX=xEo5{v+XIA3x#YQy)
zN1oOmpMN=~zb1O`I9-X&7gB^Wwb<_UM5!ak-r<befg{(12mGw+M|DjNM|e(FV+p4v
zs5(!rfqTWVm$T;TGsORS0mi|Dm0P#k?WwI6e2FSGp6&;#MOH#}5Or0yNvl>oV-`bo
zU+Zn;Gjta)n9W%QXFjb0WTkPAN#wSLs_3hXybqNp#yc-Uu$}yKHrC}3Nl4VeGs6&w
zR8b%@i2Fy=!cn$2v;-muHNm9cTXR!)NcOnA002VAK$Nn2AG&jNxovF+mi%Cs*~qPx
z&ax53T&*V<Xvx$>?pJ2>nPN{5x=(n9QchLAPD;hRvrr3tnZHJM4VlE>?Y2*6I`>_4
zq-BKDjhpQi$jqj7xTQ(oUw&Rs<MKGi8h1zhpM++AE0x;WfPw{P_HViCW+d(Pl=tXD
zd>+1c|2@QEf9t}`Z?y%*^tO9nW`ZIjr2euazg-<POiZl)82@0&Z?mN&+Q@5E!d+fs
zsaE3X%Us84v~$XUL$ji$!--en;shTJPgj{t=H;Fbam;KmTMYMuAeE6_K#3+mVEp}#
z@W`orEjHD`yoF!#Bd$2lP)P7)y8t;yTvc!<V3;u;y6>Lyea8C$^_G5+-kz1l7d)@i
zEUT%bJ6wj=w;Y28+32<hZLQPmVBRH~9cVpYd-?K<y9L|DJ8L`J+XD%=b#*<{P0K74
zAr6ltiO)XxKs_ElLV^fy$Fju#Slj<5^%Lj&3rOwk$m*`>A^M{a)_H&E=kBZ+7+T#9
z_niIrmJ>U2IAeh?Z?3ZnLg(G_(ptk64O~jq<htcz7b-ks>!)8gtEA)OBI7ObL#xt{
zYmK|6$G3XvooYAYGP3FpW=)TBabGWtd*YHtN;7!Q4B9|Mu&<eYh>N}0E42oJpkqbE
zq%_s8X}T*~ymsNpKEvQR$B=#86*s@XCIuH({`&aL6Q|uzL22;+HsA-l_#90sXyl+(
zSO|sdM9Z%Hj{*E;3Oy{BTHq-T_~P>#!i6H}aK>ReXtGsdCL2-^yZS;@Ie+f)E{1wg
zAWi%9+s5ES4prTp3>eXK1#>cAPjqtIWpZxhYjmOhHzSwvT{>zr1j<0payE!tz}P>a
ztd`3ZCdqd~fgmNXpb+dwVjW8u9gdT1N8IA#;-WES!%POxEdZO>Id3no<<UOBCev7G
zEeljWix~XfF_I<5KdqlDRdpn0Ri1P|lHkpJ{G@4RA(unTnKXW$ibTuN;PtK>p1fpX
z!pgUq$xddYU@qSGO3q_bBy%-^rd^$+@59vIu{yfB+u^{{MXHBLOu^9Mh{UOS_!3Zu
z?5^5JuN>z_9}rFxAkGxMEk5|oVQM?ICK^*yz4VEL8g@7070D2p`p6cHCs33WPm+`B
zDgzfMaZ8`;;oNKc#{Jbgwld(M)9b><@1)@wUw~o5YrkL;ErlMZw=GW$3(|5o7lU1H
zP@oeH&s3#29e~^Y`t`2Zr!}-$O6Un#FmWB$b(7>uyK+8I`rTxj`_}$pm@HuoB(kSj
zMTNz3z3?~0D^2Y}y}g+@b(mp$1N_=4WA%39qO}GLU3@)WFs>i*N*oNr68v&>)<i?~
zk+n6S*^xo(#b<c#plV)D3)dkOp;zbD=OpH^TKyS+md)QUWEsJRV1iO4OE`AjHi~RD
zf8`7Kh3DO6=&XjvP+DNV0fF^yxg=DbZiqsX$z4hM3Wxcnqw&tw3xP>2xW4a`wN%>>
zkVD(~Nro+3iMix+J*bF0P;K?oDnkP)s{01?!ubd$l@(aCPn?V-94sV+rb>7sLc5x-
zOXg@#dMo^cCv-)uPpU;7E)h&-B0dWi$GO`U{bgu5O_)TNRya#^^Xs&uCQ@SO)GM11
zv-jw0B%!AQ5G_0%7JOEpvzA_&>guNBKs|uoJeXdK`Q{wG{vPsupDP{f$-($x2pnCb
zBjl!&*L}Ak-82!W%}>O~Hnxo@#aNpZ+O}YsOhq?ej@vrqWl%?er!}ZuEI%a(_2kl0
z($*QXZ^?O{gQ`Ng<!_bEfrL@#!OY~XApzB;m6hCR=7t7PY&_G~mX`Qc2XzVH`LJL+
zFq6~2#|(#4p|=1LgqO1j6R{50^_BWV$+Yu`&YqiFBR!pzcyaFVtinPd)Kyjbm!Bzq
zdx!>|4;%$va0Qnz6`U{(orjp&={DPY^wN48Jv}uwR80B=RCRUbG*2GbvMx-qG3=VA
zm)++fnx==8L$-p;8wk8A`RQf>)$sUo^pAg7=iIq-@DT%8p7%pCVQ?c-Ti25FD~x5k
zFPXgS!iYc#bv^plGexN!Ye9V%8sz?gE%5sejn~9KpwI*MUosa1c^CFr*bu--sK-2$
zL(w5;<~&V0v)nhJBhIjV-bU-)5a?@7AY@5h43xg<f2rk7V)*%Fn8eb}b&|sVz22xe
z(&pQw{7ZzyEt?O)W0SCKt&z}f!AC=UR&}tVg$Ef6i7QN2=JIJ-%FInq=in7uqgbU}
zV9Q{@`Dt!E(l3gH8C<geAoss7wFFvt;&eH`<#aJvrnV&Mp>4eJ>0vbkW~fBv*^G%K
zJx9wdz<&X8#|;V)-x+aD$1%k`&$HPKvVu8wh*!5jt@`f-rEAFLpcq0l4$oTxj0!?O
znMzz%qYIQ^NVp(+>gtL_#W5>tB6}qeO2~`^d=1p9*wbuBv>{nPjSc+8_}}*+K6$)t
z;UQLxg)#}-F3dO^4S1oz%%{m<@zo$vE)DniU*ftq&&da)oum_W@%tnx)Wir>B2nbY
z()st&MBa>1c#nRqmJbmULMVkCFL4XS@N1fQb(>>0v7|1R@Tp>PUO0clLiR`N;RMoG
zZv5YXSO;iH;8O+Nil2C}zuyd#2(Ct(&NA9gEo5t1F%32ENveGbtOAq6!zv+>Xh|Lh
z_#|EI-;Gj9n!Sa4gZ?*W4Nm3hwKm7X!n<V_7`6OCECpC4EisAAHYw)bpm_h$(u{{I
z^{p7@xeQ|fO*V-wS>8MOnm0c+SOh?!`k$AGM${W%?SIW-f!W)Slr1x4*rXUG?tofP
zd}mOgg-2x&XpzW>DoY&H!r)0+@$C?lAVwInzkSW|^#tReygvQ&y+CH}Dl54b*I{wz
zPEcACIJ6kfr{sBFpN515MScp*u)vGOVyNZ9&_`f!gM<8<7BLKE|GqHyK0$5G|J-lH
z%<Tk)f+dh9AtKh;!N87TjY>3(m8h(!I30AGy<pL(M?m%VW#K4(VkZB~{ge>Uh&Wn!
z;P$~9IJrRD4%PzBdx4^n)QHp*2=dhYUIilVzv*}P*&&{FI%qxzO0Xhar)T?*?Np5{
z_rx+QUVf&5k_}eB)S_TjV;)Bix5zvZi5YTjcp6v)->bGyvYF9i5_p5)srEBiR>;A!
zMQ0wE1_du3&j-$|)z;+Y)FGMF*(FON)4?E&XGNwPs$ti5w1wK*9r?>F|Gkwp^naG5
zinZrfO2fIy^m#o%NmlYSmmrUg3#gu4_ima;%%B#^WP(gqw^$JI(o&xMiXOx)NCrVC
z#~xi2CAb5^0*}2;=9~!P6SIbFUro9hb)uz6l7_ENR~b?cHWxDC<Rgez&j0er$zPvh
z%8MVu(}~6SzKXxjpAWw^_SP}m3YP3AfqS|?s-5R`BY6-=<<`FzGvN>7Vn|;+<avMc
zIe76rpyV`&Y=->y%0!a>EHxtBTD-ctc#qcWlkd4b-jDyi>))UFkY1q>D)N8tcy4nM
zp@Edlu%DU#W1^z{fA2!kxaw|g>fF5>`lk@|k*hRx*Gaj`BJ}#E@AncS@~zhbo-oOW
z@`nH42X1DSEE=4@KiOQho`R5WM(H}P1soAAWB%_A2*e!6>Snoh*WJ6MzvRw7{cIUQ
zb)6%^b`2A9cN?BP^M*$fX>gLB|GiKWZhrkockF-9!u|ZP^XX&ZnM(R@Bk_t$a9#5m
z`OD5t|C^a~@@5UK#58R5IVw^n*v@Cl@DWh^FM5-qH*E51y!;ilHUjmsSBOtEmB!QE
zb4!%?#(zhEII>{iwI?!dsTqBpR=k3o`yv8~<}b@HEZa74aJ1PH*=*U~?1HBSqMk;Z
zeXQSFvAp%Dh;qpM;D0}lP-@#4dvN3F;kg)?O?hU0H+?cQDv~6l-N>j%aDa3_M3aUB
zK{SP@yH00fJo3CBV*7tD6k8D{ARUYC=J2pYyg|U#m(PoKV`&SFuySsjBB%>7ZGA~7
zP2eLriB)lOO?%q>|NErXx02Grx7ZK_aXlYG12O4gGy7Y2^dRd&bF17%%F<#Q`?|kw
zb5(HKuh=tslW0coyffnU_}?QVavxsWnf%(7bzQLE?FxeEH-1Iz59KVC?ss?7x|!+C
zmXA_f<~juTZG9RW&h0G~VvCFJ1;qS+hrhLi6{aNg*l#%g5^)NlJ=GP0fLMxZnwNE0
z&!V`t5L$K4^wUeiPw{=}XD*#&vAGP(;YaI*|H4Q2simaDox;xb&bRjUJI?j#2%ekp
z+b5g->b#f2eobW!E?!-f6m7JkIoQqYC%#L8V2Qq0QzAC~00s^to_gjLmQixEAyldg
zJFiBbYzkt7mMlJY1kzmm^h-fKx?b)=2gxtNU8Q;Sdu~!Mn$J8{1fu|P%d%Ks^#AN?
z<b4{iD)>3w&y^RY)cxmLjio+6KlO?EMJS?dR}M!@O5np#UG0Z?zgj^G4^TH<I~0TG
z_pv}b+g8)gYv>GVdHOHnpIp!QVhUG!6O41ehjT@@f0o}3gi7o<<+~EwGvnExUE8{P
z!+D7Loi=~r#in3p?JHtaIk{u+rcsUKGm$4xqWJfcX4{`H<OxP-G+jopu>GLyss3_>
z(BT{vcj2+i_~%?Ec~X)W%dKw-{~uLf9TwHr#yfg!5k%=c3J4-8NQa7m2uesdNOy;%
ziL|t|ltFiQinNHt5RyZ8*W7mx=ezg0`w!)LX3w6r*Lu5twNmm=e{cR+PCsk%11B_)
zZ_E8UG(K!nyGME#ufTjZ*d-11H}%^sGx!nh<yphO_-uDY#ta9int0E71r?g0_`dsD
z3{9-Z*mJ;m*Z;1x6+flP8{S&ywaF0<AVp1KGQRx?Sk%jyk2iOH?T=?~d-OFbzLN`Y
zqc@AQD-eZZ?2dcazb))sm!H9j8{?0AQd*Z+vkv!fk8r(D#s`L}Fw4gi8sgGMWV7J(
zI*aVikdnXO`yFH5-G0_V`;51cN$10t2Ekl6DE_w))RRHRKkjMi`7g108!7-m|L|1p
zBW7l15J1ib`?rWSHRX5o^wcglaIi1$^#ETcpiiNi8ChU8SGM}~xc~2SW-cvnMnv`d
zd>0)8TApzH$2-oQm^fz{op06JqQyG{yMkvwJ(Qzh`&;MJ*aIVOl*?XFm)iZO|94Zo
z%cj|t$8z&$lGm=@pRX_hY<q3uhzPuf%Hox>D_c4?BYb)`A!~cbEkoAIO3KDTi`YF4
zEZUw66@KrDhP&rize4f<Eyug;vCs-_I?QtpqH!<QX}){`^{nL~O7OR%w1{@m=Rb}M
zjdkMh`R&)r>iWD|Ioi?DW63bpmrqGi*+^o0vu4LUmGytB7u7EA|19I6-iOwJ%m{XA
z>|mwE`~r$+zW5WD<r+OaM~^MNW;=gh<J;au#)`;788r-sHxv`?$1Y{`dtA5v-=a|7
z{AS`KKB7(7n&0kgX<D)qhG$TIEI=)hCDk5H^UBsk6RmIjp)oC>W~q`(gkRg$)$RO*
zKa7y=W?%9&bM4^ISa_RHOYpx3dh@qG<J{j8#0J1%vw-s`X6F5|gO2f@abITA1R-Q1
z*gec~Ahk~8)LCyko@$lvnZs_Mu|*zTT6xT`ci{bMD@#CARsO&|a3hwhiHURds<x%K
zowB?dKS*wlni|`QpYOshu?bB2*LY$Q33bjeX;fRpPqSKk9LyJuwMSpM0$<+1t6szL
z=g&I$#g08%3W8JgJLVtQPlvP4`+lj~<9&Ll<*0P$7RCG4bELs5n%T*_H)ASJhbQ^{
zd;-#vgLX*HYh*pf(FO5_KtssqDs7QHMig_2?UC>9MDW-lS}cXU@)pW4EjhU!vtc=h
zZ2{vi6Uf|^$Kz66(_-iJsI+pSoPEES>$LPh87iE>t)!l#{gGqjiR8HS(fAocuI;IT
z3)ovzHDP+6O1Nq~_5&-<6D&2Z{uAyCWGCKaeo!1hMQt`w6Y7=nl|&OpjDElIa%-q2
zJw0>OYd{gZ+q5(nC7gk(b)Ov0(yUsh1TP)8X830&?TWG1nEUeB^9z4{d6$Q`ziL-@
zqBat!PrI1z)M!^Z)hqiK-#$;;5*8V$V}EpZOrvTy8R~fw2lrLFRzA?ZBh;m#%y};m
zF#<Nse^<NKLg(%-w$gy>9V)@&U<F%+^?VCI#c6D?_I^VU6k~#e#vMboZ5E-jn0LmS
zxrZ^(Svk^>V@dnc7423d)Zx58A%5ps#<zM(JYA6_5&y0gIUV%QFun5~_z8~0RDu;x
z4{QzK0F3&Gw6Z;X&W&Oc(GhRzlnK=;d@XJZ{OKK<_gR1ZY+H_+cENUhQoj?m%XFWI
zsH@lJ>aUoh3#U-+T%A+Ntv;wrcx<5sBsy353d-{J>pC6mVz(Alc8&~oR})7C`8Wie
zrn*hOIE^cSSEAbq-DVM&N#qin+CxSr%CO!)Zo<KnKZN>~FO)cQoM9oL_lT5jOjRvU
zcc*&+?W67KI3_zPm@DjILi!M>uGZzk=kBSSV*vPMJRTkxfL~MSw$ZjCbZ;H=Ci~zI
zt7iFb;ePqMJAYWp+=<aHVEtB3qn;$@=xZ7obY-}eSbW2tu18EML-UHQ^_ps1-Ug0D
z4QzbDp!BK)654=h%Ti}Hm_U^CHQqhoIx#&ZI_=`P5}8EjrX`yTQgbf3$nmmDrl$M&
z5P=8P4PfzC4^ea}4P7gWyuZDYto$|({jO^kRu%7zX`>H@gOXH)N~j7z#zpwEYb#e7
znQjd+e9c)O#zz&jV>b4fncYQnK#@p&8mrlwc=~|_m^7SAu+(KKrbZYe_Mnm!^?8;F
z;cVgzIx;Odnrr>oQETmygWi&JI-h1u*|ZvSGKrP@wBEvmb<=z?6qvM;$JS#u4={>!
z{!IjIq3u5sEWP&oIyc*n{=BUq%ZIhV7Llm1=4g~wvS}EYuGLQuOrqLJ%!Xsg2RD8#
ze+6BTqe^{Sw*(f0+VG{;taNDVP|37vGQW%xm#k|FNoja`sKQYWpW4^|n6<$sdiG&Q
zbDZ#wY^T0e#3l9qjPVC+B}zHxd-^wRWj7dfcKMFE^6!KNHA0lp>31+0-qyfjH*}w!
zB}YxAc1-K9n!*{77Cdo|NAC-=jmeB8%dOqYtyflyk9>*^gBG2IceDS=Srp*Vi=k6f
zvk!4=o$%L^R_;3+S99~>MGhsWYnvG>R(fRTjJIG-K;&WDGz0I~5F7nYI>~Qso0)s0
zajsY1p+>1ki|Iy6uyS5AKScUTy0@?(5;_VDrAgP6BK+f}pHZB?|Mr@0I@6h2j&|va
zM2Z}Wd}cf5dzZg5*mDLi{b_sQMT3s!gz6n0hp7?RS>JwY-pykx>&JHKapSFNUvsk5
z<-|nM2XtrXk}UQfJ0-3URkI5II+srjLZh}-pwK+b)?UfbQCICUWR-OV<Yp#<WX7(L
zI_M+z&P=(pPYI34-9oMx0fy#OUnHFl$aE4cnV(#!B~Ng8kBU^v`L3QzR`;06K0M0=
z*soLBA!hFH#G^0U+|A9!8tldkIW(7Lm#LNow=;~58Wjga9=p-L4b9^4#}70jdmkOd
z^FvW-5VK)e!717&y1Q^kxd<`)5|Gth(u=v(wLw<ys%v4fSVtPuZ4Zn|a2BbQ$=2Sv
zf(NEyt-DhA)!H9D;~wXqb`3p$A$jw=A>~69#{xY43&R<k%906}x_S={Z4fu__ZQey
zor;W`9?D3o{XV_xzIThgbkF^m>$tvP^DP*?l0o>v0r)Gz-J%Im@pBuTFXkFnjDji`
z)cQNvdSkw7FZ>d(%&jyu?GTW0^1eNo;2EvlMKv1FpC9Ep>b1I*{&Ps{{Qh0ZZ51Wu
zoXm?XS=ui|=d+VU@q;Wx`C_s)N*(5s?IV?Q)Rah7l?$?SJvw&JFR5lH2M@6uV~_Sj
z_ZO_HT*8bUfu-udr!%+ZZ!DK*YeX87oonEDulFter)``^2Gr-Io5eJ91kg)Cts5`-
z`#Re=F2(PrFo)o~A~Rrb+$5}&;d%i~Z8so;`s6B-nB%qDzYyt8^#YVONAOc~#8b2M
zk@SIAT@v0cHr6UR@(F&&xbYS>Pr`PE1<D%TItLdS5-3mI3g<eL3+AP?tWJgbz<}4l
z=6lpOt^0wj&)5^%K@BCfDu<pSM2aYpGVygTT{^Y+gDhuhB%iJqY{Wp`xG`5|N4XKN
zZ;$Sh8n^E*&*)<Fs=8)5mK^TVx!t8>3>KVubR#jMh&0>aY$HY6pM-JVU@Bpb<9j@n
zmQ!8lO@le?9Cj7g_ZLXmsK?GvSFQXKKXf&AUtik13@dWmo7bo!lpK09AQ&FfGY%56
zP;Aa?rQgwC+2UJ`)ktVCv27xVi|JMlJSe??+V2RZ4e^L0&LH*6u?m0}t&$nShnW0s
zc5Qqyh2|G1a2Sg>RC@{Wl}GY02o#315?K`@)lqJSZcjfc6I8i${OEZzep#t~{H*t!
zT$yg2vlpeA$c~620xad7JP^XUcoh|4B;0hhcA|Iw_S75I7lRZ+h4xI8EQMkyF*-Lc
z$!&w{W<HA_w!#&alz~hz1gGE+otHBm;Q3{xXI{y?TJ_-D3%!HMQ{u)KbR~_1#&%vC
zQX+DE_J()<Wwx1+k+wy0?8><C*%e!+Vwt_)irwTDv3uj)CPrhsB|Y8Mi&Lb2)FhSt
zHtG$Y4y?{i`7uRwDd#(9*!bNYX0t?(FuTUb?SVd$T-HZ(qVZW$puU67HxXF7nXjJ3
zyirv8<Gz+GIVf)2lS3r$klhWU-N_&TNc)bmq&B)_dUbYnUSRz9<vZX?efmOv>7By&
z-}I6&EH(Pq^||Ww^!f5<wvA9<krVlt9_oJHJuLiqmuTs&IOd;UPv7g!mOs;z*6Jq~
zhxr*uRA)-&_1k)(wU!Fd=VuM&PwB?U*{tnf4)1e3-3;^5f!ot)<f|uvzpKs{6O%Y-
zs@cmc87}>rzo#fme8b!I%{sobQK&e<sZ4eEwfy<DjI}oNepZ3Nr7>&<ST*Z!QNWIs
z$6pgGXfOqs!yHFi0p+Cz%F~~{^|ku^kXITy`u$^ewVX?Y$KwW6Ldq`h1{t}3EuiaF
zsa<YP7?M+xugctxdu^^>FEhk-ICK2ZQ8b;~4z0VOy@B&7w~y&R=V7csWM5o?i{24f
zkB&;lc3*Q+zkHu-m=yG%zPF&<fAOpgIT&BhYeooZTW6jq8076WVE+mbtaz>PDqhzW
zJ0g_`!v89{{r3@o_xe5TckJa}(ofB2c^*131&z!>lW#L2{I&H=i`cGyJok%fr_JOe
z)kr8b<iLAym1%!g<~2Q(kYV=ZnBG#PzjK}0vc^l*DLv7T@%~-3s3*}~7_{Txh>jd7
zoxLBj@(N%@pp4E=QxD$oUh51xKN|DvdQxf%qAD~>E!39yXGi!L`NU8V<=F^tjeo3U
zxRpPDuTA)dH#PYS$sxXotF>UF3f0hA`6Po<jiFe!E0R7j>yhv(yQZfjoYCl;qqdCx
zjse1Zul>&sxqTK58yS%cqI;MBwJ~AjKB1(8f4r4qnZwvB65nz3pI-`Xsd#_<*lSR&
zrqF8q*J10AXBi7@G%wsOl#b4}$+{PRWe+uu+U{6>Ze}`P7ZeaeK3D*L-8Ri)*L&iU
ztZehRAOmACk7VELnIO$b*$XhrVBF?Y=vn@t=R^$AGUwhviP-Jyws#31Fh&|WYFS%Y
zY!2VO2Z-X6rEwvh&}3x<of@VTeac&zXRq%Emd!a=c$I=}ve3Em$%Gn&@<3fvj)!8)
zRgfz8=RSX!3@VgwyjolTlfqg}nu+AnDFgf!8ggndFM_n*=c?ZD7Qbx9{=KGCo6jRe
z$oN8S(7i?B?wS={Y&iohCBMKS*fmZD`+r#Xc3Iw|u4=NxJRj@-{N{x`9?g(xiwV3W
z`p@MGe0uO7<K`RKwM*l&)R#AufJ0d___yscje^CmNHY`KNH%|JMbL%ilx2D?OiXkU
zgei^4=|Jjy7IU(53{V_A0CUjVpf=%)Y3q~}zTcrIxDv2A2^!7zRNudW?ih7{RBp{2
z0mujWETBNd<)M4DazRc*vLe+CT4ks;Q&m%#{HR(6os*tqxkqBGBU7^6wh}8DK!kbi
zh0;bHsG{!Yf$8XU1-rIKy++A4+xQpRrQ7!JP|X!4)H$rYu1XPocNiFkKKySkfca_Z
z4CH<5aE3tA`bVPE1NS!P(a~6zmlr;#vXw=tUqID0nHn%YH@2rLF~nbKrHXzitTfaX
zSF*{xS={<Y{YFr*6VG*9Y+VT>xn!z((Tnzh^rqMB8Xqi)V~>)OPs<AcLD)n2b12cJ
zcZ+&|T}5P7#G$iG?T;9N@TR}cVLf*T48^_x6Rkei(zoUNC0}@5yHRNyXBrem1+%M=
z5kK+MGC&rXe=jh8S?Bx5howz{OZ-U`5!4%oU!ml&7%FTfe*?V@po}d^uQYr#EQ5M=
znnaj$pav6`HY!=#h?EP%*dYqf`qtT}__!^j1pFMyNiL=p0#uWdyxJZ*UMo68SS9D+
z+<PQAG(+-}L$F7|(hr!^%H5Gxt3k_iJh~t1&#!+YzG-+9qC)WoR6Y2oSaL+Znmt$o
z2jtnRQo#9Bk^OORu0lPVjqR7EA7sBdc(~T_iIs)tT67IN#P5*mEUKFrD}=f7x4d#9
z-`0Mk_X)yt`A3R6gI=>)M?PaQ?KF)cZrTNv+f>ahaUGVQv!7*;K7$3_Kl1>ZZ;9@v
zGC(nYNeM4z6=wH9iI>!`<D&y)Sf9WK7BWOaU4jj7U1!S^7<E4041fJ^>9Jq-LXzBv
zAvSfygt2^A6=MinVjjaI|AG7J1-XyEMr9%mm6ZCpK{d}`m3ko8rPbCX#;%P7&Wg;B
zNj64NpG%pU?`-`R?NiDcfZ!P(l7edgXVCn(LGV}e572mZo(ro9Nfut&LXm6}{WjPR
z$BH{=ax;xa4r3Rj-pR}vGoMpalGiFRX{vr>y+W~{Qs8GwbH|*G0&C6l{^9hwF74M>
zYYW9}^60yljaF9wg!Cj;HK0Kr8wXX!^5^H|Vk8n7@;5h&lrEdam4G{^UGi=8xM)@>
z0X+6pkLl`hOFFMk!b3`O;asfTvQz0<2N}owikW=>PEF+kE7v9dNjLPQ8)4TxtlZ|b
z_zc<m5c=;08>)H&70jlc67PvT3)&(jZW1af88aM8oD#S0?vZ#UX8k}#-<U}~vS~vo
zt2sZ@`AC)J7PNtT8G5??f8w3Bq2s*w+;gx*!g9o8cPqZd3&HQyRyt(1>+ziVC{iiN
zm5)(;h&pj5<}fE-mNV2dpCS_GZB=^OZ7(=!VLz+wX?6p3$?G?(W?rUINB+E{<JW$6
zH3yP6d=nP;ZSqnPzgDm^P_OxyPqQ=c3%mjlV&gqGXeU986=HMMh8bl|>o>WY_Do4R
zTB+*h{<=Tuyg!#eU*u0>u#*rDa0~7qgdw9;tBA8}4b{GwLJCEQ^;*MtE|Xt4=?_~?
z`fJf*dOQ`k(xK1c0u#e+7`X8qEiNw47u4%GvP>Qwrlk;Zu5NjRZ{^6dC9Gy>?@h!#
zQY~js$!LqasCMtQW}=9Q;G;G0I7Z(hZkG3Y;mABC!6~ZIF#bw67RvYS0gL3p`0bA`
z=z_QaOF!x{xG+pw-~jim$#hKn2Tv2;I3p);RWq(2sK#y+Th*XJP$T*X9V&8&-$6=7
zF$nbFLz1u`;Qf3&PAcRnCsoe#mlOR2GtTTeYR>zni+MUhE4QzTK#Z12pn(IDtm4-J
zVzz4o3NWb8S3wQmZCP8-&$oi0SLIUT5PE8352wzr2mYg{rhN5G1sB80Uo~eD7iX7+
zn#$M3NWFTspWpb-PIb9+8{%tgz}cdrUOez##Kzt5ZkY6F9A%!q>P=lqKYA^v&*?&K
z_4>-*sVC&G{Wsz^wu-z&gklDHhgZrY3<?V3S&c<=Uo$4YY;RF4r5U$iQ+Z!xtn+u|
z!M|p3E*xP7YQ_HX`$wJ)9DG43^I!PUcYsx4VBZ>*ks3+U6Bu-I>t8ss$MiQZyr!4p
z_nAn2UHADfhqc6FqR#%qnIFd)omLgA?dHO~r%^=7$@%MBM_6qowTk6{U_BIA$EZuI
zulx^NyjriHCIgz;sYP$+RIicM`Z{XL*DhXKUf7--p_Sc`;qP#C9rL+bd-x6)w!iP1
z$8rZchMGjxA|Zp1amCa_Z6M4C6Oj<Ue5K)&tf{{%lVAOYkY%PG8R8g4K1sV(Ehz#i
zx}eyFSIs)rTf#3^xV{CzoDfA|lgMMQN`1#v2-KgTZs}$t%}S8qKZdGlq=nu<EixnT
zCb1wCen5#?VJg_Q7*}!m)#lu2wesxV)0bMH*jPM8UY>}x?U&<GD(8<f8WS1X(If2E
zkq%zNu*;}u);HmPdqGs~@6Y2mkrS(>I(e5`A<2%j<nN(!$U&S08l%(Gg}MO2{ZWd%
zlG1lR=Fw|=&`A~#r5R4yQ1y@NT{~UqS|7;L=9m2VRWtwZFKe81`70my)(Va>?<06!
ztj?f5#rXaF>2ZGSrR&afoCd*1eo+_y!O2^RJXeBt<Om+9q=k~!VO79QVDkH7`rAaV
z-_fk%L&>8$CSJuz!=EPMSnT$)XlWo<&4#;JDC?fj8Sgvhi+R)!KN}m{ZR7nt#XA@q
zFZ@tNH=-bcwZ7=`vvt{l@^bH1#o{ylO4Pac9L1PazN0j<uPgFmy)`IbX$%fg|LbVh
zXSm`no_gk10aqE3?mdj80$1ec8IwvUdfJ}P^cw2};}NR^!b?`U7hnH-(R-zz7JpDQ
zVcD~s*zIs_=ODEgCg7If%{WywF$e1pO3U|<;hhuj9_Uh=3_f1Q?t9H+X9gNtus*e3
z`AcWKv-n+RyA7Anj5Kb`dyLxph{W|i^$<z(a}+vg!4R*=`|_c1p#1V&jBR#&RLV*b
zx4u=u4B(#KLWS=?@-4zSU<fd?-_3`b2N{Gg&HmS1;TO}J>5CaO>0`$WUQXDQotri5
z^OqA{2aB(x1f~U6Yim3v7ix~uyqtHtC)+9E7dh_Z;ECTW3&fKY+19tWx7XLdhRNEF
zS{5(?8*<@FO4YC8l}*=NgrIh%+;e@Z6}m)VR*nda%gR<{j{Lj^U@|dZ;zhlVVKTf(
zqU=;7O)vljy9v?Ahp9uoUe7nC*TeV54hCtxuvuQRYd5_u1>nsC?`^g4>U?EnMiyan
zvWTbUP1?mK*z+|e+%eC-9;9<viC!Jg{&C@~RzEcUbC7ZKB#3yt1Qa227?j=|LdvEI
zgrX|>JT&$GzyG%7&!!LUO_|1gVe(5)Pv*<tc)Nb=<9vLyK37CwmA8J=JG)FX`=9d!
z)t>h@4t=8%gqz3S;P%}911Sh#4w*;6&x2c@GZD47PQaM)qub#1SvCZ5wfN0A>y0Kn
z`|2T*IN-82A)eT^GvUupan?UQ-7j1|a{Ar7v-aIg=U|H@jNDg7tNL}kv{?SRt>5Gz
zP?ejjt7$I%eQI1R*lT*QH%I4y*Xzg`J6^NbZY^Xt`)TPaYM}AeKj;4}*Vu1V@#+Xj
z3?fX(;ex|uCZmBGl#s`TTCFSV(`_0*KX&^Bh?Lw^BP#m~)%~_#0UnVGU#Hxm)qRDF
zi|gIPx(f;7nS7j_g!n#P3BrQByfBceWIwZs_9%n0#EXoNM%ZzE$5QZAt*?CXZl>Vw
z;dOR?Dg=S-vnci7D)=Aol(;<PasjP$3E70-(OkxlNqoFpCZj)n;s_NFA&sHE0}~_K
zZbBUe9~DVa@J%%#=Vi?_1;Td$&2k#+zcAIVyR|88E6k$i)p=uMm%Ld8Y*zmc9XVTN
zYTZEU3sL8YB9Ow7H&1)H)gn8l&5fWacvFO0A6oYg-X=386Q{3nLQC{Hjev_+eN1C!
zOig)W`*U=FAGF%L`}%4sH^Z>gt96po>_-<n<WD*LaQyp9T6AwFD$y@*2)B2iany9~
zQ+hg#^U%&RDYcvS<JYLa+UqDB^7uo}!^mk9?jfFgza6#QdCIf>U-xHcsMk18*6(;#
z+Z=va(K(#QN>pFaeV%+{9;nofm(BfXZ$k!g?>YYW=q`+gn%dy(F|<~tS>Ec_$k91!
zpdC{e@@(8$w>Mp(>*A<DQBm=^tiB0e_QY6sJ`%<HwBU=Dt-XS$p!O-uk*Xv-W^s9z
z)``Z(#`gAr+4s;R^oW`=*IxVOa%`6<=iajLlIYPAZ#As!fHs?R5H%!V^Vhp=x;)e4
zV2{!B4X!Ma%;bFU9Je(jvvmK?meb(-tc=xI5AQZMK1x&I_dMJM<Ugoa7p9SAj+kiD
z|0>M8K9)7&wXh^8>blTL;N`G@J#6yX2@>Vm?taxEBZPWm^5Lc9Rz?37*7+A!loL|d
zsM`C2jSCPxA$wG&*_r=apPM3reh$jkz7jJ#4N7-;Y^>I`jJaSYj)F%I7Mzb8*0cOy
zF>3GiO@?tlIjc+W&%2^sm3g#+h@F;j<n`YK-9z&2=fu(!pcZICSxM=NPs5Cjt&tJn
zG_Eq|`DAAwPcNuoXOAUU$V;yB(HymO9dFb51g)uidq~s!?}%1z#MkiK|J=z*5GI+z
znHlG(Pqq|=1ZxO)ZYxOG=kwjWC!YU7cxU(r>|-shsQu>INr}iYrQ^xqN$X=T=}Icy
zF=R_0lZeSSJx0phy~lAl+}$gU>wYm`=E`aC&dJ6L7@B^dz+2BT?;#DM_FP|JcNY}e
z4{SJ3OT1ICT~~oEJFba5p6P2o5XDfRIsgEA0hiUkM<?el<hIy^Np$huK@yO7K5w9w
zM+Nw;yW~-RX=UXhRDK>q7uj-^+s>#fCVuR&V@$|y>M<Wx=d>NbCiZW!yN_S46x;Oe
zqVW(}js7mUV?FY+hHZIvo85|SOfd#Fm4IeVc>SuD!mIHeTi)Nn%i4dch1Y+~-X2@o
z_=UVtQe6zfZXQp1xr1BiLd9);78VwO*AVV=HJ|nBaI?lnMTj1w`@}cm_k)j0>KJwQ
zh<Bn~U)AQ`{iBvyb@Vmq>+v+muZ?u%d3p~uko1-(fKfiuOAcYVRGxj{E}~6-?)AZs
z=h(%Ku|ry&!(jFVmnM^Nb)AD_>{>4tX3={UZ2xhdjktuD_|JKKgfV7DGO*i$IW;yD
z453I4T6Y%*Q`#Mz+%uad9W`uKl2-|=0c0Ga0UdPKSN_5HSYt7~Dm88%O9wNQqMnVI
zox|%jJ9lJ7j$O5Hb98GGFq04fsQVDwYrh$t7L{<&-$nC6N*8(f1ww@3HtEzNNl8co
zC}F&{0+Dz)E0i>reyH0zX8)5ts$M>{JF4Lvwc@pzutw!WAoB9?$3U-S&1Pc?5KNFO
zt?T<Jzz>Awm*P{YR$x1KtcVgs*RJK^WKJXgnjLJ<{>QYPIavNR-?zA)H6fZ&vUB}(
z1k?u;#@Ibl(Sxr3{{FGDqp(EY(cQgx+G@9zjv|=Xy|7F$R(>Eh*_z<F=uhy3l9pW1
zeU?)yG{NP!*KW6bn|*;3T`s2al7A?D-{^7g0qrRN^nr(Z61)_uArLX1J_p0}pM{rv
zRDT>tN;6;%I!xtHPe*LA)oKnZO}75$E!C^P^VkpRq||kEys)Glu_a@bu9%JkKnKi1
zi+-e+Iukfkns>Q{M#OV7>FZF!&Snq0S}~Q#>g@Gkug=Qp@i)OeIm82xGp@{^YMn06
z`{KFM{4PhxE#@`u{6s&qf-b*b1LLbV1z}1D2n$uqHBej0x}0QFIz#$8SFv>Bhg&o8
ziK7QimQtZsnXLZCUOPwTwC)ZXhld-2qC?Xc3Ae&w>yI;9=nAcysu^NFKM8dJc~n#)
z%}8@FtdbCNTNP0v+ZXHMN4={7l?t|+kSV5YWEtvnJ8u46Y>r{x9>cD7c2uY|b(!ys
znT~oL)M3{{{#cJzfk{*m^uj?blf-p#oH0>kzdnynw&y!>MatT7*O<D7_QBto9Gb*J
zpWz~`x@LvfM)V6Ep_jX@G|FS;_*6DU!|>c-tEyuluNOXvhk=;mt-J==p&%qc$x(<?
zJKNd<@gguF9*riWriNCyd=~UJYF6Qnt-EBLTgsj-z3Yo5zuj?6V)$b#ACs1su#R9F
zksHeX^bU_0DORwD+vj;T$oG~sR{EOAljT?61k#Rp?j+n2$pt!Da+gR10@2@7=s8f?
