From e169ec2bce1ad4bc0b62961853811c59e212cfe3 Mon Sep 17 00:00:00 2001
From: ZhaoWei Xu <paldier@hotmail.com>
Date: Mon, 20 Jul 2020 09:06:11 +0800
Subject: [PATCH] Bumped revision to 5.1.1

---
 release/src-rt/Makefile                       |    2 +-
 release/src-rt/target.mak                     |    5 -
 release/src/router/httpd/dbapi.c              |   16 +
 release/src/router/httpd/dbapi.h              |    1 +
 release/src/router/httpd/web.c                |   18 +-
 release/src/router/rc/merlinr.c               |   24 +-
 release/src/router/rc/services.c              |   16 +-
 release/src/router/rc/watchdog.c              |    5 +-
 .../rom/webs_scripts/merlinr_webs_note.sh     |   72 +-
 release/src/router/smartdns/.clang-format     |   10 +
 .../.github/ISSUE_TEMPLATE/feature.md         |   20 +
 .../smartdns/.github/ISSUE_TEMPLATE/issue.md  |   29 +
 release/src/router/smartdns/.gitignore        |    4 +
 release/src/router/smartdns/LICENSE           |  155 +-
 release/src/router/smartdns/Makefile          |   47 +
 release/src/router/smartdns/ReadMe.md         | 1377 +++---
 release/src/router/smartdns/ReadMe_en.md      | 1370 +++---
 .../src/router/smartdns/doc/alipay_donate.jpg |  Bin 69292 -> 53406 bytes
 .../src/router/smartdns/etc/init.d/smartdns   |   14 +-
 .../smartdns/etc/smartdns/smartdns.conf       |   40 +-
 .../src/router/smartdns/package/build-pkg.sh  |   14 +-
 .../src/router/smartdns/package/linux/install |  249 +
 .../src/router/smartdns/package/linux/make.sh |   11 +-
 .../package/luci-compat/control/control       |    7 +
 .../package/luci-compat/control/postinst      |   21 +
 .../package/luci-compat/control/postinst-pkg  |    4 +
 .../package/luci-compat/control/prerm         |   20 +
 .../package/luci-compat/debian-binary         |    1 +
 .../files/etc/uci-defaults/50_luci-smartdns   |   26 +
 .../files/luci/controller/smartdns.lua        |   83 +
 .../files/luci/i18n/smartdns.zh-cn.po         |  299 ++
 .../luci/model/cbi/smartdns/smartdns.lua      |  342 ++
 .../luci/model/cbi/smartdns/upstream.lua      |  129 +
 .../luci-compat/files/luci/model/smartdns.lua |   31 +
 .../luci/view/smartdns/smartdns_status.htm    |   41 +
 .../smartdns/package/luci-compat/make.sh      |  135 +
 .../package/luci-compat/tool/po2lmo/Makefile  |   12 +
 .../luci-compat/tool/po2lmo/src/po2lmo.c      |  247 +
 .../tool/po2lmo/src/template_lmo.c            |  328 ++
 .../tool/po2lmo/src/template_lmo.h            |   92 +
 .../smartdns/package/luci/control/control     |    3 +-
 .../package/luci/control/postinst-pkg         |    4 -
 .../luci/files/luci/i18n/smartdns.zh-cn.po    |  593 +--
 .../share/luci/menu.d/luci-app-smartdns.json  |   12 +
 .../share/rpcd/acl.d/luci-app-smartdns.json   |   23 +
 .../resources/view/smartdns/smartdns.js       |  492 ++
 .../src/router/smartdns/package/luci/make.sh  |   10 +-
 .../router/smartdns/package/openwrt/Makefile  |   57 +-
 .../smartdns/package/openwrt/address.conf     |   32 +-
 .../package/openwrt/blacklist-ip.conf         |    6 +-
 .../smartdns/package/openwrt/custom.conf      |   26 +-
 .../package/openwrt/files/etc/init.d/smartdns |  373 +-
 .../smartdns/package/optware/S50smartdns      |   86 +-
 release/src/router/smartdns/src/Makefile      |   20 +-
 release/src/router/smartdns/src/dns.c         | 4021 +++++++++--------
 release/src/router/smartdns/src/dns.h         |   17 +-
 release/src/router/smartdns/src/dns_cache.c   |  838 ++--
 release/src/router/smartdns/src/dns_cache.h   |  176 +-
 release/src/router/smartdns/src/dns_client.c  |  330 +-
 release/src/router/smartdns/src/dns_client.h  |   10 +-
 release/src/router/smartdns/src/dns_conf.c    | 2872 ++++++------
 release/src/router/smartdns/src/dns_conf.h    |  502 +-
 release/src/router/smartdns/src/dns_server.c  |  337 +-
 release/src/router/smartdns/src/dns_server.h  |    3 +-
 release/src/router/smartdns/src/fast_ping.c   | 3394 +++++++-------
 release/src/router/smartdns/src/fast_ping.h   |  118 +-
 release/src/router/smartdns/src/http_parse.c  |  926 ++--
 release/src/router/smartdns/src/http_parse.h  |  174 +-
 release/src/router/smartdns/src/include/art.h |  502 +-
 .../src/router/smartdns/src/include/conf.h    |  283 +-
 .../src/router/smartdns/src/include/radix.h   |  324 +-
 .../src/router/smartdns/src/include/rbtree.h  |  610 +--
 .../router/smartdns/src/include/stringutil.h  |   84 +-
 release/src/router/smartdns/src/lib/art.c     | 2258 ++++-----
 release/src/router/smartdns/src/lib/conf.c    |  622 +--
 release/src/router/smartdns/src/lib/radix.c   | 1352 +++---
 release/src/router/smartdns/src/lib/rbtree.c  | 1048 ++---
 .../src/router/smartdns/src/lib/stringutil.c  |   32 +-
 release/src/router/smartdns/src/smartdns.c    |  899 ++--
 release/src/router/smartdns/src/util.c        |   67 +-
 release/src/router/smartdns/src/util.h        |   12 +-
 .../smartdns/systemd/smartdns.service.in      |   18 +
 release/src/router/softcenter/Makefile        |   35 +-
 release/src/router/softcenter/Softcenter.asp  |   18 +-
 .../router/softcenter/Softcenter_mount.asp    |  179 -
 release/src/router/softcenter/jffsinit.sh     |  112 +-
 release/src/router/softcenter/scCN.json       |    3 +-
 release/src/router/softcenter/scEN.json       |    5 +-
 release/src/router/softcenter/scTW.json       |    3 +-
 .../softcenter/ROG/res/softcenter.css         |   52 +-
 .../softcenter/ROG/webs/Main_Soft_center.asp  |  777 ----
 .../softcenter/ROG/webs/Main_Soft_setting.asp |  217 -
 .../softcenter/TUF/res/softcenter.css         |  108 -
 .../softcenter/TUF/webs/Main_Soft_center.asp  |  784 ----
 .../softcenter/TUF/webs/Main_Soft_setting.asp |  217 -
 .../router/softcenter/softcenter/automount.sh |   13 +
 .../softcenter/bin/softcenter-services.sh     |   30 +
 .../softcenter/bin/softcenter-unmount.sh      |   26 +
 .../softcenter/softcenter/bin/softcenter.sh   |   45 +-
 .../softcenter/softcenter/res/sc1CN.json      |   21 +
 .../softcenter/softcenter/res/sc1EN.json      |   21 +
 .../softcenter/softcenter/res/sc1TW.json      |   21 +
 .../softcenter/softcenter/res/softcenter.css  |   19 +
 .../softcenter/scripts/ks_app_install.sh      |  113 +-
 .../{ks_tar_intall.sh => ks_tar_install.sh}   |   16 +
 .../softcenter/webs/Main_Soft_center.asp      |  111 +-
 .../softcenter/webs/Main_Soft_setting.asp     |   32 +-
 107 files changed, 16546 insertions(+), 15315 deletions(-)
 mode change 100644 => 100755 release/src/router/rom/webs_scripts/merlinr_webs_note.sh
 create mode 100644 release/src/router/smartdns/.clang-format
 create mode 100644 release/src/router/smartdns/.github/ISSUE_TEMPLATE/feature.md
 create mode 100644 release/src/router/smartdns/.github/ISSUE_TEMPLATE/issue.md
 create mode 100644 release/src/router/smartdns/.gitignore
 create mode 100644 release/src/router/smartdns/Makefile
 create mode 100644 release/src/router/smartdns/package/linux/install
 create mode 100644 release/src/router/smartdns/package/luci-compat/control/control
 create mode 100644 release/src/router/smartdns/package/luci-compat/control/postinst
 create mode 100644 release/src/router/smartdns/package/luci-compat/control/postinst-pkg
 create mode 100644 release/src/router/smartdns/package/luci-compat/control/prerm
 create mode 100644 release/src/router/smartdns/package/luci-compat/debian-binary
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/etc/uci-defaults/50_luci-smartdns
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/controller/smartdns.lua
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/i18n/smartdns.zh-cn.po
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/smartdns.lua
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/upstream.lua
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/model/smartdns.lua
 create mode 100644 release/src/router/smartdns/package/luci-compat/files/luci/view/smartdns/smartdns_status.htm
 create mode 100644 release/src/router/smartdns/package/luci-compat/make.sh
 create mode 100644 release/src/router/smartdns/package/luci-compat/tool/po2lmo/Makefile
 create mode 100644 release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/po2lmo.c
 create mode 100644 release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.c
 create mode 100644 release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.h
 create mode 100644 release/src/router/smartdns/package/luci/files/root/usr/share/luci/menu.d/luci-app-smartdns.json
 create mode 100644 release/src/router/smartdns/package/luci/files/root/usr/share/rpcd/acl.d/luci-app-smartdns.json
 create mode 100644 release/src/router/smartdns/package/luci/files/root/www/luci-static/resources/view/smartdns/smartdns.js
 create mode 100644 release/src/router/smartdns/systemd/smartdns.service.in
 delete mode 100644 release/src/router/softcenter/Softcenter_mount.asp
 delete mode 100644 release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_center.asp
 delete mode 100644 release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_setting.asp
 delete mode 100644 release/src/router/softcenter/softcenter/TUF/res/softcenter.css
 delete mode 100644 release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_center.asp
 delete mode 100644 release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_setting.asp
 create mode 100644 release/src/router/softcenter/softcenter/automount.sh
 create mode 100644 release/src/router/softcenter/softcenter/bin/softcenter-services.sh
 create mode 100644 release/src/router/softcenter/softcenter/bin/softcenter-unmount.sh
 create mode 100644 release/src/router/softcenter/softcenter/res/sc1CN.json
 create mode 100644 release/src/router/softcenter/softcenter/res/sc1EN.json
 create mode 100644 release/src/router/softcenter/softcenter/res/sc1TW.json
 rename release/src/router/softcenter/softcenter/scripts/{ks_tar_intall.sh => ks_tar_install.sh} (87%)

diff --git a/release/src-rt/Makefile b/release/src-rt/Makefile
index 98d06ea3bf..50299fe374 100644
--- a/release/src-rt/Makefile
+++ b/release/src-rt/Makefile
@@ -70,7 +70,7 @@ export PATH := $(RELEASEDIR)/tools:$(SRCBASE)/ctools:$(PATH)
 #K3C/K3/SBRAC1900P/SBRAC3200P/R7000/R8000/R7900P/R8000P
 export MERLINR_NAME := RTACRH17
 export MERLINR_VER_MAJOR :=B
-export MERLINR_VER_MINOR :=5.1.0
+export MERLINR_VER_MINOR :=5.1.1
 export MERLINR_VER := $(MERLINR_VER_MAJOR)$(MERLINR_VER_MINOR)
 export MERLINRVER := $(MERLINR_NAME)_$(MERLINR_VER)
 ifeq ($(MERLINR_NAME),RTACRH17)
diff --git a/release/src-rt/target.mak b/release/src-rt/target.mak
index 44bf2443f7..0fca422e60 100644
--- a/release/src-rt/target.mak
+++ b/release/src-rt/target.mak
@@ -398,11 +398,6 @@ export VZW-AC1300 := IPV6SUPP=y HTTPS=y SSH=y QCA=y IPQ40XX=y PARENTAL2=y OPENVP
 	ATF=y QCA_TW_AUTO_BAND4=y STAINFO=y HIVE_LIB=y HIVE_BIN=y \
 	WIFICLONE=y QCA_VAP_LOCALMAC=y PSISTLOG=y LYRA_HIDE=y CSU2_2=y DUAL_BACKHAUL=n ETHBACKHAUL=n VZW_DMC=y
 
-export RT-ACRH17 := IPV6SUPP=y HTTPS=y SSH=y QCA=y IPQ40XX=y BBEXTRAS=y USBEXTRAS=y SAMBA3=y MEDIASRV=y PARENTAL2=y OPENVPN=y VPNC=y EMAIL=y YANDEXDNS=y ACCEL_PPTPD=y PRINTER=y USB="USB" APP="network" EBTABLES=y AUTODICT=y  LANWAN_LED=y BUILD_NAME="RT-AC82U" RTAC82U=y SHP=y NVRAM_64K=y TUNEK="n" OPTIMIZE_XBOX=y ODMPID=y BOOT_FLASH_TYPE=NAND MDNS=y FINDASUS=y XHCI=y ATEUSB3_FORCE=y EXT4FS=y TEMPROOTFS=y NTFS="tuxera" TFAT=y HFS="tuxera" DUMP_OOPS_MSG=y DEBUGFS=y \
-	REBOOT_SCHEDULE=y NOIPTV=y \
-	DISK_MONITOR=y UBI=y UBIFS=y PSISTLOG=y WPSMULTIBAND=y BLINK_LED=y LAN4WAN_LED=y WANRED_LED=y BTN_WPS_ALLLED=y \
-	NEW_USER_LOW_RSSI=y REDIRECT_DNAME=y ATF=y QCA_TW_AUTO_BAND4=y STAINFO=y NEWSSID_REV2=y LAN50=y NEW_APP_ARM=y SW_HW_AUTH=y NATNL_AIHOME=y UTF8_SSID=y SOFTCENTER=y SMARTDNS=y FRS_LIVE_UPDATE=y UUPLUGIN=y
-
 ############################################################################
 # Qualcomm Atheros little-endian ARM platform, linux-3.4.x
 # SOC: IPQ8064
diff --git a/release/src/router/httpd/dbapi.c b/release/src/router/httpd/dbapi.c
index 3475910940..6b680e39ea 100644
--- a/release/src/router/httpd/dbapi.c
+++ b/release/src/router/httpd/dbapi.c
@@ -141,6 +141,22 @@ int dbclient_start(dbclient* client) {
     return 0;
 }
 
+int dbclient_rm(dbclient* client, const char* key, int nk) {
+    int n1,n2;
+
+    if(nk < 0) {
+        return -1;
+    }
+
+    n1 = nk + 2 + 6;
+    check_buf(client, n1 + HEADER_PREFIX);
+    n2 = snprintf(client->buf, client->buf_max, "%s%07d remove %s\n", MAGIC, n1, key);
+    client->buf[n2] = '\0';
+    write(client->remote_fd, client->buf, n2);
+
+    return 0;
+}
+
 int dbclient_bulk(dbclient* client, const char* command, const char* key, int nk, const char* value, int nv) {
     int n1,n2,nc;
 
diff --git a/release/src/router/httpd/dbapi.h b/release/src/router/httpd/dbapi.h
index c15819dc76..e1afe9b99c 100644
--- a/release/src/router/httpd/dbapi.h
+++ b/release/src/router/httpd/dbapi.h
@@ -39,6 +39,7 @@ typedef struct _dbclient {
 typedef int (*fn_db_parse)(dbclient* client, webs_t wp, char* prefix, char* key, char* value);
 
 int dbclient_start(dbclient* client);
+int dbclient_rm(dbclient* client, const char* key, int nk);
 int dbclient_bulk(dbclient* client, const char* command, const char* key, int nk, const char* value, int nv);
 int dbclient_end(dbclient* client);
 int dbclient_list(dbclient* client, char* prefix, webs_t wp, fn_db_parse fn);
diff --git a/release/src/router/httpd/web.c b/release/src/router/httpd/web.c
index d65ea73364..04dcf40895 100755
--- a/release/src/router/httpd/web.c
+++ b/release/src/router/httpd/web.c
@@ -9715,7 +9715,7 @@ static int ej_get_simact_result(int eid, webs_t wp, int argc, char_t **argv){
 			if(len > 0){
 				if(buf[len] == '\n' || buf[len] == '\r')
 					buf[len] = '\0';
-				websWrite(wp, buf);
+				websWrite(wp, "\"%s\"",buf);
 				break;
 			}
 		}
@@ -15095,7 +15095,7 @@ applydb_cgi(webs_t wp, char_t *urlPrefix, char_t *webDir, int arg,
 	char *result = NULL;
 	char *temp = NULL;
 	char *name = websGetVar(wp, "p","");
-	char *userm = strstr(url, "use_rm=1");
+	char *userm = websGetVar(wp, "use_rm", "");
 	char scPath[128];
 	char *post_db_buf = post_json_buf;
 
@@ -15133,8 +15133,8 @@ applydb_cgi(webs_t wp, char_t *urlPrefix, char_t *webDir, int arg,
 				strcpy(dbval, temp+1);
 				strncpy(dbvar, dbjson[j], strlen(dbjson[j])-strlen(temp));
 			//logmessage("HTTPD", "name: %s post: %s", dbvar, dbval);
-			if(userm)
-				doSystem("dbus remove %s", dbvar);
+			if(*userm || dbval[0]=='\0')
+				dbclient_rm(&client, dbvar, strlen(dbvar));
 			else
 				dbclient_bulk(&client, "set", dbvar, strlen(dbvar), dbval, strlen(dbval));
 		}
@@ -15164,9 +15164,9 @@ applydb_cgi(webs_t wp, char_t *urlPrefix, char_t *webDir, int arg,
 				temp=strstr(dbjson[j], "=");
 				strcpy(dbval, temp+1);
 				strncpy(dbvar, dbjson[j], strlen(dbjson[j])-strlen(temp));
-			//logmessage("HTTPD", "name: %s post: %s", dbvar, dbval);
-			if(userm)
-				doSystem("dbus remove %s", dbvar);
+			//logmessage("HTTPD", "dbvar: %s dbval: %s", dbvar, dbval);
+			if(*userm || dbval[0]=='\0')
+				dbclient_rm(&client, dbvar, strlen(dbvar));
 			else
 				dbclient_bulk(&client, "set", dbvar, strlen(dbvar), dbval, strlen(dbval));
 		}
@@ -15307,7 +15307,7 @@ do_logread(webs_t wp, char_t *urlPrefix, char_t *webDir, int arg,
 	//sscanf(url, "logreaddb.cgi?%s", filename);
 	char *filename = websGetVar(wp, "p","");
 	char *script = websGetVar(wp, "script", "");
-	if(script){
+	if(*script){
 		sprintf(scPath, "/jffs/softcenter/scripts/%s", script);
 		strlcpy(SystemCmd, scPath, sizeof(SystemCmd));
 		sys_script("syscmd.sh");
@@ -23158,7 +23158,7 @@ ej_get_wan_lan_status(int eid, webs_t wp, int argc, char **argv)
 	if (wanLanStatus == NULL || wanLanLinkSpeed == NULL || wanLanCount == NULL)
 		goto error;
 
-#if defined(K3) || defined(R8000P) || defined(R7900P)
+#if defined(K3) || defined(R8000P) || defined(R7900P) || defined(EA6700)
 	fp = popen("rc Get_PhyStatus", "r");
 #else
 	fp = popen("ATE Get_WanLanStatus", "r");
diff --git a/release/src/router/rc/merlinr.c b/release/src/router/rc/merlinr.c
index 1fac3fb8dc..dbccac814f 100644
--- a/release/src/router/rc/merlinr.c
+++ b/release/src/router/rc/merlinr.c
@@ -81,12 +81,12 @@ void merlinr_init_done()
 {
 	_dprintf("############################ MerlinR init done #################################\n");
 #ifdef RTCONFIG_SOFTCENTER
-	if (!f_exists("/jffs/softcenter/scripts/ks_tar_intall.sh") && nvram_match("sc_mount","0")){
+	if (!f_exists("/jffs/softcenter/scripts/ks_tar_install.sh") && nvram_match("sc_mount","0")){
 		doSystem("/usr/sbin/jffsinit.sh &");
 		logmessage("Softcenter/软件中心", "Installing/开始安装......");
 		logmessage("Softcenter/软件中心", "Wait a minute/1分钟后完成安装");
 		_dprintf("....softcenter ok....\n");
-	} else if (f_exists("/jffs/softcenter/scripts/ks_tar_intall.sh") && nvram_match("sc_mount","0"))
+	} else if (f_exists("/jffs/softcenter/scripts/ks_tar_install.sh") && nvram_match("sc_mount","0"))
 		nvram_set("sc_installed","1");
 	//else if (!f_exists("/jffs/softcenter/scripts/ks_tar_intall.sh") && nvram_match("sc_mount","1"))
 		//nvram_set("sc_installed","0");
@@ -97,11 +97,9 @@ void merlinr_init_done()
 		doSystem("sed -i '/softcenter-mount.sh/d' /jffs/scripts/post-mount");
 
 	}
+	doSystem("dbus set softcenter_firmware_version=`nvram get extendno|cut -d \"_\" -f2|cut -d \"-\" -f1|cut -c2-6`");
 #endif
-#if defined(RTCONFIG_QCA)
-	if(!nvram_get("bl_ver"))
-		nvram_set("bl_ver", "1.0.0.0");
-#elif defined(RTCONFIG_RALINK)
+#if defined(RTCONFIG_QCA) || defined(RTCONFIG_RALINK)
 	if(!nvram_get("bl_ver"))
 		nvram_set("bl_ver", nvram_get("blver"));
 #elif defined(RTCONFIG_LANTIQ)
@@ -169,6 +167,10 @@ void merlinr_init_done()
 #if defined(TUFAX3000) && defined(MERLINR_VER_MAJOR_X)
 //tufax3000=ax82u,ax58u=ax3000
 	//enable_4t4r();
+#elif defined(GTAC2900) && defined(MERLINR_VER_MAJOR_X)
+//ac86u <--> gtac2900
+	patch_ac86();
+	//patch_gt2900();
 #endif
 }
 
@@ -391,9 +393,9 @@ int merlinr_firmware_check_update_main(int argc, char *argv[])
 					//_dprintf("%s#%s\n",fwver,cur_fwver);
 					if(versioncmp((cur_fwver+1),(fwver+1))==1){
 						nvram_set("webs_state_url", "");
-#if defined(SBRAC3200P) || defined(RTACRH17) || defined(RTAC3200) || defined(RTAC85P)
+#if defined(RTACRH17) || defined(RTAC3200) || defined(RTAC85P)
 						snprintf(info,sizeof(info),"3004_382_%s_%s-%s",modelname,fwver,tag);
-#elif defined(RTAC68U)
+#elif defined(RTAC68U) || defined(RTAC3100) || defined(RTAC88U)
 						snprintf(info,sizeof(info),"3004_385_%s_%s-%s",modelname,fwver,tag);
 #else
 						snprintf(info,sizeof(info),"3004_384_%s_%s-%s",modelname,fwver,tag);
@@ -446,9 +448,9 @@ int merlinr_firmware_check_update_main(int argc, char *argv[])
 	curl_global_cleanup();
 