zJn+DD%JOtjYq3S`F1(>tkDlmjcFqCW+1H0%2h}d@HNmj|86lB_tB7e|tNqJSD{@*o
ziY+iGXujMkTNAo=$~2#Wn9gmZ2^Xz)-kPLe9~G3?cUf5O%Wk6$q-aU;krlFMvDqBI
zzWtgDuO#u_7{_^^l9e&dgTHnCTgz4EJEAYGrGwc{FCNg2Y`Yz|R;=_bn2(9NulCel
z&l#@v+OVedFK$4`u}!r8$f?|~H`XS(G0`I9n>=9i;%QZnqL}Pa8>RVtu=UYcSKwhU
zrcx*EB4QKfTH{!Dkz7g15GhWj32wn`03L6OCqNaM$IPs`xCq{-y;c;QjGYHzJ6w4%
zgZx+SmgO%f?AhqNIQ}(AbY66O)%S&D!ZilN;uMa@kG7JSUU}?P?IU*{H=#9{xrxTd
z@_a;>@4Z|&Dkl^UD#NaEwP?FrO=T=gikJ&Z?JG*`nu5MbIh=}(tRH5iq4f7WCRlp<
z6o?7YlRB=-B%-CkLQ*kcwu7cbtoK}AK=9<Iu;htF%x79|qu<<1Q>|eWMt}<&);8^O
zuU40ED=2wj?T?%FD2xDgeySWS?0z^0zq>zsS(f&)+{gfC6l=5eXCy;ZN23}$KH@x9
z^GEzjGQAWd%@(cTVKgJn(Xej|b{vQ=!DW$uLpvp8#p&h8(Mq?i<``HPdsB`iK6K)w
zB)W|^O3xUqfwUE^-r65JDycbC4DkF4i$(F^e2v`mfK&zcUf==+_A%7Jf}ssH=Sug0
zWfxC3)W-3Rs#e%x8w5*6(GLSt2)V0QqoXVZd)%7SeF$jX7eV)1dD+-6jiSx7Sd;O3
z?3(a<8$ma^B@>gE6Nox4u7>##2zyTCVeo0)hePR>^D{EWEJwXCjW4?5T{g?whDr!%
zUmgy=sKZE9|8zzesrD3(Sgp7i{jEwW1}$J+&~cW%kXdj6PgvgHDdl@{<d|DQpSEL|
z_mj+TI}ygR=xyDK(Xx%Omy>SRBgb_b&Rzo}a$Qs&bqr<nQ47)M&w8DwQ6w)HJtla>
zbPACl90oXMb&5z&XRqE(wrv7*hwtezkLkZXKLd2>AvfcK`Py+l&CYu4WzKROAC24Y
zZjVob+0p7$PXnX6sE}$Y_+~n`UV~1%o;#iKi9qioMQ+wLjt7!nXjS+9Ja&<9caCPa
zD|Was(VR1TzLJT8huxFej&o{V{sez`h5p{;Ll%-ta6;xZTK(Ws6%2A`yX>t`+wdJq
zdTmP9?6}onfY3=%ELPk(!v{@EvCcU_GTRj^Rj$|+IFm7YJT5Ac-Ptv|7u%a_vki>z
zjc!ZkO(pHR!iliE&rBl>t9(D4{(FP|qmY07e9f{XcjMZo_ldir7^2#?{(1>iSU?s6
zc3ngqN4#zZYTBx*96H%OCLeE~9!THu%5&Q2jQzF0A6PUEMg3^n!x1p&1qgmE29PO)
zrcMS2P>XDSD#M4i#00mgZq5y<na9@B>Xy0-mR%+l$w^v1=2QY#`6ob?(m#B(6Y_O9
z*nK+;FXSo`$3XEs!2PN;_ftXF_0(zg!v->M?Y&)WVj&3Rk>j}|0_z;<Us-~pRoI=C
zk!mmdr8kyo!S!o&)da`KokQnWhPD?O?C+Yf^%99JYYwRst__4R3I_{4{eUne3T^vg
z5KPwrYQJRFY%WgDy5WCjBZB`a_=9!*d32U@zSV0rxE)LVX7@qOj!yrmmqsR^%Yv1M
z*2~<U3;(_=_9q-Fad^t&YGVBRDFr^Q%cgIOsPU*BNJF|{k%P7|QK?HEN7B9op!rd{
zJ_ynxYVn$q5-TYbbIOQ#YyI7KnBrNV<)RDrtely^q+v(hJ<R!w#9WI^yAEnp-KLUW
z6w^`hzxUcU`S=d^l+Us!PYKmzgW47%aW!pi5*0k326$Sv{?o0++d6{5)SJbFmyow3
zlQ{2^0sjj=Q0jv)Q=ml0S$`PcuG9zT1hehB+S?&mGed*iibDO<INd#k6fJ9AKKCa1
zA?MW#0M5ALxl_?4v?0SmW*~vQ1aL+v&hwnDf}H54h?cfC{<$}OW)V1N13rEe1lZ3g
zZ<=0iRx&)E*rzWB06b>Oj(>(6_ifah<*SG@^0@^3etxy7nrTG+0CjbrSO@IUl*vy*
zx#1u-Pd?B!!M*QhKr$0RQyGf<w}?y}d%lF(<Z6-8GAED5<HYHFnr={Hh8qfqRSQ?`
zDgqjb8er4vhv2O1cX2%j2Y?2?i+Hnekx>BJD9}N~WBSObs1d6j0ML=t0CWw&Hu-8w
z5r|~M;o^|d1hcqO4qh$0HNP@9_g{b;zf5YN25;||487z=M7aA<4VbGd@aJd2@@&bJ
zp0qRuTPF^(-x@gY0eMd5$?m;RPtRwG?N=khs=_pq1*9ekE?rgmG9b(DE8_A22DVmK
z&tN7+FGOwVrQSV!bsLd=@IG<^wdU~W?CUb2JUJ$l7$*q1K!o8Z;-A39(TLlcVwrwN
z`BbLN%*=1;FF|4~^ye^M^F0;QrN}&Oc01xpaXjvBls7TXFLD6$Usf6-C^^MUQop9#
zq8i3mbvq2Iv}q|RxjeNrH37t_IOV^u=p@@A2IX@Yb?IIWWFSR?nVC7qrUp_(IfMTY
zM|!a1IKk!csDBHhHIM1JpK{THzo=&wQr-r7wrx5lKHid>LZjTJO1s1oco4bbaEEQd
z7V;Q6Fsj7mi6(b@dgM29DsmK=eFJPfJw4ss<L1RqZeC<U&Kt!D&I&T~HFIHq5YX@v
zMFE7gY0aucL!JnF0d4l5ajDS$S=efAm0Cw`hij1vM<`cr``H0RF)pM7!Qbgzc$Klz
zHkPcXl!48gn+`rl@+Cu1xsAK{3Re&@_*q!1AL)SkK4_s0VHLY}@IY>cn7B=hUfc5T
zGjr^%SbbSlY<cn>@9WHnA3GFgI5_KVrou#If!-I-QkG6rs8l|=W0ML|W%nr|rI|s@
zAVpyr9UZ;4=UyD|K_A<ZzYCus*UKOTOc<psA*SdLHvpVfdb*{oXiP#vwsOX%$O&EC
zC&1B;ZeQ^YfJ|p1x&%?SVSPc<6&QE~Vc=m208BP2z;_m3#tA-@ch*gWFLuKL%^ki1
z1Ai?S1e^4GsK~b~`2hgzX_`W|?7|fDc7Xt|u&^biH31D&Qg7|=?(XuejCp2Ma99JX
zFI$wkyZdml<hAQ26~EudO<JCBR%&i(5%jtTP^AV22EE4Y5l;p!oGdKb?a*-lphdBE
z4!Uz!73<!Nd$+|jC=WupPwa0kSe2j;yNn=|11QTWDJe(%lF(RK+V_|~zq&f13)8U!
z0Pq%!9_@Apx5DzM*YjZ3v5V01VQ^-is)eItpVNH#(L=3o${EG-B}TEq-DfwZLCTWS
zZ90uAtEfP>m|hA1YR5Ubq62JS=BXAg0?K!>zeT;%yC9hKyx}&t%3?olg|_~p$`T_v
z`dEmjBz}lA5eaahP)FW4sit$6A{jctq(UK>3Ppu!3a!(2Z|+L3xo8?Zewd}aQ2w%=
zOb>9iJv~Q@G0y?DYHA8_Aaa*Niq(i_t@A8LUoVNi{`XQpG)?`S&bRy;u}9{^Nev5}
z!C<7*LYclhkPT{<80U<m=igXtG+AyX&(JLyrzw1&n=?HS8|>)nLSMc@eJkra8XJJ)
z_Sx$==|u~3`vK=El)j_A{lhH)6HyGM2WQ@MR?IRi)Lq2dG{}rVT>#J1tY~O=*9G0X
z1b<9TrCQqWT!e7uPlLNaxq@wC+f#(?oR(GEiE(j@^g6>|MmsgovW6JQj>_CBC@mcr
zA#Qg@kDyB`*A$sy^lFtNvzo*Jx(f+>p}dc6KRCmhVAxN3I!NjWdQ%67LOG_#p^z7P
zUHA9j&cObK4uiWu0~7rcDIpz39ZPJ2zfHJVwlr|~w}5r?LYgNwJ~5Fu`QMP*Xo8RQ
zx1(hMtz261`lWX_Lq3H3+B-Tn@6X<HXMVYLVY|MlwY9aWN!(sT-G7Nu%8k!D9zdtH
zjD0lnk8JX^b2LI>h%K!(;TwQWRQPUijJLRdh>#kXROUDdNw3u}Zkdc;g8oSvh^WwH
zMsuntLxVWntk`c@0OK*L`+j98G8=ZPhqk5)C&?6ly0h0<#PX_JVu4z~fM2+$K{B^r
z<e99jN=9FxQ4wP&uM{Yie^FA89w-``Rft-9sA`q;;5m2xBJ4jV2O3)=57)>a%uG8}
z8OZo=*Q!sVCFhr9Rg{&DjEoeOs58yP-6jlwU^ZrSo_`Nty2=<RA;!|fII!_4Fx!yd
zmSAa<?nC~MK<!t;F%%a(T+rwm2K!ycnD8O|JyrT^&>ahkigNk`?p3`J&wtSwrofw;
znp#<9%Q5Y`SJ%Y^28OcA2N>eZx4#Q`ZEy6PEh?}MKsc+Oew$XG;rOz#b-}rC%AAxY
zNjZaj$(Ys2p{l_{iMizHr}##N&GBM|*fdTu>FVHA>w$Wb9N<S*(o4a)Z|%A37d0j6
znZ7eqbL!+b<YebGSs^qt*7nHVu(6d~>ZA*Q!qC=u=}7ss34U#P&_Z$IhGTtbpQYEW
zjuLQGS+!0yZfzu@3cQap6u!racnrB5Mnpsa<Q^!TCuw)7?DcQ=qZKmspY=m0qh(FR
z-Y1Ea9)coG!JP{*0L9&gIpXg5=z8yB@uj$i!%bz3?~KH|O8De(VR13j)%WQM9WWrw
zqnoIpbdMtNN$8YQ1%P7Ch=jCF!z{}C?NW?$&xB}rNvDdk^32=fdL2UB)vkT^yg=%_
zOjxOHou|r8yOO&*!NJ)jRi*80X#sLj@3bJsa&C1M4rgqogu96~stq80VQAB!MdX(+
zxF5B+h)Dc_U_~UR*<l2!38R8&9zx$q4$c;4fDUh%5VxQBrB`0imk=#TJ-@k4*j^U_
zBz$lLve})rZNgtrrL6SGH5SB4Bu~{+U}t_tpBYG^V%N4fn5Y*m(_B4kRHZGOrU1Xo
z76oy5N17^)b9pB!R`(O4mAyS$;*h``K^?sXQGobOLVJxLip&gl`K-kAgT<EmDHQot
z`A3quZ~c=g?uNCJQA)EG>+QeWJ1!VpTwJt3r;ABHGRsRdU6f)g?NJ$dCv)q0mh$A9
z3;H<-c;<*}T)DJ<awh_c0{6N)m)^Z*P=jcKNTT&s#=0B$g&fAZff6ZU`&{;Se~Vix
zi)QkbUJm{!bE~7yQWT>gT$Tr73;jp?ZuBryGg^_9;j5FSEMQpexdUEL6`(TSjV|u6
z!(cGbHm(|i^Ax-TaTMc09}n2A9z$^~o$c-4(gi+`>tmomh<~ots32D2>5PTZ{mW%e
z%Y^N8m<`uS5Jlsfd%OmJc#S#>-0t-W3vrV8GlaF86*0e-kZ$=ck&-7%(t|i+sLz*i
z<Wd8w73ln)=pv~8B)I{`VCx`Rf!o^LB`J%!er=jIe;TYJwb1dBU<k~-tXB9=pWR2m
zl^bGkH@ekee-Hmkg-uwVDoa?aW`z^$HD5AHL6%jV2G^y<DddB9ENy`F$1Muu2&rd{
zOA7ZL*!uE`*kN4x%c^A?zp@twS;_@V&gJAe{S|#OCX9DeM@3$Xz35Z*U(2X+=@}ok
zoVOaCSaZ1>UFozGQ?=Sn6)xaT)6lZA!_LMQv(dyRkb?h6`!e!MwLCa#IC|K>_2{Oa
z=fDF3(h}yd)=!hk7CZ|dX`;i*?8+)l{U6)EG=646wdioIz&=<P@=(KIPg(Go3w}3V
zR2jP?NE)+DY>yfn?<Hh9jXZXn60xsxb*AjfA|i+<_1HB_ISiy(1?b;3pPHHZwz07>
zQ`r$(rKbKU@(BalB~f3bHg0|?X~g|Z&6srp`k8Xku;ENsN|#uja9sHfRWqDv?Hw<H
zc!JxPA?yoT$Znw=hQrxZUqd09F(#3`U?Z!oxwy!_1xNe4#v&jjhv^FA=MC<f66I};
z`*~Qdl!-2lXT{Wf^ynkTb*y=Jo-hJ<Mj%;yeJ{#q@$vEk<i<x~7e=)YX)Zm{Y2vA3
z8DK9P9>VaR3KOEas|S{n1hjSeH&ZOV&$nMDamv%zAr(k034Ay$(%*2i?b+yuy-$Io
z`ERIW2Gp~7cz9;)%D#O4N_{IetU-Y4#4JAV!!ruUy&s>w;FtVK?5;SBD1li_!>iBx
zw*V;D3DT44W@x9+`cdiWkxSJiQlU^(v6T7>q!PW<6C}(f8A=aQpdqP&g`Ot3Bx}6D
z8bY}s+rDA0n{y8pw8Ft;?-kH?Up(k@)90mqpviX4ckx*!)25K7!@#{#oC)WW(sR{%
zOrge{DdNe@%jXzJUi6UfpgA{%#8p-12mtRbQZJ(J>(Qge$C0Kt7jmHIf`1SZi<ddf
zg<inckJ}{4J^tFO|Fq78o0*203g0}&NZZ85!QuB~5=X6Ii4=$%_HRLgv#@YVh}gI@
z4ooG#WSG_g6j6ev#yi(^<;)xS?hsGGu!q;SvDbD{jz@>P8g7zf#mJn)5M~1)u?acx
z$=&j_G;Zo}lFnbWv=0GM1KLUp(Bn1PS|)9K?iKc!q$=FDr+Hy@Wr)#ff^bOU`9qOJ
za9av2N8M(8%nq{8$2W+PxB2_^$3IDfDV~|)GSXSfvDTc4)58?b{q0>{vC??vMe5%b
z^T#w8eH{5tJh@K9NSKw3`J%*3{Iu6W%WF0Xnq~G3^W-f`QoTW=y1EYT0!oOYf#(E~
zeLi?iKYv1zgZ@?>oCbh}w@s6fkO)M-HQ`Q2<}v;!>TfR_fF{<{8}C!miI0s1yKUw<
zkvNQ8sJJRHW5+Ka@NHq=Jf~{AFUPa*0|5x{n;}<sDu3T>TfeWOM<HPPd+?7$lfM(p
zWJv6Sfen;yKUs_ap}p|#A;|q=*Wjf_I==Seu@!K9j*9<I;16<3u#)&|8K}(66&ZUP
zt+@=Fh@0;v#9yCK_ZQaZr4MTb*8p94esK(F?n^w?pK<VT;o_qM-{5obhtNh%He>wD
z3{o$biu$Rne%a-kyk@TFO6)SeNXj6kuBr+MEI^S4e$=-h76-ZJJAOA6%8M6oz#xu~
zhWzo*{J&(DXH#0Lys7*A0~?@Glvquu)z3OOzP_GM1|zF^W1re)Km@#vv+0cm$12J`
zNP%UDgx!khQ<FYu08v3fbM(e-&zc%lmLVSN`jwrPhm}2HlCzaV>|w3pPtvHf@E7$*
z1u}uM8C<GHJ83P!MT{L!F4)`K1N+VN(kGc)fToNHOjGu2z81G{jrDX5h@dSoU;iIV
z8Y6Oju?o2FTHV8>TzLoHd-oWaHv$~5H#xbvkl_1>ug(n5DP}&Hy{~xRuQNm94AT=D
zbPRZEE<(xWoRBj9lL^VVNAHtA-HmD^FEKc@*<Mt8A=G2mH@WuVr6eJVpH>8kk`lPo
zfK4mF$vM8U2Ox9#eWH6|qOP#9job;MUZWS-J0v6}iN#Hw5B_PT!m}tMH@zFp0{mIZ
zKog7(+Mi~t8G{X}kbiyiSH;p9VnJ%V%~e7H(-^bw5yNE^rJa~8|9hn9Q70y%e9~IW
z)QbM{w1S~(d~5$bfDn#(k_M*dl4^##$jYj5-QY9#X2c%CD26u=1<lXq;``u4x9;@?
zFp2uL%Iv10Yy&dy;D}jbpDj66uxh~SC<EUgNkC4U&$F<}y&b{?9sfL&k@=8lY-9xS
z5@Q+|o%SMUy#C!~eJb14+1YPL*?0iuvE&4xwOTcvBTm5t1Dyk}dwO~x`ov2S2$dpI
zp#TEzH6o$~I**8Oad<dxPXwX~jd7aQ?yf0rl$!n7TG!Wt`xhVvF+6XdnVn71^ALQq
zCF_QS3ZP#$HcKexyqPo9`LD*WEjlvsz&-cT;(|c^Jf`F?;5wF<n~CZQmdBPrrB`P<
zczp4+8k(BiUz&<HUV#^+_ZFs{QL{~1^uCnL>5pwSU|C5HI}dGRz)uOWx58RwZoLq!
zq!T<Mr!))?c|0{#WL|uv!I#;PgyR#Nze6)Mix9k^zShRT?5FTu@sTUyQYaNEd{6B)
zmEQOzkwS=fE->(<6vd8ONvU^k6Y_sBfDICthH8rBV5NN6uh(RQ@IZ2pNvZg6A{ZkG
zAnJ+y_P4J2LYXhAw#yBQKtDSBvSA<}=5vXkKFJX^sm1`piF!;<jPD(a44Pu%K#9Pc
zj{)+2&E?T6F#FKoRC{%WJo%`!)z$a+`)iKlSKM1Z-S0X6-K$Ujv-%u8ZuuzhrGJ6Z
zb&X+6vVwpcAAtFir|^DPHIsL^6#wbdRo|3ZQZrc~-3UW9JSHgb=z|2y)86CsrhJa1
z((BM=+BPjj6U@>El_fN)exI`;DpG3mfaQo!Kp@>T#+EDD(v*WNQ;|95i&QB6y3j@e
z881|4_fRQ?rh+lAL8IAQ7{(||@wL69!?)>Q@efQqexA7?P`Cw&U%|{BZ8bGceZ@&X
zsLN6K{z2{!lGrg?f!a6R_1PT9xEH{W(>CcM0vhCgs-dn9*cSPjSVn!JB0wuo)mS9_
zoV`#+lGw!<Do&Vn+wZ1b>5@=Ldb;nU`XAc?6E(p0BoDZQV39B|t<f#nsaq(hlsB;p
z&I9a7>I-KY6-$xaAq!0<xFQ0MPpH`Q??ZeJ@0XR4k;K~+-$xUNdmAd*nuOB)L#C|F
zF9T0jhkE%MoG)*h>!)B~>9$p(zE*=K8{=L6r@b)xuEp{77gMj*^Iof2)*fxuZHpRX
z`+stdhH^ZX%yq7(y-NPv?W7pxphbH2HJbcEW8h6q?qZ16ewbAZ7o`}7JP-UHfc924
zU7$;0mGD%9Tzh=--s7@&_i?5$I2ioM-fRZU8k+q+9CSP`(UKQo`gIrGsYBD-z@3MI
zpyD^pO&1}cGv4<#o=5wwVT^#s&Lr>!fQ%j{eMU;8ZpsjMC`Ls^G2Xi6iE;MC%zaH<
z=3rMOVj#m4V9fvTEsNja-g1Cj*`k7Z{OWU}=?E2V&ID_H{fE7UpzC`s{-N<#FaM;>
zOe_`ps1BgmI&a)L`L4H?7+7?*#TFEI%15k10)1Z#p^uZ4kW#W{yMSa`7E5WI4}tQo
zLsAd-qZ)_&E?>UfJO`SFB9Nl(*fa(}G$D@s?bl_W2B@4cxpMO0+P{b;t=qPk2Rj8a
z41{y|Y!P%qw4K5UIf(k2AlqZ11|>=!awAsG1%u)Ab0D@@E}aC&P`b0!e~JG=<tink
zAf2ef9C82O`zIr05RVaIn$L8&xGzKxzbm?nBt9kq6_?CJ50AxN+ZTtDPor|n9wylU
zM7mTcAjWe)eXevb{+VQo{1;qRBiP^7NQ$lY7IVbU@6W%sx5NR@N44=M;*2hMOoI>N
zzcZ$%1BQ=LfhpDX3ugfPgYSPIzsJRHb8ooiGpVOqIUuFd$c4v?SZh2`{?DKm7aI%F
zd`jy7^|v<!BB4Z!9|~oU#S~9&M;%Zh1y}A+M_HZ?pvnmN7l#VludDw>K5IpsO=@J}
z-bBd$L7@<ip=S(2-ot}%*L|emLj<UTjh$VC=l^}Lnh`Ovb<-Bg`xlBVD($8(8UAl~
zYLS`~q0fa-U60tc6x7sJHske;jc@6tFrD#qxH>R+cJ7LlB0OR>&xUVtW6!QEE_)&7
zi|;*BL$x4@6bOl{{db&jA99{Tvv1N7!UX{W7%^RpGxTJ5FgQ*AWS9^<?;zn3?DxP5
zk$8w<*`S4=D^mHDy)bU$Qqy($<YiEW4X`$dJIFCruK&Cv0ft>Du1G@azt7=qVM*J!
zm6UYc*TfGBbgJE>k>DWiGVzB$Yeg7Hp2vOqR0?bbIf4Kw02g<^_TL@dB;XM1Cc;4D
z(9}ma!4d%T9=$}OmeMjg9`@fo-o=RRc>v{uqPukjjRc|ezDzxs4H&#F722qC!V@Tz
zC9=EQq-v4a!!GPFK-|PWUHgm6I)JJ#$zU}qP*ag+j>unHw5x^qVLv0pWx-*#l(bA%
z&QNRSw7MJHA&@B82wL#Rj}M>xLPA0o8NoZKj=z4gj>YTQfP*)B52afpMSl$>MHKxU
zglWNr?@APj?TF!OvOFFsQ)KSw?Bt=if~L7mbcxs>f^OF6UZal|JQ^8&7H*!c3tQl;
zy9imKxuziOSsX?OO4UVZv=vvC1wXWZ1=$c<_;NmrzZn$Bzh*sJ-HpsO6ZCQ(E&S4r
zb6W)%HF|q{ktjzQIRDBlB<N*|CtEK)Al4cyOLFO5dSALFG|wVe_lgOCC=N&}Dk%|(
z3+1r1d4#h3F}r7<KfCqP(#PS61I9t5R67TZXEYBM3D9C%lfT(I(AfOo!~7@IYHbkn
zcabjQ38X-MA?o}vQOKoClLtHG=%fT8s)c*a`bhK{vS?;SFwQ$*NuNO+jUoV7LStDn
zAgl}1FB$@-#6^?uO*{kL5MM>RLMXJb<3Hi-U4^jy04Z|>04%k&wL$0>$~ZyCAAdWl
z&F9l+BAQ?RVq|RGQ3HDghKxcje7UsLgoZ!1qgX4vC;vzCY?3+)Nyp_oa0A3ZrK|Zw
zMXf0<OdyCVy)XpP+EGsFKmSoQ-c=9>wH(itlp+nE_Chtx4=~*U;j=t@r|bDns+}!F
ztA{m;EG;!f5_vtXpfF+bzP$m{&DLU0RTv}|Y~<y4<bC`fvk&+nq}jki5eU`}6A`4$
z#Kjb)LSs6Nu$zyF{r`>eTC(a8myUf7GU?g_dxZfWO_=PJyzre#*5OB&e%_~PWmba!
zxK?);3D~?>PLfkqQ<EnWS5lG+Wz#A*5HiIovhk?5Yf!CM28Op8+UJs*n!06{RhUAi
zD2mcg)fS@t)w#)9{nVQOF#{fw3aae}t~%_ax&x_?ud)e4`OSL$<H>vd5G@j%dJ);(
zLjymDyS)EFZvQCgv0pfS3OD`UWBvEGa<bN2|HyM+@yC<<7w$z-7B2-1@k`$w(h^fS
z`5Nk<w;+#m5xu<iPFMwuy`WjAijEhcnITnr{9SX{Q}(xdmJtm-K#lvj&qxF6joX}o
zbN^QHK+u0b&7p{FpqrFZAD}g&DUn>|^z*OJ;)UG+Y0WR(76xQmSuF#b!Ei#aP;s}?
zQh5;=P`+SBPEMY;dAI1WyvNM{T-!t6?O(0<YUwm;UU@3{NYKsBL!BpfN$4C~R2$@5
z?CgHs{Q)^Fp4cLHJN(5rGS8kF6%0PBj<zckx_kE~n;9B%fDA9%f$1%H(2j(b1U}b-
z7w1*s{wulnfV14)-BbP(ud~k=z(0!jCuR5Zwv2V|HsKy-g=*p`b{%aU9mIBka13Nk
zu@mga6W}xybM1>m+!TBLAqz>t*ueaJdIM*x!LP~^@ZrwwhU@2<h=@eX4B-#P8Gg)e
zAvc+!=mvuAkW|ysDssnj`d>1KT`8mQnZhV!c!WCP85?}DLAoMU>RB<)S`|(mJlavc
z0}V-yi-Ye6-&zJ_an`K4i_~=VoE((XdC+LyRjCNvU74m;?9N}LNEmDf*l2);f);XU
zKuzgMkqo|d?IN1|s9xdBpJKZn1v8_)K85a?xQl}Xv&nXOip+zTvv{sF|NX3-0T_pt
z>ULlV++t+pWfq3u97J~GiTFCZx`G1(`Kh9xq)~1A5rT}R7NOaAs%|x)U~XQv{Nu-C
zh$}3a=J<#WuGl}fj3x6=@6F5O^l{_*6g)WJcS670mk=4q?rQ@HT?-720}?;EbLUPo
z3D}v5U{@>!9QW~L+ZbJZ#Y0_Z=Pf2;04WC$5a?U}TEqNrA=V@!GOAasn9&ETvy5dR
z+;yap^QF&ULR)iF#2eUcy&O4aD4dQ9Lg$FUFnGkP?v)_$8486F;H?HEq@=8jeP;K1
z?i7JseD=&Kl>LNQ@sK<z6onzW3W8)yQ~voZP)u%`YzSeG&{Pv{Gr@G(qNmO*alxFJ
zJJh$_XBy%r$&)nMU`N1YUt6<vbJT*A1ZJZ+Y@76e+1GMVW$yZ^Pp$xpoL{)vZg6)-
z#fV-NAFvj0g>gEwL4yiph-S+BAehhN0%7f$ociHxds|zG$wmhkdJ#B9TDKnx9~>PQ
zXS{`thxE~MqZ|oj36p#uLubLQux(MR$W*Uh_dLtAyEsy~pNJFXY17k&wp(oV;%brN
zqDqNf&eK05o&c%^#HGkT+w>%d<<?P|s@h4q4dva&OeuVdj~|)M1*MfURxhFOJ)B|s
zNt(h;8H^|FGwaI_0)>WzR{8ncj0!qU)#$HD-3puO0!`;v2g${}JWV!q3n!xi5dH8f
z5BPBY;`Wh?R4`<M=n^X%n{tMdy^(1^Wtv>BkC<bJr!QcC1s*TrGT)F#JB8S~16&bL
zno2jJhTkM)=*H7t2qitDk8Yc8uadPdivv@kNMOM1+}y_?2s1r1>;Kn9BS44s%Hy!s
zRQ|mJ4#}6)PHdKK*93+(a-W*(O|F&7pPE~>ba*%n$hpkLs%)6<fBt0qh;4oRCQ~Gv
zk1I-p-8x5zP+^zquSfFl2a;;`Gin6vXWAiBlf7`TbS37Wi_(P!Vrt@OtFY!P?EpLw
z9Bj>HFvQ4m^rGY4o8<g%J;2beDf^JixUlD1rS0ZkDu2z0zh_;{xxL@7Ngs9&QnqGA
zY|2i<Gjdf7%FLF6sSSySxMT9JK6&ezpW;%XMB;Now>5zlrtLt?Xrwz+;p5u|HL#tJ
zeJ|zj?;kBYP{5SJVj=pKE>h_lum0SCsnvao;1*sFkD0>E1)H8>g+Bhy;m0XG9Ltsd
zvYmRZvJfc;_1P)MAO)3olv$jE4M{xAy^Fqq+0rMOET~-v1JYag#YNKC4kOGRcF#%5
zv0O{a$FVcyz&uH(jAZM5pPiHPoPYoT<kuh<V-jFGj7bQ8cZJ*jzDaafaeE6lMIhU+
zVK_|)8EfWQmX?|hSZMRxrJzSUPy0Yr;@Ty3<uAkUl8O_<Tl6_MrjW2@B+LKK{Q=H2
zrA$wU)O%Z6ykJT?l<Sr!GfiM1o(Nqcf@Za<`O$-eYW-h97V)!~nOtOa%5st`j4y2D
zDN_GGRb6>pQfU{a`7E8OXt8i~TpBBNN->uxrED>A$$i{6&@s~lG*Qc?vZ!oQnoPso
zGAlDPOek;^m&UYIQd7&qTar2{sbppP%O&SK7yRb;`|f{m;og^*bKi5$^E~f4ZT()s
z2c6#%9Ns@Qbo;^%Izq_PQdc)Qb*NrKHpJ0v?Wg`|g&fz(*;yk>JUZ!Dx5zrRe}I(w
zZX!W+`T=KdROUJ~efQ;PIV-M9`4xPCeLU7DSrM>MQqVz8oh_!ifu~+24)#a4`UDxQ
z@$ftbZ9PG9F&-~u{zVb~rcBb$aPP=rtV-Pw@hkk~uHpOoOBa3639LEC5qy9}Q%vo7
z7vtNyTun`ls16YBL4R1W0`V`ue0eav76eV&<yGNs5ZN$0;PD<#Ky>a*gx7eL@j3bg
z3Dc*eEC22J#SU#xenn+6|C(&ngXL;k=he14b^FV)RFDwB@iOks;HOs?v^H?r<xxk8
z#ncAEAPeA}dH!fL7Z!9dU!PwDCqWm&$nVbFQ+@wiZYMtI^dnlDYczPj(9lLHa}yv;
zC`x4KyXmsK5lu1%O?60~DcGkjBOg^jP0+=Ep*=qteVbEvN}%lDV3RSJ`%ik7A9Yx<
zt}k1SE}(r-C&e8Z#Tyw#<c1-J)5%s&-RX8+!xLhxx(8TNooRj!0~?C97@4fLZVa({
z`c<6p(Fw?InX!_=%wN6UHxZAj;!5V2o=Av{TsE3!Prr<*qLTjxMAM_pbH8?tQ>n+H
zZax7Sias?loC_q{u;r5&L<fo{A_9K4qn_6M!(L<B{0bHD83j>_yzW|uJby^B9{&|>
z#`A!dw}wRmz}Z}bFH=YNDiwCzi+boDdw~05z(%wP85dQz9d(yl(oM*<`pmH}zF}Ip
zK3buaS&b?KMxhf;j*Ho@q*9NVa&oN7o^1!(KaPnLR;2PG|0&@XXQuQdM-9z$S)@l@
znu-BXD&$u6khIfnG1_+?d>(1ARo*FKt&RGvQ%ynKeF1s6e&2>B*}a*b%(%ho%_So6
z4-f9b{q-h<qZNrf@TQOtaJ-<VFRf$feAB?p3}`zXkHcg768sv=yRa>cxWd**C!L{5
zkI<l&HjVYW5?e<nb49wKxH$S|=l4U3|0-S`UHw*U_r??Q+V&Pvu<NqfY!vXfzZ4r-
zsbw{n|JzUdxAX`kH*#t{Z^<sw-s6pbZwe87u4wZ;WSL~zOgF6;I`i<1qeGL4#ND2A
z=@^W18L9;!Z#$fvTq87W``H3o$&+%CaC1wt!!y%c6T`BAE6Agw#D-u;(a4>t0h?5Y
zVlXrEfS|JUPBo7=klgt)D2XGc$|-6V3lgyvOPI4}<XDQmawI>O;SgMYaU!u6G43@Z
z)9*Q8l(Q15L0-ZjgnhrRGV2Ebe?NWt)IL#<Z5lkhzK=0K@>GzeVtMfPPR&+&UPR$H
zKfpS71h&_PF5Fw5p;khhBd2>`d;FtdK~_<MwBg*35Gil4w<_#_#|kS!nfHw$hnp{g
z)mj9+Hn`U7o-Ha@HNH|(mN~F%Vo|#V9h|zciGibw3smn%xJXEHQh_&#UYZ?&WYP7{
z_AZ78C_qnGyi4H&FyBxpsRGGQy6!hOc5oMT0>~D5qR7id=Mq}#ZeF7uw&={pI^NyA
z`ntN=B53?eB9VY!qy5LncSNS5R@n%DEBWN3G}V@z=}EDqz{aZ37?;LoDdORHYPJUJ
zY{syKxhwybdsWdp%>J9bF!|-O(;G7F*T03;37AR2g1Br(3pEGtxGvQf6*V=<{SAxl
zFI~{I0A5wj+zW0{+Hy2lB;-4OVlBOoZZA+`^#0s4!YE&2Rv8aO^(-M^tXio}a~ZL+
z)x2H^8L$1SAVXZ4R~dUfFcQPlA;VE8_S>8sViuHul=jE18MN8lsp#9X`-bPm@ioAH
z&r$K~Q8^}{Rclb^6!^m4#X~5W;YcnW@a;B7wC!|X+;2QRVZ?6Xdg$g7%{2^v2Vx8Q
zcp$d}4-)dWmOz`s$MMa_`!ypiKpMjyXcA0^!29)Q1moo#R|5}@mr>C;`*V{(gY_76
z5gYyJM<_`J`lp8eAmGx(szPlnpQvk;6cZsIMaoqa_8PnMp#gj}1SHN^cjP#iK<_kJ
zBa_mxn*CI8t}s%rD@yR(0Vn`D(<Q4>Y@H1b5nW^bd?9mQ`n4&<L^tz;Pha4s%enda
z=GXVF8q6u_eeK6s&t6@Prm}MZfL^mJEuX~c&gMf=VsK(7R)D4KsADuAEFFpT*Mzm0
zCmsXL!lITw+XQpg$NR^^^hz4!Rp_y#{pTQc;4q-Y6O~ZO;DaU*c-VbuPX@U%Nj(%3
zw<@fBt|#D-*Ng?<d^?$#)^xr0F6VW~&C9qV*KnPojWqp=rBg@r!-O(BC=en1p)-WL
z9YW@LZMf?#&)8BN61G`n<lA7AwC0f2wE(;j;=PMBe5YVLFV)&Noy8IhjyZt9Y#WZS
zJy~0~S0e4ulaFk7;SCT@RwPy9{mml@c?z|RhlyWf2p6kb=cqTh5}Gb$fWJw|7RfVy
z>B{0|o0GzN_*hASWE^Z+&{qFC5}Eo1b*(OOH&ht=L7Mbv_&K}koIo|lG3<tO1w7Rj
zs~+4hVHO;D^2Xqevi#1{6LJf>J~{*3Lt-4~*jf|6Ln2Mnn<z<!4|lmT*0}c=SWCYj
z6gKX-(zv6eozVwX4(k5=Q@W*}>vPwSW2s3IbOyIqefCPI?Q=|fl+cG0J#HTju!)s@
zME?X%o$V|`osfHCqKZwF%<IcF6POAjs+)BL3`q^t0N&(dar)(h@j__z0)j)Cx;Dug
zR`mDz?^NE!RC$$w!0o59XAnHP1q)sz5>2v--AbgRubRTGNi}NqlJWed^p?4~nxjV^
z+qZ<qbk7%Gr_!m^yPe_Cs(rYb78An@z}xC(K#J+o3`sHKb$dY7RB~Cia&+Uq`qu)k
z7>vfc0OFygXZB{;-IP@kw`KVhJP$T!-qz)(gI(=QLST1m3-3a)dqjM^pfjBM1uvgK
z%nZ6ihLR2PDaeEhggsIzY=eMG2m<BZlANno@s}M2$}Q6e2we-z5T@c66abEgJ&fYc
zP`A_B07A15;6jvU3f;Z}D_N<oJQZ!AxHk1XiW<_POKGiNH0ZA3CX_8wGp^QR#d(Z$
zCmKgwfI3RBPb82GUG<c9!4_WHtis|k7~$V5RhMI4ML@D!=B=XiUBAoG9ooq8g|9!<
zzJ}V}efg&GwlGF_8SI}0NIBfx;hG|j0)^x6=os2t-^H}IgsfW$<gF%FnYjl+3#OpQ
zZk;0eHDG#x=l-@DVD(Pi`85jzptz!&^Iq)%9_W%GFoMlI$6NoqGV>gIWvpo{&eqlz
z`q`OlfJV%5yW+B#Wd^85mIzdhwA#wdEYog-kIMo~hB=Et=ez`dic@#^i3QdNW6hMS
zVHdt{8IuyR0Ik3~&*a;_7EWQb<npwISI<_#9R7R!->C`<`%CjDQVwT{WGy<O=x6M0
LocERQrJVXNlr-Jc