 GODONE:
-#if defined(SBRAC3200P) || defined(RTACRH17) || defined(RTAC3200) || defined(RTAC85P)
+#if defined(RTACRH17) || defined(RTAC3200) || defined(RTAC85P)
 	snprintf(info,sizeof(info),"3004_382_%s",nvram_get("extendno"));
-#elif defined(RTAC68U)
+#elif defined(RTAC68U) || defined(RTAC3100) || defined(RTAC88U)
 	snprintf(info,sizeof(info),"3004_385_%s",nvram_get("extendno"));
 #else
 	snprintf(info,sizeof(info),"3004_384_%s",nvram_get("extendno"));
@@ -586,7 +588,7 @@ void softcenter_eval(int sig)
 	//	snprintf(path, sizeof(path), "%s/softcenter-unmount.sh", sc);
 	//	snprintf(action, sizeof(action), "unmount");
 	} else {
-		logmessage("Softcenter", "sig=%s, bug?",sig);
+		logmessage("Softcenter", "sig=%d, bug?",sig);
 		return;
 	}
 	char *eval_argv[] = { path, action, NULL };
diff --git a/release/src/router/rc/services.c b/release/src/router/rc/services.c
index 12fb1fdeb8..5c19dd08ed 100644
--- a/release/src/router/rc/services.c
+++ b/release/src/router/rc/services.c
@@ -4130,9 +4130,19 @@ start_smartdns(void)
 	//fprintf(fp, "log-file /var/log/smartdns.log\n");
 	//fprintf(fp, "log-size 128k\n");
 	//fprintf(fp, "log-num 2\n");
-	fprintf(fp, "server 114.114.114.114\n");
-	fprintf(fp, "server 119.29.29.29\n");
-	fprintf(fp, "server 223.5.5.5\n");
+#if !defined(K3C) && !defined(K3) && !defined(SBRAC1900P) && !defined(SBRAC3200P) && !defined(R8000P)
+	if(!strncmp(nvram_get("territory_code"), "CN",2)){
+#endif
+		fprintf(fp, "server 114.114.114.114\n");
+		fprintf(fp, "server 119.29.29.29\n");
+		fprintf(fp, "server 223.5.5.5\n");
+#if !defined(K3C) && !defined(K3) && !defined(SBRAC1900P) && !defined(SBRAC3200P) && !defined(R8000P)
+	} else {
+		fprintf(fp, "server 8.8.8.8\n");
+		fprintf(fp, "server 208.67.222.222\n");
+		fprintf(fp, "server 1.1.1.1\n");
+	}
+#endif
 	for (unit = WAN_UNIT_FIRST; unit < WAN_UNIT_MAX; unit++) {
 		char *wan_xdns;
 		char wan_xdns_buf[sizeof("255.255.255.255 ")*2];
diff --git a/release/src/router/rc/watchdog.c b/release/src/router/rc/watchdog.c
index 174e87c687..b998623ac4 100644
--- a/release/src/router/rc/watchdog.c
+++ b/release/src/router/rc/watchdog.c
@@ -5382,6 +5382,9 @@ static void softcenter_sig_check()
 			if(f_exists("/jffs/softcenter/bin/softcenter.sh")) {
 				softcenter_eval(SOFTCENTER_MOUNT);
 				nvram_set_int("sc_mount_sig", 0);
+			} else if(!f_exists("/jffs/softcenter/bin/softcenter.sh") && nvram_match("sc_mount", "1")) {
+				//remount to sdb sdc not sda
+				doSystem("sh /jffs/softcenter/automount.sh &");
 			}
 		}
 		if(nvram_match("sc_services_sig", "1")) {
@@ -5774,7 +5777,7 @@ void ntevent_intranet_usage_insight()
 	tm = localtime(&now);
 
 	/* send event at 9:00 each Monday */
-	if (tm->tm_wday == 1 && tm->tm_hour == 9) {
+	if (tm->tm_wday == 1 && tm->tm_hour == 9 && tm->tm_min == 0) {
 		snprintf(str, 32, "0x%x", HINT_INTERNET_USAGE_INSIGHT_EVENT);
 		eval("Notify_Event2NC", str, "");
 	}
diff --git a/release/src/router/rom/webs_scripts/merlinr_webs_note.sh b/release/src/router/rom/webs_scripts/merlinr_webs_note.sh
old mode 100644
new mode 100755
index 69d3bff9c0..f5b45f242e
--- a/release/src/router/rom/webs_scripts/merlinr_webs_note.sh
+++ b/release/src/router/rom/webs_scripts/merlinr_webs_note.sh
@@ -1,33 +1,83 @@
 #!/bin/sh
 
-wget_timeout=`nvram get apps_wget_timeout`
-wget_options="-q -t 2 -T $wget_timeout --no-check-certificate"
+wget_options="-q -t 2 -T 30 --no-check-certificate"
+
+dl_path_SQ="https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless_SQ"
+dl_path_SQ_beta="https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless_SQ/app"
+dl_path_file="https://update.paldier.com"
 
 nvram set cfg_note=0
 get_preferred_lang=`nvram get preferred_lang`
 LANG="$get_preferred_lang"
 
+# get release note
+forsq=`nvram get apps_sq`
+if [ -z "$forsq" ]; then
+	forsq=0
+fi
+
+echo "---- Get amas release note start ----" >> /tmp/webs_upgrade.log
 if [ $# != 2 ]; then
-	echo "---- no model name or version ----" >> /tmp/webs_note.log
+	echo "---- no model name or version ----" >> /tmp/webs_upgrade.log
 	nvram set cfg_note=2
 	exit 0
 fi
 
 new_firm=`echo $2 | sed s/'\.'/_/4 | sed s/'\.'//g;`
-echo "---- $new_firm ----" >> /tmp/webs_note.log
+echo "---- $1 $new_firm ----" >> /tmp/webs_upgrade.log
 releasenote_file=$1_"$new_firm"_"$LANG"_note.zip
 releasenote_file_US=$1_"$new_firm"_US_note.zip
 releasenote_path="/tmp/release_note.txt"
-echo "---- download real release note for $1 ----" >> /tmp/webs_note.log
-wget $wget_options https://update.paldier.com/$releasenote_file -O $releasenote_path
-if [ "$?" != "0" ]; then
-	wget $wget_options https://update.paldier.com/$releasenote_file_US -O $releasenote_path
+
+wget_release=""
+wget_release2=""
+if [ "$forsq" -ge 2 ] && [ "$forsq" -le 9 ]; then
+	echo "---- download SQ beta_user release note ${dl_path_SQ_beta}${forsq}/$releasenote_file ----" >> /tmp/webs_upgrade.log
+	wget $wget_options ${dl_path_SQ_beta}${forsq}/$releasenote_file -O $releasenote_path
+	wget_release=$?
+	echo "---- [LiveUpdate] wget pLang release note, exit code: ${wget_release} ----" >> /tmp/webs_upgrade.log
+	if [ "$wget_release" != "0" ]; then
+		echo "---- download SQ beta_user release note ${dl_path_SQ_beta}${forsq}/$releasenote_file_US ----" >> /tmp/webs_upgrade.log
+		wget $wget_options ${dl_path_SQ_beta}${forsq}/$releasenote_file_US -O $releasenote_path
+		wget_release2=$?
+		echo "---- [LiveUpdate] wget US release note, exit code: ${wget_release2} ----" >> /tmp/webs_upgrade.log
+	fi
+elif [ "$forsq" == "1" ]; then
+	echo "---- download SQ release note ${dl_path_SQ}/$releasenote_file ----" >> /tmp/webs_upgrade.log
+	wget $wget_options ${dl_path_SQ}/$releasenote_file -O $releasenote_path
+	wget_release=$?
+	echo "---- [LiveUpdate] wget pLang release note, exit code: ${wget_release} ----" >> /tmp/webs_upgrade.log
+	if [ "$wget_release" != "0" ]; then
+		echo "---- download SQ release note ${dl_path_SQ}/$releasenote_file_US ----" >> /tmp/webs_upgrade.log
+		wget $wget_options ${dl_path_SQ}/$releasenote_file_US -O $releasenote_path
+		wget_release2=$?
+		echo "---- [LiveUpdate] wget US release note, exit code: ${wget_release2} ----" >> /tmp/webs_upgrade.log
+	fi
+else
+	echo "---- download real release note ${dl_path_file} for $1 ----" >> /tmp/webs_upgrade.log
+	wget $wget_options ${dl_path_file}/$releasenote_file -O $releasenote_path
+	wget_release=$?
+	echo "---- [LiveUpdate] wget pLang release note, exit code: ${wget_release} ----" >> /tmp/webs_upgrade.log
+	if [ "$wget_release" != "0" ]; then
+		echo "---- download real release note ${dl_path_file}/$releasenote_file_US ----" >> /tmp/webs_upgrade.log
+		wget $wget_options ${dl_path_file}/$releasenote_file_US -O $releasenote_path
+		wget_release2=$?
+		echo "---- [LiveUpdate] wget US release note, exit code: ${wget_release2} ----" >> /tmp/webs_upgrade.log
+	fi
 fi
-echo "---- https://update.paldier.com/$releasenote_file ----" >> /tmp/webs_note.log
 
-if [ "$?" != "0" ] || [ ! -s $releasenote_path ]; then
-	echo "---- download release note failed ----" >> /tmp/webs_note.log
+if [ "$wget_release" != "0" ] && [ "$wget_release2" != "0" ]; then
+	echo "---- download release note failed ----" >> /tmp/webs_upgrade.log
 	nvram set cfg_note=3
 	exit 0
+elif [ ! -s $releasenote_path ]; then
+	echo "---- no exist release note ----" >> /tmp/webs_upgrade.log
+	nvram set cfg_note=3
+	exit 0
+else
+	echo "---- Get release note successfully ----" >> /tmp/webs_upgrade.log
 fi
+
+echo "---- Get release note end. ----" >> /tmp/webs_upgrade.log
 nvram set cfg_note=1
+
diff --git a/release/src/router/smartdns/.clang-format b/release/src/router/smartdns/.clang-format
new file mode 100644
index 0000000000..7eecf0ee9c
--- /dev/null
+++ b/release/src/router/smartdns/.clang-format
@@ -0,0 +1,10 @@
+#http://clang.llvm.org/docs/ClangFormatStyleOptions.html
+
+BasedOnStyle: LLVM
+IndentWidth: 4
+TabWidth: 4
+UseTab: ForContinuationAndIndentation
+MaxEmptyLinesToKeep: 1
+AllowShortFunctionsOnASingleLine: Empty
+BreakBeforeBraces: Linux
+ColumnLimit: 120
diff --git a/release/src/router/smartdns/.github/ISSUE_TEMPLATE/feature.md b/release/src/router/smartdns/.github/ISSUE_TEMPLATE/feature.md
new file mode 100644
index 0000000000..221d77dadf
--- /dev/null
+++ b/release/src/router/smartdns/.github/ISSUE_TEMPLATE/feature.md
@@ -0,0 +1,20 @@
+---
+name: 需求建议
+about: 需求建议描述
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**需求应用场景**
+请描述需求应用的场景和方式。
+
+**建议的方案**
+实现上述场景建议的方案。
+
+**设备信息**
+1. 设备信息（CPU，厂家）  
+
+2. 固件信息
+
diff --git a/release/src/router/smartdns/.github/ISSUE_TEMPLATE/issue.md b/release/src/router/smartdns/.github/ISSUE_TEMPLATE/issue.md
new file mode 100644
index 0000000000..5f505d4218
--- /dev/null
+++ b/release/src/router/smartdns/.github/ISSUE_TEMPLATE/issue.md
@@ -0,0 +1,29 @@
+---
+name: 问题报告
+about: 问题现象描述
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**问题现象**  
+简要描述问题出现的现象
+
+**运行环境**
+1. 固件型号  
+
+2. 运营商  
+
+**重现步骤**
+1. 上游DNS配置。  
+
+2. 访问的域名。  
+
+
+**信息收集**  
+1. 将/var/log/smrtdns.log日志作为附件上传。  
+2. 如进程异常，请将coredump功能开启，上传coredump信息文件。  
+在自定义界面，开启设置->自定义设置->生成coredump配置，重现问题后提交coredump文件
+coredump文件在/tmp目录下
+
diff --git a/release/src/router/smartdns/.gitignore b/release/src/router/smartdns/.gitignore
new file mode 100644
index 0000000000..d9e7a1f1ca
--- /dev/null
+++ b/release/src/router/smartdns/.gitignore
@@ -0,0 +1,4 @@
+.vscode
+.o
+.DS_Store
+.swp.
diff --git a/release/src/router/smartdns/LICENSE b/release/src/router/smartdns/LICENSE
index dbbe355815..f288702d2f 100644
--- a/release/src/router/smartdns/LICENSE
+++ b/release/src/router/smartdns/LICENSE
@@ -1,21 +1,23 @@
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
 
- Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
  Everyone is permitted to copy and distribute verbatim copies
  of this license document, but changing it is not allowed.
 
                             Preamble
 
-  The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
+  The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
 
   The licenses for most software and other practical works are designed
 to take away your freedom to share and change the works.  By contrast,
-our General Public Licenses are intended to guarantee your freedom to
+the GNU General Public License is intended to guarantee your freedom to
 share and change all versions of a program--to make sure it remains free
-software for all its users.
+software for all its users.  We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors.  You can apply it to
+your programs, too.
 
   When we speak of free software, we are referring to freedom, not
 price.  Our General Public Licenses are designed to make sure that you
@@ -24,34 +26,44 @@ them if you wish), that you receive source code or can get it if you
 want it, that you can change the software or use pieces of it in new
 free programs, and that you know you can do these things.
 
-  Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-  A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate.  Many developers of free software are heartened and
-encouraged by the resulting cooperation.  However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-  The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community.  It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server.  Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-  An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals.  This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
+  To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights.  Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received.  You must make sure that they, too, receive
+or can get the source code.  And you must show them these terms so they
+know their rights.
+
+  Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+  For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software.  For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+  Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so.  This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software.  The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable.  Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products.  If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+  Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary.  To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
 
   The precise terms and conditions for copying, distribution and
 modification follow.
@@ -60,7 +72,7 @@ modification follow.
 
   0. Definitions.
 
-  "This License" refers to version 3 of the GNU Affero General Public License.
+  "This License" refers to version 3 of the GNU General Public License.
 
   "Copyright" also means copyright-like laws that apply to other kinds of
 works, such as semiconductor masks.
@@ -537,45 +549,35 @@ to collect a royalty for further conveying from those to whom you convey
 the Program, the only way you could satisfy both those terms and this
 License would be to refrain entirely from conveying the Program.
 
-  13. Remote Network Interaction; Use with the GNU General Public License.
-
-  Notwithstanding any other provision of this License, if you modify the
-Program, your modified version must prominently offer all users
-interacting with it remotely through a computer network (if your version
-supports such interaction) an opportunity to receive the Corresponding
-Source of your version by providing access to the Corresponding Source
-from a network server at no charge, through some standard or customary
-means of facilitating copying of software.  This Corresponding Source
-shall include the Corresponding Source for any work covered by version 3
-of the GNU General Public License that is incorporated pursuant to the
-following paragraph.
+  13. Use with the GNU Affero General Public License.
 
   Notwithstanding any other provision of this License, you have
 permission to link or combine any covered work with a work licensed
-under version 3 of the GNU General Public License into a single
+under version 3 of the GNU Affero General Public License into a single
 combined work, and to convey the resulting work.  The terms of this
 License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU General Public License.
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
 
   14. Revised Versions of this License.
 
   The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time.  Such new versions
-will be similar in spirit to the present version, but may differ in detail to
+the GNU General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
 address new problems or concerns.
 
   Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU Affero General
+Program specifies that a certain numbered version of the GNU General
 Public License "or any later version" applies to it, you have the
 option of following the terms and conditions either of that numbered
 version or of any later version published by the Free Software
 Foundation.  If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
+GNU General Public License, you may choose any version ever published
 by the Free Software Foundation.
 
   If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
+versions of the GNU General Public License can be used, that proxy's
 public statement of acceptance of a version permanently authorizes you
 to choose that version for the Program.
 
@@ -633,29 +635,40 @@ the "copyright" line and a pointer to where the full notice is found.
     Copyright (C) <year>  <name of author>
 
     This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published
-    by the Free Software Foundation, either version 3 of the License, or
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
     (at your option) any later version.
 
     This program is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
+    GNU General Public License for more details.
 
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
 Also add information on how to contact you by electronic and paper mail.
 
-  If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source.  For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code.  There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
+  If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+    <program>  Copyright (C) <year>  <name of author>
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
 