diff --git a/docs/content/middlewares/http/chain.md b/docs/content/middlewares/http/chain.md
index 3fc06d26b..f9768adfb 100644
--- a/docs/content/middlewares/http/chain.md
+++ b/docs/content/middlewares/http/chain.md
@@ -15,7 +15,7 @@ It makes reusing the same groups easier.
 
 ## Configuration Example
 
-Below is an example of a Chain containing `WhiteList`, `BasicAuth`, and `RedirectScheme`.
+Below is an example of a Chain containing `AllowList`, `BasicAuth`, and `RedirectScheme`.
 
 ```yaml tab="Docker"
 labels:
@@ -25,7 +25,7 @@ labels:
   - "traefik.http.middlewares.secured.chain.middlewares=https-only,known-ips,auth-users"
   - "traefik.http.middlewares.auth-users.basicauth.users=test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
   - "traefik.http.middlewares.https-only.redirectscheme.scheme=https"
-  - "traefik.http.middlewares.known-ips.ipwhitelist.sourceRange=192.168.1.7,127.0.0.1/32"
+  - "traefik.http.middlewares.known-ips.ipallowlist.sourceRange=192.168.1.7,127.0.0.1/32"
   - "traefik.http.services.service1.loadbalancer.server.port=80"
 ```
 
@@ -80,7 +80,7 @@ kind: Middleware
 metadata:
   name: known-ips
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
     - 192.168.1.7
     - 127.0.0.1/32
@@ -93,7 +93,7 @@ spec:
 - "traefik.http.middlewares.secured.chain.middlewares=https-only,known-ips,auth-users"
 - "traefik.http.middlewares.auth-users.basicauth.users=test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
 - "traefik.http.middlewares.https-only.redirectscheme.scheme=https"
-- "traefik.http.middlewares.known-ips.ipwhitelist.sourceRange=192.168.1.7,127.0.0.1/32"
+- "traefik.http.middlewares.known-ips.ipallowlist.sourceRange=192.168.1.7,127.0.0.1/32"
 - "traefik.http.services.service1.loadbalancer.server.port=80"
 ```
 
@@ -105,7 +105,7 @@ spec:
   "traefik.http.middlewares.secured.chain.middlewares": "https-only,known-ips,auth-users",
   "traefik.http.middlewares.auth-users.basicauth.users": "test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/",
   "traefik.http.middlewares.https-only.redirectscheme.scheme": "https",
-  "traefik.http.middlewares.known-ips.ipwhitelist.sourceRange": "192.168.1.7,127.0.0.1/32",
+  "traefik.http.middlewares.known-ips.ipallowlist.sourceRange": "192.168.1.7,127.0.0.1/32",
   "traefik.http.services.service1.loadbalancer.server.port": "80"
 }
 ```
@@ -118,7 +118,7 @@ labels:
   - "traefik.http.middlewares.secured.chain.middlewares=https-only,known-ips,auth-users"
   - "traefik.http.middlewares.auth-users.basicauth.users=test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
   - "traefik.http.middlewares.https-only.redirectscheme.scheme=https"
-  - "traefik.http.middlewares.known-ips.ipwhitelist.sourceRange=192.168.1.7,127.0.0.1/32"
+  - "traefik.http.middlewares.known-ips.ipallowlist.sourceRange=192.168.1.7,127.0.0.1/32"
   - "traefik.http.services.service1.loadbalancer.server.port=80"
 ```
 
@@ -150,7 +150,7 @@ http:
         scheme: https
 
     known-ips:
-      ipWhiteList:
+      ipAllowList:
         sourceRange:
           - "192.168.1.7"
           - "127.0.0.1/32"
@@ -180,7 +180,7 @@ http:
   [http.middlewares.https-only.redirectScheme]
     scheme = "https"
 
-  [http.middlewares.known-ips.ipWhiteList]
+  [http.middlewares.known-ips.ipAllowList]
     sourceRange = ["192.168.1.7", "127.0.0.1/32"]
 
 [http.services]
diff --git a/docs/content/middlewares/http/ipwhitelist.md b/docs/content/middlewares/http/ipallowlist.md
similarity index 68%
rename from docs/content/middlewares/http/ipwhitelist.md
rename to docs/content/middlewares/http/ipallowlist.md
index 3817b54d5..56450d736 100644
--- a/docs/content/middlewares/http/ipwhitelist.md
+++ b/docs/content/middlewares/http/ipallowlist.md
@@ -1,32 +1,30 @@
 ---
-title: "Traefik HTTP Middlewares IPWhiteList"
-description: "Learn how to use IPWhiteList in HTTP middleware for limiting clients to specific IPs in Traefik Proxy. Read the technical documentation."
+title: "Traefik HTTP Middlewares IPAllowList"
+description: "Learn how to use IPAllowList in HTTP middleware for limiting clients to specific IPs in Traefik Proxy. Read the technical documentation."
 ---
 
-# IPWhiteList
+# IPAllowList
 
 Limiting Clients to Specific IPs
 {: .subtitle }
 
-![IpWhiteList](../../assets/img/middleware/ipwhitelist.png)
-
-IPWhitelist accepts / refuses requests based on the client IP.
+IPAllowList accepts / refuses requests based on the client IP.
 
 ## Configuration Examples
 
 ```yaml tab="Docker"
 # Accepts request from defined IP
 labels:
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```yaml tab="Kubernetes"
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
-  name: test-ipwhitelist
+  name: test-ipallowlist
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
       - 192.168.1.7
@@ -34,27 +32,27 @@ spec:
 
 ```yaml tab="Consul Catalog"
 # Accepts request from defined IP
-- "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+- "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```json tab="Marathon"
 "labels": {
-  "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange": "127.0.0.1/32,192.168.1.7"
+  "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange": "127.0.0.1/32,192.168.1.7"
 }
 ```
 
 ```yaml tab="Rancher"
 # Accepts request from defined IP
 labels:
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```yaml tab="File (YAML)"
 # Accepts request from defined IP
 http:
   middlewares:
-    test-ipwhitelist:
-      ipWhiteList:
+    test-ipallowlist:
+      ipAllowList:
         sourceRange:
           - "127.0.0.1/32"
           - "192.168.1.7"
@@ -63,7 +61,7 @@ http:
 ```toml tab="File (TOML)"
 # Accepts request from defined IP
 [http.middlewares]
-  [http.middlewares.test-ipwhitelist.ipWhiteList]
+  [http.middlewares.test-ipallowlist.ipAllowList]
     sourceRange = ["127.0.0.1/32", "192.168.1.7"]
 ```
 
@@ -86,7 +84,7 @@ The `depth` option tells Traefik to use the `X-Forwarded-For` header and take th
 
 !!! example "Examples of Depth & X-Forwarded-For"
 
-    If `depth` is set to 2, and the request `X-Forwarded-For` header is `"10.0.0.1,11.0.0.1,12.0.0.1,13.0.0.1"` then the "real" client IP is `"10.0.0.1"` (at depth 4) but the IP used for the whitelisting is `"12.0.0.1"` (`depth=2`).
+    If `depth` is set to 2, and the request `X-Forwarded-For` header is `"10.0.0.1,11.0.0.1,12.0.0.1,13.0.0.1"` then the "real" client IP is `"10.0.0.1"` (at depth 4) but the IP used is `"12.0.0.1"` (`depth=2`).
 
     | `X-Forwarded-For`                       | `depth` | clientIP     |
     |-----------------------------------------|---------|--------------|
@@ -95,20 +93,20 @@ The `depth` option tells Traefik to use the `X-Forwarded-For` header and take th
     | `"10.0.0.1,11.0.0.1,12.0.0.1,13.0.0.1"` | `5`     | `""`         |
 
 ```yaml tab="Docker"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
 labels:
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.depth=2"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.depth=2"
 ```
 
 ```yaml tab="Kubernetes"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
-  name: test-ipwhitelist
+  name: test-ipallowlist
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
       - 192.168.1.7
@@ -117,31 +115,31 @@ spec:
 ```
 
 ```yaml tab="Consul Catalog"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
-- "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-- "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.depth=2"
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
+- "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+- "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.depth=2"
 ```
 
 ```json tab="Marathon"
 "labels": {
-  "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange": "127.0.0.1/32, 192.168.1.7",
-  "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.depth": "2"
+  "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange": "127.0.0.1/32, 192.168.1.7",
+  "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.depth": "2"
 }
 ```
 
 ```yaml tab="Rancher"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
 labels:
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.depth=2"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.depth=2"
 ```
 
 ```yaml tab="File (YAML)"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
 http:
   middlewares:
-    test-ipwhitelist:
-      ipWhiteList:
+    test-ipallowlist:
+      ipAllowList:
         sourceRange:
           - "127.0.0.1/32"
           - "192.168.1.7"
@@ -150,11 +148,11 @@ http:
 ```
 
 ```toml tab="File (TOML)"
-# Whitelisting Based on `X-Forwarded-For` with `depth=2`
+# Allowlisting Based on `X-Forwarded-For` with `depth=2`
 [http.middlewares]
-  [http.middlewares.test-ipwhitelist.ipWhiteList]
+  [http.middlewares.test-ipallowlist.ipAllowList]
     sourceRange = ["127.0.0.1/32", "192.168.1.7"]
-    [http.middlewares.test-ipwhitelist.ipWhiteList.ipStrategy]
+    [http.middlewares.test-ipallowlist.ipAllowList.ipStrategy]
       depth = 2
 ```
 
@@ -177,7 +175,7 @@ http:
 ```yaml tab="Docker"
 # Exclude from `X-Forwarded-For`
 labels:
-    - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
+    - "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```yaml tab="Kubernetes"
@@ -185,9 +183,9 @@ labels:
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
-  name: test-ipwhitelist
+  name: test-ipallowlist
 spec:
-  ipWhiteList:
+  ipAllowList:
     ipStrategy:
       excludedIPs:
         - 127.0.0.1/32
@@ -196,27 +194,27 @@ spec:
 
 ```yaml tab="Consul Catalog"
 # Exclude from `X-Forwarded-For`
-- "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
+- "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```json tab="Marathon"
 "labels": {
-  "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.excludedips": "127.0.0.1/32, 192.168.1.7"
+  "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.excludedips": "127.0.0.1/32, 192.168.1.7"
 }
 ```
 
 ```yaml tab="Rancher"
 # Exclude from `X-Forwarded-For`
 labels:
-  - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
+  - "traefik.http.middlewares.test-ipallowlist.ipallowlist.ipstrategy.excludedips=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```yaml tab="File (YAML)"
 # Exclude from `X-Forwarded-For`
 http:
   middlewares:
-    test-ipwhitelist:
-      ipWhiteList:
+    test-ipallowlist:
+      ipAllowList:
         ipStrategy:
           excludedIPs:
             - "127.0.0.1/32"
@@ -226,7 +224,7 @@ http:
 ```toml tab="File (TOML)"
 # Exclude from `X-Forwarded-For`
 [http.middlewares]
-  [http.middlewares.test-ipwhitelist.ipWhiteList]
-    [http.middlewares.test-ipwhitelist.ipWhiteList.ipStrategy]
+  [http.middlewares.test-ipallowlist.ipAllowList]
+    [http.middlewares.test-ipallowlist.ipAllowList.ipStrategy]
       excludedIPs = ["127.0.0.1/32", "192.168.1.7"]
 ```
diff --git a/docs/content/middlewares/http/overview.md b/docs/content/middlewares/http/overview.md
index 07096315e..c4a9f9791 100644
--- a/docs/content/middlewares/http/overview.md
+++ b/docs/content/middlewares/http/overview.md
@@ -142,7 +142,7 @@ http:
 | [Errors](errorpages.md)                   | Defines custom error pages                        | Request Lifecycle           |
 | [ForwardAuth](forwardauth.md)             | Delegates Authentication                          | Security, Authentication    |
 | [Headers](headers.md)                     | Adds / Updates headers                            | Security                    |
-| [IPWhiteList](ipwhitelist.md)             | Limits the allowed client IPs                     | Security, Request lifecycle |
+| [IPAllowList](ipallowlist.md)             | Limits the allowed client IPs                     | Security, Request lifecycle |
 | [InFlightReq](inflightreq.md)             | Limits the number of simultaneous connections     | Security, Request lifecycle |
 | [PassTLSClientCert](passtlsclientcert.md) | Adds Client Certificates in a Header              | Security                    |
 | [RateLimit](ratelimit.md)                 | Limits the call frequency                         | Security, Request lifecycle |
diff --git a/docs/content/middlewares/tcp/ipwhitelist.md b/docs/content/middlewares/tcp/ipallowlist.md
similarity index 66%
rename from docs/content/middlewares/tcp/ipwhitelist.md
rename to docs/content/middlewares/tcp/ipallowlist.md
index 857d72bc7..2cc51fd57 100644
--- a/docs/content/middlewares/tcp/ipwhitelist.md
+++ b/docs/content/middlewares/tcp/ipallowlist.md
@@ -1,30 +1,30 @@
 ---
-title: "Traefik TCP Middlewares IPWhiteList"
-description: "Learn how to use IPWhiteList in TCP middleware for limiting clients to specific IPs in Traefik Proxy. Read the technical documentation."
+title: "Traefik TCP Middlewares IPAllowList"
+description: "Learn how to use IPAllowList in TCP middleware for limiting clients to specific IPs in Traefik Proxy. Read the technical documentation."
 ---
 
-# IPWhiteList
+# IPAllowList
 
 Limiting Clients to Specific IPs
 {: .subtitle }
 
-IPWhitelist accepts / refuses connections based on the client IP.
+IPAllowList accepts / refuses connections based on the client IP.
 
 ## Configuration Examples
 
 ```yaml tab="Docker"
 # Accepts connections from defined IP
 labels:
-  - "traefik.tcp.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.tcp.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```yaml tab="Kubernetes"
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: test-ipwhitelist
+  name: test-ipallowlist
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
       - 192.168.1.7
@@ -32,25 +32,25 @@ spec:
 
 ```yaml tab="Consul Catalog"
 # Accepts request from defined IP
-- "traefik.tcp.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+- "traefik.tcp.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```json tab="Marathon"
 "labels": {
-  "traefik.tcp.middlewares.test-ipwhitelist.ipwhitelist.sourcerange": "127.0.0.1/32,192.168.1.7"
+  "traefik.tcp.middlewares.test-ipallowlist.ipallowlist.sourcerange": "127.0.0.1/32,192.168.1.7"
 }
 ```
 
 ```yaml tab="Rancher"
 # Accepts request from defined IP
 labels:
-  - "traefik.tcp.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  - "traefik.tcp.middlewares.test-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
 ```
 
 ```toml tab="File (TOML)"
 # Accepts request from defined IP
 [tcp.middlewares]
-  [tcp.middlewares.test-ipwhitelist.ipWhiteList]
+  [tcp.middlewares.test-ipallowlist.ipAllowList]
     sourceRange = ["127.0.0.1/32", "192.168.1.7"]
 ```
 
@@ -58,8 +58,8 @@ labels:
 # Accepts request from defined IP
 tcp:
   middlewares:
-    test-ipwhitelist:
-      ipWhiteList:
+    test-ipallowlist:
+      ipAllowList:
         sourceRange:
           - "127.0.0.1/32"
           - "192.168.1.7"
diff --git a/docs/content/middlewares/tcp/overview.md b/docs/content/middlewares/tcp/overview.md
index 682dbe0f0..cc1302530 100644
--- a/docs/content/middlewares/tcp/overview.md
+++ b/docs/content/middlewares/tcp/overview.md
@@ -18,10 +18,10 @@ whoami:
   #  A container that exposes an API to show its IP address
   image: traefik/whoami
   labels:
-    # Create a middleware named `foo-ip-whitelist`
-    - "traefik.tcp.middlewares.foo-ip-whitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-    # Apply the middleware named `foo-ip-whitelist` to the router named `router1`
-    - "traefik.tcp.routers.router1.middlewares=foo-ip-whitelist@docker"
+    # Create a middleware named `foo-ip-allowlist`
+    - "traefik.tcp.middlewares.foo-ip-allowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+    # Apply the middleware named `foo-ip-allowlist` to the router named `router1`
+    - "traefik.tcp.routers.router1.middlewares=foo-ip-allowlist@docker"
 ```
 
 ```yaml tab="Kubernetes IngressRoute"
@@ -43,9 +43,9 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: foo-ip-whitelist
+  name: foo-ip-allowlist
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourcerange:
       - 127.0.0.1/32
       - 192.168.1.7
@@ -60,30 +60,30 @@ spec:
   routes:
     # more fields...
     middlewares:
-      - name: foo-ip-whitelist
+      - name: foo-ip-allowlist
 ```
 
 ```yaml tab="Consul Catalog"
-# Create a middleware named `foo-ip-whitelist`
-- "traefik.tcp.middlewares.foo-ip-whitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-# Apply the middleware named `foo-ip-whitelist` to the router named `router1`
-- "traefik.tcp.routers.router1.middlewares=foo-ip-whitelist@consulcatalog"
+# Create a middleware named `foo-ip-allowlist`
+- "traefik.tcp.middlewares.foo-ip-allowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+# Apply the middleware named `foo-ip-allowlist` to the router named `router1`
+- "traefik.tcp.routers.router1.middlewares=foo-ip-allowlist@consulcatalog"
 ```
 
 ```json tab="Marathon"
 "labels": {
-  "traefik.tcp.middlewares.foo-ip-whitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7",
-  "traefik.tcp.routers.router1.middlewares=foo-ip-whitelist@marathon"
+  "traefik.tcp.middlewares.foo-ip-allowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7",
+  "traefik.tcp.routers.router1.middlewares=foo-ip-allowlist@marathon"
 }
 ```
 
 ```yaml tab="Rancher"
 # As a Rancher Label
 labels:
-  # Create a middleware named `foo-ip-whitelist`
-  - "traefik.tcp.middlewares.foo-ip-whitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.1.7"
-  # Apply the middleware named `foo-ip-whitelist` to the router named `router1`
-  - "traefik.tcp.routers.router1.middlewares=foo-ip-whitelist@rancher"
+  # Create a middleware named `foo-ip-allowlist`
+  - "traefik.tcp.middlewares.foo-ip-allowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.7"
+  # Apply the middleware named `foo-ip-allowlist` to the router named `router1`
+  - "traefik.tcp.routers.router1.middlewares=foo-ip-allowlist@rancher"
 ```
 
 ```toml tab="File (TOML)"
@@ -91,11 +91,11 @@ labels:
 [tcp.routers]
   [tcp.routers.router1]
     service = "myService"
-    middlewares = ["foo-ip-whitelist"]
+    middlewares = ["foo-ip-allowlist"]
     rule = "Host(`example.com`)"
 
 [tcp.middlewares]
-  [tcp.middlewares.foo-ip-whitelist.ipWhiteList]
+  [tcp.middlewares.foo-ip-allowlist.ipAllowList]
     sourceRange = ["127.0.0.1/32", "192.168.1.7"]
 
 [tcp.services]
@@ -114,12 +114,12 @@ tcp:
     router1:
       service: myService
       middlewares:
-        - "foo-ip-whitelist"
+        - "foo-ip-allowlist"
       rule: "Host(`example.com`)"
 
   middlewares:
-    foo-ip-whitelist:
-      ipWhiteList:
+    foo-ip-allowlist:
+      ipAllowList:
         sourceRange:
           - "127.0.0.1/32"
           - "192.168.1.7"
@@ -137,4 +137,4 @@ tcp:
 | Middleware                                | Purpose                                           | Area                        |
 |-------------------------------------------|---------------------------------------------------|-----------------------------|
 | [InFlightConn](inflightconn.md)           | Limits the number of simultaneous connections.    | Security, Request lifecycle |
-| [IPWhiteList](ipwhitelist.md)             | Limit the allowed client IPs.                     | Security, Request lifecycle |
+| [IPAllowList](ipallowlist.md)             | Limit the allowed client IPs.                     | Security, Request lifecycle |
diff --git a/docs/content/migration/v2-to-v3.md b/docs/content/migration/v2-to-v3.md
new file mode 100644
index 000000000..2af1d8561
--- /dev/null
+++ b/docs/content/migration/v2-to-v3.md
@@ -0,0 +1,18 @@
+---
+title: "Traefik V3 Migration Documentation"
+description: "Migrate from Traefik Proxy v2 to v3 and update all the necessary configurations to take advantage of all the improvements. Read the technical documentation."
+---
+
+# Migration Guide: From v2 to v3
+
+How to Migrate from Traefik v2 to Traefik v3.
+{: .subtitle }
+
+The version 3 of Traefik introduces a number of breaking changes,
+which require one to update their configuration when they migrate from v2 to v3.
+The goal of this page is to recapitulate all of these changes, and in particular to give examples,
+feature by feature, of how the configuration looked like in v2, and how it now looks like in v3.
+
+## IPWhiteList
+
+In v3, we renamed the `IPWhiteList` middleware to `IPAllowList` without changing anything to the configuration. 
diff --git a/docs/content/operations/dashboard.md b/docs/content/operations/dashboard.md
index c838f0afd..61e17e742 100644
--- a/docs/content/operations/dashboard.md
+++ b/docs/content/operations/dashboard.md
@@ -72,7 +72,7 @@ to allow defining:
 
 - One or more security features through [middlewares](../middlewares/overview.md)
   like authentication ([basicAuth](../middlewares/http/basicauth.md) , [digestAuth](../middlewares/http/digestauth.md),
-  [forwardAuth](../middlewares/http/forwardauth.md)) or [whitelisting](../middlewares/http/ipwhitelist.md).
+  [forwardAuth](../middlewares/http/forwardauth.md)) or [allowlisting](../middlewares/http/ipallowlist.md).
 
 - A [router rule](#dashboard-router-rule) for accessing the dashboard,
   through Traefik itself (sometimes referred as "Traefik-ception").
diff --git a/docs/content/providers/file.md b/docs/content/providers/file.md
index 8abce45d6..2ac4ee1e5 100644
--- a/docs/content/providers/file.md
+++ b/docs/content/providers/file.md
@@ -18,7 +18,7 @@ It supports providing configuration through a [single configuration file](#filen
 
 !!! tip
 
-    The file provider can be a good solution for reusing common elements from other providers (e.g. declaring whitelist middlewares, basic authentication, ...)
+    The file provider can be a good solution for reusing common elements from other providers (e.g. declaring allowlist middlewares, basic authentication, ...)
 