   You should also get your employer (if you work as a programmer) or school,
 if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<http://www.gnu.org/licenses/>.
+For more information on this, and how to apply and follow the GNU GPL, see
+<https://www.gnu.org/licenses/>.
+
+  The GNU General Public License does not permit incorporating your program
+into proprietary programs.  If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.  But first, please read
+<https://www.gnu.org/licenses/why-not-lgpl.html>.
diff --git a/release/src/router/smartdns/Makefile b/release/src/router/smartdns/Makefile
new file mode 100644
index 0000000000..461fbd5b3e
--- /dev/null
+++ b/release/src/router/smartdns/Makefile
@@ -0,0 +1,47 @@
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+PKG_CONFIG := pkg-config
+DESTDIR :=
+PREFIX := /usr
+SBINDIR := $(PREFIX)/sbin
+SYSCONFDIR := /etc
+RUNSTATEDIR := /var/run
+SYSTEMDSYSTEMUNITDIR := $(shell ${PKG_CONFIG} --variable=systemdsystemunitdir systemd)
+SMARTDNS_SYSTEMD = systemd/smartdns.service
+
+.PHONY: all clean install SMARTDNS_BIN
+all: SMARTDNS_BIN 
+
+SMARTDNS_BIN: $(SMARTDNS_SYSTEMD)
+	$(MAKE) $(MFLAGS) -C src all 
+
+$(SMARTDNS_SYSTEMD): systemd/smartdns.service.in
+	cp $< $@
+	sed -i 's|@SBINDIR@|$(SBINDIR)|' $@
+	sed -i 's|@SYSCONFDIR@|$(SYSCONFDIR)|' $@
+	sed -i 's|@RUNSTATEDIR@|$(RUNSTATEDIR)|' $@
+
+clean:
+	$(MAKE) $(MFLAGS) -C src clean  
+	$(RM) $(SMARTDNS_SYSTEMD)
+
+install: SMARTDNS_BIN 
+	install -v -m 0640 -D -t $(DESTDIR)$(SYSCONFDIR)/default etc/default/smartdns
+	install -v -m 0755 -D -t $(DESTDIR)$(SYSCONFDIR)/init.d etc/init.d/smartdns
+	install -v -m 0640 -D -t $(DESTDIR)$(SYSCONFDIR)/smartdns etc/smartdns/smartdns.conf
+	install -v -m 0755 -D -t $(DESTDIR)$(SBINDIR) src/smartdns
+	install -v -m 0644 -D -t $(DESTDIR)$(SYSTEMDSYSTEMUNITDIR) systemd/smartdns.service
+
diff --git a/release/src/router/smartdns/ReadMe.md b/release/src/router/smartdns/ReadMe.md
index 39a60f9465..164179b37f 100644
--- a/release/src/router/smartdns/ReadMe.md
+++ b/release/src/router/smartdns/ReadMe.md
@@ -1,705 +1,672 @@
-# SmartDNS
-
-**[English](ReadMe_en.md)**
-
-![SmartDNS](doc/smartdns-banner.png)  
-SmartDNS是一个运行在本地的DNS服务器，SmartDNS接受本地客户端的DNS查询请求，从多个上游DNS服务器获取DNS查询结果，并将访问速度最快的结果返回给客户端，提高网络访问速度。
-同时支持指定特定域名IP地址，并高性匹配，达到过滤广告的效果。  
-与dnsmasq的all-servers不同，smartdns返回的是访问速度最快的解析结果。 (详细差异请看[FAQ](#faq)) 
-
-支持树莓派，openwrt，华硕路由器，windows等设备。  
-
-## 目录
-
-1. [软件效果展示](#软件效果展示)
-1. [特性](#特性)
-1. [架构](#架构)
-1. [使用](#使用)  
-    1. [下载配套安装包](#下载配套安装包)
-    1. [标准Linux系统安装](#标准linux系统安装树莓派x86_64系统)
-    1. [openwrt/LEDE](#openwrtlede)
-    1. [华硕路由器原生固件/梅林固件](#华硕路由器原生固件梅林固件)
-    1. [optware/entware](#optwareentware)
-    1. [Windows 10 WSL安装/WSL ubuntu](#windows-10-wsl安装wsl-ubuntu)
-1. [配置参数](#配置参数)
-1. [捐助](#donate)
-1. [FAQ](#faq)
-
-## 软件效果展示
-
-**阿里DNS**  
-使用阿里DNS查询百度IP，并检测结果。  
-
-```shell
-pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com 223.5.5.5
-Server:         223.5.5.5
-Address:        223.5.5.5#53
-
-Non-authoritative answer:
-www.baidu.com   canonical name = www.a.shifen.com.
-Name:   www.a.shifen.com
-Address: 180.97.33.108
-Name:   www.a.shifen.com
-Address: 180.97.33.107
-
-pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.107 -c 2
-PING 180.97.33.107 (180.97.33.107) 56(84) bytes of data.
-64 bytes from 180.97.33.107: icmp_seq=1 ttl=55 time=24.3 ms
-64 bytes from 180.97.33.107: icmp_seq=2 ttl=55 time=24.2 ms
-
---- 180.97.33.107 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 24.275/24.327/24.380/0.164 ms
-pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.108 -c 2
-PING 180.97.33.108 (180.97.33.108) 56(84) bytes of data.
-64 bytes from 180.97.33.108: icmp_seq=1 ttl=55 time=31.1 ms
-64 bytes from 180.97.33.108: icmp_seq=2 ttl=55 time=31.0 ms
-
---- 180.97.33.108 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 31.014/31.094/31.175/0.193 ms
-```
-
-**smartdns**  
-使用SmartDNS查询百度IP，并检测结果。
-
-```shell
-pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com
-Server:         192.168.1.1
-Address:        192.168.1.1#53
-
-Non-authoritative answer:
-www.baidu.com   canonical name = www.a.shifen.com.
-Name:   www.a.shifen.com
-Address: 14.215.177.39
-
-pi@raspberrypi:~/code/smartdns_build $ ping 14.215.177.39 -c 2
-PING 14.215.177.39 (14.215.177.39) 56(84) bytes of data.
-64 bytes from 14.215.177.39: icmp_seq=1 ttl=56 time=6.31 ms
-64 bytes from 14.215.177.39: icmp_seq=2 ttl=56 time=5.95 ms
-
---- 14.215.177.39 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 5.954/6.133/6.313/0.195 ms
-
-```
-
-从对比看出，smartdns找到访问www.baidu.com最快的IP地址，这样访问百度比阿里DNS速度快5倍。
-
-## 特性
-
-1. **多DNS上游服务器**  
-   支持配置多个上游DNS服务器，并同时进行查询，即使其中有DNS服务器异常，也不会影响查询。  
-
-1. **返回最快IP地址**  
-   支持从域名所属IP地址列表中查找到访问速度最快的IP地址，并返回给客户端，提高网络访问速度。
-
-1. **支持多种查询协议**  
-   支持UDP，TCP，TLS, HTTPS查询，以及非53端口查询。
-
-1. **特定域名IP地址指定**  
-   支持指定域名的IP地址，达到广告过滤效果，避免恶意网站的效果。
-
-1. **域名高性能后缀匹配**  
-   支持域名后缀匹配模式，简化过滤配置，过滤20万条记录时间<1ms
-
-1. **域名分流**  
-   支持域名分流，不同类型的域名到不同的DNS服务器查询。
-
-1. **Linux/Windows多平台支持**  
-   支持标准Linux系统（树莓派），openwrt系统各种固件，华硕路由器原生固件。以及支持Windows 10 WSL (Windows Subsystem for Linux)。
-
-1. **支持IPV4, IPV6双栈**  
-   支持IPV4，IPV6网络，支持查询A, AAAA记录，支持双栈IP速度优化，并支持完全禁用IPV6 AAAA解析。
-
-1. **高性能，占用资源少**  
-   多线程异步IO模式，cache缓存查询结果。
-
-## 架构
-
-![Architecture](doc/architecture.png)
-
-1. SmartDNS接收本地网络设备的DNS查询请求，如PC，手机的查询请求。  
-2. SmartDNS将查询请求发送到多个上游DNS服务器，可采用标准UDP查询，非标准端口UDP查询，及TCP查询。  
-3. 上游DNS服务器返回域名对应的Server IP地址列表。SmartDNS检测与本地网络访问速度最快的Server IP。  
-4. 将访问速度最快的Server IP返回给本地客户端。  
-
-## 使用
-
-### 下载配套安装包  
-
---------------
-
-下载配套版本的SmartDNS安装包，对应安装包配套关系如下。
-
-|系统 |安装包|说明
-|-----|-----|-----
-|标准Linux系统(树莓派)| smartdns.xxxxxxxx.armhf.deb|支持树莓派Raspbian stretch，Debian 9系统。
-|标准Linux系统(Armbian arm64)| smartdns.xxxxxxxx.arm64.deb|支持ARM64的Debian stretch，Debian 9系统。
-|标准Linux系统(x86_64)| smartdns.xxxxxxxx.x86_64.tar.gz|支持x86_64 Linux 系统。
-|Windows 10 WSL (ubuntu)| smartdns.xxxxxxxx.x86_64.tar.gz|支持Windows 10 WSL ubuntu系统。
-|标准Linux系统(x86)| smartdns.xxxxxxxx.x86.tar.gz|支持x86系统。
-|华硕原生固件(optware)|smartdns.xxxxxxx.mipsbig.ipk|支持MIPS大端架构的系统，如RT-AC55U, RT-AC66U.
-|华硕原生固件(optware)|smartdns.xxxxxxx.mipsel.ipk|支持MIPS小端架构的系统。
-|华硕原生固件(optware)|smartdns.xxxxxxx.arm.ipk|支持arm小端架构的系统，如RT-AC68U。
-|Padavan|smartdns.xxxxxxx.mipselsf.ipk|padavan固件。
-|openwrt 15.01|smartdns.xxxxxxxx.ar71xx.ipk|支持AR71XX MIPS系统。
-|openwrt 15.01|smartdns.xxxxxxxx.ramips_24kec.ipk|支持MT762X等小端路由器
-|openwrt 15.01(潘多拉)|smartdns.xxxxxxxx.mipsel_24kec_dsp.ipk|支持MT7620系列的潘多拉固件
-|openwrt 15.01(潘多拉)|smartdns.xxxxxxxx.mips_74kc_dsp2.ipk|支持AR71xx系列的潘多拉固件
-|openwrt 18.06|smartdns.xxxxxxxx.mips_24kc.ipk|支持AR71XX MIPS系统。
-|openwrt 18.06|smartdns.xxxxxxxx.mipsel_24kc.ipk|支持MT726X等小端路由器
-|openwrt 18.06|smartdns.xxxxxxxx.x86_64.ipk|支持x86_64路由器
-|openwrt 18.06|smartdns.xxxxxxxx.i386_pentium4.ipk|支持x86路由器
-|openwrt 18.06|smartdns.xxxxxxxxxxx.arm_cortex-a9.ipk|支持arm A9核心CPU的路由器
-|openwrt 18.06|smartdns.xxxxxxxxx.arm_cortex-a7_neon-vfpv4.ipk|支持arm A7核心CPU的路由器
-|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.xxxx.all.ipk|openwrt管理统一界面
-
-* openwrt系统CPU架构比较多，上述表格未列出所有支持系统，请查看CPU架构后下载。
-* merlin梅林固件理论和华硕固件一致，所以根据硬件类型安装相应的ipk包即可。（梅林暂时未验证，有问题提交issue）
-* CPU架构可在路由器管理界面找到，查看方法：
-    登录路由器，点击`System`->`Software`，点击`Configuration` Tab页面，在opkg安装源中可找到对应软件架构，下载路径中可找到，如下，架构为ar71xx
-
-    ```shell
-    src/gz chaos_calmer_base http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base
-    ```
-
-* 或ssh登录系统后通过如下命令查询软件架构：
-
-  * **openwrt系列命令**
-
-    ```shell
-    opkg print_architecture
-    ```
-
-  * **optware系列命令**
-
-    ```shell
-    ipkg print_architecture
-    ```
-
-  * **debian系列命令**
-
-    ```shell
-    dpkg --print-architecture
-    ```
-
-  * **例如**
-
-    下面的查询结果`arch ar71xx 10`表示ar71xx系列架构，选择`smartdns.xxxxxxxx.ar71xx.ipk`安装包
-
-    ```shell
-    root@OpenWrt:~# opkg print_architecture
-    arch all 1
-    arch noarch 1
-    arch ar71xx 10
-    ```
-
-* **请在Release页面下载：[点击此处下载](https://github.com/pymumu/smartdns/releases)**
-
-```shell
-https://github.com/pymumu/smartdns/releases
-```
-
-* 各种设备的安装步骤，请参考后面的章节。
-
-### 标准Linux系统安装/树莓派/X86_64系统
-
---------------
-
-1. 安装
-
-    下载配套安装包`smartdns.xxxxxxxx.armhf.deb`，并上传到Linux系统中。 执行如下命令安装
-
-    ```shell
-    dpkg -i smartdns.xxxxxxxx.armhf.deb
-    ```
-
-    x86系统下载配套安装包`smartdns.xxxxxxxx.x86-64.tar.gz`, 并上传到Linux系统中。 执行如下命令安装
-
-    ```shell
-    tar zxf smartdns.xxxxxxxx.x86-64.tar.gz
-    cd smartdns
-    chmod +x ./install
-    ./install -i
-    ```
-
-1. 修改配置
-
-    安装完成后，可配置smartdns的上游服务器信息。具体配置参数参考`配置参数`说明。  
-    一般情况下，只需要增加`server [IP]:port`, `server-tcp [IP]:port`配置项，
-    尽可能配置多个上游DNS服务器，包括国内外的服务器。配置参数请查看`配置参数`章节。
-
-    ```shell
-    vi /etc/smartdns/smartdns.conf
-    ```
-
-1. 启动服务
-
-    ```shell
-    systemctl enable smartdns
-    systemctl start smartdns
-    ```
-
-1. 将DNS请求转发的SmartDNS解析。
-
-    修改本地路由器的DNS服务器，将DNS服务器配置为SmartDNS。
-    * 登录到本地网络的路由器中，配置树莓派分配静态IP地址。
-    * 修改WAN口或者DHCP DNS为树莓派IP地址。  
-    注意：  
-    I. 每款路由器配置方法不尽相同，请百度搜索相关的配置方法。  
-    II.华为等路由器可能不支持配置DNS为本地IP，请修改PC端，手机端DNS服务器为树莓派IP。
-
-1. 检测服务是否配置成功。
-
-    使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-### openwrt/LEDE
-
---------------
-
-1. 安装
-
-    将软件使用winscp上传到路由器的/root目录，执行如下命令安装  
-
-    ```shell
-    opkg install smartdns.xxxxxxxx.xxxx.ipk
-    opkg install luci-app-smartdns.xxxxxxxx.xxxx.all.ipk
-    ```
-
-1. 修改配置
-
-    登录openwrt管理页面，打开`Services`->`SmartDNS`进行配置。
-    * 在`Upstream Servers`增加上游DNS服务器配置，建议配置多个国内外DNS服务器。
-    * 在`Domain Address`指定特定域名的IP地址，可用于广告屏蔽。
-
-1. 启用服务
-
-   SmartDNS服务生效方法有两种，`一种是直接作为主DNS服务`；`另一种是作为dnsmasq的上游`。  
-   默认情况下，SmartDNS采用第一种方式。如下两种方式根据需求选择即可。
-
-1. 启用方法一：作为主DNS(默认方案)
-
-    * **启用smartdns的53端口重定向**
-
-        登录路由器，点击`Services`->`SmartDNS`->`redirect`，选择`重定向53端口到SmartDNS`启用53端口转发。
-
-    * **检测转发服务是否配置成功**
-
-        使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-        看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-        ```shell
-        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        0.0.0.0.in-addr.arpa  name = smartdns.
-        ```
-
-    * **界面提示重定向失败**
-
-        * 检查iptable，ip6table命令是否正确安装。
-        * openwrt 15.01系统不支持IPV6重定向，如网络需要支持IPV6，请将DNSMASQ上游改为smartdns，或者将smartdns的端口改为53，并停用dnsmasq。
-        * LEDE之后系统，请安装IPV6的nat转发驱动。点击`system`->`Software`，点击`update lists`更新软件列表后，安装`ip6tables-mod-nat`
-        * 使用如下命令检查路由规则是否生效。  
-
-        ```shell
-        iptables -t nat -L PREROUTING | grep REDIRECT
-        ```
-
-        * 如转发功能不正常，请使用方法二：作为DNSMASQ的上游。
-
-1. 方法二：作为DNSMASQ的上游
-
-    * **将dnsmasq的请求发送到smartdns**
-
-        登录路由器，点击`Services`->`SmartDNS`->`redirect`，选择`作为dnsmasq的上游服务器`设置dnsmasq的上游服务器为smartdns。
-
-    * **检测上游服务是否配置成功**
-
-        * 方法一：使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-        看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-        ```shell
-        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        0.0.0.0.in-addr.arpa  name = smartdns.
-        ```
-
-        * 方法二：使用`nslookup`查询`www.baidu.com`域名，查看结果中百度的IP地址是否`只有一个`，如有多个IP地址返回，则表示未生效，请多尝试几个域名检查。
-
-        ```shell
-        pi@raspberrypi:~ $ nslookup www.baidu.com 192.168.1.1
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        www.baidu.com   canonical name = www.a.shifen.com.
-        Name:   www.a.shifen.com
-        Address: 14.215.177.38
-        ```
-
-1. 启动服务
-
-    勾选配置页面中的`Enable(启用)`来启动SmartDNS
-
-1. 注意：
-
-    * 如已经安装chinaDNS，建议将chinaDNS的上游配置为SmartDNS。
-    * SmartDNS默认情况，将53端口的请求转发到SmartDNS的本地端口，由`Redirect`配置选项控制。
-
-### 华硕路由器原生固件/梅林固件
-
---------------
-
-说明：梅林固件派生自华硕固件，理论上可以直接使用华硕配套的安装包使用。但目前未经验证，如有问题，请提交issue。
-
-1. 准备
-
-    在使用此软件时，需要确认路由器是否支持U盘，并准备好U盘一个。
-
-1. 启用SSH登录
-
-    登录管理界面，点击`系统管理`->点击`系统设置`，配置`Enable SSH`为`Lan Only`。  
-    SSH登录用户名密码与管理界面相同。
-
-1. 下载`Download Master`
-
-    在管理界面点击`USB相关应用`->点击`Download Master`下载。  
-    下载完成后，启用`Download Master`，如果不需要下载功能，此处可以卸载`Download Master`，但要保证卸载前Download Master是启用的。  
-
-1. 安装SmartDNS
-
-    将软件使用winscp上传到路由器的`/tmp/mnt/sda1`目录。（或网上邻居复制到sda1共享目录）
-
-    ```shell
-    ipkg install smartdns.xxxxxxx.mipsbig.ipk
-    ```
-
-1. 重启路由器生效服务
-
-    待路由器启动后，使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-1. 额外说明
-
-    上述过程，smartdns将安装到U盘根目录，采用optware的模式运行。
-    其目录结构如下： （此处仅列出smartdns相关文件）  
-
-    ```shell
-    U盘
-    └── asusware.mipsbig
-            ├── bin
-            ├── etc
-            |    ├── smartdns
-            |    |     └── smartdns.conf
-            |    └── init.d
-            |          └── S50smartdns
-            ├── lib
-            ├── sbin
-            ├── usr
-            |    └── sbin
-            |          └── smartdns
-            ....
-    ```
-
-    如要修改配置，可以ssh登录路由器，使用vi命令修改  
-
-    ```shell
-    vi /opt/etc/smartdns/smartdns.conf
-    ```
-
-    也可以通过网上邻居修改，网上邻居共享目录`sda1`看不到`asusware.mipsbig`目录，但可以直接在`文件管理器`中输入`asusware.mipsbig\etc\init.d`访问
-
-    ```shell
-    \\192.168.1.1\sda1\asusware.mipsbig\etc\init.d
-    ```
-
-### optware/entware
-
---------------
-
-1. 准备
-
-    在使用此软件时，需要确认路由器是否支持U盘，并准备好U盘一个。
-
-1. 安装SmartDNS
-
-    将软件使用winscp上传到路由器的`/tmp`目录。
-
-    ```shell
-    ipkg install smartdns.xxxxxxx.mipsbig.ipk
-    ```
-
-1. 修改smartdns配置
-
-    ```shell
-    vi /opt/etc/smartdns/smartdns.conf
-    ```
-
-    另外，如需支持IPV6，可设置工作模式为`2`，将dnsmasq的DNS服务禁用，smartdns为主用DNS服务器。将文件`/opt/etc/smartdns/smartdns-opt.conf`，中的`SMARTDNS_WORKMODE`修改为2.
-
-    ```shell
-    SMARTDNS_WORKMODE="2"
-    ```
-
-1. 重启路由器生效服务
-
-    待路由器启动后，使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-    注意：若服务没有自动启动，则需要设置optwre/entware自动启动，具体方法参考optware/entware的文档。
-
-### Windows 10 WSL安装/WSL ubuntu
-
---------------
-
-1. 安装Windows 10 WSL ubuntu系统
-
-    安装Windows 10 WSL运行环境，发行版本选择ubuntu系统。安装步骤请参考[WSL安装说明](https://docs.microsoft.com/en-us/windows/wsl/install-win10)
-
-1. 安装smartdns
-
-    下载安装包`smartdns.xxxxxxxx.x86_64.tar.gz`，并解压到D盘根目录。解压后目录如下：
-
-    ```shell
-    D:\SMARTDNS
-    ├─etc
-    │  ├─default
-    │  ├─init.d
-    │  └─smartdns
-    ├─package
-    │  └─windows
-    ├─src
-    └─systemd
-
-    ```
-
-    双击`D:\smartdns\package\windows`目录下的`install.bat`进行安装。要求输入密码时，请输入`WLS ubuntu`的密码。
-
-1. 修改配置
-
-    记事本打开`D:\smartdns\etc\smartdns`目录中的`smartdns.conf`配置文件配置smartdns。具体配置参数参考`配置参数`说明。  
-    一般情况下，只需要增加`server [IP]:port`, `server-tcp [IP]:port`配置项，
-    尽可能配置多个上游DNS服务器，包括国内外的服务器。配置参数请查看`配置参数`章节。
-
-1. 重新加载配置
-
-    双击`D:\smartdns\package\windows`目录下的`reload.bat`进行安装。要求输入密码时，请输入`WLS ubuntu`的密码。
-
-1. 将DNS请求转发的SmartDNS解析。
-
-    将Windows的默认DNS服务器修改为`127.0.0.1`，具体步骤参考[IP配置](https://support.microsoft.com/zh-cn/help/15089/windows-change-tcp-ip-settings)
-
-1. 检测服务是否配置成功。
-
-    使用`nslookup -querytype=ptr 0.0.0.0`查询域名  
-    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-## 配置参数
-
-|参数|  功能  |默认值|配置值|例子|
-|--|--|--|--|--|
-|server-name|DNS服务器名称|操作系统主机名/smartdns|符合主机名规格的字符串|server-name smartdns
-|bind|DNS监听端口号|[::]:53|可绑定多个端口<br>`IP:PORT`: 服务器IP，端口号。<br>`[-group]`: 请求时使用的DNS服务器组。<br>`[-no-rule-addr]`：跳过address规则。<br>`[-no-rule-nameserver]`：跳过Nameserver规则。<br>`[-no-rule-ipset]`：跳过Ipset规则。<br>`[no-rule-soa]`：跳过SOA(#)规则.<br>`[no-dualstack-selection]`：停用双栈测速。<br>`[-no-speed-check]`：停用测速。<br>`[-no-cache]`：停止缓存|bind :53
-|bind|TCP DNS监听端口号|[::]:53|可绑定多个端口<br>`IP:PORT`: 服务器IP，端口号。<br>`[-group]`: 请求时使用的DNS服务器组。<br>`[-no-rule-addr]`：跳过address规则。<br>`[-no-rule-nameserver]`：跳过Nameserver规则。<br>`[-no-rule-ipset]`：跳过Ipset规则。<br>`[no-rule-soa]`：跳过SOA(#)规则.<br>`[no-dualstack-selection]`：停用双栈测速。<br>`[-no-speed-check]`：停用测速。<br>`[-no-cache]`：停止缓存|bind-tcp :53
-|cache-size|域名结果缓存个数|512|数字|cache-size 512
-|tcp-idle-time|TCP链接空闲超时时间|120|数字|tcp-idle-time 120
-|rr-ttl|域名结果TTL|远程查询结果|大于0的数字|rr-ttl 600
-|rr-ttl-min|允许的最小TTL值|远程查询结果|大于0的数字|rr-ttl-min 60
-|rr-ttl-max|允许的最大TTL值|远程查询结果|大于0的数字|rr-ttl-max 600
-|log-level|设置日志级别|error|fatal,error,warn,notice,info,debug|log-level error
-|log-file|日志文件路径|/var/log/smartdns.log|路径|log-file /var/log/smartdns.log
-|log-size|日志大小|128K|数字+K,M,G|log-size 128K
-|log-num|日志归档个数|2|数字|log-num 2
-|audit-enable|设置审计启用|no|[yes\|no]|audit-enable yes
-|audit-file|审计文件路径|/var/log/smartdns-audit.log|路径|audit-file /var/log/smartdns-audit.log
-|audit-size|审计大小|128K|数字+K,M,G|audit-size 128K
-|audit-num|审计归档个数|2|数字|audit-num 2
-|conf-file|附加配置文件|无|文件路径|conf-file /etc/smartdns/smartdns.more.conf
-|server|上游UDP DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server 8.8.8.8:53 -blacklist-ip -group g1
-|server-tcp|上游TCP DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-tcp 8.8.8.8:53
-|server-tls|上游TLS DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-spki-pin [sha256-pin]]`: TLS合法性校验SPKI值，base64编码的sha256 SPKI pin值<br>`[-host-name]`：TLS SNI名称。<br>`[-tls-host-verify]`: TLS证书主机名校验。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-tls 8.8.8.8:853
-|server-https|上游HTTPS DNS|无|可重复<br>`https://[host][:port]/path`：服务器IP，端口可选。<br>`[-spki-pin [sha256-pin]]`: TLS合法性校验SPKI值，base64编码的sha256 SPKI pin值<br>`[-host-name]`：TLS SNI名称<br>`[-http-host]`：http协议头主机名。<br>`[-tls-host-verify]`: TLS证书主机名校验。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-https https://cloudflare-dns.com/dns-query
-|speed-check-mode|测速模式选择|无|[ping\|tcp:[80]\|none]|speed-check-mode ping,tcp:80
-|address|指定域名IP地址|无|address /domain/[ip\|-\|-4\|-6\|#\|#4\|#6] <br>`-`表示忽略 <br>`#`表示返回SOA <br>`4`表示IPV4 <br>`6`表示IPV6| address /www.example.com/1.2.3.4
-|nameserver|指定域名使用server组解析|无|nameserver /domain/[group\|-], `group`为组名，`-`表示忽略此规则，配套server中的`-group`参数使用| nameserver /www.example.com/office
-|ipset|域名IPSET|None|ipset /domain/[ipset\|-], `-`表示忽略|ipset /www.example.com/pass
-|ipset-timeout|设置IPSET超时功能启用|auto|[yes]|ipset-timeout yes
-|bogus-nxdomain|假冒IP地址过滤|无|[ip/subnet]，可重复| bogus-nxdomain 1.2.3.4/16
-|ignore-ip|忽略IP地址|无|[ip/subnet]，可重复| ignore-ip 1.2.3.4/16
-|whitelist-ip|白名单IP地址|无|[ip/subnet]，可重复| whitelist-ip 1.2.3.4/16
-|blacklist-ip|黑名单IP地址|无|[ip/subnet]，可重复| blacklist-ip 1.2.3.4/16
-|force-AAAA-SOA|强制AAAA地址返回SOA|no|[yes\|no]|force-AAAA-SOA yes
-|prefetch-domain|域名预先获取功能|no|[yes\|no]|prefetch-domain yes
-|dualstack-ip-selection|双栈IP优选|no|[yes\|no]|dualstack-ip-selection yes
-|dualstack-ip-selection-threshold|双栈IP优选阈值|30ms|毫秒|dualstack-ip-selection-threshold [0-1000]
-
-## FAQ
-
-1. SmartDNS和DNSMASQ有什么区别  
-    SMARTDNS在设计上并不是替换DNSMASQ的，SMARTDNS主要功能集中在DNS解析增强上，增强部分有：
-    * 多上游服务器并发请求，对结果进行测速后，返回最佳结果；
-    * address，ipset域名匹配采用高效算法，查询匹配更加快速高效，路由器设备依然高效。
-    * 域名匹配支持忽略特定域名，可单独匹配IPv4， IPV6，支持多样化定制。
-    * 针对广告屏蔽功能做增强，返回SOA，屏蔽广告效果更佳；
-    * IPV4，IPV6双栈IP优选机制，在双网情况下，选择最快的网络通讯。
-    * 支持最新的TLS, HTTPS协议，提供安全的DNS查询能力。
-    * ECS支持，是查询结果更佳准确。
-    * IP黑名单，忽略IP机制，使域名查询更佳准确。
-    * 域名预查询，访问常用网站更加快速。
-    * 域名TTL可指定，使访问更快速。
-    * 高速缓存机制，使访问更快速。
-    * 异步日志，审计机制，在记录信息的同时不影响DNS查询性能。
-    * 域名组（group）机制，特定域名使用特定上游服务器组查询，避免隐私泄漏。
-    * 第二DNS支持自定义更多行为。
-
-1. 如何配置上游服务器最佳。  
-    smartdns有测速机制，在配置上游服务器时，建议配置多个上游DNS服务器，包含多个不同区域的服务器，但总数建议在10个左右。推荐配置  
-    * 运营商DNS。
-    * 国内公共DNS，如`119.29.29.29`, `223.5.5.5`。
-    * 国外公共DNS，如`8.8.8.8`, `8.8.4.4`。
-
-1. 如何启用审计日志  
-    审计日志记录客户端请求的域名，记录信息包括，请求时间，请求IP，请求域名，请求类型，如果要启用审计日志，在配置界面配置`audit-enable yes`启用，`audit-size`, `audit-file`, `audit-num`分别配置审计日志文件大小，审计日志文件路径，和审计日志文件个数。审计日志文件将会压缩存储以节省空间。
-
-1. 如何避免隐私泄漏  
-    smartdns默认情况下，会将请求发送到所有配置的DNS服务器，若上游DNS服务器使用DNS，或记录日志，将会导致隐私泄漏。为避免隐私泄漏，请尽量：  
-    * 配置使用可信的DNS服务器。
-    * 优先使用TLS查询。
-    * 设置上游DNS服务器组。
-
-1. 如何屏蔽广告  
-    smartdns具备高性能域名匹配算法，通过域名方式过滤广告非常高效，如要屏蔽广告，只需要配置类似如下记录即可，如，屏蔽`*.ad.com`，则配置：
-
-    ```sh
-    address /ad.com/#
-    ```
-
-    域名的使后缀模式，过滤*.ad.com，`#`表示返回SOA，使屏蔽广告更加高效，如果要单独屏蔽IPV4， 或IPV6， 在`#`后面增加数字，如`#4`表示对IPV4生效。若想忽略特定子域名的屏蔽，可配置如下，如忽略`pass.ad.com`，可配置如下：
-
-    ```sh
-    address /pass.ad.com/-
-    ```
-
-1. 如何使用DNS查询分流  
-    某些情况下，需要将有些域名使用特定的DNS服务器来查询来做到DNS分流。比如。
-
-    ```sh
-    .home -> 192.168.1.1
-    .office -> 10.0.0.1
-    ```
-
-    .home 结尾的域名发送到192.168.1.1解析  
-    .office 结尾的域名发送到10.0.0.1解析
-    其他域名采用默认的模式解析。
-    这种情况的分流配置如下：
-
-    ```sh
-    #配置上游，用-group指定组名，用-exclude-default-group将服务器从默认组中排除。
-    server 192.168.1.1 -group home -exclude-default-group