 ## Configuration Examples
 
diff --git a/docs/content/reference/dynamic-configuration/docker-labels.yml b/docs/content/reference/dynamic-configuration/docker-labels.yml
index f4ddee380..6d79e63fe 100644
--- a/docs/content/reference/dynamic-configuration/docker-labels.yml
+++ b/docs/content/reference/dynamic-configuration/docker-labels.yml
@@ -71,9 +71,9 @@
 - "traefik.http.middlewares.middleware10.headers.stsincludesubdomains=true"
 - "traefik.http.middlewares.middleware10.headers.stspreload=true"
 - "traefik.http.middlewares.middleware10.headers.stsseconds=42"
-- "traefik.http.middlewares.middleware11.ipwhitelist.ipstrategy.depth=42"
-- "traefik.http.middlewares.middleware11.ipwhitelist.ipstrategy.excludedips=foobar, foobar"
-- "traefik.http.middlewares.middleware11.ipwhitelist.sourcerange=foobar, foobar"
+- "traefik.http.middlewares.middleware11.ipallowlist.ipstrategy.depth=42"
+- "traefik.http.middlewares.middleware11.ipallowlist.ipstrategy.excludedips=foobar, foobar"
+- "traefik.http.middlewares.middleware11.ipallowlist.sourcerange=foobar, foobar"
 - "traefik.http.middlewares.middleware12.inflightreq.amount=42"
 - "traefik.http.middlewares.middleware12.inflightreq.sourcecriterion.ipstrategy.depth=42"
 - "traefik.http.middlewares.middleware12.inflightreq.sourcecriterion.ipstrategy.excludedips=foobar, foobar"
@@ -166,7 +166,7 @@
 - "traefik.http.services.service01.loadbalancer.sticky.cookie.secure=true"
 - "traefik.http.services.service01.loadbalancer.server.port=foobar"
 - "traefik.http.services.service01.loadbalancer.server.scheme=foobar"
-- "traefik.tcp.middlewares.tcpmiddleware00.ipwhitelist.sourcerange=foobar, foobar"
+- "traefik.tcp.middlewares.tcpmiddleware00.ipallowlist.sourcerange=foobar, foobar"
 - "traefik.tcp.middlewares.tcpmiddleware01.inflightconn.amount=42"
 - "traefik.tcp.routers.tcprouter0.entrypoints=foobar, foobar"
 - "traefik.tcp.routers.tcprouter0.middlewares=foobar, foobar"
diff --git a/docs/content/reference/dynamic-configuration/file.toml b/docs/content/reference/dynamic-configuration/file.toml
index c197e75cb..6c540e5f6 100644
--- a/docs/content/reference/dynamic-configuration/file.toml
+++ b/docs/content/reference/dynamic-configuration/file.toml
@@ -203,9 +203,9 @@
           name0 = "foobar"
           name1 = "foobar"
     [http.middlewares.Middleware11]
-      [http.middlewares.Middleware11.ipWhiteList]
+      [http.middlewares.Middleware11.ipAllowList]
         sourceRange = ["foobar", "foobar"]
-        [http.middlewares.Middleware11.ipWhiteList.ipStrategy]
+        [http.middlewares.Middleware11.ipAllowList.ipStrategy]
           depth = 42
           excludedIPs = ["foobar", "foobar"]
     [http.middlewares.Middleware12]
@@ -402,7 +402,7 @@
           weight = 42
   [tcp.middlewares]
     [tcp.middlewares.TCPMiddleware00]
-      [tcp.middlewares.TCPMiddleware00.ipWhiteList]
+      [tcp.middlewares.TCPMiddleware00.ipAllowList]
         sourceRange = ["foobar", "foobar"]
     [tcp.middlewares.TCPMiddleware01]
       [tcp.middlewares.TCPMiddleware01.inFlightConn]
diff --git a/docs/content/reference/dynamic-configuration/file.yaml b/docs/content/reference/dynamic-configuration/file.yaml
index fc446ec0f..c86e4d167 100644
--- a/docs/content/reference/dynamic-configuration/file.yaml
+++ b/docs/content/reference/dynamic-configuration/file.yaml
@@ -230,7 +230,7 @@ http:
         permissionsPolicy: foobar
         isDevelopment: true
     Middleware11:
-      ipWhiteList:
+      ipAllowList:
         sourceRange:
           - foobar
           - foobar
@@ -443,7 +443,7 @@ tcp:
             weight: 42
   middlewares:
     TCPMiddleware00:
-      ipWhiteList:
+      ipAllowList:
         sourceRange:
           - foobar
           - foobar
diff --git a/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml b/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
index 391c23a2c..d54fa537d 100644
--- a/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
+++ b/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
@@ -1149,7 +1149,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
@@ -1174,14 +1174,14 @@ spec:
                         type: boolean
                     type: object
                 type: object
-              ipWhiteList:
-                description: 'IPWhiteList holds the IP whitelist middleware configuration.
+              ipAllowList:
+                description: 'IPAllowList holds the IP allowlist middleware configuration.
                   This middleware accepts / refuses requests based on the client IP.
-                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/'
+                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/'
                 properties:
                   ipStrategy:
                     description: 'IPStrategy holds the IP strategy configuration used
-                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                     properties:
                       depth:
                         description: Depth tells Traefik to use the X-Forwarded-For
@@ -1345,7 +1345,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
@@ -1541,8 +1541,8 @@ spec:
                     format: int64
                     type: integer
                 type: object
-              ipWhiteList:
-                description: IPWhiteList defines the IPWhiteList middleware configuration.
+              ipAllowList:
+                description: IPAllowList defines the IPAllowList middleware configuration.
                 properties:
                   sourceRange:
                     description: SourceRange defines the allowed IPs (or ranges of
diff --git a/docs/content/reference/dynamic-configuration/kubernetes-crd-resource.yml b/docs/content/reference/dynamic-configuration/kubernetes-crd-resource.yml
index d86a2dd67..9a3d40e1c 100644
--- a/docs/content/reference/dynamic-configuration/kubernetes-crd-resource.yml
+++ b/docs/content/reference/dynamic-configuration/kubernetes-crd-resource.yml
@@ -148,7 +148,7 @@ spec:
         - name: whoamitcp
           port: 8080
       middlewares:
-        - name: ipwhitelist
+        - name: ipallowlist
   tls:
     secretName: foosecret
     passthrough: false
diff --git a/docs/content/reference/dynamic-configuration/kv-ref.md b/docs/content/reference/dynamic-configuration/kv-ref.md
index d83a15476..e65b2ec66 100644
--- a/docs/content/reference/dynamic-configuration/kv-ref.md
+++ b/docs/content/reference/dynamic-configuration/kv-ref.md
@@ -84,11 +84,11 @@
 | `traefik/http/middlewares/Middleware10/headers/stsIncludeSubdomains` | `true` |
 | `traefik/http/middlewares/Middleware10/headers/stsPreload` | `true` |
 | `traefik/http/middlewares/Middleware10/headers/stsSeconds` | `42` |
-| `traefik/http/middlewares/Middleware11/ipWhiteList/ipStrategy/depth` | `42` |
-| `traefik/http/middlewares/Middleware11/ipWhiteList/ipStrategy/excludedIPs/0` | `foobar` |
-| `traefik/http/middlewares/Middleware11/ipWhiteList/ipStrategy/excludedIPs/1` | `foobar` |
-| `traefik/http/middlewares/Middleware11/ipWhiteList/sourceRange/0` | `foobar` |
-| `traefik/http/middlewares/Middleware11/ipWhiteList/sourceRange/1` | `foobar` |
+| `traefik/http/middlewares/Middleware11/ipAllowList/ipStrategy/depth` | `42` |
+| `traefik/http/middlewares/Middleware11/ipAllowList/ipStrategy/excludedIPs/0` | `foobar` |
+| `traefik/http/middlewares/Middleware11/ipAllowList/ipStrategy/excludedIPs/1` | `foobar` |
+| `traefik/http/middlewares/Middleware11/ipAllowList/sourceRange/0` | `foobar` |
+| `traefik/http/middlewares/Middleware11/ipAllowList/sourceRange/1` | `foobar` |
 | `traefik/http/middlewares/Middleware12/inFlightReq/amount` | `42` |
 | `traefik/http/middlewares/Middleware12/inFlightReq/sourceCriterion/ipStrategy/depth` | `42` |
 | `traefik/http/middlewares/Middleware12/inFlightReq/sourceCriterion/ipStrategy/excludedIPs/0` | `foobar` |
@@ -247,8 +247,8 @@
 | `traefik/http/services/Service04/failover/fallback` | `foobar` |
 | `traefik/http/services/Service04/failover/healthCheck` | `` |
 | `traefik/http/services/Service04/failover/service` | `foobar` |
-| `traefik/tcp/middlewares/TCPMiddleware00/ipWhiteList/sourceRange/0` | `foobar` |
-| `traefik/tcp/middlewares/TCPMiddleware00/ipWhiteList/sourceRange/1` | `foobar` |
+| `traefik/tcp/middlewares/TCPMiddleware00/ipAllowList/sourceRange/0` | `foobar` |
+| `traefik/tcp/middlewares/TCPMiddleware00/ipAllowList/sourceRange/1` | `foobar` |
 | `traefik/tcp/middlewares/TCPMiddleware01/inFlightConn/amount` | `42` |
 | `traefik/tcp/routers/TCPRouter0/entryPoints/0` | `foobar` |
 | `traefik/tcp/routers/TCPRouter0/entryPoints/1` | `foobar` |
diff --git a/docs/content/reference/dynamic-configuration/marathon-labels.json b/docs/content/reference/dynamic-configuration/marathon-labels.json
index 7966f27f7..fdcc74cb3 100644
--- a/docs/content/reference/dynamic-configuration/marathon-labels.json
+++ b/docs/content/reference/dynamic-configuration/marathon-labels.json
@@ -71,9 +71,9 @@
 "traefik.http.middlewares.middleware10.headers.stsincludesubdomains": "true",
 "traefik.http.middlewares.middleware10.headers.stspreload": "true",
 "traefik.http.middlewares.middleware10.headers.stsseconds": "42",
-"traefik.http.middlewares.middleware11.ipwhitelist.ipstrategy.depth": "42",
-"traefik.http.middlewares.middleware11.ipwhitelist.ipstrategy.excludedips": "foobar, foobar",
-"traefik.http.middlewares.middleware11.ipwhitelist.sourcerange": "foobar, foobar",
+"traefik.http.middlewares.middleware11.ipallowlist.ipstrategy.depth": "42",
+"traefik.http.middlewares.middleware11.ipallowlist.ipstrategy.excludedips": "foobar, foobar",
+"traefik.http.middlewares.middleware11.ipallowlist.sourcerange": "foobar, foobar",
 "traefik.http.middlewares.middleware12.inflightreq.amount": "42",
 "traefik.http.middlewares.middleware12.inflightreq.sourcecriterion.ipstrategy.depth": "42",
 "traefik.http.middlewares.middleware12.inflightreq.sourcecriterion.ipstrategy.excludedips": "foobar, foobar",
@@ -166,7 +166,7 @@
 "traefik.http.services.service01.loadbalancer.sticky.cookie.secure": "true",
 "traefik.http.services.service01.loadbalancer.server.port": "foobar",
 "traefik.http.services.service01.loadbalancer.server.scheme": "foobar",
-"traefik.tcp.middlewares.tcpmiddleware00.ipwhitelist.sourcerange": "foobar, foobar",
+"traefik.tcp.middlewares.tcpmiddleware00.ipallowlist.sourcerange": "foobar, foobar",
 "traefik.tcp.middlewares.tcpmiddleware01.inflightconn.amount": "42",
 "traefik.tcp.routers.tcprouter0.entrypoints": "foobar, foobar",
 "traefik.tcp.routers.tcprouter0.middlewares": "foobar, foobar",
diff --git a/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewares.yaml b/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewares.yaml
index d7bd0b82c..85e80aae3 100644
--- a/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewares.yaml
+++ b/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewares.yaml
@@ -572,7 +572,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
@@ -597,14 +597,14 @@ spec:
                         type: boolean
                     type: object
                 type: object
-              ipWhiteList:
-                description: 'IPWhiteList holds the IP whitelist middleware configuration.
+              ipAllowList:
+                description: 'IPAllowList holds the IP allowlist middleware configuration.
                   This middleware accepts / refuses requests based on the client IP.
-                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/'
+                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/'
                 properties:
                   ipStrategy:
                     description: 'IPStrategy holds the IP strategy configuration used
-                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                     properties:
                       depth:
                         description: Depth tells Traefik to use the X-Forwarded-For
@@ -768,7 +768,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
diff --git a/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewaretcps.yaml b/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewaretcps.yaml
index 1f6eec940..78a449562 100644
--- a/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewaretcps.yaml
+++ b/docs/content/reference/dynamic-configuration/traefik.containo.us_middlewaretcps.yaml
@@ -47,8 +47,8 @@ spec:
                     format: int64
                     type: integer
                 type: object
-              ipWhiteList:
-                description: IPWhiteList defines the IPWhiteList middleware configuration.
+              ipAllowList:
+                description: IPAllowList defines the IPAllowList middleware configuration.
                 properties:
                   sourceRange:
                     description: SourceRange defines the allowed IPs (or ranges of
diff --git a/docs/content/routing/providers/kubernetes-crd.md b/docs/content/routing/providers/kubernetes-crd.md
index 2fb474dda..f342fc87f 100644
--- a/docs/content/routing/providers/kubernetes-crd.md
+++ b/docs/content/routing/providers/kubernetes-crd.md
@@ -1287,9 +1287,9 @@ Register the `MiddlewareTCP` [kind](../../reference/dynamic-configuration/kubern
     apiVersion: traefik.containo.us/v1alpha1
     kind: MiddlewareTCP
     metadata:
-      name: ipwhitelist
+      name: ipallowlist
     spec:
-      ipWhiteList:
+      ipAllowList:
         sourceRange:
           - 127.0.0.1/32
           - 192.168.1.7
@@ -1305,13 +1305,13 @@ Register the `MiddlewareTCP` [kind](../../reference/dynamic-configuration/kubern
       entryPoints:
         - web
       routes:
-      - match: Host(`example.com`) && PathPrefix(`/whitelist`)
+      - match: Host(`example.com`) && PathPrefix(`/allowlist`)
         kind: Rule
         services:
         - name: whoami
           port: 80
         middlewares:
-        - name: ipwhitelist
+        - name: ipallowlist
           namespace: foo
     ```
 
diff --git a/docs/content/routing/routers/index.md b/docs/content/routing/routers/index.md
index 446857266..00bd82375 100644
--- a/docs/content/routing/routers/index.md
+++ b/docs/content/routing/routers/index.md
@@ -986,7 +986,7 @@ The middlewares will take effect only if the rule matches, and before connecting
       [tcp.routers.my-router]
         rule = "HostSNI(`*`)"
         # declared elsewhere
-        middlewares = ["ipwhitelist"]
+        middlewares = ["ipallowlist"]
         service = "service-foo"
     ```
 
@@ -998,7 +998,7 @@ The middlewares will take effect only if the rule matches, and before connecting
           rule: "HostSNI(`*`)"
           # declared elsewhere
           middlewares:
-          - ipwhitelist
+          - ipallowlist
           service: service-foo
     ```
 
diff --git a/docs/mkdocs.yml b/docs/mkdocs.yml
index 549fa367c..2fb3d20be 100644
--- a/docs/mkdocs.yml
+++ b/docs/mkdocs.yml
@@ -126,7 +126,7 @@ nav:
         - 'Errors': 'middlewares/http/errorpages.md'
         - 'ForwardAuth': 'middlewares/http/forwardauth.md'
         - 'Headers': 'middlewares/http/headers.md'
-        - 'IpWhitelist': 'middlewares/http/ipwhitelist.md'
+        - 'IpAllowList': 'middlewares/http/ipallowlist.md'
         - 'InFlightReq': 'middlewares/http/inflightreq.md'
         - 'PassTLSClientCert': 'middlewares/http/passtlsclientcert.md'
         - 'RateLimit': 'middlewares/http/ratelimit.md'
@@ -140,7 +140,7 @@ nav:
     - 'TCP':
         - 'Overview': 'middlewares/tcp/overview.md'
         - 'InFlightConn': 'middlewares/tcp/inflightconn.md'
-        - 'IpWhitelist': 'middlewares/tcp/ipwhitelist.md'
+        - 'IpAllowList': 'middlewares/tcp/ipallowlist.md'
   - 'Traefik Hub': 'traefik-hub/index.md'
   - 'Plugins & Plugin Catalog': 'plugins/index.md'
   - 'Operations':
@@ -177,6 +177,7 @@ nav:
           - 'HTTP Challenge': 'user-guides/docker-compose/acme-http/index.md'
           - 'DNS Challenge': 'user-guides/docker-compose/acme-dns/index.md'
   - 'Migration':
+      - 'Traefik v2 to v3': 'migration/v2-to-v3.md'
       - 'Traefik v2 minor migrations': 'migration/v2.md'
       - 'Traefik v1 to v2': 'migration/v1-to-v2.md'
   - 'Contributing':
diff --git a/integration/access_log_test.go b/integration/access_log_test.go
index 458a491f6..ac00e47a9 100644
--- a/integration/access_log_test.go
+++ b/integration/access_log_test.go
@@ -435,7 +435,7 @@ func (s *AccessLogSuite) TestAccessLogBackendNotFound(c *check.C) {
 	checkNoOtherTraefikProblems(c)
 }
 
-func (s *AccessLogSuite) TestAccessLogFrontendWhitelist(c *check.C) {
+func (s *AccessLogSuite) TestAccessLogFrontendAllowlist(c *check.C) {
 	ensureWorkingDirectoryIsClean()
 
 	expected := []accessLogValue{
@@ -443,7 +443,7 @@ func (s *AccessLogSuite) TestAccessLogFrontendWhitelist(c *check.C) {
 			formatOnly: false,
 			code:       "403",
 			user:       "-",
-			routerName: "rt-frontendWhitelist",
+			routerName: "rt-frontendAllowlist",
 			serviceURL: "-",
 		},
 	}
@@ -458,7 +458,7 @@ func (s *AccessLogSuite) TestAccessLogFrontendWhitelist(c *check.C) {
 
 	checkStatsForLogFile(c)
 
-	waitForTraefik(c, "frontendWhitelist")
+	waitForTraefik(c, "frontendAllowlist")
 
 	// Verify Traefik started OK
 	checkTraefikStarted(c)
@@ -466,7 +466,7 @@ func (s *AccessLogSuite) TestAccessLogFrontendWhitelist(c *check.C) {
 	// Test rate limit
 	req, err := http.NewRequest(http.MethodGet, "http://127.0.0.1:8000/", nil)
 	c.Assert(err, checker.IsNil)
-	req.Host = "frontend.whitelist.docker.local"
+	req.Host = "frontend.allowlist.docker.local"
 
 	err = try.Request(req, 500*time.Millisecond, try.StatusCodeIs(http.StatusForbidden), try.HasBody())
 	c.Assert(err, checker.IsNil)
diff --git a/integration/fixtures/k8s/01-traefik-crd.yml b/integration/fixtures/k8s/01-traefik-crd.yml
index 391c23a2c..d54fa537d 100644
--- a/integration/fixtures/k8s/01-traefik-crd.yml
+++ b/integration/fixtures/k8s/01-traefik-crd.yml
@@ -1149,7 +1149,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
@@ -1174,14 +1174,14 @@ spec:
                         type: boolean
                     type: object
                 type: object
-              ipWhiteList:
-                description: 'IPWhiteList holds the IP whitelist middleware configuration.
+              ipAllowList:
+                description: 'IPAllowList holds the IP allowlist middleware configuration.
                   This middleware accepts / refuses requests based on the client IP.
-                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/'
+                  More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/'
                 properties:
                   ipStrategy:
                     description: 'IPStrategy holds the IP strategy configuration used
-                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                      by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                     properties:
                       depth:
                         description: Depth tells Traefik to use the X-Forwarded-For
@@ -1345,7 +1345,7 @@ spec:
                     properties:
                       ipStrategy:
                         description: 'IPStrategy holds the IP strategy configuration
-                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
+                          used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy'
                         properties:
                           depth:
                             description: Depth tells Traefik to use the X-Forwarded-For
@@ -1541,8 +1541,8 @@ spec:
                     format: int64
                     type: integer
                 type: object
-              ipWhiteList:
-                description: IPWhiteList defines the IPWhiteList middleware configuration.
+              ipAllowList:
+                description: IPAllowList defines the IPAllowList middleware configuration.
                 properties:
                   sourceRange:
                     description: SourceRange defines the allowed IPs (or ranges of
diff --git a/integration/fixtures/simple_whitelist.toml b/integration/fixtures/simple_allowlist.toml
similarity index 100%
rename from integration/fixtures/simple_whitelist.toml
rename to integration/fixtures/simple_allowlist.toml
diff --git a/integration/fixtures/tcp/ip-whitelist.toml b/integration/fixtures/tcp/ipallowlist.toml
similarity index 83%
rename from integration/fixtures/tcp/ip-whitelist.toml
rename to integration/fixtures/tcp/ipallowlist.toml
index 2718f0544..2ef8c13f4 100644
--- a/integration/fixtures/tcp/ip-whitelist.toml
+++ b/integration/fixtures/tcp/ipallowlist.toml
@@ -23,7 +23,7 @@
       entryPoints = ["tcp"]
       rule = "HostSNI(`whoami-a.test`)"
       service = "whoami-a"
-      middlewares = ["blocking-ipwhitelist"]
+      middlewares = ["blocking-ipallowlist"]
       [tcp.routers.to-whoami-a.tls]
         passthrough = true
 
@@ -31,7 +31,7 @@
       entryPoints = ["tcp"]
       rule = "HostSNI(`whoami-b.test`)"
       service = "whoami-b"
-      middlewares = ["allowing-ipwhitelist"]
+      middlewares = ["allowing-ipallowlist"]
       [tcp.routers.to-whoami-b.tls]
         passthrough = true
 
@@ -45,7 +45,7 @@
         address = "{{ .WhoamiB }}"
 
   [tcp.middlewares]
-    [tcp.middlewares.allowing-ipwhitelist.ipWhiteList]
+    [tcp.middlewares.allowing-ipallowlist.ipAllowList]
       sourceRange = ["127.0.0.1/32"]
-    [tcp.middlewares.blocking-ipwhitelist.ipWhiteList]
+    [tcp.middlewares.blocking-ipallowlist.ipAllowList]
       sourceRange = ["127.127.127.127/32"]
diff --git a/integration/resources/compose/access_log.yml b/integration/resources/compose/access_log.yml
index 91b1a0c48..4e0cdbc83 100644
--- a/integration/resources/compose/access_log.yml
+++ b/integration/resources/compose/access_log.yml
@@ -75,14 +75,14 @@ services:
       traefik.http.middlewares.rate.ratelimit.burst: 2
       traefik.http.services.service3.loadbalancer.server.port: 80
 
-  frontendWhitelist:
+  frontendAllowlist:
     image: traefik/whoami
     labels:
       traefik.enable: true
-      traefik.http.routers.rt-frontendWhitelist.entryPoints: web
-      traefik.http.routers.rt-frontendWhitelist.rule: Host(`frontend.whitelist.docker.local`)
-      traefik.http.routers.rt-frontendWhitelist.middlewares: wl
-      traefik.http.middlewares.wl.ipwhitelist.sourcerange: 8.8.8.8/32
+      traefik.http.routers.rt-frontendAllowlist.entryPoints: web
+      traefik.http.routers.rt-frontendAllowlist.rule: Host(`frontend.allowlist.docker.local`)
+      traefik.http.routers.rt-frontendAllowlist.middlewares: wl
+      traefik.http.middlewares.wl.ipallowlist.sourcerange: 8.8.8.8/32
       traefik.http.services.service3.loadbalancer.server.port: 80
 
 networks:
diff --git a/integration/resources/compose/allowlist.yml b/integration/resources/compose/allowlist.yml
new file mode 100644
index 000000000..e5f4e0b31
--- /dev/null
+++ b/integration/resources/compose/allowlist.yml
@@ -0,0 +1,41 @@
+version: "3.8"
+services:
+  noOverrideAllowlist:
+    image: traefik/whoami
+    labels:
+      traefik.enable: true
+      traefik.http.routers.rt1.rule: Host(`no.override.allowlist.docker.local`)
+      traefik.http.routers.rt1.middlewares: wl1
+      traefik.http.middlewares.wl1.ipallowList.sourceRange: 8.8.8.8
+
+  overrideIPStrategyRemoteAddrAllowlist:
+    image: traefik/whoami
+    labels:
+      traefik.enable: true
+      traefik.http.routers.rt2.rule: Host(`override.remoteaddr.allowlist.docker.local`)
+      traefik.http.routers.rt2.middlewares: wl2
+      traefik.http.middlewares.wl2.ipallowlist.sourceRange: 8.8.8.8
+      traefik.http.middlewares.wl2.ipallowlist.ipStrategy: true
+
+  overrideIPStrategyDepthAllowlist:
+    image: traefik/whoami
+    labels:
+      traefik.enable: true
+      traefik.http.routers.rt3.rule: Host(`override.depth.allowlist.docker.local`)
+      traefik.http.routers.rt3.middlewares: wl3
+      traefik.http.middlewares.wl3.ipallowlist.sourceRange: 8.8.8.8
+      traefik.http.middlewares.wl3.ipallowlist.ipStrategy.depth: 3
+
+  overrideIPStrategyExcludedIPsAllowlist:
+    image: traefik/whoami
+    labels:
+      traefik.enable: true
+      traefik.http.routers.rt4.rule: Host(`override.excludedips.allowlist.docker.local`)
+      traefik.http.routers.rt4.middlewares: wl4
+      traefik.http.middlewares.wl4.ipallowlist.sourceRange: 8.8.8.8
+      traefik.http.middlewares.wl4.ipallowlist.ipStrategy.excludedIPs: 10.0.0.1,10.0.0.2
+
+networks:
+  default:
+    name: traefik-test-network
+    external: true
diff --git a/integration/resources/compose/whitelist.yml b/integration/resources/compose/whitelist.yml
deleted file mode 100644
index dc120903d..000000000
--- a/integration/resources/compose/whitelist.yml
+++ /dev/null
@@ -1,41 +0,0 @@
-version: "3.8"
-services:
-  noOverrideWhitelist:
-    image: traefik/whoami
-    labels:
-      traefik.enable: true
-      traefik.http.routers.rt1.rule: Host(`no.override.whitelist.docker.local`)
-      traefik.http.routers.rt1.middlewares: wl1
-      traefik.http.middlewares.wl1.ipwhiteList.sourceRange: 8.8.8.8
-
-  overrideIPStrategyRemoteAddrWhitelist:
-    image: traefik/whoami
-    labels:
-      traefik.enable: true
-      traefik.http.routers.rt2.rule: Host(`override.remoteaddr.whitelist.docker.local`)
-      traefik.http.routers.rt2.middlewares: wl2
-      traefik.http.middlewares.wl2.ipwhitelist.sourceRange: 8.8.8.8
-      traefik.http.middlewares.wl2.ipwhitelist.ipStrategy: true
-
-  overrideIPStrategyDepthWhitelist:
-    image: traefik/whoami
-    labels:
-      traefik.enable: true
-      traefik.http.routers.rt3.rule: Host(`override.depth.whitelist.docker.local`)
-      traefik.http.routers.rt3.middlewares: wl3
-      traefik.http.middlewares.wl3.ipwhitelist.sourceRange: 8.8.8.8
-      traefik.http.middlewares.wl3.ipwhitelist.ipStrategy.depth: 3
-
-  overrideIPStrategyExcludedIPsWhitelist:
-    image: traefik/whoami
-    labels:
-      traefik.enable: true
-      traefik.http.routers.rt4.rule: Host(`override.excludedips.whitelist.docker.local`)
-      traefik.http.routers.rt4.middlewares: wl4
-      traefik.http.middlewares.wl4.ipwhitelist.sourceRange: 8.8.8.8
-      traefik.http.middlewares.wl4.ipwhitelist.ipStrategy.excludedIPs: 10.0.0.1,10.0.0.2
-
-networks:
-  default:
-    name: traefik-test-network
-    external: true
diff --git a/integration/simple_test.go b/integration/simple_test.go
index c939d8f0a..015fa9df6 100644
--- a/integration/simple_test.go
+++ b/integration/simple_test.go
@@ -397,13 +397,13 @@ func (s *SimpleSuite) TestMultipleProviderSameBackendName(c *check.C) {
 	c.Assert(err, checker.IsNil)
 }
 
-func (s *SimpleSuite) TestIPStrategyWhitelist(c *check.C) {
-	s.createComposeProject(c, "whitelist")
+func (s *SimpleSuite) TestIPStrategyAllowlist(c *check.C) {
+	s.createComposeProject(c, "allowlist")
 
 	s.composeUp(c)
 	defer s.composeDown(c)
 
-	cmd, output := s.traefikCmd(withConfigFile("fixtures/simple_whitelist.toml"))
+	cmd, output := s.traefikCmd(withConfigFile("fixtures/simple_allowlist.toml"))
 	defer output(c)
 
 	err := cmd.Start()
@@ -413,7 +413,7 @@ func (s *SimpleSuite) TestIPStrategyWhitelist(c *check.C) {
 	err = try.GetRequest("http://127.0.0.1:8080/api/rawdata", 2*time.Second, try.BodyContains("override"))
 	c.Assert(err, checker.IsNil)
 
-	err = try.GetRequest("http://127.0.0.1:8080/api/rawdata", 2*time.Second, try.BodyContains("override.remoteaddr.whitelist.docker.local"))
+	err = try.GetRequest("http://127.0.0.1:8080/api/rawdata", 2*time.Second, try.BodyContains("override.remoteaddr.allowlist.docker.local"))
 	c.Assert(err, checker.IsNil)
 
 	testCases := []struct {
@@ -425,31 +425,31 @@ func (s *SimpleSuite) TestIPStrategyWhitelist(c *check.C) {
 		{
 			desc:               "override remote addr reject",
 			xForwardedFor:      "8.8.8.8,8.8.8.8",
-			host:               "override.remoteaddr.whitelist.docker.local",
+			host:               "override.remoteaddr.allowlist.docker.local",
 			expectedStatusCode: 403,
 		},
 		{
 			desc:               "override depth accept",
 			xForwardedFor:      "8.8.8.8,10.0.0.1,127.0.0.1",
-			host:               "override.depth.whitelist.docker.local",
+			host:               "override.depth.allowlist.docker.local",
 			expectedStatusCode: 200,
 		},
 		{
 			desc:               "override depth reject",
 			xForwardedFor:      "10.0.0.1,8.8.8.8,127.0.0.1",
-			host:               "override.depth.whitelist.docker.local",
+			host:               "override.depth.allowlist.docker.local",
 			expectedStatusCode: 403,
 		},
 		{
 			desc:               "override excludedIPs reject",
 			xForwardedFor:      "10.0.0.3,10.0.0.1,10.0.0.2",
-			host:               "override.excludedips.whitelist.docker.local",
+			host:               "override.excludedips.allowlist.docker.local",
 			expectedStatusCode: 403,
 		},
 		{
 			desc:               "override excludedIPs accept",
 			xForwardedFor:      "8.8.8.8,10.0.0.1,10.0.0.2",
-			host:               "override.excludedips.whitelist.docker.local",
+			host:               "override.excludedips.allowlist.docker.local",
 			expectedStatusCode: 200,
 		},
 	}
@@ -468,12 +468,12 @@ func (s *SimpleSuite) TestIPStrategyWhitelist(c *check.C) {
 }
 
 func (s *SimpleSuite) TestXForwardedHeaders(c *check.C) {
-	s.createComposeProject(c, "whitelist")
+	s.createComposeProject(c, "allowlist")
 
 	s.composeUp(c)
 	defer s.composeDown(c)
 
-	cmd, output := s.traefikCmd(withConfigFile("fixtures/simple_whitelist.toml"))
+	cmd, output := s.traefikCmd(withConfigFile("fixtures/simple_allowlist.toml"))
 	defer output(c)
 
 	err := cmd.Start()
@@ -481,13 +481,13 @@ func (s *SimpleSuite) TestXForwardedHeaders(c *check.C) {
 	defer s.killCmd(cmd)
 
 	err = try.GetRequest("http://127.0.0.1:8080/api/rawdata", 2*time.Second,
-		try.BodyContains("override.remoteaddr.whitelist.docker.local"))
+		try.BodyContains("override.remoteaddr.allowlist.docker.local"))
 	c.Assert(err, checker.IsNil)
 
 	req, err := http.NewRequest(http.MethodGet, "http://127.0.0.1:8000", nil)
 	c.Assert(err, checker.IsNil)
 
-	req.Host = "override.depth.whitelist.docker.local"
+	req.Host = "override.depth.allowlist.docker.local"
 	req.Header.Set("X-Forwarded-For", "8.8.8.8,10.0.0.1,127.0.0.1")
 
 	err = try.Request(req, 1*time.Second,
diff --git a/integration/tcp_test.go b/integration/tcp_test.go
index 52a3813c9..c4da20a27 100644
--- a/integration/tcp_test.go
+++ b/integration/tcp_test.go
@@ -241,8 +241,8 @@ func (s *TCPSuite) TestCatchAllNoTLSWithHTTPS(c *check.C) {
 	c.Assert(err, checker.IsNil)
 }
 
-func (s *TCPSuite) TestMiddlewareWhiteList(c *check.C) {
-	file := s.adaptFile(c, "fixtures/tcp/ip-whitelist.toml", struct {
+func (s *TCPSuite) TestMiddlewareAllowList(c *check.C) {
+	file := s.adaptFile(c, "fixtures/tcp/ipallowlist.toml", struct {
 		WhoamiA string
 		WhoamiB string
 	}{
@@ -261,7 +261,7 @@ func (s *TCPSuite) TestMiddlewareWhiteList(c *check.C) {
 	err = try.GetRequest("http://127.0.0.1:8080/api/rawdata", 5*time.Second, try.StatusCodeIs(http.StatusOK), try.BodyContains("HostSNI(`whoami-a.test`)"))
 	c.Assert(err, checker.IsNil)
 
-	// Traefik not passes through, ipWhitelist closes connection
+	// Traefik not passes through, ipAllowList closes connection
 	_, err = guessWhoTLSPassthrough("127.0.0.1:8093", "whoami-a.test")
 	c.Assert(err, checker.ErrorMatches, "EOF")
 
diff --git a/pkg/api/handler_overview_test.go b/pkg/api/handler_overview_test.go
index 8937c0204..b7f96c6b9 100644
--- a/pkg/api/handler_overview_test.go
+++ b/pkg/api/handler_overview_test.go
@@ -173,24 +173,24 @@ func TestHandler_Overview(t *testing.T) {
 					},
 				},
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist1@myprovider": {
+					"ipallowlist1@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						Status: runtime.StatusEnabled,
 					},
-					"ipwhitelist2@myprovider": {
+					"ipallowlist2@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 					},
-					"ipwhitelist3@myprovider": {
+					"ipallowlist3@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
diff --git a/pkg/api/handler_tcp_test.go b/pkg/api/handler_tcp_test.go
index 3e14921fb..18ac7708c 100644
--- a/pkg/api/handler_tcp_test.go
+++ b/pkg/api/handler_tcp_test.go
@@ -512,25 +512,25 @@ func TestHandler_TCP(t *testing.T) {
 			path: "/api/tcp/middlewares",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist1@myprovider": {
+					"ipallowlist1@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"bar@myprovider", "test@myprovider"},
 					},
-					"ipwhitelist2@myprovider": {
+					"ipallowlist2@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.2/32"},
 							},
 						},
 						UsedBy: []string{"test@myprovider"},
 					},
-					"ipwhitelist1@anotherprovider": {
+					"ipallowlist1@anotherprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -549,27 +549,27 @@ func TestHandler_TCP(t *testing.T) {
 			path: "/api/tcp/middlewares?status=enabled",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist@myprovider": {
+					"ipallowlist@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"bar@myprovider", "test@myprovider"},
 						Status: runtime.StatusEnabled,
 					},
-					"ipwhitelist2@myprovider": {
+					"ipallowlist2@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.2/32"},
 							},
 						},
 						UsedBy: []string{"test@myprovider"},
 						Status: runtime.StatusDisabled,
 					},
-					"ipwhitelist@anotherprovider": {
+					"ipallowlist@anotherprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -586,30 +586,30 @@ func TestHandler_TCP(t *testing.T) {
 		},
 		{
 			desc: "middlewares filtered by search",
-			path: "/api/tcp/middlewares?search=ipwhitelist",
+			path: "/api/tcp/middlewares?search=ipallowlist",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
 					"bad@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"bar@myprovider", "test@myprovider"},
 						Status: runtime.StatusEnabled,
 					},
-					"ipwhitelist@myprovider": {
+					"ipallowlist@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"test@myprovider"},
 						Status: runtime.StatusDisabled,
 					},
-					"ipwhitelist@anotherprovider": {
+					"ipallowlist@anotherprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -629,25 +629,25 @@ func TestHandler_TCP(t *testing.T) {
 			path: "/api/tcp/middlewares?page=2&per_page=1",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist@myprovider": {
+					"ipallowlist@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"bar@myprovider", "test@myprovider"},
 					},
-					"ipwhitelist2@myprovider": {
+					"ipallowlist2@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.2/32"},
 							},
 						},
 						UsedBy: []string{"test@myprovider"},
 					},
-					"ipwhitelist@anotherprovider": {
+					"ipallowlist@anotherprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -663,28 +663,28 @@ func TestHandler_TCP(t *testing.T) {
 		},
 		{
 			desc: "one middleware by id",
-			path: "/api/tcp/middlewares/ipwhitelist@myprovider",
+			path: "/api/tcp/middlewares/ipallowlist@myprovider",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist@myprovider": {
+					"ipallowlist@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
 						UsedBy: []string{"bar@myprovider", "test@myprovider"},
 					},
-					"ipwhitelist2@myprovider": {
+					"ipallowlist2@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.2/32"},
 							},
 						},
 						UsedBy: []string{"test@myprovider"},
 					},
-					"ipwhitelist@anotherprovider": {
+					"ipallowlist@anotherprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -694,7 +694,7 @@ func TestHandler_TCP(t *testing.T) {
 			},
 			expected: expected{
 				statusCode: http.StatusOK,
-				jsonFile:   "testdata/tcpmiddleware-ipwhitelist.json",
+				jsonFile:   "testdata/tcpmiddleware-ipallowlist.json",
 			},
 		},
 		{
@@ -702,9 +702,9 @@ func TestHandler_TCP(t *testing.T) {
 			path: "/api/tcp/middlewares/foo@myprovider",
 			conf: runtime.Configuration{
 				TCPMiddlewares: map[string]*runtime.TCPMiddlewareInfo{
-					"ipwhitelist@myprovider": {
+					"ipallowlist@myprovider": {
 						TCPMiddleware: &dynamic.TCPMiddleware{
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
diff --git a/pkg/api/testdata/tcpmiddleware-ipwhitelist.json b/pkg/api/testdata/tcpmiddleware-ipallowlist.json
similarity index 64%
rename from pkg/api/testdata/tcpmiddleware-ipwhitelist.json
rename to pkg/api/testdata/tcpmiddleware-ipallowlist.json
index 95f2540de..e3cf5ff72 100644
--- a/pkg/api/testdata/tcpmiddleware-ipwhitelist.json
+++ b/pkg/api/testdata/tcpmiddleware-ipallowlist.json
@@ -1,13 +1,13 @@
 {
-	"ipWhiteList": {
+	"ipAllowList": {
 		"sourceRange": ["127.0.0.1/32"]
 	},
-	"name": "ipwhitelist@myprovider",
+	"name": "ipallowlist@myprovider",
 	"provider": "myprovider",
 	"status": "enabled",
-	"type": "ipwhitelist",
+	"type": "ipallowlist",
 	"usedBy": [
 		"bar@myprovider",
 		"test@myprovider"
 	]
-}
\ No newline at end of file
+}
diff --git a/pkg/api/testdata/tcpmiddlewares-filtered-search.json b/pkg/api/testdata/tcpmiddlewares-filtered-search.json
index 5dc58379e..cd8ce0265 100644
--- a/pkg/api/testdata/tcpmiddlewares-filtered-search.json
+++ b/pkg/api/testdata/tcpmiddlewares-filtered-search.json
@@ -1,26 +1,26 @@
 [
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist@anotherprovider",
+		"name": "ipallowlist@anotherprovider",
 		"provider": "anotherprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider"
 		]
 	},
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist@myprovider",
+		"name": "ipallowlist@myprovider",
 		"provider": "myprovider",
 		"status": "disabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"test@myprovider"
 		]
 	}
-]
\ No newline at end of file
+]
diff --git a/pkg/api/testdata/tcpmiddlewares-filtered-status.json b/pkg/api/testdata/tcpmiddlewares-filtered-status.json
index 906679181..f9a0cf9ae 100644
--- a/pkg/api/testdata/tcpmiddlewares-filtered-status.json
+++ b/pkg/api/testdata/tcpmiddlewares-filtered-status.json
@@ -1,27 +1,27 @@
 [
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist@anotherprovider",
+		"name": "ipallowlist@anotherprovider",
 		"provider": "anotherprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider"
 		]
 	},
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist@myprovider",
+		"name": "ipallowlist@myprovider",
 		"provider": "myprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider",
 			"test@myprovider"
 		]
 	}
-]
\ No newline at end of file
+]
diff --git a/pkg/api/testdata/tcpmiddlewares-page2.json b/pkg/api/testdata/tcpmiddlewares-page2.json
index 76c516876..4195437e3 100644
--- a/pkg/api/testdata/tcpmiddlewares-page2.json
+++ b/pkg/api/testdata/tcpmiddlewares-page2.json
@@ -1,14 +1,14 @@
 [
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist@anotherprovider",
+		"name": "ipallowlist@anotherprovider",
 		"provider": "anotherprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider"
 		]
 	}
-]
\ No newline at end of file
+]
diff --git a/pkg/api/testdata/tcpmiddlewares.json b/pkg/api/testdata/tcpmiddlewares.json
index b1c0cdab1..381ffe658 100644
--- a/pkg/api/testdata/tcpmiddlewares.json
+++ b/pkg/api/testdata/tcpmiddlewares.json
@@ -1,39 +1,39 @@
 [
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist1@anotherprovider",
+		"name": "ipallowlist1@anotherprovider",
 		"provider": "anotherprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider"
 		]
 	},
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.1/32"]
 		},
-		"name": "ipwhitelist1@myprovider",
+		"name": "ipallowlist1@myprovider",
 		"provider": "myprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"bar@myprovider",
 			"test@myprovider"
 		]
 	},
 	{
-		"ipWhiteList": {
+		"ipAllowList": {
 			"sourceRange": ["127.0.0.2/32"]
 		},
-		"name": "ipwhitelist2@myprovider",
+		"name": "ipallowlist2@myprovider",
 		"provider": "myprovider",
 		"status": "enabled",
-		"type": "ipwhitelist",
+		"type": "ipallowlist",
 		"usedBy": [
 			"test@myprovider"
 		]
 	}
-]
\ No newline at end of file
+]
diff --git a/pkg/config/dynamic/fixtures/sample.toml b/pkg/config/dynamic/fixtures/sample.toml
index 11e586ea0..4e52c4d03 100644
--- a/pkg/config/dynamic/fixtures/sample.toml
+++ b/pkg/config/dynamic/fixtures/sample.toml
@@ -358,11 +358,11 @@
       [http.middlewares.Middleware5.chain]
         middlewares = ["foobar", "foobar"]
     [http.middlewares.Middleware6]
-      [http.middlewares.Middleware6.ipWhiteList]
+      [http.middlewares.Middleware6.ipAllowList]
         sourceRange = ["foobar", "foobar"]
     [http.middlewares.Middleware7]
-      [http.middlewares.Middleware7.ipWhiteList]
-        [http.middlewares.Middleware7.ipWhiteList.ipStrategy]
+      [http.middlewares.Middleware7.ipAllowList]
+        [http.middlewares.Middleware7.ipAllowList.ipStrategy]
           depth = 42
           excludedIPs = ["foobar", "foobar"]
     [http.middlewares.Middleware8]
diff --git a/pkg/config/dynamic/middlewares.go b/pkg/config/dynamic/middlewares.go
index 0d849c273..25eab40fa 100644
--- a/pkg/config/dynamic/middlewares.go
+++ b/pkg/config/dynamic/middlewares.go
@@ -18,7 +18,7 @@ type Middleware struct {
 	ReplacePath       *ReplacePath       `json:"replacePath,omitempty" toml:"replacePath,omitempty" yaml:"replacePath,omitempty" export:"true"`
 	ReplacePathRegex  *ReplacePathRegex  `json:"replacePathRegex,omitempty" toml:"replacePathRegex,omitempty" yaml:"replacePathRegex,omitempty" export:"true"`
 	Chain             *Chain             `json:"chain,omitempty" toml:"chain,omitempty" yaml:"chain,omitempty" export:"true"`
-	IPWhiteList       *IPWhiteList       `json:"ipWhiteList,omitempty" toml:"ipWhiteList,omitempty" yaml:"ipWhiteList,omitempty" export:"true"`
+	IPAllowList       *IPAllowList       `json:"ipAllowList,omitempty" toml:"ipAllowList,omitempty" yaml:"ipAllowList,omitempty" export:"true"`
 	Headers           *Headers           `json:"headers,omitempty" toml:"headers,omitempty" yaml:"headers,omitempty" export:"true"`
 	Errors            *ErrorPage         `json:"errors,omitempty" toml:"errors,omitempty" yaml:"errors,omitempty" export:"true"`
 	RateLimit         *RateLimit         `json:"rateLimit,omitempty" toml:"rateLimit,omitempty" yaml:"rateLimit,omitempty" export:"true"`
@@ -346,7 +346,7 @@ func (h *Headers) HasSecureHeadersDefined() bool {
 // +k8s:deepcopy-gen=true
 
 // IPStrategy holds the IP strategy configuration used by Traefik to determine the client IP.
-// More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy
+// More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/#ipstrategy
 type IPStrategy struct {
 	// Depth tells Traefik to use the X-Forwarded-For header and take the IP located at the depth position (starting from the right).
 	Depth int `json:"depth,omitempty" toml:"depth,omitempty" yaml:"depth,omitempty" export:"true"`
@@ -385,10 +385,10 @@ func (s *IPStrategy) Get() (ip.Strategy, error) {
 
 // +k8s:deepcopy-gen=true
 
-// IPWhiteList holds the IP whitelist middleware configuration.
+// IPAllowList holds the IP allowlist middleware configuration.
 // This middleware accepts / refuses requests based on the client IP.
-// More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/
-type IPWhiteList struct {
+// More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipallowlist/
+type IPAllowList struct {
 	// SourceRange defines the set of allowed IPs (or ranges of allowed IPs by using CIDR notation).
 	SourceRange []string    `json:"sourceRange,omitempty" toml:"sourceRange,omitempty" yaml:"sourceRange,omitempty"`
 	IPStrategy  *IPStrategy `json:"ipStrategy,omitempty" toml:"ipStrategy,omitempty" yaml:"ipStrategy,omitempty"  label:"allowEmpty" file:"allowEmpty" kv:"allowEmpty" export:"true"`
diff --git a/pkg/config/dynamic/tcp_middlewares.go b/pkg/config/dynamic/tcp_middlewares.go
index 620db44b4..a9e191287 100644
--- a/pkg/config/dynamic/tcp_middlewares.go
+++ b/pkg/config/dynamic/tcp_middlewares.go
@@ -5,7 +5,7 @@ package dynamic
 // TCPMiddleware holds the TCPMiddleware configuration.
 type TCPMiddleware struct {
 	InFlightConn *TCPInFlightConn `json:"inFlightConn,omitempty" toml:"inFlightConn,omitempty" yaml:"inFlightConn,omitempty" export:"true"`
-	IPWhiteList  *TCPIPWhiteList  `json:"ipWhiteList,omitempty" toml:"ipWhiteList,omitempty" yaml:"ipWhiteList,omitempty" export:"true"`
+	IPAllowList  *TCPIPAllowList  `json:"ipAllowList,omitempty" toml:"ipAllowList,omitempty" yaml:"ipAllowList,omitempty" export:"true"`
 }
 
 // +k8s:deepcopy-gen=true
@@ -22,9 +22,9 @@ type TCPInFlightConn struct {
 
 // +k8s:deepcopy-gen=true
 
-// TCPIPWhiteList holds the TCP IPWhiteList middleware configuration.
+// TCPIPAllowList holds the TCP IPAllowList middleware configuration.
 // This middleware accepts/refuses connections based on the client IP.
-type TCPIPWhiteList struct {
+type TCPIPAllowList struct {
 	// SourceRange defines the allowed IPs (or ranges of allowed IPs by using CIDR notation).
 	SourceRange []string `json:"sourceRange,omitempty" toml:"sourceRange,omitempty" yaml:"sourceRange,omitempty"`
 }
diff --git a/pkg/config/dynamic/zz_generated.deepcopy.go b/pkg/config/dynamic/zz_generated.deepcopy.go
index adba5a4ee..241088ea0 100644
--- a/pkg/config/dynamic/zz_generated.deepcopy.go
+++ b/pkg/config/dynamic/zz_generated.deepcopy.go
@@ -532,6 +532,32 @@ func (in *HealthCheck) DeepCopy() *HealthCheck {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *IPAllowList) DeepCopyInto(out *IPAllowList) {
+	*out = *in
+	if in.SourceRange != nil {
+		in, out := &in.SourceRange, &out.SourceRange
+		*out = make([]string, len(*in))
+		copy(*out, *in)
+	}
+	if in.IPStrategy != nil {
+		in, out := &in.IPStrategy, &out.IPStrategy
+		*out = new(IPStrategy)
+		(*in).DeepCopyInto(*out)
+	}
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPAllowList.
+func (in *IPAllowList) DeepCopy() *IPAllowList {
+	if in == nil {
+		return nil
+	}
+	out := new(IPAllowList)
+	in.DeepCopyInto(out)
+	return out
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *IPStrategy) DeepCopyInto(out *IPStrategy) {
 	*out = *in
@@ -553,32 +579,6 @@ func (in *IPStrategy) DeepCopy() *IPStrategy {
 	return out
 }
 
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *IPWhiteList) DeepCopyInto(out *IPWhiteList) {
-	*out = *in
-	if in.SourceRange != nil {
-		in, out := &in.SourceRange, &out.SourceRange
-		*out = make([]string, len(*in))
-		copy(*out, *in)
-	}
-	if in.IPStrategy != nil {
-		in, out := &in.IPStrategy, &out.IPStrategy
-		*out = new(IPStrategy)
-		(*in).DeepCopyInto(*out)
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPWhiteList.
-func (in *IPWhiteList) DeepCopy() *IPWhiteList {
-	if in == nil {
-		return nil
-	}
-	out := new(IPWhiteList)
-	in.DeepCopyInto(out)
-	return out
-}
-
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *InFlightReq) DeepCopyInto(out *InFlightReq) {
 	*out = *in
@@ -654,9 +654,9 @@ func (in *Middleware) DeepCopyInto(out *Middleware) {
 		*out = new(Chain)
 		(*in).DeepCopyInto(*out)
 	}
-	if in.IPWhiteList != nil {
-		in, out := &in.IPWhiteList, &out.IPWhiteList
-		*out = new(IPWhiteList)
+	if in.IPAllowList != nil {
+		in, out := &in.IPAllowList, &out.IPAllowList
+		*out = new(IPAllowList)
 		(*in).DeepCopyInto(*out)
 	}
 	if in.Headers != nil {
@@ -1382,7 +1382,7 @@ func (in *TCPConfiguration) DeepCopy() *TCPConfiguration {
 }
 