-    server 10.0.0.1 -group office -exclude-default-group
-    server 8.8.8.8
-
-    #配置解析的域名
-    nameserver /.home/home
-    nameserver /.office/office
-    ```
-
-    通过上述配置即可实现DNS解析分流，如果需要实现按请求端端口分流，可以配置第二DNS服务器，bind配置增加--group参数指定分流名称。
-
-    ```sh
-    bind :7053 -group office
-    bind :8053 -group home
-    ```
-
-1. IPV4, IPV6双栈IP优选功能如何使用  
-    目前IPV6已经开始普及，但IPV6网络在速度上，某些情况下还不如IPV4，为在双栈网络下获得较好的体验，smartdns提供来双栈IP优选机制，同一个域名，若IPV4的速度远快与IPV6，那么smartdns就会阻止IPV6的解析，让PC使用IPV4访问，具体配置文件通过`dualstack-ip-selection yes`启用此功能，通过`dualstack-ip-selection-threshold [time]`来修改阈值。如果要完全禁止IPV6 AAAA记录解析，可设置`force-AAAA-SOA yes`。
-
-1. 如何提高cache效率，加快访问速度  
-    smartdns提供了域名缓存机制，对查询的域名，进行缓存，缓存时间符合DNS TTL规范。为提高缓存命中率，可采用如下措施：  
-    * 适当增大cache的记录数  
-    通过`cache-size`来设置缓存记录数。  
-    查询压力大的环境下，并且有内存大的机器的情况下，可适当调大。  
-
-    * 适当设置最小TTL值  
-    通过`rr-ttl-min`将最低DNS TTL时间设置为一个合理值，延长缓存时间。  
-    建议是超时时间设置在10～30分钟，避免服务器域名变化时，查询到失效域名。
-
-    * 开启域名预获取功能  
-    通过`prefetch-domain yes`来启用域名预先获取功能，提高查询命中率。  
-    配合上述ttl超时时间，smartdns将在域名ttl即将超时使，再次发送查询请求，并缓存查询结果供后续使用。频繁访问的域名将会持续缓存。此功能将在空闲时消耗更多的CPU。
-
-1. 第二DNS如何自定义更多行为  
-    第二DNS可以作为其他DNS服务器的上游，提供更多的查询行为，通过bind配置支持可以绑定多个端口，不同端口可设置不同的标志，实现不同的功能，如
-
-    ```sh
-    # 绑定 6053端口，6053端口的请求将采用配置office组的上游查询，且不对结果进行测速，忽略address的配置地址。
-    bind [::]:6053 -no-speed-check -group office -no-rule-addr
-    ```
-
-## 编译
-
-smartdns包含了编译软件包的脚本，支持编译luci，debian，openwrt，optare安装包，可执行`package/build-pkg.sh`编译。
-
-## Donate
-
-如果你觉得此项目对你有帮助，请捐助我们，以使项目能持续发展，更加完善。
-
-### PayPal
-
-[![Support via PayPal](https://cdn.rawgit.com/twolfson/paypal-github-button/1.0.0/dist/button.svg)](https://paypal.me/PengNick/)
-
-### Alipay 支付宝
-
-![alipay](doc/alipay_donate.jpg)
-
-### Wechat 微信
-  
-![wechat](doc/wechat_donate.jpg)
-
-## 开源声明
-
-Smartdns 基于GPL V3协议开源。
+# SmartDNS
+
+**[English](ReadMe_en.md)**
+
+![SmartDNS](doc/smartdns-banner.png)  
+SmartDNS是一个运行在本地的DNS服务器，SmartDNS接受本地客户端的DNS查询请求，从多个上游DNS服务器获取DNS查询结果，并将访问速度最快的结果返回给客户端，提高网络访问速度。
+同时支持指定特定域名IP地址，并高性匹配，达到过滤广告的效果。  
+与dnsmasq的all-servers不同，smartdns返回的是访问速度最快的解析结果。 (详细差异请看[FAQ](#faq))  
+
+支持树莓派，openwrt，华硕路由器，windows等设备。  
+
+## 目录
+
+1. [软件效果展示](#软件效果展示)
+1. [特性](#特性)
+1. [架构](#架构)
+1. [使用](#使用)  
+    1. [下载配套安装包](#下载配套安装包)
+    1. [标准Linux系统安装](#标准linux系统安装树莓派x86_64系统)
+    1. [openwrt/LEDE](#openwrtlede)
+    1. [华硕路由器原生固件/梅林固件](#华硕路由器原生固件梅林固件)
+    1. [optware/entware](#optwareentware)
+    1. [Windows 10 WSL安装/WSL ubuntu](#windows-10-wsl安装wsl-ubuntu)
+1. [配置参数](#配置参数)
+1. [捐助](#donate)
+1. [FAQ](#faq)
+
+## 软件效果展示
+
+**阿里DNS**  
+使用阿里DNS查询百度IP，并检测结果。  
+
+```shell
+pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com 223.5.5.5
+Server:         223.5.5.5
+Address:        223.5.5.5#53
+
+Non-authoritative answer:
+www.baidu.com   canonical name = www.a.shifen.com.
+Name:   www.a.shifen.com
+Address: 180.97.33.108
+Name:   www.a.shifen.com
+Address: 180.97.33.107
+
+pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.107 -c 2
+PING 180.97.33.107 (180.97.33.107) 56(84) bytes of data.
+64 bytes from 180.97.33.107: icmp_seq=1 ttl=55 time=24.3 ms
+64 bytes from 180.97.33.107: icmp_seq=2 ttl=55 time=24.2 ms
+
+--- 180.97.33.107 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 24.275/24.327/24.380/0.164 ms
+pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.108 -c 2
+PING 180.97.33.108 (180.97.33.108) 56(84) bytes of data.
+64 bytes from 180.97.33.108: icmp_seq=1 ttl=55 time=31.1 ms
+64 bytes from 180.97.33.108: icmp_seq=2 ttl=55 time=31.0 ms
+
+--- 180.97.33.108 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 31.014/31.094/31.175/0.193 ms
+```
+
+**smartdns**  
+使用SmartDNS查询百度IP，并检测结果。
+
+```shell
+pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com
+Server:         192.168.1.1
+Address:        192.168.1.1#53
+
+Non-authoritative answer:
+www.baidu.com   canonical name = www.a.shifen.com.
+Name:   www.a.shifen.com
+Address: 14.215.177.39
+
+pi@raspberrypi:~/code/smartdns_build $ ping 14.215.177.39 -c 2
+PING 14.215.177.39 (14.215.177.39) 56(84) bytes of data.
+64 bytes from 14.215.177.39: icmp_seq=1 ttl=56 time=6.31 ms
+64 bytes from 14.215.177.39: icmp_seq=2 ttl=56 time=5.95 ms
+
+--- 14.215.177.39 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 5.954/6.133/6.313/0.195 ms
+
+```
+
+从对比看出，smartdns找到访问www.baidu.com最快的IP地址，这样访问百度比阿里DNS速度快5倍。
+
+## 特性
+
+1. **多DNS上游服务器**  
+   支持配置多个上游DNS服务器，并同时进行查询，即使其中有DNS服务器异常，也不会影响查询。  
+
+1. **返回最快IP地址**  
+   支持从域名所属IP地址列表中查找到访问速度最快的IP地址，并返回给客户端，提高网络访问速度。
+
+1. **支持多种查询协议**  
+   支持UDP，TCP，TLS, HTTPS查询，以及非53端口查询。
+
+1. **特定域名IP地址指定**  
+   支持指定域名的IP地址，达到广告过滤效果，避免恶意网站的效果。
+
+1. **域名高性能后缀匹配**  
+   支持域名后缀匹配模式，简化过滤配置，过滤20万条记录时间<1ms
+
+1. **域名分流**  
+   支持域名分流，不同类型的域名到不同的DNS服务器查询。
+
+1. **Linux/Windows多平台支持**  
+   支持标准Linux系统（树莓派），openwrt系统各种固件，华硕路由器原生固件。以及支持Windows 10 WSL (Windows Subsystem for Linux)。
+
+1. **支持IPV4, IPV6双栈**  
+   支持IPV4，IPV6网络，支持查询A, AAAA记录，支持双栈IP速度优化，并支持完全禁用IPV6 AAAA解析。
+
+1. **高性能，占用资源少**  
+   多线程异步IO模式，cache缓存查询结果。
+
+## 架构
+
+![Architecture](doc/architecture.png)
+
+1. SmartDNS接收本地网络设备的DNS查询请求，如PC，手机的查询请求。  
+2. SmartDNS将查询请求发送到多个上游DNS服务器，可采用标准UDP查询，非标准端口UDP查询，及TCP查询。  
+3. 上游DNS服务器返回域名对应的Server IP地址列表。SmartDNS检测与本地网络访问速度最快的Server IP。  
+4. 将访问速度最快的Server IP返回给本地客户端。  
+
+## 使用
+
+### 下载配套安装包  
+
+--------------
+
+下载配套版本的SmartDNS安装包，对应安装包配套关系如下。
+
+|系统 |安装包|说明
+|-----|-----|-----
+|标准Linux系统(树莓派)| smartdns.xxxxxxxx.arm-debian-all.deb|支持树莓派Raspbian stretch，Debian 9系统。
+|标准Linux系统(Armbian arm64)| smartdns.xxxxxxxx.aarch64-debian-all.deb|支持ARM64的Debian stretch，Debian 9系统。
+|标准Linux系统(x86_64)| smartdns.xxxxxxxx.x86_64-linux-all.tar.gz|支持x86_64 Linux 系统。
+|Windows 10 WSL (ubuntu)| smartdns.xxxxxxxx.x86_64-linux-all.tar.gz|支持Windows 10 WSL ubuntu系统。
+|标准Linux系统(x86)| smartdns.xxxxxxxx.x86-linux-all.tar.gz|支持x86系统。
+|optware|smartdns.xxxxxxxx.mips-optware-all.ipk|支持MIPS大端架构的optware系统。
+|optware|smartdns.xxxxxxxx.mipsel-optware-all.ipk|支持MIPS小端架构的optware系统。
+|optware|smartdns.xxxxxxxx.arm-optware-all.ipk|支持arm小端架构的optware系统。
+|openwrt|smartdns.xxxxxxxx.mips-openwrt-all.ipk|支持MIPS大端架构的openwrt系统。
+|openwrt|smartdns.xxxxxxxx.mipsel-openwrt-all.ipk|支持MIPS小端架构的openwrt系统。
+|openwrt|smartdns.xxxxxxxx.arm-openwrt-all.ipk|支持arm小端架构的openwrt系统。
+|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.all.ipk|openwrt管理界面。
+|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.all-luci-compat-all|兼容版本openwrt管理界面, openwrt 18.xx及之前版本安装。
+
+* 单独release的软件包为静态编译软件包，无外部依赖，但体积大。若需要小体积软件包，请自行编译或从openwrt/entware仓库获取。
+* 因静态编译，软件包未强制判断CPU架构，安装不正确的软件包将会导致服务无法启动，请获取正确的软件包。
+
+* **请在Release页面下载：[点击此处下载](https://github.com/pymumu/smartdns/releases)**
+
+```shell
+https://github.com/pymumu/smartdns/releases
+```
+
+* 各种设备的安装步骤，请参考后面的章节。
+
+### 标准Linux系统安装/树莓派/X86_64系统
+
+--------------
+
+1. 安装
+
+    下载配套安装包`smartdns.xxxxxxxx.arm-debian-all.deb`，并上传到Linux系统中。 执行如下命令安装
+
+    ```shell
+    dpkg -i smartdns.xxxxxxxx.arm-debian-all.deb
+    ```
+
+    x86系统下载配套安装包`smartdns.xxxxxxxx.x86_64-linux-all.tar.gz`, 并上传到Linux系统中。 执行如下命令安装
+
+    ```shell
+    tar zxf smartdns.xxxxxxxx.x86_64-linux-all.tar.gz
+    cd smartdns
+    chmod +x ./install
+    ./install -i
+    ```
+
+1. 修改配置
+
+    安装完成后，可配置smartdns的上游服务器信息。具体配置参数参考`配置参数`说明。  
+    一般情况下，只需要增加`server [IP]:port`, `server-tcp [IP]:port`配置项，
+    尽可能配置多个上游DNS服务器，包括国内外的服务器。配置参数请查看`配置参数`章节。
+
+    ```shell
+    vi /etc/smartdns/smartdns.conf
+    ```
+
+1. 启动服务
+
+    ```shell
+    systemctl enable smartdns
+    systemctl start smartdns
+    ```
+
+1. 将DNS请求转发的SmartDNS解析。
+
+    修改本地路由器的DNS服务器，将DNS服务器配置为SmartDNS。
+    * 登录到本地网络的路由器中，配置树莓派分配静态IP地址。
+    * 修改WAN口或者DHCP DNS为树莓派IP地址。  
+    注意：  
+    I. 每款路由器配置方法不尽相同，请百度搜索相关的配置方法。  
+    II.华为等路由器可能不支持配置DNS为本地IP，请修改PC端，手机端DNS服务器为树莓派IP。
+
+1. 检测服务是否配置成功。
+
+    使用`nslookup -querytype=ptr smartdns`查询域名  
+    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns        name = smartdns.
+    ```
+
+### openwrt
+
+--------------
+
+1. 安装
+
+    将软件使用winscp上传到路由器的/root目录，执行如下命令安装  
+
+    ```shell
+    opkg install smartdns.xxxxxxxx.xxxx.ipk
+    opkg install luci-app-smartdns.xxxxxxxx.xxxx.all.ipk
+    ```
+
+    * 注意： 19.07之前的版本，请安装`luci-app-smartdns.xxxxxxxxx.all-luci-compat-all`界面。
+
+1. 修改配置
+
+    登录openwrt管理页面，打开`Services`->`SmartDNS`进行配置。
+    * 在`Upstream Servers`增加上游DNS服务器配置，建议配置多个国内外DNS服务器。
+    * 在`Domain Address`指定特定域名的IP地址，可用于广告屏蔽。
+
+1. 启用服务
+
+   SmartDNS服务生效方法有两种，`一种是直接作为主DNS服务`；`另一种是作为dnsmasq的上游`。  
+   默认情况下，SmartDNS采用第一种方式。如下两种方式根据需求选择即可。
+
+1. 启用方法一：作为主DNS(默认方案)
+
+    * **启用smartdns的53端口重定向**
+
+        登录路由器，点击`Services`->`SmartDNS`->`redirect`，选择`重定向53端口到SmartDNS`启用53端口转发。
+
+    * **检测转发服务是否配置成功**
+
+        使用`nslookup -querytype=ptr smartdns`查询域名  
+        看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+        ```shell
+        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        smartdns        name = smartdns.
+        ```
+
+    * **界面提示重定向失败**
+
+        * 检查iptable，ip6table命令是否正确安装。
+        * openwrt 15.01系统不支持IPV6重定向，如网络需要支持IPV6，请将DNSMASQ上游改为smartdns，或者将smartdns的端口改为53，并停用dnsmasq。
+        * LEDE之后系统，请安装IPV6的nat转发驱动。点击`system`->`Software`，点击`update lists`更新软件列表后，安装`ip6tables-mod-nat`
+        * 使用如下命令检查路由规则是否生效。  
+
+        ```shell
+        iptables -t nat -L PREROUTING | grep REDIRECT
+        ```
+
+        * 如转发功能不正常，请使用方法二：作为DNSMASQ的上游。
+
+1. 方法二：作为DNSMASQ的上游
+
+    * **将dnsmasq的请求发送到smartdns**
+
+        登录路由器，点击`Services`->`SmartDNS`->`redirect`，选择`作为dnsmasq的上游服务器`设置dnsmasq的上游服务器为smartdns。
+
+    * **检测上游服务是否配置成功**
+
+        * 方法一：使用`nslookup -querytype=ptr smartdns`查询域名  
+        看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+        ```shell
+        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        smartdns        name = smartdns.
+        ```
+
+        * 方法二：使用`nslookup`查询`www.baidu.com`域名，查看结果中百度的IP地址是否`只有一个`，如有多个IP地址返回，则表示未生效，请多尝试几个域名检查。
+
+        ```shell
+        pi@raspberrypi:~ $ nslookup www.baidu.com 192.168.1.1
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        www.baidu.com   canonical name = www.a.shifen.com.
+        Name:   www.a.shifen.com
+        Address: 14.215.177.38
+        ```
+
+1. 启动服务
+
+    勾选配置页面中的`Enable(启用)`来启动SmartDNS
+
+1. 注意：
+
+    * 如已经安装chinaDNS，建议将chinaDNS的上游配置为SmartDNS。
+    * SmartDNS默认情况，将53端口的请求转发到SmartDNS的本地端口，由`Redirect`配置选项控制。
+
+### 华硕路由器原生固件/梅林固件
+
+--------------
+
+说明：梅林固件派生自华硕固件，理论上可以直接使用华硕配套的安装包使用。但目前未经验证，如有问题，请提交issue。
+
+1. 准备
+
+    在使用此软件时，需要确认路由器是否支持U盘，并准备好U盘一个。
+
+1. 启用SSH登录
+
+    登录管理界面，点击`系统管理`->点击`系统设置`，配置`Enable SSH`为`Lan Only`。  
+    SSH登录用户名密码与管理界面相同。
+
+1. 下载`Download Master`
+
+    在管理界面点击`USB相关应用`->点击`Download Master`下载。  
+    下载完成后，启用`Download Master`，如果不需要下载功能，此处可以卸载`Download Master`，但要保证卸载前Download Master是启用的。  
+
+1. 安装SmartDNS
+
+    将软件使用winscp上传到路由器的`/tmp/mnt/sda1`目录。（或网上邻居复制到sda1共享目录）
+
+    ```shell
+    ipkg install smartdns.xxxxxxx.mipsbig.ipk
+    ```
+
+1. 重启路由器生效服务
+
+    待路由器启动后，使用`nslookup -querytype=ptr smartdns`查询域名  
+    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns        name = smartdns.
+    ```
+
+1. 额外说明
+
+    上述过程，smartdns将安装到U盘根目录，采用optware的模式运行。
+    其目录结构如下： （此处仅列出smartdns相关文件）  
+
+    ```shell
+    U盘
+    └── asusware.mipsbig
+            ├── bin
+            ├── etc
+            |    ├── smartdns
+            |    |     └── smartdns.conf
+            |    └── init.d
+            |          └── S50smartdns
+            ├── lib
+            ├── sbin
+            ├── usr
+            |    └── sbin
+            |          └── smartdns
+            ....
+    ```
+
+    如要修改配置，可以ssh登录路由器，使用vi命令修改  
+
+    ```shell
+    vi /opt/etc/smartdns/smartdns.conf
+    ```
+
+    也可以通过网上邻居修改，网上邻居共享目录`sda1`看不到`asusware.mipsbig`目录，但可以直接在`文件管理器`中输入`asusware.mipsbig\etc\init.d`访问
+
+    ```shell
+    \\192.168.1.1\sda1\asusware.mipsbig\etc\init.d
+    ```
+
+### optware/entware
+
+--------------
+
+1. 准备
+
+    在使用此软件时，需要确认路由器是否支持U盘，并准备好U盘一个。
+
+1. 安装SmartDNS
+
+    将软件使用winscp上传到路由器的`/tmp`目录。
+
+    ```shell
+    ipkg install smartdns.xxxxxxx.mipsbig.ipk
+    ```
+
+1. 修改smartdns配置
+
+    ```shell
+    vi /opt/etc/smartdns/smartdns.conf
+    ```
+
+    另外，如需支持IPV6，可设置工作模式为`2`，将dnsmasq的DNS服务禁用，smartdns为主用DNS服务器。将文件`/opt/etc/smartdns/smartdns-opt.conf`，中的`SMARTDNS_WORKMODE`修改为2.
+
+    ```shell
+    SMARTDNS_WORKMODE="2"
+    ```
+
+1. 重启路由器生效服务
+
+    待路由器启动后，使用`nslookup -querytype=ptr smartdns`查询域名  
+    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns        name = smartdns.
+    ```
+
+    注意：若服务没有自动启动，则需要设置optwre/entware自动启动，具体方法参考optware/entware的文档。
+
+### Windows 10 WSL安装/WSL ubuntu
+
+--------------
+
+1. 安装Windows 10 WSL ubuntu系统
+
+    安装Windows 10 WSL运行环境，发行版本选择ubuntu系统。安装步骤请参考[WSL安装说明](https://docs.microsoft.com/en-us/windows/wsl/install-win10)
+
+1. 安装smartdns
+
+    下载安装包`smartdns.xxxxxxxx.x86-linux-all.tar.gz`，并解压到D盘根目录。解压后目录如下：
+
+    ```shell
+    D:\SMARTDNS
+    ├─etc
+    │  ├─default
+    │  ├─init.d
+    │  └─smartdns
+    ├─package
+    │  └─windows
+    ├─src
+    └─systemd
+
+    ```
+
+    双击`D:\smartdns\package\windows`目录下的`install.bat`进行安装。要求输入密码时，请输入`WLS ubuntu`的密码。
+
+1. 修改配置
+
+    记事本打开`D:\smartdns\etc\smartdns`目录中的`smartdns.conf`配置文件配置smartdns。具体配置参数参考`配置参数`说明。  
+    一般情况下，只需要增加`server [IP]:port`, `server-tcp [IP]:port`配置项，
+    尽可能配置多个上游DNS服务器，包括国内外的服务器。配置参数请查看`配置参数`章节。
+
+1. 重新加载配置
+
+    双击`D:\smartdns\package\windows`目录下的`reload.bat`进行安装。要求输入密码时，请输入`WLS ubuntu`的密码。
+
+1. 将DNS请求转发的SmartDNS解析。
+
+    将Windows的默认DNS服务器修改为`127.0.0.1`，具体步骤参考[IP配置](https://support.microsoft.com/zh-cn/help/15089/windows-change-tcp-ip-settings)
+
+1. 检测服务是否配置成功。
+
+    使用`nslookup -querytype=ptr smartdns`查询域名  
+    看命令结果中的`name`项目是否显示为`smartdns`或`主机名`，如`smartdns`则表示生效  
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns  name = smartdns.
+    ```
+
+## 配置参数
+
+|参数|  功能  |默认值|配置值|例子|
+|--|--|--|--|--|
+|server-name|DNS服务器名称|操作系统主机名/smartdns|符合主机名规格的字符串|server-name smartdns
+|bind|DNS监听端口号|[::]:53|可绑定多个端口<br>`IP:PORT`: 服务器IP，端口号。<br>`[-group]`: 请求时使用的DNS服务器组。<br>`[-no-rule-addr]`：跳过address规则。<br>`[-no-rule-nameserver]`：跳过Nameserver规则。<br>`[-no-rule-ipset]`：跳过Ipset规则。<br>`[no-rule-soa]`：跳过SOA(#)规则.<br>`[no-dualstack-selection]`：停用双栈测速。<br>`[-no-speed-check]`：停用测速。<br>`[-no-cache]`：停止缓存|bind :53
+|bind-tcp|TCP DNS监听端口号|[::]:53|可绑定多个端口<br>`IP:PORT`: 服务器IP，端口号。<br>`[-group]`: 请求时使用的DNS服务器组。<br>`[-no-rule-addr]`：跳过address规则。<br>`[-no-rule-nameserver]`：跳过Nameserver规则。<br>`[-no-rule-ipset]`：跳过Ipset规则。<br>`[no-rule-soa]`：跳过SOA(#)规则.<br>`[no-dualstack-selection]`：停用双栈测速。<br>`[-no-speed-check]`：停用测速。<br>`[-no-cache]`：停止缓存|bind-tcp :53
+|cache-size|域名结果缓存个数|512|数字|cache-size 512
+|tcp-idle-time|TCP链接空闲超时时间|120|数字|tcp-idle-time 120
+|rr-ttl|域名结果TTL|远程查询结果|大于0的数字|rr-ttl 600
+|rr-ttl-min|允许的最小TTL值|远程查询结果|大于0的数字|rr-ttl-min 60
+|rr-ttl-max|允许的最大TTL值|远程查询结果|大于0的数字|rr-ttl-max 600
+|log-level|设置日志级别|error|fatal,error,warn,notice,info,debug|log-level error
+|log-file|日志文件路径|/var/log/smartdns.log|路径|log-file /var/log/smartdns.log
+|log-size|日志大小|128K|数字+K,M,G|log-size 128K
+|log-num|日志归档个数|2|数字|log-num 2
+|audit-enable|设置审计启用|no|[yes\|no]|audit-enable yes
+|audit-file|审计文件路径|/var/log/smartdns-audit.log|路径|audit-file /var/log/smartdns-audit.log
+|audit-size|审计大小|128K|数字+K,M,G|audit-size 128K
+|audit-num|审计归档个数|2|数字|audit-num 2
+|conf-file|附加配置文件|无|文件路径|conf-file /etc/smartdns/smartdns.more.conf
+|server|上游UDP DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server 8.8.8.8:53 -blacklist-ip -group g1
+|server-tcp|上游TCP DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-tcp 8.8.8.8:53
+|server-tls|上游TLS DNS|无|可重复<br>`[ip][:port]`：服务器IP，端口可选。<br>`[-spki-pin [sha256-pin]]`: TLS合法性校验SPKI值，base64编码的sha256 SPKI pin值<br>`[-host-name]`：TLS SNI名称。<br>`[-tls-host-verify]`: TLS证书主机名校验。<br> `-no-check-certificate:`：跳过证书校验。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-tls 8.8.8.8:853
+|server-https|上游HTTPS DNS|无|可重复<br>`https://[host][:port]/path`：服务器IP，端口可选。<br>`[-spki-pin [sha256-pin]]`: TLS合法性校验SPKI值，base64编码的sha256 SPKI pin值<br>`[-host-name]`：TLS SNI名称<br>`[-http-host]`：http协议头主机名。<br>`[-tls-host-verify]`: TLS证书主机名校验。<br> `-no-check-certificate:`：跳过证书校验。<br>`[-blacklist-ip]`：blacklist-ip参数指定使用blacklist-ip配置IP过滤结果。<br>`[-whitelist-ip]`：whitelist-ip参数指定仅接受whitelist-ip中配置IP范围。<br>`[-group [group] ...]`：DNS服务器所属组，比如office, foreign，和nameserver配套使用。<br>`[-exclude-default-group]`：将DNS服务器从默认组中排除| server-https https://cloudflare-dns.com/dns-query
+|speed-check-mode|测速模式选择|无|[ping\|tcp:[80]\|none]|speed-check-mode ping,tcp:80
+|address|指定域名IP地址|无|address /domain/[ip\|-\|-4\|-6\|#\|#4\|#6] <br>`-`表示忽略 <br>`#`表示返回SOA <br>`4`表示IPV4 <br>`6`表示IPV6| address /www.example.com/1.2.3.4
+|nameserver|指定域名使用server组解析|无|nameserver /domain/[group\|-], `group`为组名，`-`表示忽略此规则，配套server中的`-group`参数使用| nameserver /www.example.com/office
+|ipset|域名IPSET|None|ipset /domain/[ipset\|-], `-`表示忽略|ipset /www.example.com/pass
+|ipset-timeout|设置IPSET超时功能启用|auto|[yes]|ipset-timeout yes
+|domain-rules|设置域名规则|无|domain-rules /domain/ [-rules...]<br>`[-speed-check-mode]`: 测速模式，参考`speed-check-mode`配置<br>`[-address]`: 参考`address`配置<br>`[-nameserver]`: 参考`nameserver`配置<br>`[-ipset]`:参考`ipset`配置|domain-rules /www.example.com/ -speed-check-mode none
+|bogus-nxdomain|假冒IP地址过滤|无|[ip/subnet]，可重复| bogus-nxdomain 1.2.3.4/16
+|ignore-ip|忽略IP地址|无|[ip/subnet]，可重复| ignore-ip 1.2.3.4/16
+|whitelist-ip|白名单IP地址|无|[ip/subnet]，可重复| whitelist-ip 1.2.3.4/16
+|blacklist-ip|黑名单IP地址|无|[ip/subnet]，可重复| blacklist-ip 1.2.3.4/16
+|force-AAAA-SOA|强制AAAA地址返回SOA|no|[yes\|no]|force-AAAA-SOA yes
+|prefetch-domain|域名预先获取功能|no|[yes\|no]|prefetch-domain yes
+|serve-expired|过期缓存服务功能|no|[yes\|no]，开启此功能后，如果有请求时尝试回应TTL为0的过期记录，并并发查询记录，以避免查询等待|serve-expired yes
+|serve-expired-ttl|过期缓存服务最长超时时间|0|秒，0：表示停用超时，> 0表示指定的超时的秒数|serve-expired-ttl 0
+|dualstack-ip-selection|双栈IP优选|no|[yes\|no]|dualstack-ip-selection yes
+|dualstack-ip-selection-threshold|双栈IP优选阈值|30ms|毫秒|dualstack-ip-selection-threshold [0-1000]
+|ca-file|证书文件|/etc/ssl/certs/ca-certificates.crt|路径|ca-file /etc/ssl/certs/ca-certificates.crt
+|ca-path|证书文件路径|/etc/ssl/certs|路径|ca-path /etc/ssl/certs
+
+## FAQ
+
+1. SmartDNS和DNSMASQ有什么区别  
+    SMARTDNS在设计上并不是替换DNSMASQ的，SMARTDNS主要功能集中在DNS解析增强上，增强部分有：
+    * 多上游服务器并发请求，对结果进行测速后，返回最佳结果；
+    * address，ipset域名匹配采用高效算法，查询匹配更加快速高效，路由器设备依然高效。
+    * 域名匹配支持忽略特定域名，可单独匹配IPv4， IPV6，支持多样化定制。
+    * 针对广告屏蔽功能做增强，返回SOA，屏蔽广告效果更佳；
+    * IPV4，IPV6双栈IP优选机制，在双网情况下，选择最快的网络通讯。
+    * 支持最新的TLS, HTTPS协议，提供安全的DNS查询能力。
+    * ECS支持，是查询结果更佳准确。
+    * IP黑名单，忽略IP机制，使域名查询更佳准确。
+    * 域名预查询，访问常用网站更加快速。
+    * 域名TTL可指定，使访问更快速。
+    * 高速缓存机制，使访问更快速。
+    * 异步日志，审计机制，在记录信息的同时不影响DNS查询性能。
+    * 域名组（group）机制，特定域名使用特定上游服务器组查询，避免隐私泄漏。
+    * 第二DNS支持自定义更多行为。
+
+1. 如何配置上游服务器最佳。  
+    smartdns有测速机制，在配置上游服务器时，建议配置多个上游DNS服务器，包含多个不同区域的服务器，但总数建议在10个左右。推荐配置  
+    * 运营商DNS。
+    * 国内公共DNS，如`119.29.29.29`, `223.5.5.5`。
+    * 国外公共DNS，如`8.8.8.8`, `8.8.4.4`。
+
+1. 如何启用审计日志  
+    审计日志记录客户端请求的域名，记录信息包括，请求时间，请求IP，请求域名，请求类型，如果要启用审计日志，在配置界面配置`audit-enable yes`启用，`audit-size`, `audit-file`, `audit-num`分别配置审计日志文件大小，审计日志文件路径，和审计日志文件个数。审计日志文件将会压缩存储以节省空间。
+
+1. 如何避免隐私泄漏  
+    smartdns默认情况下，会将请求发送到所有配置的DNS服务器，若上游DNS服务器使用DNS，或记录日志，将会导致隐私泄漏。为避免隐私泄漏，请尽量：  
+    * 配置使用可信的DNS服务器。
+    * 优先使用TLS查询。
+    * 设置上游DNS服务器组。
+
+1. 如何屏蔽广告  
+    smartdns具备高性能域名匹配算法，通过域名方式过滤广告非常高效，如要屏蔽广告，只需要配置类似如下记录即可，如，屏蔽`*.ad.com`，则配置：
+
+    ```sh
+    address /ad.com/#
+    ```
+
+    域名的使后缀模式，过滤*.ad.com，`#`表示返回SOA，使屏蔽广告更加高效，如果要单独屏蔽IPV4， 或IPV6， 在`#`后面增加数字，如`#4`表示对IPV4生效。若想忽略特定子域名的屏蔽，可配置如下，如忽略`pass.ad.com`，可配置如下：
+
+    ```sh
+    address /pass.ad.com/-
+    ```
+
+1. 如何使用DNS查询分流  
+    某些情况下，需要将有些域名使用特定的DNS服务器来查询来做到DNS分流。比如。
+
+    ```sh
+    .home -> 192.168.1.1
+    .office -> 10.0.0.1
+    ```
+
+    .home 结尾的域名发送到192.168.1.1解析  
+    .office 结尾的域名发送到10.0.0.1解析
+    其他域名采用默认的模式解析。
+    这种情况的分流配置如下：
+
+    ```sh
+    #配置上游，用-group指定组名，用-exclude-default-group将服务器从默认组中排除。
+    server 192.168.1.1 -group home -exclude-default-group
+    server 10.0.0.1 -group office -exclude-default-group
+    server 8.8.8.8
+
+    #配置解析的域名
+    nameserver /.home/home
+    nameserver /.office/office
+    ```
+
+    通过上述配置即可实现DNS解析分流，如果需要实现按请求端端口分流，可以配置第二DNS服务器，bind配置增加--group参数指定分流名称。
+
+    ```sh
+    bind :7053 -group office
+    bind :8053 -group home
+    ```
+
+1. IPV4, IPV6双栈IP优选功能如何使用  
+    目前IPV6已经开始普及，但IPV6网络在速度上，某些情况下还不如IPV4，为在双栈网络下获得较好的体验，smartdns提供来双栈IP优选机制，同一个域名，若IPV4的速度远快与IPV6，那么smartdns就会阻止IPV6的解析，让PC使用IPV4访问，具体配置文件通过`dualstack-ip-selection yes`启用此功能，通过`dualstack-ip-selection-threshold [time]`来修改阈值。如果要完全禁止IPV6 AAAA记录解析，可设置`force-AAAA-SOA yes`。
+
+1. 如何提高cache效率，加快访问速度  
+    smartdns提供了域名缓存机制，对查询的域名，进行缓存，缓存时间符合DNS TTL规范。为提高缓存命中率，可采用如下措施：  
+    * 适当增大cache的记录数  
+    通过`cache-size`来设置缓存记录数。  
+    查询压力大的环境下，并且有内存大的机器的情况下，可适当调大。  
+
+    * 适当设置最小TTL值  
+    通过`rr-ttl-min`将最低DNS TTL时间设置为一个合理值，延长缓存时间。  
+    建议是超时时间设置在10～30分钟，避免服务器域名变化时，查询到失效域名。
+
+    * 开启域名预获取功能  
+    通过`prefetch-domain yes`来启用域名预先获取功能，提高查询命中率。  
+    配合上述ttl超时时间，smartdns将在域名ttl即将超时使，再次发送查询请求，并缓存查询结果供后续使用。频繁访问的域名将会持续缓存。此功能将在空闲时消耗更多的CPU。
+
+    * 过期缓存服务功能  
+    通过`serve-expired`来启用过期缓存服务功能，可提高缓存命中率的同时，降低CPU占用。  
+    此功能会在TTL超时后，将返回TTL=0给客户端，并且同时再次发送查询请求，并缓存新的结果给后续使用。
+
+1. 第二DNS如何自定义更多行为  
+    第二DNS可以作为其他DNS服务器的上游，提供更多的查询行为，通过bind配置支持可以绑定多个端口，不同端口可设置不同的标志，实现不同的功能，如
+
+    ```sh
+    # 绑定 6053端口，6053端口的请求将采用配置office组的上游查询，且不对结果进行测速，忽略address的配置地址。
+    bind [::]:6053 -no-speed-check -group office -no-rule-addr
+    ```
+
+## 编译
+
+smartdns包含了编译软件包的脚本，支持编译luci，debian，openwrt，optare安装包，可执行`package/build-pkg.sh`编译。
+
+## Donate
+
+如果你觉得此项目对你有帮助，请捐助我们，以使项目能持续发展，更加完善。
+
+### PayPal
+
+[![Support via PayPal](https://cdn.rawgit.com/twolfson/paypal-github-button/1.0.0/dist/button.svg)](https://paypal.me/PengNick/)
+
+### Alipay 支付宝
+
+![alipay](doc/alipay_donate.jpg)
+
+### Wechat 微信
+  
+![wechat](doc/wechat_donate.jpg)
+
+## 开源声明
+
+Smartdns 基于GPL V3协议开源。
diff --git a/release/src/router/smartdns/ReadMe_en.md b/release/src/router/smartdns/ReadMe_en.md
index 67ada9119e..bc812cc074 100644
--- a/release/src/router/smartdns/ReadMe_en.md
+++ b/release/src/router/smartdns/ReadMe_en.md
@@ -1,702 +1,668 @@
-# SmartDNS
-
-![SmartDNS](doc/smartdns-banner.png)  
-SmartDNS is a local DNS server. SmartDNS accepts DNS query requests from local clients, obtains DNS query results from multiple upstream DNS servers, and returns the fastest access results to clients.  
-Avoiding DNS pollution and improving network access speed, supports high-performance ad filtering.  
-Unlike dnsmasq's all-servers, smartdns returns the fastest access resolution. （[read more](#faq)）
-
-Support Raspberry Pi, openwrt, ASUS router, Windows and other devices.  
-
-## Table Of Content
-
-1. [Software Show](#software-show)
-1. [Features](#features)
-1. [Architecture](#architecture)
-1. [Usage](#usage)  
-    1. [Download the package](#download-the-package)
-    1. [Standard Linux system installation/Raspberry Pi, X86_64 system](#standard-linux-system-installation/raspberry-pi,-x86_64-system)
-    1. [openwrt/LEDE](#openwrt/lede)
-    1. [ASUS router native firmware / Merlin firmware](#asus-router-native-firmware-/-merlin-firmware)
-    1. [optware/entware](#optware/entware)
-    1. [Windows 10 WSL Installation/WSL ubuntu](#windows-10-wsl-installation/wsl-ubuntu)
-1. [Configuration parameter](#configuration-parameter)
-1. [Donate](#Donate)
-1. [FAQ](#FAQ)
-
-## Software Show
-
-**Ali DNS**  
-Use Ali DNS to query Baidu's IP and test the results.  
-
-```shell
-pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com 223.5.5.5
-Server:         223.5.5.5
-Address:        223.5.5.5#53
-
-Non-authoritative answer:
-www.baidu.com   canonical name = www.a.shifen.com.
-Name:   www.a.shifen.com
-Address: 180.97.33.108
-Name:   www.a.shifen.com
-Address: 180.97.33.107
-
-pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.107 -c 2
-PING 180.97.33.107 (180.97.33.107) 56(84) bytes of data.
-64 bytes from 180.97.33.107: icmp_seq=1 ttl=55 time=24.3 ms
-64 bytes from 180.97.33.107: icmp_seq=2 ttl=55 time=24.2 ms
-
---- 180.97.33.107 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 24.275/24.327/24.380/0.164 ms
-pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.108 -c 2
-PING 180.97.33.108 (180.97.33.108) 56(84) bytes of data.
-64 bytes from 180.97.33.108: icmp_seq=1 ttl=55 time=31.1 ms
-64 bytes from 180.97.33.108: icmp_seq=2 ttl=55 time=31.0 ms
-
---- 180.97.33.108 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 31.014/31.094/31.175/0.193 ms
-```
-
-**smartdns**  
-Use SmartDNS to query Baidu IP and test the results.
-
-```shell
-pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com
-Server:         192.168.1.1
-Address:        192.168.1.1#53
-
-Non-authoritative answer:
-www.baidu.com   canonical name = www.a.shifen.com.
-Name:   www.a.shifen.com
-Address: 14.215.177.39
-
-pi@raspberrypi:~/code/smartdns_build $ ping 14.215.177.39 -c 2
-PING 14.215.177.39 (14.215.177.39) 56(84) bytes of data.
-64 bytes from 14.215.177.39: icmp_seq=1 ttl=56 time=6.31 ms
-64 bytes from 14.215.177.39: icmp_seq=2 ttl=56 time=5.95 ms
-
---- 14.215.177.39 ping statistics ---
-2 packets transmitted, 2 received, 0% packet loss, time 1001ms
-rtt min/avg/max/mdev = 5.954/6.133/6.313/0.195 ms
-
-```
-
-From the comparison, smartdns found the fastest IP address to visit www.baidu.com, so accessing Baidu's DNS is 5 times faster than Ali DNS.
-
-## Features
-
-1. **Multiple upstream DNS servers**  
-   Support configuring multiple upstream DNS servers and query at the same time.the query will not be affected, Even if there is a DNS server exception.  
-
-2. **Return the fastest IP address**  
-   Supports finding the fastest access IP address from the IP address list of the domain name and returning it to the client to avoid DNS pollution and improve network access speed.
-
-3. **Support for multiple query protocols**  
-   Support UDP, TCP, TLS, HTTPS queries, and non-53 port queries, effectively avoiding DNS pollution.
-
-4. **Domain IP address specification**  
-   Support configuring IP address of specific domain to achieve the effect of advertising filtering, and avoid malicious websites.
-
-5. **Domain name high performance rule filtering**  
-   Support domain name suffix matching mode, simplify filtering configuration, filter 200,000 recording and take time <1ms.
-
-6. **Linux/Windows multi-platform support**  
-   Support standard Linux system (Raspberry Pi), openwrt system various firmware, ASUS router native firmware. Support Windows 10 WSL (Windows Subsystem for Linux).
-
-7. **Support IPV4, IPV6 dual stack**  
-   Support IPV4, IPV6 network, support query A, AAAA record, dual-stack IP selection, and disale IPV6 AAAA record.
-
-8. **High performance, low resource consumption**  
-   Multi-threaded asynchronous IO mode, cache cache query results.
-
-## Architecture
-
-![Architecture](doc/architecture.png)
-
-1. SmartDNS receives DNS query requests from local network devices, such as PCs and mobile phone query requests.
-2. SmartDNS sends query requests to multiple upstream DNS servers, using standard UDP queries, non-standard port UDP queries, and TCP queries.
-3. The upstream DNS server returns a list of Server IP addresses corresponding to the domain name. SmartDNS detects the fastest Server IP with local network access.
-4. Return the fastest accessed Server IP to the local client.
-
-## Usage
-
-### Download the package
-
---------------
-
-Download the matching version of the SmartDNS installation package. The corresponding installation package is as follows.
-
-|system |package|Description
-|-----|-----|-----
-|Standard Linux system (Raspberry Pi)| smartdns.xxxxxxxx.armhf.deb|Support Raspberry Pi Raspbian stretch, Debian 9 system.
-|Standard Linux system (Armbian arm64)| smartdns.xxxxxxxx.arm64.deb|Support Armbian debian stretch, Debian 9 system.
-|Standard Linux system (x86_64)| smartdns.xxxxxxxx.x86_64.tar.gz|Support for x86_64 Linux systems.
-|Windows 10 WSL (Ubuntu)| smartdns.xxxxxxxx.x86_64.tar.gz|Windows 10 WSL ubuntu.
-|Standard Linux system (x86)| smartdns.xxxxxxxx.x86.tar.gz|Support for x86_64 systems.
-|ASUS native firmware (optware)|smartdns.xxxxxxx.mipsbig.ipk|Systems that support the MIPS big-end architecture, such as RT-AC55U, RT-AC66U.
-|ASUS native firmware (optware)|smartdns.xxxxxxx.mipsel.ipk|System that supports the MIPS little endian architecture.
-|ASUS native firmware (optware)|smartdns.xxxxxxx.arm.ipk|System that supports the ARM small endian architecture, such as the RT-AC88U, RT-AC68U.
-|Padavan|smartdns.xxxxxxx.mipselsf.ipk|padavan Firmware.
-|openwrt 15.01|smartdns.xxxxxxxx.ar71xx.ipk|Support AR71XX MIPS system.
-|openwrt 15.01|smartdns.xxxxxxxx.ramips_24kec.ipk|Support small-end routers such as MT762X
-|openwrt 15.01(Pandora)|smartdns.xxxxxxxx.mipsel_24kec_dsp.ipk|Support for Pandora firmware of MT7620 series
-|openwrt 15.01(Pandora)|smartdns.xxxxxxxx.mips_74kc_dsp2.ipk|Support for Pandora firmware of AR71xx series
-|openwrt 18.06|smartdns.xxxxxxxx.mips_24kc.ipk|Support AR71XX MIPS system.
-|openwrt 18.06|smartdns.xxxxxxxx.mipsel_24kc.ipk|Support small-end routers such as MT726X
-|openwrt 18.06|smartdns.xxxxxxxx.x86_64.ipk|Support x86_64 router
-|openwrt 18.06|smartdns.xxxxxxxx.i386_pentium4.ipk|Support x86_64 router
-|openwrt 18.06|smartdns.xxxxxxxxxxx.arm_cortex-a9.ipk|Router supporting arm A9 core CPU
-|openwrt 18.06|smartdns.xxxxxxxxx.arm_cortex-a7_neon-vfpv4.ipk|Router supporting arm A7 core CPU
-|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.xxxx.all.ipk|Openwrt management interface
-
-* The openwrt system supports a lot of CPU architecture. The above table does not list all the supported systems. Please check the CPU architecture and download it.
-* The merlin Merlin firmware theory is the same as the ASUS firmware, so install the corresponding ipk package according to the hardware type. (Merlin is not verified yet, and has a problem to submit an issue)
-* The CPU architecture can be found in the router management interface:  
-    Log in to the router, click `System`->`Software`, click the `Configuration` tab page, and find the corresponding software architecture in the opkg installation source. The download path can be found, as follows, the architecture is ar71xx
-
-    ```shell
-    src/gz chaos_calmer_base http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base
-    ```
-
-* Or after login to the system, you can query the architecture with the following commands:
-
-  * **Openwrt series commands**
-
-    ```shell
-    opkg print_architecture
-    ```
-
-  * **Optiware series commands**
-
-    ```shell
-    ipkg print_architecture
-    ```
-
-  * **Dedebian Series Order**
-
-    ```shell
-    dpkg -- print-architecture
-    ```
-
-  * **for example**
-
-    The following query result `arch ar71xx 10` represents the ar71xx series architecture, so select the `smartdns.xxxxxxx.ar71xx.ipk` installation package.
-
-    ```shell
-    Root@OpenWrt:# opkg print_architecture
-    Arch all 1
-    Arch noarch 1
-    Arch ar71xx 10
-    ```
-
-* **Please download from the Release page: [Download here](https://github.com/pymu/smartdns/releases)**
-
-```shell
-https://github.com/pymumu/smartdns/releases
-```
-
-* For the installation procedure, please refer to the following sections.
-
-### Standard Linux system installation/Raspberry Pi, X86_64 system
-
---------------
-
-1. Installation
-
-    Download the installation package like `smartdns.xxxxxxxx.armhf.deb` and upload it to the Linux system. Run the following command to install
-
-    ```shell
-    dpkg -i smartdns.xxxxxxxx.armhf.deb
-    ```
-
-    For X86-64 system, download the installation package like `smartdns.xxxxxxxx.x86-64.tar.gz` and upload it to the Linux system. Run the following command to install
-
-    ```shell
-    tar zxf smartdns.xxxxxxxx.x86-64.tar.gz
-    cd smartdns
-    chmod +x ./install
-    ./install -i
-    ```
-
-1. Configuration
-
-    After the installation is complete, you can configure the upstream server to  smartdns. Refer to the `Configuration Parameters` for specific configuration parameters.  
-    In general, you only need to add `server [IP]:port`, `server-tcp [IP]:port` configuration items.  
-    Configure as many upstream DNS servers as possible, including servers at home and abroad. Please refer to the `Configuration Parameters` section for configuration parameters.  
-
-    ```shell
-    vi /etc/smartdns/smartdns.conf
-    ```
-
-1. Start Service
-
-    ```shell
-    systemctl enable smartdns
-    systemctl start smartdns
-    ```
-
-1. Forwarding DNS request to SmartDNS
-
-    Modify the DNS server of the local router and configure the DNS server as SmartDNS.
-    * Log in to the router on the local network and configure the Raspberry Pi to assign a static IP address.
-    * Modify the WAN port or DHCP DNS to the Raspberry Pi IP address.
-    Note:
-    I. Each router configuration method is different. Please search Baidu for related configuration methods.
-    II. some routers may not support configuring custom DNS server. in this case, please modify the PC's, mobile phone's DNS server to the ip of Raspberry Pi.
-
-1. Check if the service is configured successfully
-
-    Query domain name with `nslookup -querytype=ptr 0.0.0.0`  
-    Check if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-### openwrt/LEDE
-
---------------
-
-1. Installation
-
-    Upload the software to the /root directory of the router with winscp or other tool, and execute the following command to install it.
-
-    ```shell
-    opkg install smartdns.xxxxxxxx.xxxx.ipk
-    opkg install luci-app-smartdns.xxxxxxxx.xxxx.all.ipk
-    ```
-
-1. Configuration
-
-    Log in to the openwrt management page and open `Services`->`SmartDNS` to configure SmartDNS.
-    * Add upstream DNS server configuration to `Upstream Servers`. It is recommended to configure multiple DNS servers at home and abroad.
-    * Specify the IP address of a specific domain name in `Domain Address`, which can be used for ad blocking.
-
-1. Start Service
-
-   There are two ways to use the SmartDNS service, `one is directly as the primary DNS service`, `the other is as the upstream of dnsmasq`.  
-   By default, SmartDNS uses the first method. You can choose according to your needs in the following two ways.
-
-1. Method 1: SmartDNS as primary DNS Server (default scheme)
-
-    * **Enable SmartDNS port 53 port redirection**
-
-        Log in to the router, click on `Services`->`SmartDNS`->`redirect`, select `Redirect 53 port to SmartDNS` option to enable port 53 forwarding.
-
-    * **Check if the service is configured successfully**
-
-        Query domain name with `nslookup -querytype=ptr 0.0.0.0`
-        See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-        ```shell
-        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        0.0.0.0.in-addr.arpa  name = smartdns.
-        ```
-
-    * **The interface prompts that the redirect failed**
-
-        * Check if iptable, ip6table command is installed correctly.
-        * The openwrt 15.01 system does not support IPV6 redirection. If the network needs to support IPV6, please change DNSMASQ upstream to smartdns, or change the smartdns port to 53, and disable dnsmasq.
-        * After LEDE system, please install IPV6 nat forwarding driver. Click `system`->`Software`, click `update lists` to update the software list, install `ip6tables-mod-nat`
-        * Use the following command to check whether the routing rule takes effect.
-
-        ```shell
-        iptables -t nat -L PREROUTING | grep REDIRECT
-        ```
-
-        * If the forwarding function is abnormal, please use Method 2: As the upstream of DNSMASQ.
-
-1. Method 2: SmartDNS as upstream DNS Server of DNSMASQ
-
-    * **Forward dnsmasq's request to SmartDNS**
-
-        Log in to the router, click on `Services`->`SmartDNS`->`redirect`, select `Run as dnsmasq upstream server` option to forwarding dnsmasq request to Smartdns.
-
-    * **Check if the service is configured successfully**
-
-        * Method 1: Query domain name with `nslookup -querytype=ptr 0.0.0.1`
-        See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-        ```shell
-        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        0.0.0.0.in-addr.arpa  name = smartdns.
-        ```
-
-        * Method 2: Use `nslookup` to query the `www.baidu.com` domain name to see if the IP address of Baidu in the result is `only one. If there are multiple IP addresses returned, it means that it is not valid. Please try to check several domain names.
-
-        ```shell
-        pi@raspberrypi:~ $ nslookup www.baidu.com 192.168.1.1
-        Server:         192.168.1.1
-        Address:        192.168.1.1#53
-
-        Non-authoritative answer:
-        www.baidu.com   canonical name = www.a.shifen.com.
-        Name:   www.a.shifen.com
-        Address: 14.215.177.38
-        ```
-
-1. Start Service
-
-    Check the `Enable' in the configuration page to start SmartDNS server.
-
-1. Note
-
-    * If chinaDNS is already installed, it is recommended to configure the upstream of chinaDNS as SmartDNS.
-    * SmartDNS defaults to forwarding port 53 requests to the local port of SmartDNS, controlled by the `Redirect` configuration option.
-
-### ASUS router native firmware / Merlin firmware
-
---------------
-
-Note: Merlin firmware is derived from ASUS firmware and can theoretically be used directly with the ASUS package. However, it is currently unverified. If you have any questions, please submit an issue.
-
-1. Prepare
-
-    When using this software, you need to confirm whether the router supports U disk and prepare a USB disk.
-
-1. Enable SSH login
-
-    Log in to the management interface, click `System Management`-> Click `System Settings` and configure `Enable SSH` to `Lan Only`.  
-    The SSH login username and password are the same as the management interface.
-
-1. Insstall `Download Master`
-
-    In the management interface, click `USB related application`-> click `Download Master` to download.  
-    After the download is complete, enable `Download Master`. If you do not need the download function, you can uninstall `Download Master` here, but make sure that Download Master is enabled before uninstalling.  
-
-1. Install SmartDNS
-
-    Upload the software to the router's `/tmp/mnt/sda1` directory using winscp. (or copy the network neighborhood to the sda1 shared directory)
-
-    ```shell
-    ipkg install smartdns.xxxxxxx.mipsbig.ipk
-    ```
-
-1. Restart router
-
-    After the router is started, use `nslookup -querytype=ptr 0.0.0.0` to query the domain name.  
-    See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-1. Note
-
-    In the above process, smartdns will be installed to the root directory of the U disk and run in optware mode.  
-    Its directory structure is as follows: (only smartdns related files are listed here)
-
-    ```shell
-    USB DISK
-    └── asusware.mipsbig
-            ├── bin
-            ├── etc
-            |    ├── smartdns
-            |    |     └── smartdns.conf
-            |    └── init.d
-            |          └── S50smartdns
-            ├── lib
-            ├── sbin
-            ├── usr
-            |    └── sbin
-            |          └── smartdns
-            ....
-    ```
-
-    To modify the configuration, you can use ssh to login to the router and use the vi command to modify it.
-
-    ```shell
-    vi /opt/etc/smartdns/smartdns.conf
-    ```
-
-    It can also be modified from Network Neighborhood. From the neighbor sharing directory `sda1` you can't see the `asusware.mipsbig` directory, but you can directly enter `asusware.mipsbig\etc\init.d` in `File Manager` to modify it.
-
-    ```shell
-    \\192.168.1.1\sda1\asusware.mipsbig\etc\init.d
-    ```
-
-### optware/entware
-
---------------
-
-1. Prepare
-