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *TCPIPWhiteList) DeepCopyInto(out *TCPIPWhiteList) {
+func (in *TCPIPAllowList) DeepCopyInto(out *TCPIPAllowList) {
 	*out = *in
 	if in.SourceRange != nil {
 		in, out := &in.SourceRange, &out.SourceRange
@@ -1392,12 +1392,12 @@ func (in *TCPIPWhiteList) DeepCopyInto(out *TCPIPWhiteList) {
 	return
 }
 
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TCPIPWhiteList.
-func (in *TCPIPWhiteList) DeepCopy() *TCPIPWhiteList {
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TCPIPAllowList.
+func (in *TCPIPAllowList) DeepCopy() *TCPIPAllowList {
 	if in == nil {
 		return nil
 	}
-	out := new(TCPIPWhiteList)
+	out := new(TCPIPAllowList)
 	in.DeepCopyInto(out)
 	return out
 }
@@ -1426,9 +1426,9 @@ func (in *TCPMiddleware) DeepCopyInto(out *TCPMiddleware) {
 		*out = new(TCPInFlightConn)
 		**out = **in
 	}
-	if in.IPWhiteList != nil {
-		in, out := &in.IPWhiteList, &out.IPWhiteList
-		*out = new(TCPIPWhiteList)
+	if in.IPAllowList != nil {
+		in, out := &in.IPAllowList, &out.IPAllowList
+		*out = new(TCPIPAllowList)
 		(*in).DeepCopyInto(*out)
 	}
 	return
diff --git a/pkg/config/label/label_test.go b/pkg/config/label/label_test.go
index d9b40ffb8..e3bb4e609 100644
--- a/pkg/config/label/label_test.go
+++ b/pkg/config/label/label_test.go
@@ -82,9 +82,9 @@ func TestDecodeConfiguration(t *testing.T) {
 		"traefik.http.middlewares.Middleware8.headers.stsincludesubdomains":                        "true",
 		"traefik.http.middlewares.Middleware8.headers.stspreload":                                  "true",
 		"traefik.http.middlewares.Middleware8.headers.stsseconds":                                  "42",
-		"traefik.http.middlewares.Middleware9.ipwhitelist.ipstrategy.depth":                        "42",
-		"traefik.http.middlewares.Middleware9.ipwhitelist.ipstrategy.excludedips":                  "foobar, fiibar",
-		"traefik.http.middlewares.Middleware9.ipwhitelist.sourcerange":                             "foobar, fiibar",
+		"traefik.http.middlewares.Middleware9.ipallowlist.ipstrategy.depth":                        "42",
+		"traefik.http.middlewares.Middleware9.ipallowlist.ipstrategy.excludedips":                  "foobar, fiibar",
+		"traefik.http.middlewares.Middleware9.ipallowlist.sourcerange":                             "foobar, fiibar",
 		"traefik.http.middlewares.Middleware10.inflightreq.amount":                                 "42",
 		"traefik.http.middlewares.Middleware10.inflightreq.sourcecriterion.ipstrategy.depth":       "42",
 		"traefik.http.middlewares.Middleware10.inflightreq.sourcecriterion.ipstrategy.excludedips": "foobar, fiibar",
@@ -180,7 +180,7 @@ func TestDecodeConfiguration(t *testing.T) {
 		"traefik.http.services.Service1.loadbalancer.sticky":                           "false",
 		"traefik.http.services.Service1.loadbalancer.sticky.cookie.name":               "fui",
 
-		"traefik.tcp.middlewares.Middleware0.ipwhitelist.sourcerange":      "foobar, fiibar",
+		"traefik.tcp.middlewares.Middleware0.ipallowlist.sourcerange":      "foobar, fiibar",
 		"traefik.tcp.middlewares.Middleware2.inflightconn.amount":          "42",
 		"traefik.tcp.routers.Router0.rule":                                 "foobar",
 		"traefik.tcp.routers.Router0.priority":                             "42",
@@ -244,7 +244,7 @@ func TestDecodeConfiguration(t *testing.T) {
 			},
 			Middlewares: map[string]*dynamic.TCPMiddleware{
 				"Middleware0": {
-					IPWhiteList: &dynamic.TCPIPWhiteList{
+					IPAllowList: &dynamic.TCPIPAllowList{
 						SourceRange: []string{"foobar", "fiibar"},
 					},
 				},
@@ -611,7 +611,7 @@ func TestDecodeConfiguration(t *testing.T) {
 					},
 				},
 				"Middleware9": {
-					IPWhiteList: &dynamic.IPWhiteList{
+					IPAllowList: &dynamic.IPAllowList{
 						SourceRange: []string{
 							"foobar",
 							"fiibar",
@@ -741,7 +741,7 @@ func TestEncodeConfiguration(t *testing.T) {
 			},
 			Middlewares: map[string]*dynamic.TCPMiddleware{
 				"Middleware0": {
-					IPWhiteList: &dynamic.TCPIPWhiteList{
+					IPAllowList: &dynamic.TCPIPAllowList{
 						SourceRange: []string{"foobar", "fiibar"},
 					},
 				},
@@ -1113,7 +1113,7 @@ func TestEncodeConfiguration(t *testing.T) {
 					},
 				},
 				"Middleware9": {
-					IPWhiteList: &dynamic.IPWhiteList{
+					IPAllowList: &dynamic.IPAllowList{
 						SourceRange: []string{
 							"foobar",
 							"fiibar",
@@ -1265,9 +1265,9 @@ func TestEncodeConfiguration(t *testing.T) {
 		"traefik.HTTP.Middlewares.Middleware8.Headers.STSIncludeSubdomains":                        "true",
 		"traefik.HTTP.Middlewares.Middleware8.Headers.STSPreload":                                  "true",
 		"traefik.HTTP.Middlewares.Middleware8.Headers.STSSeconds":                                  "42",
-		"traefik.HTTP.Middlewares.Middleware9.IPWhiteList.IPStrategy.Depth":                        "42",
-		"traefik.HTTP.Middlewares.Middleware9.IPWhiteList.IPStrategy.ExcludedIPs":                  "foobar, fiibar",
-		"traefik.HTTP.Middlewares.Middleware9.IPWhiteList.SourceRange":                             "foobar, fiibar",
+		"traefik.HTTP.Middlewares.Middleware9.IPAllowList.IPStrategy.Depth":                        "42",
+		"traefik.HTTP.Middlewares.Middleware9.IPAllowList.IPStrategy.ExcludedIPs":                  "foobar, fiibar",
+		"traefik.HTTP.Middlewares.Middleware9.IPAllowList.SourceRange":                             "foobar, fiibar",
 		"traefik.HTTP.Middlewares.Middleware10.InFlightReq.Amount":                                 "42",
 		"traefik.HTTP.Middlewares.Middleware10.InFlightReq.SourceCriterion.IPStrategy.Depth":       "42",
 		"traefik.HTTP.Middlewares.Middleware10.InFlightReq.SourceCriterion.IPStrategy.ExcludedIPs": "foobar, fiibar",
@@ -1360,7 +1360,7 @@ func TestEncodeConfiguration(t *testing.T) {
 		"traefik.HTTP.Services.Service1.LoadBalancer.server.Scheme":                    "foobar",
 		"traefik.HTTP.Services.Service0.LoadBalancer.HealthCheck.Headers.name0":        "foobar",
 
-		"traefik.TCP.Middlewares.Middleware0.IPWhiteList.SourceRange": "foobar, fiibar",
+		"traefik.TCP.Middlewares.Middleware0.IPAllowList.SourceRange": "foobar, fiibar",
 		"traefik.TCP.Middlewares.Middleware2.InFlightConn.Amount":     "42",
 		"traefik.TCP.Routers.Router0.Rule":                            "foobar",
 		"traefik.TCP.Routers.Router0.Priority":                        "42",
diff --git a/pkg/ip/checker_test.go b/pkg/ip/checker_test.go
index da2f07861..69ab9c1da 100644
--- a/pkg/ip/checker_test.go
+++ b/pkg/ip/checker_test.go
@@ -11,25 +11,25 @@ import (
 func TestIsAuthorized(t *testing.T) {
 	testCases := []struct {
 		desc       string
-		whiteList  []string
+		allowList  []string
 		remoteAddr string
 		authorized bool
 	}{
 		{
 			desc:       "remoteAddr not in range",
-			whiteList:  []string{"1.2.3.4/24"},
+			allowList:  []string{"1.2.3.4/24"},
 			remoteAddr: "10.2.3.1:123",
 			authorized: false,
 		},
 		{
 			desc:       "remoteAddr in range",
-			whiteList:  []string{"1.2.3.4/24"},
+			allowList:  []string{"1.2.3.4/24"},
 			remoteAddr: "1.2.3.1:123",
 			authorized: true,
 		},
 		{
 			desc:       "octal ip in remoteAddr",
-			whiteList:  []string{"127.2.3.4/24"},
+			allowList:  []string{"127.2.3.4/24"},
 			remoteAddr: "0127.2.3.1:123",
 			authorized: false,
 		},
@@ -40,7 +40,7 @@ func TestIsAuthorized(t *testing.T) {
 		t.Run(test.desc, func(t *testing.T) {
 			t.Parallel()
 
-			ipChecker, err := NewChecker(test.whiteList)
+			ipChecker, err := NewChecker(test.allowList)
 			require.NoError(t, err)
 
 			err = ipChecker.IsAuthorized(test.remoteAddr)
diff --git a/pkg/middlewares/ipwhitelist/ip_whitelist.go b/pkg/middlewares/ipallowlist/ip_allowlist.go
similarity index 59%
rename from pkg/middlewares/ipwhitelist/ip_whitelist.go
rename to pkg/middlewares/ipallowlist/ip_allowlist.go
index dde042b42..d700a9279 100644
--- a/pkg/middlewares/ipwhitelist/ip_whitelist.go
+++ b/pkg/middlewares/ipallowlist/ip_allowlist.go
@@ -1,4 +1,4 @@
-package ipwhitelist
+package ipallowlist
 
 import (
 	"context"
@@ -15,29 +15,29 @@ import (
 )
 
 const (
-	typeName = "IPWhiteLister"
+	typeName = "IPAllowLister"
 )
 
-// ipWhiteLister is a middleware that provides Checks of the Requesting IP against a set of Whitelists.
-type ipWhiteLister struct {
+// ipAllowLister is a middleware that provides Checks of the Requesting IP against a set of Allowlists.
+type ipAllowLister struct {
 	next        http.Handler
-	whiteLister *ip.Checker
+	allowLister *ip.Checker
 	strategy    ip.Strategy
 	name        string
 }
 
-// New builds a new IPWhiteLister given a list of CIDR-Strings to whitelist.
-func New(ctx context.Context, next http.Handler, config dynamic.IPWhiteList, name string) (http.Handler, error) {
+// New builds a new IPAllowLister given a list of CIDR-Strings to allow.
+func New(ctx context.Context, next http.Handler, config dynamic.IPAllowList, name string) (http.Handler, error) {
 	logger := log.FromContext(middlewares.GetLoggerCtx(ctx, name, typeName))
 	logger.Debug("Creating middleware")
 
 	if len(config.SourceRange) == 0 {
-		return nil, errors.New("sourceRange is empty, IPWhiteLister not created")
+		return nil, errors.New("sourceRange is empty, IPAllowLister not created")
 	}
 
 	checker, err := ip.NewChecker(config.SourceRange)
 	if err != nil {
-		return nil, fmt.Errorf("cannot parse CIDR whitelist %s: %w", config.SourceRange, err)
+		return nil, fmt.Errorf("cannot parse CIDRs %s: %w", config.SourceRange, err)
 	}
 
 	strategy, err := config.IPStrategy.Get()
@@ -45,26 +45,26 @@ func New(ctx context.Context, next http.Handler, config dynamic.IPWhiteList, nam
 		return nil, err
 	}
 
-	logger.Debugf("Setting up IPWhiteLister with sourceRange: %s", config.SourceRange)
+	logger.Debugf("Setting up IPAllowLister with sourceRange: %s", config.SourceRange)
 
-	return &ipWhiteLister{
+	return &ipAllowLister{
 		strategy:    strategy,
-		whiteLister: checker,
+		allowLister: checker,
 		next:        next,
 		name:        name,
 	}, nil
 }
 
-func (wl *ipWhiteLister) GetTracingInformation() (string, ext.SpanKindEnum) {
-	return wl.name, tracing.SpanKindNoneEnum
+func (al *ipAllowLister) GetTracingInformation() (string, ext.SpanKindEnum) {
+	return al.name, tracing.SpanKindNoneEnum
 }
 
-func (wl *ipWhiteLister) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
-	ctx := middlewares.GetLoggerCtx(req.Context(), wl.name, typeName)
+func (al *ipAllowLister) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
+	ctx := middlewares.GetLoggerCtx(req.Context(), al.name, typeName)
 	logger := log.FromContext(ctx)
 
-	clientIP := wl.strategy.GetIP(req)
-	err := wl.whiteLister.IsAuthorized(clientIP)
+	clientIP := al.strategy.GetIP(req)
+	err := al.allowLister.IsAuthorized(clientIP)
 	if err != nil {
 		msg := fmt.Sprintf("Rejecting IP %s: %v", clientIP, err)
 		logger.Debug(msg)
@@ -74,7 +74,7 @@ func (wl *ipWhiteLister) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
 	}
 	logger.Debugf("Accepting IP %s", clientIP)
 
-	wl.next.ServeHTTP(rw, req)
+	al.next.ServeHTTP(rw, req)
 }
 
 func reject(ctx context.Context, rw http.ResponseWriter) {
diff --git a/pkg/middlewares/ipwhitelist/ip_whitelist_test.go b/pkg/middlewares/ipallowlist/ip_allowlist_test.go
similarity index 73%
rename from pkg/middlewares/ipwhitelist/ip_whitelist_test.go
rename to pkg/middlewares/ipallowlist/ip_allowlist_test.go
index 2fabbfae7..df2e49835 100644
--- a/pkg/middlewares/ipwhitelist/ip_whitelist_test.go
+++ b/pkg/middlewares/ipallowlist/ip_allowlist_test.go
@@ -1,4 +1,4 @@
-package ipwhitelist
+package ipallowlist
 
 import (
 	"context"
@@ -11,22 +11,22 @@ import (
 	"github.com/traefik/traefik/v2/pkg/config/dynamic"
 )
 
-func TestNewIPWhiteLister(t *testing.T) {
+func TestNewIPAllowLister(t *testing.T) {
 	testCases := []struct {
 		desc          string
-		whiteList     dynamic.IPWhiteList
+		allowList     dynamic.IPAllowList
 		expectedError bool
 	}{
 		{
 			desc: "invalid IP",
-			whiteList: dynamic.IPWhiteList{
+			allowList: dynamic.IPAllowList{
 				SourceRange: []string{"foo"},
 			},
 			expectedError: true,
 		},
 		{
 			desc: "valid IP",
-			whiteList: dynamic.IPWhiteList{
+			allowList: dynamic.IPAllowList{
 				SourceRange: []string{"10.10.10.10"},
 			},
 		},
@@ -38,28 +38,28 @@ func TestNewIPWhiteLister(t *testing.T) {
 			t.Parallel()
 
 			next := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {})
-			whiteLister, err := New(context.Background(), next, test.whiteList, "traefikTest")
+			allowLister, err := New(context.Background(), next, test.allowList, "traefikTest")
 
 			if test.expectedError {
 				assert.Error(t, err)
 			} else {
 				require.NoError(t, err)
-				assert.NotNil(t, whiteLister)
+				assert.NotNil(t, allowLister)
 			}
 		})
 	}
 }
 
-func TestIPWhiteLister_ServeHTTP(t *testing.T) {
+func TestIPAllowLister_ServeHTTP(t *testing.T) {
 	testCases := []struct {
 		desc       string
-		whiteList  dynamic.IPWhiteList
+		allowList  dynamic.IPAllowList
 		remoteAddr string
 		expected   int
 	}{
 		{
 			desc: "authorized with remote address",
-			whiteList: dynamic.IPWhiteList{
+			allowList: dynamic.IPAllowList{
 				SourceRange: []string{"20.20.20.20"},
 			},
 			remoteAddr: "20.20.20.20:1234",
@@ -67,7 +67,7 @@ func TestIPWhiteLister_ServeHTTP(t *testing.T) {
 		},
 		{
 			desc: "non authorized with remote address",
-			whiteList: dynamic.IPWhiteList{
+			allowList: dynamic.IPAllowList{
 				SourceRange: []string{"20.20.20.20"},
 			},
 			remoteAddr: "20.20.20.21:1234",
@@ -81,7 +81,7 @@ func TestIPWhiteLister_ServeHTTP(t *testing.T) {
 			t.Parallel()
 
 			next := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {})
-			whiteLister, err := New(context.Background(), next, test.whiteList, "traefikTest")
+			allowLister, err := New(context.Background(), next, test.allowList, "traefikTest")
 			require.NoError(t, err)
 
 			recorder := httptest.NewRecorder()
@@ -92,7 +92,7 @@ func TestIPWhiteLister_ServeHTTP(t *testing.T) {
 				req.RemoteAddr = test.remoteAddr
 			}
 
-			whiteLister.ServeHTTP(recorder, req)
+			allowLister.ServeHTTP(recorder, req)
 
 			assert.Equal(t, test.expected, recorder.Code)
 		})
diff --git a/pkg/middlewares/tcp/ipwhitelist/ip_whitelist.go b/pkg/middlewares/tcp/ipallowlist/ip_allowlist.go
similarity index 54%
rename from pkg/middlewares/tcp/ipwhitelist/ip_whitelist.go
rename to pkg/middlewares/tcp/ipallowlist/ip_allowlist.go
index 755972e70..7e8dafdc4 100644
--- a/pkg/middlewares/tcp/ipwhitelist/ip_whitelist.go
+++ b/pkg/middlewares/tcp/ipallowlist/ip_allowlist.go
@@ -1,4 +1,4 @@
-package tcpipwhitelist
+package tcpipallowlist
 
 import (
 	"context"
@@ -13,46 +13,46 @@ import (
 )
 
 const (
-	typeName = "IPWhiteListerTCP"
+	typeName = "IPAllowListerTCP"
 )
 
-// ipWhiteLister is a middleware that provides Checks of the Requesting IP against a set of Whitelists.
-type ipWhiteLister struct {
+// ipAllowLister is a middleware that provides Checks of the Requesting IP against a set of Allowlists.
+type ipAllowLister struct {
 	next        tcp.Handler
-	whiteLister *ip.Checker
+	allowLister *ip.Checker
 	name        string
 }
 
-// New builds a new TCP IPWhiteLister given a list of CIDR-Strings to whitelist.
-func New(ctx context.Context, next tcp.Handler, config dynamic.TCPIPWhiteList, name string) (tcp.Handler, error) {
+// New builds a new TCP IPAllowLister given a list of CIDR-Strings to allow.
+func New(ctx context.Context, next tcp.Handler, config dynamic.TCPIPAllowList, name string) (tcp.Handler, error) {
 	logger := log.FromContext(middlewares.GetLoggerCtx(ctx, name, typeName))
 	logger.Debug("Creating middleware")
 
 	if len(config.SourceRange) == 0 {
-		return nil, errors.New("sourceRange is empty, IPWhiteLister not created")
+		return nil, errors.New("sourceRange is empty, IPAllowLister not created")
 	}
 
 	checker, err := ip.NewChecker(config.SourceRange)
 	if err != nil {
-		return nil, fmt.Errorf("cannot parse CIDR whitelist %s: %w", config.SourceRange, err)
+		return nil, fmt.Errorf("cannot parse CIDRs %s: %w", config.SourceRange, err)
 	}
 
-	logger.Debugf("Setting up IPWhiteLister with sourceRange: %s", config.SourceRange)
+	logger.Debugf("Setting up IPAllowLister with sourceRange: %s", config.SourceRange)
 
-	return &ipWhiteLister{
-		whiteLister: checker,
+	return &ipAllowLister{
+		allowLister: checker,
 		next:        next,
 		name:        name,
 	}, nil
 }
 
-func (wl *ipWhiteLister) ServeTCP(conn tcp.WriteCloser) {
-	ctx := middlewares.GetLoggerCtx(context.Background(), wl.name, typeName)
+func (al *ipAllowLister) ServeTCP(conn tcp.WriteCloser) {
+	ctx := middlewares.GetLoggerCtx(context.Background(), al.name, typeName)
 	logger := log.FromContext(ctx)
 
 	addr := conn.RemoteAddr().String()
 
-	err := wl.whiteLister.IsAuthorized(addr)
+	err := al.allowLister.IsAuthorized(addr)
 	if err != nil {
 		logger.Errorf("Connection from %s rejected: %v", addr, err)
 		conn.Close()
@@ -61,5 +61,5 @@ func (wl *ipWhiteLister) ServeTCP(conn tcp.WriteCloser) {
 
 	logger.Debugf("Connection from %s accepted", addr)
 
-	wl.next.ServeTCP(conn)
+	al.next.ServeTCP(conn)
 }
diff --git a/pkg/middlewares/tcp/ipwhitelist/ip_whitelist_test.go b/pkg/middlewares/tcp/ipallowlist/ip_allowlist_test.go
similarity index 76%
rename from pkg/middlewares/tcp/ipwhitelist/ip_whitelist_test.go
rename to pkg/middlewares/tcp/ipallowlist/ip_allowlist_test.go
index 67780dfb6..75bef050d 100644
--- a/pkg/middlewares/tcp/ipwhitelist/ip_whitelist_test.go
+++ b/pkg/middlewares/tcp/ipallowlist/ip_allowlist_test.go
@@ -1,4 +1,4 @@
-package tcpipwhitelist
+package tcpipallowlist
 
 import (
 	"context"
@@ -12,27 +12,27 @@ import (
 	"github.com/traefik/traefik/v2/pkg/tcp"
 )
 
-func TestNewIPWhiteLister(t *testing.T) {
+func TestNewIPAllowLister(t *testing.T) {
 	testCases := []struct {
 		desc          string
-		whiteList     dynamic.TCPIPWhiteList
+		allowList     dynamic.TCPIPAllowList
 		expectedError bool
 	}{
 		{
 			desc:          "Empty config",
-			whiteList:     dynamic.TCPIPWhiteList{},
+			allowList:     dynamic.TCPIPAllowList{},
 			expectedError: true,
 		},
 		{
 			desc: "invalid IP",
-			whiteList: dynamic.TCPIPWhiteList{
+			allowList: dynamic.TCPIPAllowList{
 				SourceRange: []string{"foo"},
 			},
 			expectedError: true,
 		},
 		{
 			desc: "valid IP",
-			whiteList: dynamic.TCPIPWhiteList{
+			allowList: dynamic.TCPIPAllowList{
 				SourceRange: []string{"10.10.10.10"},
 			},
 		},
@@ -44,28 +44,28 @@ func TestNewIPWhiteLister(t *testing.T) {
 			t.Parallel()
 
 			next := tcp.HandlerFunc(func(conn tcp.WriteCloser) {})
-			whiteLister, err := New(context.Background(), next, test.whiteList, "traefikTest")
+			allowLister, err := New(context.Background(), next, test.allowList, "traefikTest")
 
 			if test.expectedError {
 				assert.Error(t, err)
 			} else {
 				require.NoError(t, err)
-				assert.NotNil(t, whiteLister)
+				assert.NotNil(t, allowLister)
 			}
 		})
 	}
 }
 
-func TestIPWhiteLister_ServeHTTP(t *testing.T) {
+func TestIPAllowLister_ServeHTTP(t *testing.T) {
 	testCases := []struct {
 		desc       string
-		whiteList  dynamic.TCPIPWhiteList
+		allowList  dynamic.TCPIPAllowList
 		remoteAddr string
 		expected   string
 	}{
 		{
 			desc: "authorized with remote address",
-			whiteList: dynamic.TCPIPWhiteList{
+			allowList: dynamic.TCPIPAllowList{
 				SourceRange: []string{"20.20.20.20"},
 			},
 			remoteAddr: "20.20.20.20:1234",
@@ -73,7 +73,7 @@ func TestIPWhiteLister_ServeHTTP(t *testing.T) {
 		},
 		{
 			desc: "non authorized with remote address",
-			whiteList: dynamic.TCPIPWhiteList{
+			allowList: dynamic.TCPIPAllowList{
 				SourceRange: []string{"20.20.20.20"},
 			},
 			remoteAddr: "20.20.20.21:1234",
@@ -94,13 +94,13 @@ func TestIPWhiteLister_ServeHTTP(t *testing.T) {
 				require.NoError(t, err)
 			})
 