-    When using this software, you need to confirm whether the router supports USB disk and prepare a USB disk.
-
-1. Install SmartDNS
-
-    Upload the software to `/tmp` directory of the router using winscp, and run the flollowing command to install.
-
-    ```shell
-    ipkg install smartdns.xxxxxxx.mipsbig.ipk
-    ```
-
-1. Modify the smartdns configuration
-
-    ```shell
-    Vi /opt/etc/smartdns/smartdns.conf
-    ```
-
-    Note: if you need to support IPV6, you can set the worke-mode to `2`, this will disable the DNS service of dnsmasq, and smartdns run as the primary DNS server. Change `SMARTDNS_WORKMODE` in the file `/opt/etc/smartdns/smartdns-opt.conf` to 2.
-
-    ```shell
-    SMARTDNS_WORKMODE="2"
-    ```
-
-1. Restart the router to take effect
-
-    After the router is started, use `nslookup -querytype=ptr 0.0.0.0` to query the domain name.
-    See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-    ```shell
-    Pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server: 192.168.1.1
-    Address: 192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa name = smartdns.
-    ```
-
-    Note: If the service does not start automatically, you need to set optwre/entware to start automatically. For details, see the optware/entware documentation.
-
-### Windows 10 WSL Installation/WSL ubuntu
-
---------------
-
-1. Install Windows 10 WSL ubuntu
-
-   Install the Windows 10 WSL environment and select Ubuntu as default distribution. Please refer to [WSL installation instructions](https://docs.microsoft.com/en-us/windows/wsl/install-win10) for installation steps
-
-1. Install smartdns
-
-    download install package `smartdns.xxxxxxxx.x86_64.tar.gz`，and unzip to the `D:\` directory, after decompression, the directory is as follows: 
-
-    ```shell
-    D:\SMARTDNS
-    ├─etc
-    │  ├─default
-    │  ├─init.d
-    │  └─smartdns
-    ├─package
-    │  └─windows
-    ├─src
-    └─systemd
-
-    ```
-
-    Double-click `install.bat` in the `D:\smartdns\package\windows` directory for installation. Please enter the password for `WLS ubuntu` when input password.
-
-1. Configuration
-
-    Edit `smartdns.conf` configuration file in `D:\smartdns\etc\smartdns` directory, you can configure the upstream server to  smartdns. Refer to the `Configuration Parameters` for specific configuration parameters.  
-    In general, you only need to add `server [IP]:port`, `server-tcp [IP]:port` configuration items.  
-    Configure as many upstream DNS servers as possible, including servers at home and abroad. Please refer to the `Configuration Parameters` section for configuration parameters.  
-
-1. Start Service
-
-    Double-click `reload.bat` in the `D:\smartdns\package\windows` directory for reload.
-
-1. Forwarding DNS request to SmartDNS
-
-    Modify the default DNS server for Windows to `127.0.0.1`, with these steps referred to [IP configuration](https://support.microsoft.com/en-us/help/15089/windows-change-tcp-ip-settings)
-
-1. Check if the service is configured successfully
-
-    Query domain name with `nslookup -querytype=ptr 0.0.0.0`  
-    Check if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
-
-    ```shell
-    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr 0.0.0.0
-    Server:         192.168.1.1
-    Address:        192.168.1.1#53
-
-    Non-authoritative answer:
-    0.0.0.0.in-addr.arpa  name = smartdns.
-    ```
-
-## Configuration parameter
-
-|parameter|Parameter function|Default value|Value type|Example|
-|--|--|--|--|--|
-|server-name|DNS name|host name/smartdns|any string like hosname|server-name smartdns
-|bind|DNS listening port number|[::]:53|Support binding multiple ports<br>`IP:PORT`: server IP, port number. <br>`[-group]`: The DNS server group used when requesting. <br>`[-no-rule-addr]`: Skip the address rule. <br>`[-no-rule-nameserver]`: Skip the Nameserver rule. <br>`[-no-rule-ipset]`: Skip the Ipset rule. <br>`[-no-rule-soa]`: Skip address SOA(#) rules.<br>`[-no-dualstack-selection]`: Disable dualstack ip selection.<br>`[-no-speed-check]`: Disable speed measurement. <br>`[-no-cache]`: stop caching |bind :53
-|bind-tcp|TCP mode DNS listening port number|[::]:53|Support binding multiple ports<br>`IP:PORT`: server IP, port number. <br>`[-group]`: The DNS server group used when requesting. <br>`[-no-rule-addr]`: Skip the address rule. <br>`[-no-rule-nameserver]`: Skip the Nameserver rule. <br>`[-no-rule-ipset]`: Skip the Ipset rule. <br>`[-no-rule-soa]`: Skip address SOA(#) rules.<br>`[-no-dualstack-selection]`: Disable dualstack ip selection.<br>`[-no-speed-check]`: Disable speed measurement. <br>`[-no-cache]`: stop caching |bind-tcp :53
-|cache-size|Domain name result cache number|512|integer|cache-size 512
-|tcp-idle-time|TCP connection idle timeout|120|integer|tcp-idle-time 120
-|rr-ttl|Domain name TTL|Remote query result|number greater than 0|rr-ttl 600
-|rr-ttl-min|Domain name Minimum TTL|Remote query result|number greater than 0|rr-ttl-min 60
-|rr-ttl-max|Domain name Maximum TTL|Remote query result|number greater than 0|rr-ttl-max 600
-|log-level|log level|error|fatal,error,warn,notice,info,debug|log-level error
-|log-file|log path|/var/log/smartdns.log|File Pah|log-file /var/log/smartdns.log
-|log-size|log size|128K|number+K,M,G|log-size 128K
-|log-num|archived log number|2|Integer|log-num 2
-|audit-enable|audit log enable|no|[yes\|no]|audit-enable yes
-|audit-file|audit log file|/var/log/smartdns-audit.log|File Path|audit-file /var/log/smartdns-audit.log
-|audit-size|audit log size|128K|number+K,M,G|audit-size 128K
-|audit-num|archived audit log number|2|Integer|audit-num 2
-|conf-file|additional conf file|None|File path|conf-file /etc/smartdns/smartdns.more.conf
-|server|Upstream UDP DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server 8.8.8.8:53 -blacklist-ip
-|server-tcp|Upstream TCP DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-tcp 8.8.8.8:53
-|server-tls|Upstream TLS DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-spki-pin [sha256-pin]]`: TLS verify SPKI value, a base64 encoded SHA256 hash<br>`[-host-name]`:TLS Server name. <br>`[-tls-host-verify]`: TLS cert hostname to verify.<br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-tls 8.8.8.8:853
-|server-https|Upstream HTTPS DNS server|None|Repeatable <br>`https://[host][:port]/path`: Server IP, port optional. <br>`[-spki-pin [sha256-pin]]`: TLS verify SPKI value, a base64 encoded SHA256 hash<br>`[-host-name]`:TLS Server name<br>`[-http-host]`：http header host. <br>`[-tls-host-verify]`: TLS cert hostname to verify.<br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-https https://cloudflare-dns.com/dns-query
-|speed-check-mode|Speed ​​mode|None|[ping\|tcp:[80]\|none]|speed-check-mode ping,tcp:443
-|address|Domain IP address|None|address /domain/[ip\|-\|-4\|-6\|#\|#4\|#6], `-` for ignore, `#` for return SOA, `4` for IPV4, `6` for IPV6| address /www.example.com/1.2.3.4
-|nameserver|To query domain with specific server group|None|nameserver /domain/[group\|-], `group` is the group name, `-` means ignore this rule, use the `-group` parameter in the related server|nameserver /www.example.com/office
-|ipset|Domain IPSet|None|ipset /domain/[ipset\|-], `-` for ignore|ipset /www.example.com/pass
-|ipset-timeout|ipset timeout enable|auto|[yes]|ipset-timeout yes
-|bogus-nxdomain|bogus IP address|None|[IP/subnet], Repeatable| bogus-nxdomain 1.2.3.4/16
-|ignore-ip|ignore ip address|None|[ip/subnet], Repeatable| ignore-ip 1.2.3.4/16
-|whitelist-ip|ip whitelist|None|[ip/subnet], Repeatable，When the filtering server responds IPs in the IP whitelist, only result in whitelist will be accepted| whitelist-ip 1.2.3.4/16
-|blacklist-ip|ip blacklist|None|[ip/subnet], Repeatable，When the filtering server responds IPs in the IP blacklist, The result will be discarded directly| blacklist-ip 1.2.3.4/16
-|force-AAAA-SOA|force AAAA query return SOA|no|[yes\|no]|force-AAAA-SOA yes
-|prefetch-domain|domain prefetch feature|no|[yes\|no]|prefetch-domain yes
-|dualstack-ip-selection|Dualstack ip selection|no|[yes\|no]|dualstack-ip-selection yes
-|dualstack-ip-selection-threshold|Dualstack ip select threadhold|30ms|millisecond|dualstack-ip-selection-threshold [0-1000]
-
-## FAQ
-
-1. What is the difference between SmartDNS and DNSMASQ?  
-    Smartdns is not designed to replace DNSMASQ. The main function of Smartdns is focused on DNS resolution enhancement, the difference are:  
-    * Multiple upstream server concurrent requests, after the results are measured, return the best results;
-    * `address`, `ipset` domain name matching uses efficient algorithms, query matching is faster and more efficient, and router devices are still efficient.
-    * Domain name matching supports ignoring specific domain names, and can be individually matched to IPv4, IPV6, and supports diversified customization.
-    * Enhance the ad blocking feature, return SOA record, this block ads better;
-    * IPV4, IPV6 dual stack IP optimization mechanism, in the case of dual network, choose the fastest network.
-    * Supports the latest TLS, HTTPS protocol and provides secure DNS query capabilities.
-    * DNS anti-poison mechanism, and a variety of mechanisms to avoid DNS pollution.
-    * ECS support, the query results are better and more accurate.
-    * IP blacklist support, ignoring the blacklist IP to make domain name queries better and more accurate.
-    * Domain name pre-fetch, more faster to access popular websites.
-    * Domain name TTL can be specified to make access faster.
-    * Cache mechanism to make access faster.
-    * Asynchronous log, audit log mechanism, does not affect DNS query performance while recording information.
-    * Domain group mechanism, specific domain names use specific upstream server group queries to avoid privacy leakage.
-    * The second DNS supports customizing more behavior.
-
-1. What is the best practices for upstream server configuration?  
-    Smartdns has a speed measurement mechanism. When configuring an upstream server, it is recommended to configure multiple upstream DNS servers, including servers in different regions, but the total number is recommended to be around 10. Recommended configuration
-    * Carrier DNS.
-    * Public DNS, such as `8.8.8.8`, `8.8.4.4`, `1.1.1.1`.
-
-    For specific domain names, if there is a pollution, you can enable the anti-pollution mechanism.
-
-1. How to enable the audit log  
-    The audit log records the domain name requested by the client. The record information includes the request time, the request IP address, the request domain name, and the request type. If you want to enable the audit log, configure `audit-enable yes` in the configuration file, `audit-size`, `Audit-file`, `audit-num` configure the audit log file size, the audit log file path, and the number of audit log files. The audit log file will be compressed to save space.
-
-1. How to avoid DNS privacy leaks
-    By default, smartdns will send requests to all configured DNS servers. If the upstream DNS servers record DNS logs, it will result in a DNS privacy leak. To avoid privacy leaks, try the following steps:
-    * Use trusted DNS servers.
-    * Use TLS servers.
-    * Set up an upstream DNS server group.
-
-1. How to block ads
-    Smartdns has a high-performance domain name matching algorithm. It is very efficient to filter advertisements by domain name. To block ads, you only need to configure records like the following configure. For example, if you block `*.ad.com`, configure as follows:
-
-    ```sh
-    Address /ad.com/#
-    ```
-
-    The suffix mode of the domain name, filtering *.ad.com, `#` means returning SOA record. If you want to only block IPV4 or IPV6 separately, add a number after `#`, such as `#4` is for IPV4 blocking. If you want to ignore some specific subdomains, you can configure it as follows. e.g., if you ignore `pass.ad.com`, you can configure it as follows:
-
-    ```sh
-    Address /pass.ad.com/-
-    ```
-
-1. DNS query diversion
-    In some cases, some domain names need to be queried using a specific DNS server to do DNS diversion. such as.
-
-    ```sh
-    .home -> 192.168.1.1
-    .office -> 10.0.0.1
-    ```
-
-    The domain name ending in .home is sent to 192.168.1.1 for resolving
-    The domain name ending in .office is sent to 10.0.0.1 for resolving
-    Other domain names are resolved using the default mode.
-    The diversion configuration for this case is as follows:
-
-    ```sh
-    # Upstream configuration, use -group to specify the group name, and -exclude-default-group to exclude the server from the default group.
-    Server 192.168.1.1 -group home -exclude-default-group
-    Server 10.0.0.1 -group office -exclude-default-group
-    Server 8.8.8.8
-
-    #Configure the resolved domain name with specific group
-    Nameserver /.home/home
-    Nameserver /.office/office
-    ```
-
-    You can use the above configuration to implement DNS resolution and offload. If you need to implement traffic distribution on the requesting port, you can configure the second DNS server. The bind configuration is added. The group parameter specifies the traffic distribution name.
-
-    ```sh
-    Bind :7053 -group office
-    Bind :8053 -group home
-    ```
-
-1. How to use the IPV4, IPV6 dual stack IP optimization feature  
-    At present, IPV6 network is not as fast as IPV4 in some cases. In order to get a better experience in the dual-stack network, SmartDNS provides a dual-stack IP optimization mechanism, the same domain name, and the speed of IPV4. Far faster than IPV6, then SmartDNS will block the resolution of IPV6, let the PC use IPV4, the feature is enabled by `dualstack-ip-selection yes`, `dualstack-ip-selection-threshold [time]` is for threshold. if you want to disable IPV6 AAAA record complete, please try `force-AAAA-SOA yes`.
-
-1. How to improve cache performace  
-    Smartdns provides a domain name caching mechanism to cache the queried domain name, and the caching time is in accordance with the DNS TTL specification. To increase the cache hit rate, the following configuration can be taken:
-    * Increase the number of cache records appropriately  
-    Set the number of cache records by `cache-size`.
-    In the case of a query with a high pressure environment and a machine with a large memory, it can be appropriately adjusted.
-
-    * Set the minimum TTL value as appropriate  
-    Set the minimum DNS TTL time to a appropriate value by `rr-ttl-min` to extend the cache time.
-    It is recommended that the timeout period be set to 10 to 30 minutes to avoid then invalid domain names when domain ip changes.
-
-    * Enable domain pre-acquisition  
-    Enable pre-fetching of domain names with `prefetch-domain yes` to improve query hit rate.
-    by default, Smartdns will send domain query request again before cache expire, and cache the result for the next query. Frequently accessed domain names will continue to be cached. This feature will consume more CPU when idle.
-
-1. How does the second DNS customize more behavior?
-    The second DNS can be used as the upstream of other DNS servers to provide more query behaviors. Bind configuration support can bind multiple ports. Different ports can be set with different flags to implement different functions, such as
-
-    ```sh
-    # Binding 6053 port, request for port 6053 will be configured with the upstream query of the office group, and the result will not be measured. The address configuration address is ignored.
-    bind [::]:6053 -no-speed-check -group office -no-rule-addr
-    ```
-
-## Compile
-
-smartdns contains scripts for compiling packages, supports compiling luci, debian, openwrt, opare installation packages, and can execute `package/build-pkg.sh` compilation.
-
-## [Donate](#Donate)  
-
-If you feel that this project is helpful to you, please donate to us so that the project can continue to develop and be more perfect.
-
-### PayPal
-
-[![Support via PayPal](https://cdn.rawgit.com/twolfson/paypal-github-button/1.0.0/dist/button.svg)](https://paypal.me/PengNick/)
-
-### Alipay
-
-![alipay](doc/alipay_donate.jpg)
-
-### Wechat
-  
-![wechat](doc/wechat_donate.jpg)
-
-## Open Source License
-
-Smartdns is licensed to the public under the GPL V3 License.
+# SmartDNS
+
+![SmartDNS](doc/smartdns-banner.png)  
+SmartDNS is a local DNS server. SmartDNS accepts DNS query requests from local clients, obtains DNS query results from multiple upstream DNS servers, and returns the fastest access results to clients.  
+Avoiding DNS pollution and improving network access speed, supports high-performance ad filtering.  
+Unlike dnsmasq's all-servers, smartdns returns the fastest access resolution. （[read more](#faq)）
+
+Support Raspberry Pi, openwrt, ASUS router, Windows and other devices.  
+
+## Table Of Content
+
+1. [Software Show](#software-show)
+1. [Features](#features)
+1. [Architecture](#architecture)
+1. [Usage](#usage)  
+    1. [Download the package](#download-the-package)
+    1. [Standard Linux system installation/Raspberry Pi, X86_64 system](#standard-linux-system-installation/raspberry-pi,-x86_64-system)
+    1. [openwrt/LEDE](#openwrt/lede)
+    1. [ASUS router native firmware / Merlin firmware](#asus-router-native-firmware-/-merlin-firmware)
+    1. [optware/entware](#optware/entware)
+    1. [Windows 10 WSL Installation/WSL ubuntu](#windows-10-wsl-installation/wsl-ubuntu)
+1. [Configuration parameter](#configuration-parameter)
+1. [Donate](#Donate)
+1. [FAQ](#FAQ)
+
+## Software Show
+
+**Ali DNS**  
+Use Ali DNS to query Baidu's IP and test the results.  
+
+```shell
+pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com 223.5.5.5
+Server:         223.5.5.5
+Address:        223.5.5.5#53
+
+Non-authoritative answer:
+www.baidu.com   canonical name = www.a.shifen.com.
+Name:   www.a.shifen.com
+Address: 180.97.33.108
+Name:   www.a.shifen.com
+Address: 180.97.33.107
+
+pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.107 -c 2
+PING 180.97.33.107 (180.97.33.107) 56(84) bytes of data.
+64 bytes from 180.97.33.107: icmp_seq=1 ttl=55 time=24.3 ms
+64 bytes from 180.97.33.107: icmp_seq=2 ttl=55 time=24.2 ms
+
+--- 180.97.33.107 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 24.275/24.327/24.380/0.164 ms
+pi@raspberrypi:~/code/smartdns_build $ ping 180.97.33.108 -c 2
+PING 180.97.33.108 (180.97.33.108) 56(84) bytes of data.
+64 bytes from 180.97.33.108: icmp_seq=1 ttl=55 time=31.1 ms
+64 bytes from 180.97.33.108: icmp_seq=2 ttl=55 time=31.0 ms
+
+--- 180.97.33.108 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 31.014/31.094/31.175/0.193 ms
+```
+
+**smartdns**  
+Use SmartDNS to query Baidu IP and test the results.
+
+```shell
+pi@raspberrypi:~/code/smartdns_build $ nslookup www.baidu.com
+Server:         192.168.1.1
+Address:        192.168.1.1#53
+
+Non-authoritative answer:
+www.baidu.com   canonical name = www.a.shifen.com.
+Name:   www.a.shifen.com
+Address: 14.215.177.39
+
+pi@raspberrypi:~/code/smartdns_build $ ping 14.215.177.39 -c 2
+PING 14.215.177.39 (14.215.177.39) 56(84) bytes of data.
+64 bytes from 14.215.177.39: icmp_seq=1 ttl=56 time=6.31 ms
+64 bytes from 14.215.177.39: icmp_seq=2 ttl=56 time=5.95 ms
+
+--- 14.215.177.39 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 5.954/6.133/6.313/0.195 ms
+
+```
+
+From the comparison, smartdns found the fastest IP address to visit www.baidu.com, so accessing Baidu's DNS is 5 times faster than Ali DNS.
+
+## Features
+
+1. **Multiple upstream DNS servers**  
+   Support configuring multiple upstream DNS servers and query at the same time.the query will not be affected, Even if there is a DNS server exception.  
+
+2. **Return the fastest IP address**  
+   Supports finding the fastest access IP address from the IP address list of the domain name and returning it to the client to avoid DNS pollution and improve network access speed.
+
+3. **Support for multiple query protocols**  
+   Support UDP, TCP, TLS, HTTPS queries, and non-53 port queries, effectively avoiding DNS pollution.
+
+4. **Domain IP address specification**  
+   Support configuring IP address of specific domain to achieve the effect of advertising filtering, and avoid malicious websites.
+
+5. **Domain name high performance rule filtering**  
+   Support domain name suffix matching mode, simplify filtering configuration, filter 200,000 recording and take time <1ms.
+
+6. **Linux/Windows multi-platform support**  
+   Support standard Linux system (Raspberry Pi), openwrt system various firmware, ASUS router native firmware. Support Windows 10 WSL (Windows Subsystem for Linux).
+
+7. **Support IPV4, IPV6 dual stack**  
+   Support IPV4, IPV6 network, support query A, AAAA record, dual-stack IP selection, and disale IPV6 AAAA record.
+
+8. **High performance, low resource consumption**  
+   Multi-threaded asynchronous IO mode, cache cache query results.
+
+## Architecture
+
+![Architecture](doc/architecture.png)
+
+1. SmartDNS receives DNS query requests from local network devices, such as PCs and mobile phone query requests.
+2. SmartDNS sends query requests to multiple upstream DNS servers, using standard UDP queries, non-standard port UDP queries, and TCP queries.
+3. The upstream DNS server returns a list of Server IP addresses corresponding to the domain name. SmartDNS detects the fastest Server IP with local network access.
+4. Return the fastest accessed Server IP to the local client.
+
+## Usage
+
+### Download the package
+
+--------------
+
+Download the matching version of the SmartDNS installation package. The corresponding installation package is as follows.
+
+|system |package|Description
+|-----|-----|-----
+|Standard Linux system (Raspberry Pi)| smartdns.xxxxxxxx.arm-debian-all.deb|Support Raspberry Pi Raspbian stretch, Debian 9 system.
+|Standard Linux system (Armbian arm64)| smartdns.xxxxxxxx.aarch64-debian-all.deb|Support Armbian debian stretch, Debian 9 system.
+|Standard Linux system (x86_64)| smartdns.xxxxxxxx.x86_64-linux-all.tar.gz|Support for x86_64 Linux systems.
+|Windows 10 WSL (ubuntu)| smartdns.xxxxxxxx.x86_64-linux-all.tar.gz|Windows 10 WSL ubuntu.
+|Standard Linux system (x86)| smartdns.xxxxxxxx.x86-linux-all.tar.gz|Support for x86_64 systems.
+|optware|smartdns.xxxxxxxx.mips-optware-all.ipk|Support the MIPS big-endian architecture for optware。
+|optware|smartdns.xxxxxxxx.mipsel-optware-all.ipk|Support the MIPS little-endian architecture for optware。
+|optware|smartdns.xxxxxxxx.arm-optware-all.ipk|Support the arm architecture for optware。
+|openwrt|smartdns.xxxxxxxx.mips-openwrt-all.ipk|Support the MIPS big-endian architecture for openwrt。
+|openwrt|smartdns.xxxxxxxx.mipsel-openwrt-all.ipk|Support the MIPS little-endian architecture for openwrt。
+|openwrt|smartdns.xxxxxxxx.arm-openwrt-all.ipk|Support the arm architecture for openwrt。
+|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.all.ipk|Openwrt management interface.
+|openwrt LUCI|luci-app-smartdns.xxxxxxxxx.all-luci-compat-all|Compat Openwrt management interface for early openwrt.
+
+* The released packages are statically compiled. If you need a small size package, please compile it yourself or obtain it from the openwrt / entware repository.
+
+* **Please download from the Release page: [Download here](https://github.com/pymu/smartdns/releases)**
+
+```shell
+https://github.com/pymumu/smartdns/releases
+```
+
+* For the installation procedure, please refer to the following sections.
+
+### Standard Linux system installation/Raspberry Pi, X86_64 system
+
+--------------
+
+1. Installation
+
+    Download the installation package like `smartdns.xxxxxxxx.arm-debian-all.deb` and upload it to the Linux system. Run the following command to install
+
+    ```shell
+    dpkg -i smartdns.xxxxxxxx.arm-debian-all.deb
+    ```
+
+    For X86-64 system, download the installation package like `smartdns.xxxxxxxx.x86_64-linux-all.tar.gz` and upload it to the Linux system. Run the following command to install
+
+    ```shell
+    tar zxf smartdns.xxxxxxxx.x86_64-linux-all.tar.gz
+    cd smartdns
+    chmod +x ./install
+    ./install -i
+    ```
+
+1. Configuration
+
+    After the installation is complete, you can configure the upstream server to  smartdns. Refer to the `Configuration Parameters` for specific configuration parameters.  
+    In general, you only need to add `server [IP]:port`, `server-tcp [IP]:port` configuration items.  
+    Configure as many upstream DNS servers as possible, including servers at home and abroad. Please refer to the `Configuration Parameters` section for configuration parameters.  
+
+    ```shell
+    vi /etc/smartdns/smartdns.conf
+    ```
+
+1. Start Service
+
+    ```shell
+    systemctl enable smartdns
+    systemctl start smartdns
+    ```
+
+1. Forwarding DNS request to SmartDNS
+
+    Modify the DNS server of the local router and configure the DNS server as SmartDNS.
+    * Log in to the router on the local network and configure the Raspberry Pi to assign a static IP address.
+    * Modify the WAN port or DHCP DNS to the Raspberry Pi IP address.
+    Note:
+    I. Each router configuration method is different. Please search Baidu for related configuration methods.
+    II. some routers may not support configuring custom DNS server. in this case, please modify the PC's, mobile phone's DNS server to the ip of Raspberry Pi.
+
+1. Check if the service is configured successfully
+
+    Query domain name with `nslookup -querytype=ptr smartdns`  
+    Check if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns         name = smartdns.
+    ```
+
+### openwrt
+
+--------------
+
+1. Installation
+
+    Upload the software to the /root directory of the router with winscp or other tool, and execute the following command to install it.
+
+    ```shell
+    opkg install smartdns.xxxxxxxx.xxxx.ipk
+    opkg install luci-app-smartdns.xxxxxxxx.xxxx.all.ipk
+    ```
+
+    * Note: For versions before openwrt 19.07, please install `luci-app-smartdns.xxxxxxxxx.all-luci-compat-all` package.
+
+1. Configuration
+
+    Log in to the openwrt management page and open `Services`->`SmartDNS` to configure SmartDNS.
+    * Add upstream DNS server configuration to `Upstream Servers`. It is recommended to configure multiple DNS servers at home and abroad.
+    * Specify the IP address of a specific domain name in `Domain Address`, which can be used for ad blocking.
+
+1. Start Service
+
+   There are two ways to use the SmartDNS service, `one is directly as the primary DNS service`, `the other is as the upstream of dnsmasq`.  
+   By default, SmartDNS uses the first method. You can choose according to your needs in the following two ways.
+
+1. Method 1: SmartDNS as primary DNS Server (default scheme)
+
+    * **Enable SmartDNS port 53 port redirection**
+
+        Log in to the router, click on `Services`->`SmartDNS`->`redirect`, select `Redirect 53 port to SmartDNS` option to enable port 53 forwarding.
+
+    * **Check if the service is configured successfully**
+
+        Query domain name with `nslookup -querytype=ptr smartdns`
+        See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+        ```shell
+        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        smartdns         name = smartdns.
+        ```
+
+    * **The interface prompts that the redirect failed**
+
+        * Check if iptable, ip6table command is installed correctly.
+        * The openwrt 15.01 system does not support IPV6 redirection. If the network needs to support IPV6, please change DNSMASQ upstream to smartdns, or change the smartdns port to 53, and disable dnsmasq.
+        * After LEDE system, please install IPV6 nat forwarding driver. Click `system`->`Software`, click `update lists` to update the software list, install `ip6tables-mod-nat`
+        * Use the following command to check whether the routing rule takes effect.
+
+        ```shell
+        iptables -t nat -L PREROUTING | grep REDIRECT
+        ```
+
+        * If the forwarding function is abnormal, please use Method 2: As the upstream of DNSMASQ.
+
+1. Method 2: SmartDNS as upstream DNS Server of DNSMASQ
+
+    * **Forward dnsmasq's request to SmartDNS**
+
+        Log in to the router, click on `Services`->`SmartDNS`->`redirect`, select `Run as dnsmasq upstream server` option to forwarding dnsmasq request to Smartdns.
+
+    * **Check if the service is configured successfully**
+
+        * Method 1: Query domain name with `nslookup -querytype=ptr 0.0.0.1`
+        See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+        ```shell
+        pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        smartdns         name = smartdns.
+        ```
+
+        * Method 2: Use `nslookup` to query the `www.baidu.com` domain name to see if the IP address of Baidu in the result is `only one. If there are multiple IP addresses returned, it means that it is not valid. Please try to check several domain names.
+
+        ```shell
+        pi@raspberrypi:~ $ nslookup www.baidu.com 192.168.1.1
+        Server:         192.168.1.1
+        Address:        192.168.1.1#53
+
+        Non-authoritative answer:
+        www.baidu.com   canonical name = www.a.shifen.com.
+        Name:   www.a.shifen.com
+        Address: 14.215.177.38
+        ```
+
+1. Start Service
+
+    Check the `Enable' in the configuration page to start SmartDNS server.
+
+1. Note
+
+    * If chinaDNS is already installed, it is recommended to configure the upstream of chinaDNS as SmartDNS.
+    * SmartDNS defaults to forwarding port 53 requests to the local port of SmartDNS, controlled by the `Redirect` configuration option.
+
+### ASUS router native firmware / Merlin firmware
+
+--------------
+
+Note: Merlin firmware is derived from ASUS firmware and can theoretically be used directly with the ASUS package. However, it is currently unverified. If you have any questions, please submit an issue.
+
+1. Prepare
+
+    When using this software, you need to confirm whether the router supports U disk and prepare a USB disk.
+
+1. Enable SSH login
+
+    Log in to the management interface, click `System Management`-> Click `System Settings` and configure `Enable SSH` to `Lan Only`.  
+    The SSH login username and password are the same as the management interface.
+
+1. Insstall `Download Master`
+
+    In the management interface, click `USB related application`-> click `Download Master` to download.  
+    After the download is complete, enable `Download Master`. If you do not need the download function, you can uninstall `Download Master` here, but make sure that Download Master is enabled before uninstalling.  
+
+1. Install SmartDNS
+
+    Upload the software to the router's `/tmp/mnt/sda1` directory using winscp. (or copy the network neighborhood to the sda1 shared directory)
+
+    ```shell
+    ipkg install smartdns.xxxxxxx.mipsbig.ipk
+    ```
+
+1. Restart router
+
+    After the router is started, use `nslookup -querytype=ptr smartdns` to query the domain name.  
+    See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns         name = smartdns.
+    ```
+
+1. Note
+
+    In the above process, smartdns will be installed to the root directory of the U disk and run in optware mode.  
+    Its directory structure is as follows: (only smartdns related files are listed here)
+
+    ```shell
+    USB DISK
+    └── asusware.mipsbig
+            ├── bin
+            ├── etc
+            |    ├── smartdns
+            |    |     └── smartdns.conf
+            |    └── init.d
+            |          └── S50smartdns
+            ├── lib
+            ├── sbin
+            ├── usr
+            |    └── sbin
+            |          └── smartdns
+            ....
+    ```
+
+    To modify the configuration, you can use ssh to login to the router and use the vi command to modify it.
+
+    ```shell
+    vi /opt/etc/smartdns/smartdns.conf
+    ```
+
+    It can also be modified from Network Neighborhood. From the neighbor sharing directory `sda1` you can't see the `asusware.mipsbig` directory, but you can directly enter `asusware.mipsbig\etc\init.d` in `File Manager` to modify it.
+
+    ```shell
+    \\192.168.1.1\sda1\asusware.mipsbig\etc\init.d
+    ```
+
+### optware/entware
+
+--------------
+
+1. Prepare
+
+    When using this software, you need to confirm whether the router supports USB disk and prepare a USB disk.
+
+1. Install SmartDNS
+
+    Upload the software to `/tmp` directory of the router using winscp, and run the flollowing command to install.
+
+    ```shell
+    ipkg install smartdns.xxxxxxx.mipsbig.ipk
+    ```
+
+1. Modify the smartdns configuration
+
+    ```shell
+    Vi /opt/etc/smartdns/smartdns.conf
+    ```
+
+    Note: if you need to support IPV6, you can set the worke-mode to `2`, this will disable the DNS service of dnsmasq, and smartdns run as the primary DNS server. Change `SMARTDNS_WORKMODE` in the file `/opt/etc/smartdns/smartdns-opt.conf` to 2.
+
+    ```shell
+    SMARTDNS_WORKMODE="2"
+    ```
+
+1. Restart the router to take effect
+
+    After the router is started, use `nslookup -querytype=ptr smartdns` to query the domain name.
+    See if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+    ```shell
+    Pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server: 192.168.1.1
+    Address: 192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns        name = smartdns.
+    ```
+
+    Note: If the service does not start automatically, you need to set optwre/entware to start automatically. For details, see the optware/entware documentation.
+
+### Windows 10 WSL Installation/WSL ubuntu
+
+--------------
+
+1. Install Windows 10 WSL ubuntu
+
+   Install the Windows 10 WSL environment and select Ubuntu as default distribution. Please refer to [WSL installation instructions](https://docs.microsoft.com/en-us/windows/wsl/install-win10) for installation steps
+
+1. Install smartdns
+
+    download install package `smartdns.xxxxxxxx.x86_64-linux-all.tar.gz`，and unzip to the `D:\` directory, after decompression, the directory is as follows: 
+
+    ```shell
+    D:\SMARTDNS
+    ├─etc
+    │  ├─default
+    │  ├─init.d
+    │  └─smartdns
+    ├─package
+    │  └─windows
+    ├─src
+    └─systemd
+
+    ```
+
+    Double-click `install.bat` in the `D:\smartdns\package\windows` directory for installation. Please enter the password for `WLS ubuntu` when input password.
+
+1. Configuration
+
+    Edit `smartdns.conf` configuration file in `D:\smartdns\etc\smartdns` directory, you can configure the upstream server to  smartdns. Refer to the `Configuration Parameters` for specific configuration parameters.  
+    In general, you only need to add `server [IP]:port`, `server-tcp [IP]:port` configuration items.  
+    Configure as many upstream DNS servers as possible, including servers at home and abroad. Please refer to the `Configuration Parameters` section for configuration parameters.  
+
+1. Start Service
+
+    Double-click `reload.bat` in the `D:\smartdns\package\windows` directory for reload.
+
+1. Forwarding DNS request to SmartDNS
+
+    Modify the default DNS server for Windows to `127.0.0.1`, with these steps referred to [IP configuration](https://support.microsoft.com/en-us/help/15089/windows-change-tcp-ip-settings)
+
+1. Check if the service is configured successfully
+
+    Query domain name with `nslookup -querytype=ptr smartdns`  
+    Check if the `name` item in the command result is displayed as `smartdns` or `hostname`, such as `smartdns`
+
+    ```shell
+    pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
+    Server:         192.168.1.1
+    Address:        192.168.1.1#53
+
+    Non-authoritative answer:
+    smartdns         name = smartdns.
+    ```
+
+## Configuration parameter
+
+|parameter|Parameter function|Default value|Value type|Example|
+|--|--|--|--|--|
+|server-name|DNS name|host name/smartdns|any string like hosname|server-name smartdns
+|bind|DNS listening port number|[::]:53|Support binding multiple ports<br>`IP:PORT`: server IP, port number. <br>`[-group]`: The DNS server group used when requesting. <br>`[-no-rule-addr]`: Skip the address rule. <br>`[-no-rule-nameserver]`: Skip the Nameserver rule. <br>`[-no-rule-ipset]`: Skip the Ipset rule. <br>`[-no-rule-soa]`: Skip address SOA(#) rules.<br>`[-no-dualstack-selection]`: Disable dualstack ip selection.<br>`[-no-speed-check]`: Disable speed measurement. <br>`[-no-cache]`: stop caching |bind :53
+|bind-tcp|TCP mode DNS listening port number|[::]:53|Support binding multiple ports<br>`IP:PORT`: server IP, port number. <br>`[-group]`: The DNS server group used when requesting. <br>`[-no-rule-addr]`: Skip the address rule. <br>`[-no-rule-nameserver]`: Skip the Nameserver rule. <br>`[-no-rule-ipset]`: Skip the Ipset rule. <br>`[-no-rule-soa]`: Skip address SOA(#) rules.<br>`[-no-dualstack-selection]`: Disable dualstack ip selection.<br>`[-no-speed-check]`: Disable speed measurement. <br>`[-no-cache]`: stop caching |bind-tcp :53
+|cache-size|Domain name result cache number|512|integer|cache-size 512
+|tcp-idle-time|TCP connection idle timeout|120|integer|tcp-idle-time 120
+|rr-ttl|Domain name TTL|Remote query result|number greater than 0|rr-ttl 600
+|rr-ttl-min|Domain name Minimum TTL|Remote query result|number greater than 0|rr-ttl-min 60
+|rr-ttl-max|Domain name Maximum TTL|Remote query result|number greater than 0|rr-ttl-max 600
+|log-level|log level|error|fatal,error,warn,notice,info,debug|log-level error
+|log-file|log path|/var/log/smartdns.log|File Pah|log-file /var/log/smartdns.log
+|log-size|log size|128K|number+K,M,G|log-size 128K
+|log-num|archived log number|2|Integer|log-num 2
+|audit-enable|audit log enable|no|[yes\|no]|audit-enable yes
+|audit-file|audit log file|/var/log/smartdns-audit.log|File Path|audit-file /var/log/smartdns-audit.log
+|audit-size|audit log size|128K|number+K,M,G|audit-size 128K
+|audit-num|archived audit log number|2|Integer|audit-num 2
+|conf-file|additional conf file|None|File path|conf-file /etc/smartdns/smartdns.more.conf
+|server|Upstream UDP DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server 8.8.8.8:53 -blacklist-ip
+|server-tcp|Upstream TCP DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-tcp 8.8.8.8:53
+|server-tls|Upstream TLS DNS server|None|Repeatable <br>`[ip][:port]`: Server IP, port optional. <br>`[-spki-pin [sha256-pin]]`: TLS verify SPKI value, a base64 encoded SHA256 hash<br>`[-host-name]`:TLS Server name. <br>`[-tls-host-verify]`: TLS cert hostname to verify. <br>`-no-check-certificate:`: No check certificate. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-tls 8.8.8.8:853
+|server-https|Upstream HTTPS DNS server|None|Repeatable <br>`https://[host][:port]/path`: Server IP, port optional. <br>`[-spki-pin [sha256-pin]]`: TLS verify SPKI value, a base64 encoded SHA256 hash<br>`[-host-name]`:TLS Server name<br>`[-http-host]`：http header host. <br>`[-tls-host-verify]`: TLS cert hostname to verify. <br>`-no-check-certificate:`: No check certificate. <br>`[-blacklist-ip]`: The "-blacklist-ip" parameter is to filtering IPs which is configured by "blacklist-ip". <br>`[-whitelist-ip]`: whitelist-ip parameter specifies that only the IP range configured in whitelist-ip is accepted. <br>`[-group [group] ...]`: The group to which the DNS server belongs, such as office, foreign, use with nameserver. <br>`[-exclude-default-group]`: Exclude DNS servers from the default group| server-https https://cloudflare-dns.com/dns-query
+|speed-check-mode|Speed ​​mode|None|[ping\|tcp:[80]\|none]|speed-check-mode ping,tcp:443
+|address|Domain IP address|None|address /domain/[ip\|-\|-4\|-6\|#\|#4\|#6], `-` for ignore, `#` for return SOA, `4` for IPV4, `6` for IPV6| address /www.example.com/1.2.3.4