-			whiteLister, err := New(context.Background(), next, test.whiteList, "traefikTest")
+			allowLister, err := New(context.Background(), next, test.allowList, "traefikTest")
 			require.NoError(t, err)
 
 			server, client := net.Pipe()
 
 			go func() {
-				whiteLister.ServeTCP(&contextWriteCloser{client, addr{test.remoteAddr}})
+				allowLister.ServeTCP(&contextWriteCloser{client, addr{test.remoteAddr}})
 			}()
 
 			read, err := io.ReadAll(server)
diff --git a/pkg/provider/consulcatalog/config_test.go b/pkg/provider/consulcatalog/config_test.go
index 3d54b5436..bb4653782 100644
--- a/pkg/provider/consulcatalog/config_test.go
+++ b/pkg/provider/consulcatalog/config_test.go
@@ -2022,7 +2022,7 @@ func Test_buildConfiguration(t *testing.T) {
 					Name: "Test",
 					Labels: map[string]string{
 						"traefik.tcp.routers.Test.rule":                               "HostSNI(`foo.bar`)",
-						"traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange": "foobar, fiibar",
+						"traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange": "foobar, fiibar",
 						"traefik.tcp.routers.Test.middlewares":                        "Middleware1",
 					},
 					Address: "127.0.0.1",
@@ -2041,7 +2041,7 @@ func Test_buildConfiguration(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/provider/docker/config_test.go b/pkg/provider/docker/config_test.go
index ed8b58b7c..d5a9dca8c 100644
--- a/pkg/provider/docker/config_test.go
+++ b/pkg/provider/docker/config_test.go
@@ -2611,7 +2611,7 @@ func Test_buildConfiguration(t *testing.T) {
 					Name:        "Test",
 					Labels: map[string]string{
 						"traefik.tcp.routers.Test.rule":                               "HostSNI(`foo.bar`)",
-						"traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange": "foobar, fiibar",
+						"traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange": "foobar, fiibar",
 						"traefik.tcp.routers.Test.middlewares":                        "Middleware1",
 					},
 					NetworkSettings: networkSettings{
@@ -2638,7 +2638,7 @@ func Test_buildConfiguration(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/provider/ecs/config_test.go b/pkg/provider/ecs/config_test.go
index a34a53766..3ab9c477d 100644
--- a/pkg/provider/ecs/config_test.go
+++ b/pkg/provider/ecs/config_test.go
@@ -2333,7 +2333,7 @@ func Test_buildConfiguration(t *testing.T) {
 					name("Test"),
 					labels(map[string]string{
 						"traefik.tcp.routers.Test.rule":                               "HostSNI(`foo.bar`)",
-						"traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange": "foobar, fiibar",
+						"traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange": "foobar, fiibar",
 						"traefik.tcp.routers.Test.middlewares":                        "Middleware1",
 					}),
 					iMachine(
@@ -2356,7 +2356,7 @@ func Test_buildConfiguration(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware.yml b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware.yml
index b36e821b2..19f83bd76 100644
--- a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware.yml
+++ b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware.yml
@@ -1,10 +1,10 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: default
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 
@@ -12,10 +12,10 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: foo
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 ---
@@ -36,6 +36,6 @@ spec:
           port: 8000
 
       middlewares:
-        - name: ipwhitelist
-        - name: ipwhitelist
+        - name: ipallowlist
+        - name: ipallowlist
           namespace: foo
diff --git a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_crossprovider.yml b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_crossprovider.yml
index b672e56e9..731d8aaba 100644
--- a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_crossprovider.yml
+++ b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_crossprovider.yml
@@ -1,10 +1,10 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: default
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 
@@ -12,10 +12,10 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: foo
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 ---
@@ -36,9 +36,9 @@ spec:
           port: 8000
 
       middlewares:
-        - name: ipwhitelist
-        - name: ipwhitelist
+        - name: ipallowlist
+        - name: ipallowlist
           namespace: foo
-        - name: ipwhitelist@file
-        - name: ipwhitelist-foo@file
+        - name: ipallowlist@file
+        - name: ipallowlist-foo@file
           namespace: foo
diff --git a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_multiple_hyphens.yml b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_multiple_hyphens.yml
index dc66091c2..ba7aed1c0 100644
--- a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_multiple_hyphens.yml
+++ b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_multiple_hyphens.yml
@@ -4,7 +4,7 @@ metadata:
   name: multiple---hyphens
   namespace: default
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 
diff --git a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_with_cross_namespace.yml b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_with_cross_namespace.yml
index af8dd075d..8b631fc98 100644
--- a/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_with_cross_namespace.yml
+++ b/pkg/provider/kubernetes/crd/fixtures/tcp/with_middleware_with_cross_namespace.yml
@@ -1,10 +1,10 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: default
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 
@@ -12,10 +12,10 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: MiddlewareTCP
 metadata:
-  name: ipwhitelist
+  name: ipallowlist
   namespace: cross-ns
 spec:
-  ipWhiteList:
+  ipAllowList:
     sourceRange:
       - 127.0.0.1/32
 ---
@@ -36,7 +36,7 @@ spec:
           port: 8000
 
       middlewares:
-        - name: ipwhitelist
+        - name: ipallowlist
 
     - match: HostSNI(`bar.com`)
       services:
@@ -44,5 +44,5 @@ spec:
           port: 8000
 
       middlewares:
-        - name: ipwhitelist
+        - name: ipallowlist
           namespace: cross-ns
diff --git a/pkg/provider/kubernetes/crd/kubernetes.go b/pkg/provider/kubernetes/crd/kubernetes.go
index ff6c6b588..bc0368179 100644
--- a/pkg/provider/kubernetes/crd/kubernetes.go
+++ b/pkg/provider/kubernetes/crd/kubernetes.go
@@ -263,7 +263,7 @@ func (p *Provider) loadConfigurationFromCRD(ctx context.Context, client Client)
 			ReplacePath:       middleware.Spec.ReplacePath,
 			ReplacePathRegex:  middleware.Spec.ReplacePathRegex,
 			Chain:             createChainMiddleware(ctxMid, middleware.Namespace, middleware.Spec.Chain),
-			IPWhiteList:       middleware.Spec.IPWhiteList,
+			IPAllowList:       middleware.Spec.IPAllowList,
 			Headers:           middleware.Spec.Headers,
 			Errors:            errorPage,
 			RateLimit:         rateLimit,
@@ -288,7 +288,7 @@ func (p *Provider) loadConfigurationFromCRD(ctx context.Context, client Client)
 
 		conf.TCP.Middlewares[id] = &dynamic.TCPMiddleware{
 			InFlightConn: middlewareTCP.Spec.InFlightConn,
-			IPWhiteList:  middlewareTCP.Spec.IPWhiteList,
+			IPAllowList:  middlewareTCP.Spec.IPAllowList,
 		}
 	}
 
diff --git a/pkg/provider/kubernetes/crd/kubernetes_test.go b/pkg/provider/kubernetes/crd/kubernetes_test.go
index 60c079406..1189364e5 100644
--- a/pkg/provider/kubernetes/crd/kubernetes_test.go
+++ b/pkg/provider/kubernetes/crd/kubernetes_test.go
@@ -119,18 +119,18 @@ func TestLoadIngressRouteTCPs(t *testing.T) {
 						"default-test.route-fdd3e9338e47a45efefc": {
 							EntryPoints: []string{"foo"},
 							Service:     "default-test.route-fdd3e9338e47a45efefc",
-							Middlewares: []string{"default-ipwhitelist", "foo-ipwhitelist"},
+							Middlewares: []string{"default-ipallowlist", "foo-ipallowlist"},
 							Rule:        "HostSNI(`foo.com`)",
 						},
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
-						"default-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"default-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
-						"foo-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"foo-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -178,7 +178,7 @@ func TestLoadIngressRouteTCPs(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"default-multiple-hyphens": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -220,18 +220,18 @@ func TestLoadIngressRouteTCPs(t *testing.T) {
 						"default-test.route-fdd3e9338e47a45efefc": {
 							EntryPoints: []string{"foo"},
 							Service:     "default-test.route-fdd3e9338e47a45efefc",
-							Middlewares: []string{"default-ipwhitelist", "foo-ipwhitelist", "ipwhitelist@file", "ipwhitelist-foo@file"},
+							Middlewares: []string{"default-ipallowlist", "foo-ipallowlist", "ipallowlist@file", "ipallowlist-foo@file"},
 							Rule:        "HostSNI(`foo.com`)",
 						},
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
-						"default-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"default-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
-						"foo-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"foo-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -5459,18 +5459,18 @@ func TestCrossNamespace(t *testing.T) {
 						"default-test.route-fdd3e9338e47a45efefc": {
 							EntryPoints: []string{"foo"},
 							Service:     "default-test.route-fdd3e9338e47a45efefc",
-							Middlewares: []string{"default-ipwhitelist"},
+							Middlewares: []string{"default-ipallowlist"},
 							Rule:        "HostSNI(`foo.com`)",
 						},
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
-						"default-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"default-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
-						"cross-ns-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"cross-ns-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
@@ -5513,24 +5513,24 @@ func TestCrossNamespace(t *testing.T) {
 						"default-test.route-fdd3e9338e47a45efefc": {
 							EntryPoints: []string{"foo"},
 							Service:     "default-test.route-fdd3e9338e47a45efefc",
-							Middlewares: []string{"default-ipwhitelist"},
+							Middlewares: []string{"default-ipallowlist"},
 							Rule:        "HostSNI(`foo.com`)",
 						},
 						"default-test.route-f44ce589164e656d231c": {
 							EntryPoints: []string{"foo"},
 							Service:     "default-test.route-f44ce589164e656d231c",
-							Middlewares: []string{"cross-ns-ipwhitelist"},
+							Middlewares: []string{"cross-ns-ipallowlist"},
 							Rule:        "HostSNI(`bar.com`)",
 						},
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
-						"default-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"default-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
-						"cross-ns-ipwhitelist": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+						"cross-ns-ipallowlist": {
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"127.0.0.1/32"},
 							},
 						},
diff --git a/pkg/provider/kubernetes/crd/traefik/v1alpha1/middleware.go b/pkg/provider/kubernetes/crd/traefik/v1alpha1/middleware.go
index b53f5905f..5483b2bdd 100644
--- a/pkg/provider/kubernetes/crd/traefik/v1alpha1/middleware.go
+++ b/pkg/provider/kubernetes/crd/traefik/v1alpha1/middleware.go
@@ -32,7 +32,7 @@ type MiddlewareSpec struct {
 	ReplacePath       *dynamic.ReplacePath       `json:"replacePath,omitempty"`
 	ReplacePathRegex  *dynamic.ReplacePathRegex  `json:"replacePathRegex,omitempty"`
 	Chain             *Chain                     `json:"chain,omitempty"`
-	IPWhiteList       *dynamic.IPWhiteList       `json:"ipWhiteList,omitempty"`
+	IPAllowList       *dynamic.IPAllowList       `json:"ipAllowList,omitempty"`
 	Headers           *dynamic.Headers           `json:"headers,omitempty"`
 	Errors            *ErrorPage                 `json:"errors,omitempty"`
 	RateLimit         *RateLimit                 `json:"rateLimit,omitempty"`
diff --git a/pkg/provider/kubernetes/crd/traefik/v1alpha1/middlewaretcp.go b/pkg/provider/kubernetes/crd/traefik/v1alpha1/middlewaretcp.go
index 28fc85d8f..2845b5357 100644
--- a/pkg/provider/kubernetes/crd/traefik/v1alpha1/middlewaretcp.go
+++ b/pkg/provider/kubernetes/crd/traefik/v1alpha1/middlewaretcp.go
@@ -25,8 +25,8 @@ type MiddlewareTCP struct {
 type MiddlewareTCPSpec struct {
 	// InFlightConn defines the InFlightConn middleware configuration.
 	InFlightConn *dynamic.TCPInFlightConn `json:"inFlightConn,omitempty"`
-	// IPWhiteList defines the IPWhiteList middleware configuration.
-	IPWhiteList *dynamic.TCPIPWhiteList `json:"ipWhiteList,omitempty"`
+	// IPAllowList defines the IPAllowList middleware configuration.
+	IPAllowList *dynamic.TCPIPAllowList `json:"ipAllowList,omitempty"`
 }
 
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
diff --git a/pkg/provider/kubernetes/crd/traefik/v1alpha1/zz_generated.deepcopy.go b/pkg/provider/kubernetes/crd/traefik/v1alpha1/zz_generated.deepcopy.go
index 5dbd71621..46d3510cd 100644
--- a/pkg/provider/kubernetes/crd/traefik/v1alpha1/zz_generated.deepcopy.go
+++ b/pkg/provider/kubernetes/crd/traefik/v1alpha1/zz_generated.deepcopy.go
@@ -689,9 +689,9 @@ func (in *MiddlewareSpec) DeepCopyInto(out *MiddlewareSpec) {
 		*out = new(Chain)
 		(*in).DeepCopyInto(*out)
 	}
-	if in.IPWhiteList != nil {
-		in, out := &in.IPWhiteList, &out.IPWhiteList
-		*out = new(dynamic.IPWhiteList)
+	if in.IPAllowList != nil {
+		in, out := &in.IPAllowList, &out.IPAllowList
+		*out = new(dynamic.IPAllowList)
 		(*in).DeepCopyInto(*out)
 	}
 	if in.Headers != nil {
@@ -857,9 +857,9 @@ func (in *MiddlewareTCPSpec) DeepCopyInto(out *MiddlewareTCPSpec) {
 		*out = new(dynamic.TCPInFlightConn)
 		**out = **in
 	}
-	if in.IPWhiteList != nil {
-		in, out := &in.IPWhiteList, &out.IPWhiteList
-		*out = new(dynamic.TCPIPWhiteList)
+	if in.IPAllowList != nil {
+		in, out := &in.IPAllowList, &out.IPAllowList
+		*out = new(dynamic.TCPIPAllowList)
 		(*in).DeepCopyInto(*out)
 	}
 	return
diff --git a/pkg/provider/kv/kv_test.go b/pkg/provider/kv/kv_test.go
index 83cea3ad9..8fbff4cd8 100644
--- a/pkg/provider/kv/kv_test.go
+++ b/pkg/provider/kv/kv_test.go
@@ -140,11 +140,11 @@ func Test_buildConfiguration(t *testing.T) {
 		"traefik/http/middlewares/Middleware09/headers/customRequestHeaders/name0":                   "foobar",
 		"traefik/http/middlewares/Middleware09/headers/customRequestHeaders/name1":                   "foobar",
 		"traefik/http/middlewares/Middleware09/headers/browserXssFilter":                             "true",
-		"traefik/http/middlewares/Middleware10/ipWhiteList/sourceRange/0":                            "foobar",
-		"traefik/http/middlewares/Middleware10/ipWhiteList/sourceRange/1":                            "foobar",
-		"traefik/http/middlewares/Middleware10/ipWhiteList/ipStrategy/excludedIPs/0":                 "foobar",
-		"traefik/http/middlewares/Middleware10/ipWhiteList/ipStrategy/excludedIPs/1":                 "foobar",
-		"traefik/http/middlewares/Middleware10/ipWhiteList/ipStrategy/depth":                         "42",
+		"traefik/http/middlewares/Middleware10/ipAllowList/sourceRange/0":                            "foobar",
+		"traefik/http/middlewares/Middleware10/ipAllowList/sourceRange/1":                            "foobar",
+		"traefik/http/middlewares/Middleware10/ipAllowList/ipStrategy/excludedIPs/0":                 "foobar",
+		"traefik/http/middlewares/Middleware10/ipAllowList/ipStrategy/excludedIPs/1":                 "foobar",
+		"traefik/http/middlewares/Middleware10/ipAllowList/ipStrategy/depth":                         "42",
 		"traefik/http/middlewares/Middleware11/inFlightReq/amount":                                   "42",
 		"traefik/http/middlewares/Middleware11/inFlightReq/sourceCriterion/requestHost":              "true",
 		"traefik/http/middlewares/Middleware11/inFlightReq/sourceCriterion/ipStrategy/depth":         "42",
@@ -340,7 +340,7 @@ func Test_buildConfiguration(t *testing.T) {
 			},
 			Middlewares: map[string]*dynamic.Middleware{
 				"Middleware10": {
-					IPWhiteList: &dynamic.IPWhiteList{
+					IPAllowList: &dynamic.IPAllowList{
 						SourceRange: []string{
 							"foobar",
 							"foobar",
diff --git a/pkg/provider/marathon/config_test.go b/pkg/provider/marathon/config_test.go
index f49559ab9..038eae0b6 100644
--- a/pkg/provider/marathon/config_test.go
+++ b/pkg/provider/marathon/config_test.go
@@ -196,14 +196,14 @@ func TestBuildConfiguration(t *testing.T) {
 			},
 		},
 		{
-			desc: "TCP with IP whitelist",
+			desc: "TCP with IP allowlist",
 			applications: withApplications(
 				application(
 					appID("/app"),
 					appPorts(80),
 
 					withLabel("traefik.tcp.routers.Test.rule", "HostSNI(`foo.bar`)"),
-					withLabel("traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange", "foobar, fiibar"),
+					withLabel("traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange", "foobar, fiibar"),
 					withLabel("traefik.tcp.routers.Test.middlewares", "Middleware1"),
 					withTasks(localhostTask(taskPorts(80))),
 				)),
@@ -218,7 +218,7 @@ func TestBuildConfiguration(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/provider/nomad/config_test.go b/pkg/provider/nomad/config_test.go
index 9d0aa21b8..653a5d28c 100644
--- a/pkg/provider/nomad/config_test.go
+++ b/pkg/provider/nomad/config_test.go
@@ -1621,7 +1621,7 @@ func Test_buildConfig(t *testing.T) {
 					Name: "Test",
 					Tags: []string{
 						"traefik.tcp.routers.Test.rule = HostSNI(`foo.bar`)",
-						"traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange = foobar, fiibar",
+						"traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange = foobar, fiibar",
 						"traefik.tcp.routers.Test.middlewares = Middleware1",
 					},
 					Address:   "127.0.0.1",
@@ -1640,7 +1640,7 @@ func Test_buildConfig(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/provider/rancher/config_test.go b/pkg/provider/rancher/config_test.go
index 2f94c559e..29f47a51f 100644
--- a/pkg/provider/rancher/config_test.go
+++ b/pkg/provider/rancher/config_test.go
@@ -508,7 +508,7 @@ func Test_buildConfiguration(t *testing.T) {
 					Name: "Test",
 					Labels: map[string]string{
 						"traefik.tcp.routers.Test.rule":                               "HostSNI(`foo.bar`)",
-						"traefik.tcp.middlewares.Middleware1.ipwhitelist.sourcerange": "foobar, fiibar",
+						"traefik.tcp.middlewares.Middleware1.ipallowlist.sourcerange": "foobar, fiibar",
 						"traefik.tcp.routers.Test.middlewares":                        "Middleware1",
 					},
 					Port:       "80/tcp",
@@ -528,7 +528,7 @@ func Test_buildConfiguration(t *testing.T) {
 					},
 					Middlewares: map[string]*dynamic.TCPMiddleware{
 						"Middleware1": {
-							IPWhiteList: &dynamic.TCPIPWhiteList{
+							IPAllowList: &dynamic.TCPIPAllowList{
 								SourceRange: []string{"foobar", "fiibar"},
 							},
 						},
diff --git a/pkg/redactor/redactor_config_test.go b/pkg/redactor/redactor_config_test.go
index a3f7504aa..fddc3f455 100644
--- a/pkg/redactor/redactor_config_test.go
+++ b/pkg/redactor/redactor_config_test.go
@@ -191,7 +191,7 @@ func init() {
 				Chain: &dynamic.Chain{
 					Middlewares: []string{"foo"},
 				},
-				IPWhiteList: &dynamic.IPWhiteList{
+				IPAllowList: &dynamic.IPAllowList{
 					SourceRange: []string{"foo"},
 					IPStrategy: &dynamic.IPStrategy{
 						Depth:       42,
diff --git a/pkg/redactor/testdata/anonymized-dynamic-config.json b/pkg/redactor/testdata/anonymized-dynamic-config.json
index 8339f58c3..6a76c9921 100644
--- a/pkg/redactor/testdata/anonymized-dynamic-config.json
+++ b/pkg/redactor/testdata/anonymized-dynamic-config.json
@@ -119,7 +119,7 @@
             "foo"
           ]
         },
-        "ipWhiteList": {
+        "ipAllowList": {
           "sourceRange": [
             "xxxx"
           ],
@@ -475,4 +475,4 @@
       }
     }
   }
-}
\ No newline at end of file
+}
diff --git a/pkg/redactor/testdata/secured-dynamic-config.json b/pkg/redactor/testdata/secured-dynamic-config.json
index 352421884..996876708 100644
--- a/pkg/redactor/testdata/secured-dynamic-config.json
+++ b/pkg/redactor/testdata/secured-dynamic-config.json
@@ -119,7 +119,7 @@
             "foo"
           ]
         },
-        "ipWhiteList": {
+        "ipAllowList": {
           "sourceRange": [
             "foo"
           ],
@@ -483,4 +483,4 @@
       }
     }
   }
-}
\ No newline at end of file
+}
diff --git a/pkg/server/middleware/middlewares.go b/pkg/server/middleware/middlewares.go
index 741c9a4f0..de1571005 100644
--- a/pkg/server/middleware/middlewares.go
+++ b/pkg/server/middleware/middlewares.go
@@ -19,7 +19,7 @@ import (
 	"github.com/traefik/traefik/v2/pkg/middlewares/customerrors"
 	"github.com/traefik/traefik/v2/pkg/middlewares/headers"
 	"github.com/traefik/traefik/v2/pkg/middlewares/inflightreq"
-	"github.com/traefik/traefik/v2/pkg/middlewares/ipwhitelist"
+	"github.com/traefik/traefik/v2/pkg/middlewares/ipallowlist"
 	"github.com/traefik/traefik/v2/pkg/middlewares/passtlsclientcert"
 	"github.com/traefik/traefik/v2/pkg/middlewares/ratelimiter"
 	"github.com/traefik/traefik/v2/pkg/middlewares/redirect"
@@ -229,13 +229,13 @@ func (b *Builder) buildConstructor(ctx context.Context, middlewareName string) (
 		}
 	}
 
-	// IPWhiteList
-	if config.IPWhiteList != nil {
+	// IPAllowList
+	if config.IPAllowList != nil {
 		if middleware != nil {
 			return nil, badConf
 		}
 		middleware = func(next http.Handler) (http.Handler, error) {
-			return ipwhitelist.New(ctx, next, *config.IPWhiteList, middlewareName)
+			return ipallowlist.New(ctx, next, *config.IPAllowList, middlewareName)
 		}
 	}
 
diff --git a/pkg/server/middleware/tcp/middlewares.go b/pkg/server/middleware/tcp/middlewares.go
index 7e1ad1e17..739ed3b5b 100644
--- a/pkg/server/middleware/tcp/middlewares.go
+++ b/pkg/server/middleware/tcp/middlewares.go
@@ -7,7 +7,7 @@ import (
 
 	"github.com/traefik/traefik/v2/pkg/config/runtime"
 	inflightconn "github.com/traefik/traefik/v2/pkg/middlewares/tcp/inflightconn"
-	ipwhitelist "github.com/traefik/traefik/v2/pkg/middlewares/tcp/ipwhitelist"
+	ipallowlist "github.com/traefik/traefik/v2/pkg/middlewares/tcp/ipallowlist"
 	"github.com/traefik/traefik/v2/pkg/server/provider"
 	"github.com/traefik/traefik/v2/pkg/tcp"
 )
@@ -94,10 +94,10 @@ func (b *Builder) buildConstructor(ctx context.Context, middlewareName string) (
 		}
 	}
 
-	// IPWhiteList
-	if config.IPWhiteList != nil {
+	// IPAllowList
+	if config.IPAllowList != nil {
 		middleware = func(next tcp.Handler) (tcp.Handler, error) {
-			return ipwhitelist.New(ctx, next, *config.IPWhiteList, middlewareName)
+			return ipallowlist.New(ctx, next, *config.IPAllowList, middlewareName)
 		}
 	}
 
diff --git a/webui/src/components/_commons/PanelMiddlewares.vue b/webui/src/components/_commons/PanelMiddlewares.vue
index ef0a56e0d..9c94cdfcd 100644
--- a/webui/src/components/_commons/PanelMiddlewares.vue
+++ b/webui/src/components/_commons/PanelMiddlewares.vue
@@ -675,8 +675,8 @@
             </div>
           </q-card-section>
 
-          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipWhiteList] - sourceRange -->
-          <q-card-section v-if="middleware.ipWhiteList">
+          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipAllowList] - sourceRange -->
+          <q-card-section v-if="middleware.ipAllowList">
             <div class="row items-start no-wrap">
               <div class="col">
                 <div class="text-subtitle2">Source Range</div>
@@ -689,8 +689,8 @@
               </div>
             </div>
           </q-card-section>
-          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipWhiteList] - ipStrategy -->
-          <q-card-section v-if="middleware.ipWhiteList">
+          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipAllowList] - ipStrategy -->
+          <q-card-section v-if="middleware.ipAllowList">
             <div class="row items-start">
               <div class="col-12">
                 <div class="text-subtitle2">IP Strategy</div>
@@ -1076,8 +1076,8 @@
         </q-card-section>
 
         <q-card-section v-if="protocol === 'tcp'">
-          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipWhiteList] - sourceRange -->
-          <q-card-section v-if="middleware.ipWhiteList">
+          <!-- EXTRA FIELDS FROM MIDDLEWARES - [ipAllowList] - sourceRange -->
+          <q-card-section v-if="middleware.ipAllowList">
             <div class="row items-start no-wrap">
               <div class="col">
                 <div class="text-subtitle2">Source Range</div>