+|nameserver|To query domain with specific server group|None|nameserver /domain/[group\|-], `group` is the group name, `-` means ignore this rule, use the `-group` parameter in the related server|nameserver /www.example.com/office
+|ipset|Domain IPSet|None|ipset /domain/[ipset\|-], `-` for ignore|ipset /www.example.com/pass
+|ipset-timeout|ipset timeout enable|auto|[yes]|ipset-timeout yes
+|domain-rules|set domain rules|None|domain-rules /domain/ [-rules...]<br>`[-speed-check-mode]`: set speed check mode，same as parameter `speed-check-mode`<br>`[-address]`: same as  parameter `address` <br>`[-nameserver]`: same as parameter `nameserver`<br>`[-ipset]`: same as parameter `ipset`|domain-rules /www.example.com/ -speed-check-mode none
+|bogus-nxdomain|bogus IP address|None|[IP/subnet], Repeatable| bogus-nxdomain 1.2.3.4/16
+|ignore-ip|ignore ip address|None|[ip/subnet], Repeatable| ignore-ip 1.2.3.4/16
+|whitelist-ip|ip whitelist|None|[ip/subnet], Repeatable，When the filtering server responds IPs in the IP whitelist, only result in whitelist will be accepted| whitelist-ip 1.2.3.4/16
+|blacklist-ip|ip blacklist|None|[ip/subnet], Repeatable，When the filtering server responds IPs in the IP blacklist, The result will be discarded directly| blacklist-ip 1.2.3.4/16
+|force-AAAA-SOA|force AAAA query return SOA|no|[yes\|no]|force-AAAA-SOA yes
+|prefetch-domain|domain prefetch feature|no|[yes\|no]|prefetch-domain yes
+|serve-expired|Cache serve expired feature|no|[yes\|no], Attempts to serve old responses from cache with a TTL of 0 in the response without waiting for the actual resolution to finish.|serve-expired yes
+|serve-expired-ttl|Cache serve expired limite TTL|0|second，0：disable，> 0  seconds after expiration|serve-expired-ttl 0
+|dualstack-ip-selection|Dualstack ip selection|no|[yes\|no]|dualstack-ip-selection yes
+|dualstack-ip-selection-threshold|Dualstack ip select threadhold|30ms|millisecond|dualstack-ip-selection-threshold [0-1000]
+|ca-file|certificate file|/etc/ssl/certs/ca-certificates.crt|path|ca-file /etc/ssl/certs/ca-certificates.crt
+|ca-path|certificates path|/etc/ssl/certs|path|ca-path /etc/ssl/certs
+
+## FAQ
+
+1. What is the difference between SmartDNS and DNSMASQ?  
+    Smartdns is not designed to replace DNSMASQ. The main function of Smartdns is focused on DNS resolution enhancement, the difference are:  
+    * Multiple upstream server concurrent requests, after the results are measured, return the best results;
+    * `address`, `ipset` domain name matching uses efficient algorithms, query matching is faster and more efficient, and router devices are still efficient.
+    * Domain name matching supports ignoring specific domain names, and can be individually matched to IPv4, IPV6, and supports diversified customization.
+    * Enhance the ad blocking feature, return SOA record, this block ads better;
+    * IPV4, IPV6 dual stack IP optimization mechanism, in the case of dual network, choose the fastest network.
+    * Supports the latest TLS, HTTPS protocol and provides secure DNS query capabilities.
+    * DNS anti-poison mechanism, and a variety of mechanisms to avoid DNS pollution.
+    * ECS support, the query results are better and more accurate.
+    * IP blacklist support, ignoring the blacklist IP to make domain name queries better and more accurate.
+    * Domain name pre-fetch, more faster to access popular websites.
+    * Domain name TTL can be specified to make access faster.
+    * Cache mechanism to make access faster.
+    * Asynchronous log, audit log mechanism, does not affect DNS query performance while recording information.
+    * Domain group mechanism, specific domain names use specific upstream server group queries to avoid privacy leakage.
+    * The second DNS supports customizing more behavior.
+
+1. What is the best practices for upstream server configuration?  
+    Smartdns has a speed measurement mechanism. When configuring an upstream server, it is recommended to configure multiple upstream DNS servers, including servers in different regions, but the total number is recommended to be around 10. Recommended configuration
+    * Carrier DNS.
+    * Public DNS, such as `8.8.8.8`, `8.8.4.4`, `1.1.1.1`.
+
+    For specific domain names, if there is a pollution, you can enable the anti-pollution mechanism.
+
+1. How to enable the audit log  
+    The audit log records the domain name requested by the client. The record information includes the request time, the request IP address, the request domain name, and the request type. If you want to enable the audit log, configure `audit-enable yes` in the configuration file, `audit-size`, `Audit-file`, `audit-num` configure the audit log file size, the audit log file path, and the number of audit log files. The audit log file will be compressed to save space.
+
+1. How to avoid DNS privacy leaks
+    By default, smartdns will send requests to all configured DNS servers. If the upstream DNS servers record DNS logs, it will result in a DNS privacy leak. To avoid privacy leaks, try the following steps:
+    * Use trusted DNS servers.
+    * Use TLS servers.
+    * Set up an upstream DNS server group.
+
+1. How to block ads
+    Smartdns has a high-performance domain name matching algorithm. It is very efficient to filter advertisements by domain name. To block ads, you only need to configure records like the following configure. For example, if you block `*.ad.com`, configure as follows:
+
+    ```sh
+    Address /ad.com/#
+    ```
+
+    The suffix mode of the domain name, filtering *.ad.com, `#` means returning SOA record. If you want to only block IPV4 or IPV6 separately, add a number after `#`, such as `#4` is for IPV4 blocking. If you want to ignore some specific subdomains, you can configure it as follows. e.g., if you ignore `pass.ad.com`, you can configure it as follows:
+
+    ```sh
+    Address /pass.ad.com/-
+    ```
+
+1. DNS query diversion
+    In some cases, some domain names need to be queried using a specific DNS server to do DNS diversion. such as.
+
+    ```sh
+    .home -> 192.168.1.1
+    .office -> 10.0.0.1
+    ```
+
+    The domain name ending in .home is sent to 192.168.1.1 for resolving
+    The domain name ending in .office is sent to 10.0.0.1 for resolving
+    Other domain names are resolved using the default mode.
+    The diversion configuration for this case is as follows:
+
+    ```sh
+    # Upstream configuration, use -group to specify the group name, and -exclude-default-group to exclude the server from the default group.
+    Server 192.168.1.1 -group home -exclude-default-group
+    Server 10.0.0.1 -group office -exclude-default-group
+    Server 8.8.8.8
+
+    #Configure the resolved domain name with specific group
+    Nameserver /.home/home
+    Nameserver /.office/office
+    ```
+
+    You can use the above configuration to implement DNS resolution and offload. If you need to implement traffic distribution on the requesting port, you can configure the second DNS server. The bind configuration is added. The group parameter specifies the traffic distribution name.
+
+    ```sh
+    Bind :7053 -group office
+    Bind :8053 -group home
+    ```
+
+1. How to use the IPV4, IPV6 dual stack IP optimization feature  
+    At present, IPV6 network is not as fast as IPV4 in some cases. In order to get a better experience in the dual-stack network, SmartDNS provides a dual-stack IP optimization mechanism, the same domain name, and the speed of IPV4. Far faster than IPV6, then SmartDNS will block the resolution of IPV6, let the PC use IPV4, the feature is enabled by `dualstack-ip-selection yes`, `dualstack-ip-selection-threshold [time]` is for threshold. if you want to disable IPV6 AAAA record complete, please try `force-AAAA-SOA yes`.
+
+1. How to improve cache performace  
+    Smartdns provides a domain name caching mechanism to cache the queried domain name, and the caching time is in accordance with the DNS TTL specification. To increase the cache hit rate, the following configuration can be taken:
+    * Increase the number of cache records appropriately  
+    Set the number of cache records by `cache-size`.
+    In the case of a query with a high pressure environment and a machine with a large memory, it can be appropriately adjusted.
+
+    * Set the minimum TTL value as appropriate  
+    Set the minimum DNS TTL time to a appropriate value by `rr-ttl-min` to extend the cache time.
+    It is recommended that the timeout period be set to 10 to 30 minutes to avoid then invalid domain names when domain ip changes.
+
+    * Enable domain pre-acquisition  
+    Enable pre-fetching of domain names with `prefetch-domain yes` to improve query hit rate.
+    by default, Smartdns will send domain query request again before cache expire, and cache the result for the next query. Frequently accessed domain names will continue to be cached. This feature will consume more CPU when idle.
+
+    * Cache serve expired feature  
+    Enable cache serve expired feature with `serve-expired yes` to improve the cache hit rate and reduce the CPU consumption.
+    This feature will return TTL = 0 to the client after the TTL timeout, and send a new query request again at the same time, and cache the new results for later query.
+
+1. How does the second DNS customize more behavior?
+    The second DNS can be used as the upstream of other DNS servers to provide more query behaviors. Bind configuration support can bind multiple ports. Different ports can be set with different flags to implement different functions, such as
+
+    ```sh
+    # Binding 6053 port, request for port 6053 will be configured with the upstream query of the office group, and the result will not be measured. The address configuration address is ignored.
+    bind [::]:6053 -no-speed-check -group office -no-rule-addr
+    ```
+
+## Compile
+
+smartdns contains scripts for compiling packages, supports compiling luci, debian, openwrt, opare installation packages, and can execute `package/build-pkg.sh` compilation.
+
+## [Donate](#Donate)  
+
+If you feel that this project is helpful to you, please donate to us so that the project can continue to develop and be more perfect.
+
+### PayPal
+
+[![Support via PayPal](https://cdn.rawgit.com/twolfson/paypal-github-button/1.0.0/dist/button.svg)](https://paypal.me/PengNick/)
+
+### Alipay
+
+![alipay](doc/alipay_donate.jpg)
+
+### Wechat
+  
+![wechat](doc/wechat_donate.jpg)
+
+## Open Source License
+
+Smartdns is licensed to the public under the GPL V3 License.
diff --git a/release/src/router/smartdns/doc/alipay_donate.jpg b/release/src/router/smartdns/doc/alipay_donate.jpg
index 73ee72c26505351075cea6c7c6dceadb1d76fb51..7ce3d7d83ed49ba0d358127ed79f3a494a654c5f 100644
GIT binary patch
literal 53406
zcmb@u3p`ZY|3ADLm)shWq}w=ADn#xflP)AlccGd}NMe%QYRr~G7jjEZiOEr^#FT5f
z4Y@@jDVGsrj1n0$LygVM?0MGcob&zu{{R2;dOgqcdUglfHhb;8*7~gX=l%J7-s^~a
z#DkFPP6sCkNJ<KVc7T77m?^bpd$^wu1i83C>mUf42gyn;fn>oM_z1L9YU#h{`=r)D
zn7QlH;EyH{_zo=uUmkIOkj&h52nqy0B?oAE?*6%-CdMYl*2ZSm#v8OvOsvg}txY#T
zkWvx^$%9YH7@L@ENW%Qv8j>XQ&$*OxvefU-NJ(R$l;pYVG8@cHp_G*WoIm)doejpu
z52Sv-p;!z-52XKjE2%9HF#n!!e<=5NFTlek$N%Z={!iD$Y$$xsY2pQ9@M+>XZPWF}
zkku9^7a2*<Aqc-r$^*hIUFEn8jEXcQy-XSp$(fj#8JlicCT$1JlQd{-W(<C@{O@0E
z|M}4GwpPuxr8=-Ssc-A~2J`t3WK+L8Emsl`Nt-!s-AdTA&(*<c*Y>%|lh!?P?%Y|)
z!vg{@oZsiTMf<S3hqgQujF&v50xg2HPk05Nv){94m!!>qe$KW3?>Bze+#ErjhLW~g
zmZU|mf>m9t?y7(87}JRU_hbL(6U9^B!Cv4`Lh$A7b?*EHFyW`bxlY)HbCUCG;C$hE
z@KWIXzU18Z_xTIS`N`ks^>d#&ux~5)Ob<BM_Bwq6v>}CnbAyxrb=~*B&i{Tc_z0x5
z%`f=e*%J}kdrT$2{{MSi@D2z4fS|3!a}nqLd{1A{wg;o+t?d-(wcbG6#CU@x1WCsH
z_fx0#&W)wiqWAx~c7*{!n`mOOxZ*$8cG4i|CAd@Z^?$Cdv4WrlN)Yt+^|=%0Pt3I^
zS!dEdU{y}$LXe6(1gU=j_jm^Tn3~M}T}pWi1j!DF#Z#++`KLmVC`l|9{3RBPav%uv
z1%he<#Wm1^c~aY@wqT@ILedMQFbkx_^$-pWudLME@%zQW@6s3<SvmQ63W`eL10|}E
zv=jy-ErXGjl^C~Fq-62QERa?EV}re%`rZ@rD}xrATu#oOr?cf{t;W6%uCD3H^U(^5
zi!>K&Em^f%Z_V0uX66=_RvWFiZrkqQxWj4Z{sRXOxq<F_o$~haJ?(cU_(Di%Sa`(6
zD_3J;<E~x5k&=2l?N0iicklg`^YGE*+$T?;6&4kjl$O1EUH+!7zM-+{ZF9@V&QG7a
zx_f%*%punB*KZ@=N5^=RQ$K(4r;(XiNx#6#|J^O{{ddp)mwqh({gRfE!N|x<`XwbD
zCh7PB8QDKJ$f?=yl|K=rzS89KyoFnmvtQOK=$P)~YMeaZp}0ubjJb*@>DpY+{-1R$
z`u|hU{_WU*`qc+*g{0>WjI=aH7K6da%E^L5Zl0Xvn5Q^z?oj;uP@X&HOAhS6hZr;h
zdWw;ek&y@gsVXTbss6t{#Qgw3HN<pC86yRZ39|sgLn7f{H`YM^KYwAwA4I~(FQHTS
z6+;$E38QhyI!ktU;>=pwj6;VQno&$dE?Tlbi=pji@L;;57#dzTQ^)uDSey^@laRgH
z{-x)}tOIj~S{3PI^l#?(6bA313sW}goIBX@Db4%%R%v^gAVQCmC{+x3Q)YF@%3|ov
zrQKqP1s?WB4Aphe0;#iWbHtELIbIC?u~!UX9Yp1{?~fCOYTw0>Fow`sGj}spa`Rgj
zx}9w!hT``pj#C5%EOZCs3Z9$QNkbYS*qFxsN$kr*Z=4oGwd)hb(AxuWT?ZVP(<C%#
z7v_MglGfhNwf6kJa2eOvbyl;O(=OT$8_>9W+Z7PE8b+yay^&J5zC$4wP4E__4j&%n
z^XMK8-$oCm;M0}YJ*mjNn*n)W*GoAsB{D#3DGMt@cscyNTzoy{x<@X*>AHC$8(-2t
zW861G@%>bgKP2iecU)Y*_nGjSY5e^ZC!wC`ffyRhA(RrM?d(W9xo$Dle?;DN;EJK^
zC7E_D*zwGDgmqmX`G-#=lJ3N_OU*IC8@%FEoL19(@q_6)_!rbVydYi-jeg_P{>0Pk
z(A^m<Rkj#Xpj?B0vNl2RNikHcccX-X5y~KGELWu?qMPm?Y|WpKEwWsy=DPY@SBrag
z>Zu!V`;OYvTUvsm=e?zV1+P@Q7Y@u8L*|xZXboL56>h&e^8Bn1(H;$)zR144<W|O$
zx>Z%5^WXcMsn@Mb`_B~H%S6vJpYanzvdctSs1$<Zn<6noiLxX!ZrkPOz3{0SO*%Qj
z+b;y0@r>?(9_iRtP?3DsQ^wm#KH46d5ksiL6@fSU5iWLYYK3bFiz`on-pD0*Gc)qH
zEXEg&8(JLQe#u+0xw>mW&&ugYfWd(gT{S6OMeb!nZFe;JkML>c<NWni+#mJjl$esG
z*IX*oJq`|cnN}*du$MYvbQT)iXmFzMyb>SfKRZthMOzBpkf%I6x`>CQvzGfe<hY<U
z0zH0pPB6@eZ3J82PgYJxX7JauU-cLJS}le~z<lM>N(t;$0vq9_54Kv|ON}^g;`i?A
zB_*F$m7(n~Dj30r>|w*zg1m?$-Ye~kjrW#mpGtwPXw2`7GB?peu#lpU;>1u=9s{&h
z%$U4DUL+%i-e;VGCv%>_wr<0E@)%s=PDt<*mdry@4f3a{7&;y>chBq{QMT>D0t7dx
zS5I9M?lCg%(RP`c@4M&atDckyON-Kdt;!j?haBi*^Sci1k5_fr4y!mm82$8<dhRpc
zk4E2m>?7yGrm&&1o92d=d!wB%W%y@?qNnv@53bcc?=YotAw<{Yg?2PpsGD(5DKEm<
zqXIXfuP9Hb!tER)+=5GOEuX`FqJnOLsY}@ux&3kf5eL${ONYN6Ep*7Ae9>lnUP1mR
z5mmgz`!Uo$&f#J=^Qg7#V03}VXS%+toK%$I?_bqb=zeTh$9VaT16tup6N*c})>!G{
zz8bx$*5^51{`G^fFkIigii;L`)81BhPUsew$F({n2w!J=hkS`|ITvwAdst2X*AG-7
zW~hB3u$2|RI2dxr#Rg6TUZn@|`LVaG)AnG{>epT>Kix|AJbE8G-D>7<(q!<YP*z#v
zi!{bqdxZ#KOs%L;4Ef>dI;?NBL2CRlV=;8~3Rvr{UD?XGUjCwt^?y|r#++jK6V>nQ
z7FgU_7o4I1CH8mLP#cYqwVbO$LxBZJ<^w5MV12rapk(U=5BVRpU>)G*S6*EHv&+Q&
zSnI0d^hNs02}(}NyE}?B46fCCA4q&dK+cFEdOCU&7cT(wUiU-{@n#{>Jzy7EXfIrx
zKF;BBHgkPzIg8;p_?%<NneIJz7y`RDoXGcOWl6;u6Zv0*ZeN%CQ0wsJG60bwF%*|W
z?kD`*?}#c~fYB|~1Y3U|wuz=zvZI7{ZD7@>%KcC6=at?1aj^2<?1jtjnJ3-#!j50Q
z`{x=f+3Sr?1vXbMCpJBTB4_b~PiSTCgQQ(rV(5j11T+tdoXH=u)^(GxT=gNh1Y5&k
zzM=1CZdcKh!(Yxi*=A&TuJws^NzvB{2$A>KU)wlOXC*DRb^@PviJUKRA%9%LPm9R@
zLDQ&of9h8rujYBA@5qm`sjaqZPn~q`SpJ!pvvyreO|*ji4M^lHx<Vtm(rGL_n=nX>
zrKkymMK76EUIJHkD6RKi04;+bX)!ir`puKxw2qx(PE3mpx{|a5-|;b(@YYeN#=&v>
z3CcV%wD&&vw&xNZt!k$}f~>gu+?&82C8$CuqBT`vYANy(RGEh+Tw>-O-Qo$43zVv+
zO$G+Gd?c2ar8Vx;UAk3v>3KOPJs4H`gXc9w0lo=2KmhaV{Ty)?xC&r4+`A;9HI8me
z85cuFtpeNYG#`Fng-w`+_5GhX?k*f~AN<>h0u}keztQo$dTscvruuG=km}r_itu0W
zdd~h;SajDg=T)`)!^4N19)`pl?`eB4cQ{3AW*eA;Ihc4aG7DG+v(w=HxS|n&;7f%V
z#Ggf2*dJNu&XbS55U^!7@;WXfB+PqZr`_And&6whOAf4QgD}!B#1J!;CULM?|2kL=
zcKPnqN2iw@&5Fr(ug&!<zp$Xs)1%MfMXikLlO3!ZW>R|>Y(98U!ri1c<KDgowg^lr
zTnwdTh@sna&;!i$e=)OmG32@v9q{Du7TwuVgIEqSgnGqH;BnSqW@7)>Pv@X35(FV|
zhYJo_1t4%nk(Qe*&_mz3Zv;2CgBv;M2Kza8eBT#c$habhA3OH9D`)&aapf&&vluGu
z_`xOCQV>@^hVUdUlYr<`>KKsFT=cNgGMi-0?Yhf6Y5^<serXPP<i6Dl)7Cxx{iE5r
zb!*Q*d3HEH>47h_N1o$0uEle1A}qms8)1Yyk@Tlx=xliEVYE|lv^!NrVum}%28{aq
znwI&OuK7$psMWaJX?67*Y7}tE_{ozrFz6EiuyZr$0yIi-&0kS?amO58!ys2gxADWH
z)hc4BXN1WSS=ACcIYJE_x@-TCuc(&xljlu%uQ?7pubvB+h&JJ|@MxnVN`VK#;7^{U
zsN*NVt+_YXLFne$3lIOg0ihJy;0@ZOzug)!^s)uOi3>f1yjkMFX~VPCtKlz8#n3MP
z!C4939TY>Uhk34|TVagZz|Oo$c~mh0Jn1vf6dh#D`W8OGGTM<<4B?--b+*gkxBg&u
zHA{p7awnn4i2Vl@{fN`})vv^KylKANaxc%PBG^A9Ae+!C!*zj8n{?0Xt~$DWhqt$`
zs=bzs+fPmKKww3w3lU#26hsx-9_wbD-Tb3zWt1&M1`M*00mo;ljEbSH^E1Uz(~k#S
z8e4&jZCb)EixH~x^y}=jyQpC^i>%2--eDn@w-a<`&Nb-U1Z?*?i;0oB54pewO{hY!
zAS4v=Z4$)-*mI#$X~$_jMtmw_C~!lT4iV~U7}yITI!I=Y!OzMF`Wl(zQeKug9Xh>l
zN8iI_x3Bx-hX<uM1BcbVC1M0e!Hozh^#sHKegoeiEW|VS0DfA`4J{gCjJE?;RU(E?
zjZTA}`KrUdGh|{f3orwV{+_n3#&iC^h%DD8N(`>3JBCg2<6Sw5)^u=)`(0yM<7JkY
z3Lf5YN>=n}(2sw(yYEH}OJ+FgT(vCvi6AX;L2MebuX;6bKR3|@jG{=INO7{WSwP4b
z1|#!Db)tWm*576!?0NfEo)^p_#8q!X0-kNpCOL4sa+ybWhHrl#O3%M9;W+Pau53E@
zq(Mn%&2i(MFWT%iL}qa9M*L}f6j@G`V7CJCY^13PO_?H}cLLA$m!Hft^qrrOS`STZ
zoBHG4LEv4Vzs9VyU#99hqA6UIn@Fd;VenTU2K=&VFEt6(L~9u(VU39xKZ;uQ5(Fpk
zt-JUtW4sKeUksq#9p1%t5>(uLG7OkN-M78>Pn}ZTAt#2|@&Y^3B_5}#{rWL$u4SF8
zdU#?Tc_q)H=*j54$C)|D`g<5X1ION(SGAVZZ!inqY8FUcmRzKtC%4aD2ALkuPDIWS
zu0+y?in!D0{o~Ye0-wZftQdr&U=>^Sp*+G%e`^UGTF<JC8l?sMdoMI~thP86P`LJJ
z%llj{nP?T*N(>c^2-Oq$@45J<_Sh_Qo@*WB<>_+y>%{;?Spv_UsV$|&RX6+|_Ac)O
zCZ>1hsaHJYBprn(;s<lG)OoJA@Lu?9$27Ue5-$y@_)H7*-oET)4_CZSZ}}Xc8=3Ux
zIlDyT?u+>g)y_%j%vkcuYH{%lmEtEM?bouTx`q0W+fDi$L!OPgg&NyVJpZwz+4l6K
zmK@_f!7+M^WxDyzJjbE*%VZ^F>3$@Qr@tR<;tnJZXXMdV`zIQ)O;=UI6=k=amR=}a
zCwvxk|GsiE;tUA3ov0A@0YpM)aK+_8+LeJh`r=;1GcU+C!1Ye^GXhQ)R$hO|2q7vi
zvwdO_YdCdE854zVAjk;qc+>Tn9!Igv?${C|jWdV18FvjY<ZYzp?$Ah6PFOZ?T-Eg1
z9UbU}e2SE)1-OC(UVPv%V*oCxtb>{R;Wy5r>!LJ3%!$GsaIswzpHm!}F4+2Zs*+-7
zWcjYY=)FtNm)A%fAoIK*Og!K-Q^$DJMwMUz#-R%ED++)}pVt-rfGFR7x8mL5M}W?>
z4P}SdYA0d)7-g2ivq|B4=;AVTy`E5?#$HeWXp+u2Ob2%faKf1Crf)N}QyHQ|q6)jn
ziu7~xNdWL%No$7^>8`AS%PdN7w?h?@%dEgE(?`3P<i-RHcN?6jzQO1F89sdVQhi&h
zLGU*AQsd(V@eW-_&`NN(l~8Ypf+06jup~p4%ZlmEUC(JHm4fA42ArM$+;uPi%k^(t
z*X0!qdwajt+Ba`7Ivj_r)~tbV0LyBs*(3>6ij5G*UwIt$qi0lW)&~?!)8Bc|g(>bi
zTH*Ht3>JIoLiTnv-c~+ObQ?_dkNrphPrnJ*Gobs?mQvyY`<!uGL7@NP#1eh2dY)YR
zefZGKVV0GZc9fLxiv)r#|Ak=ee?xFEfZ%t(A=u!*AXw%K;RB7mL9h#LTQWV);1RZb
zK=l#VeV<B<6n>O;b(PZDSBt*5nqO^R7UWR0C@l1kg9p^=qvTxiKFIzC59}>l!yKgh
z%{1X`M~J{CU`r#*tKnPU(Z<3z0$mAC<od5UabI<wHoQvjZxr@R7DFd8L5z}m8iPR<
znucgfAo_ccL<}V^@wf1hyXh^;A7Px)TtN5S{%zDP=<&>B@9kg4pS{*GsF}Y*ezuY8
z*2uYnR||2!U=&BT`(O(=tNM{<|3_y^%Q_#<Ye~>?l!>p!SU){!tR$7SnfjH0E(h>0
zhB|<+ZD|8!wYg;026&x1Q3C8|)Z51zps|SYWK{sG@OEHz0~C!WeoV~3kEcdwA0O!T
z50YSUn1-UoVA2j544>G9TV%ILXe7Xb1i|9(18Uak8GHgeatpnVEw{YdH;sQ?o!t7P
zg6Q(@{wd$BwRqJ^3{THF{U{PLbkwxL<E*-Qu_V;A{GdDb?3+c3T*!Ql&o@$&w00ZY
z<L|)SgK+O9RxVpl3@KKi3(I0*=1TBpVFDs>ETg5NS*~=nZVvCc61@M?W-%2X&&9v=
zZ7`CCYi-a)V-#8V>?T)K6|42b<2|Zf{9@AQGpW_&+rYrbwL<pV^~|H49=j@**lYKt
zWbeEKiK_pqhUQ4vo2CijE<lc6SiF=ldOqW7<^F7B<P9C4Kr#yE_iNTKIz*3&7p%Zr
z(<jXDX<6)e_M_Zlf5~m*ws|rOHsfj?FQN=Qh*@ULsqrv>H4+DCMrSuqet=fiPN$(R
zzAQb_^{hX{Q0Il8QbPN^_dB*jWHESntupOfDg32O482}ABS4i70=nVKBns3GKz8Cu
z_Xj+8tI<q8W!exhrk&N`mgvuLb0^}7*1yAvtj5fwW+ko6@d%AM9zhY=4s<hqapi?-
zBj_$SCPmZ;|D3u+fImoWU${qJ{PF*mXLT{yce!p2_+tEc-;fx(Qms@`SlC6f7g2_t
zpV%gQ8uc2nCn)bvd);l^w_54y#*<Pt&A2A~8{)FWSlmM4Qr?<g*bmTwRnJH1v|d|=
z4jXs;)h$-bltp!`z+!^l7kq!&akL*Ku_oU(<7KTz6A>r8pl|aEX?PHzM9CkcLlil9
zFz_$@^zt3}!5fScOOeV7fP*z`M=_N4nInd{Lcoi+xr(9nt|)&m$bGfqer^N24_F1q
z8zKWnUAqbP!Qsfw3^{XZ9DV`uXRG7BPbB-GXN|K5id>**f9D+<?zypY154y|Wp!j!
zgOl(SSCGRKQrzm>1y|tFtd?pN*u*z6^m(BedI$1wRV6bDg1y3ETrs5yuO>W$)&r}&
zfZQA>e8>9<2x)v9s{nj=L{MP=@Py!IJnR0cDA<+2b*9d2aE&D#1>_Ep#IIsVl{Q!a
z7r}J|TzEQjpn^$T<oYz+bARQ>f>WhMFHWzxwDz9D5{pa2Cu5S*44&<%)m|b01g>2V
z4>yptM$jDmY<Ly*8<tN6_>qe=B~y^+m0JPT)%uQ^o<ea41qNd1Lq5w$DAh@u@p2T}
z<?-FcP_}0y0m0<Lla1Az5n$Xh0l-TUxMht5bv!c=Fe~`Ys+=>{v|juR+r;9?=-vri
zs;R)9PwXuV?drSFwyG7@i_*z*So(feZmgYRf<L;T9obRchf?^&k{SG|qAZTc_3nK3
zz-~tMh6-Dj4CbdLs<;4nUj@WS;7-!&ATK9bca(^1_H|a;2Rv(DofqJ@P({Wf{hZ0u
z=!wwv9wFKqP*j8rM5;p-8U$xZ`XYc-OyEu5w0tbdbVk(};}npFIAtGT(f%Tm`hJSs
z5k!m^Wrwo+?=NFv^w^I;w}uG47^Y7e&j?+lDO^RPd%R!b*o!YD*Os-Fy?Ql8YA<!Y
zA4v)9&#@_b<s}~_ilv>PB4;^>3vCE+)~hzCDrcM_3CT`J<_H|wfDff-z((%`c!6hG
zXp=UG_PKi!>6dEoCFzZkONT7$DpXu|cV6IN`~3DfK5I}my*pG<o_Y6>Lhim8-#rS)
z&(EuY)TfE#AViSegeVAX(AEJ}WE1PCe0_I$cO1$Xd6!G?bvncFr@bn7NiZDWeJ<t6
z*}sG}my@GGA}oN=yNmo5x3HKNOX1#z-*}21<=E$m0JS^bJ96ZU=gctzB?xpVlwD`@
z@^U<dO7jK*_^QpKht;x(FKed|@batYkeh7UcU%v}f3mtcVpHxcr)+CQSZc+@ded7$
zfVb$9?05y~JiQvbCCJU}rcKqELzyP+2TN`-5Blyf%64bDYiND4a+8WKf`X$R&1cTw
z2TO2;AH>jILL*?j)aAgJ+%X@-aeomJA2qxW6*+|CroeB&eB5vpxCw~kFcGZ<iCUOm
z-OASzQf!*1Y^fG5cl)Ydrj9T)KyL3Aj{DqhQFzl3L1@Te<B@H}0gi5hKR(z}fGyIU
z6ZPMtA3y{V&|gwIVr5keeaD}rB5S8>KuU@q$b)McvZq(9{u`uRo_O?bKTA7BD=UXL
zWLJSK1wbj{pHb%&bSAs`Cq?PPNWozQ;3c!YE>C3Y@~N0@5^%`L+}$S@BV$^JSy!yu
z*6?okL+J;{R|H1|)4Um%ukcfmQD$Ovjwcw-U{noX3KpCwgH3krH5jQ7L;Jr;2DD6c
zym5Rg9@kAn_5vG*<k<%1G{lp@O%X#4I-)c_aU7?|rtpjfZgf(gsE=G*)G`@MYVB+6
ze=Y@v?<<l1C;Yw><Ob${f@h8%1GZ+0nu#G1uuK&I{2E3=LuwK14ZqPr?+(MqXJ~!`
zH+~$S+|Qsdh&V>Ln@Oz*)C}te@hw5PFpAuRU--)v*bNoWR72l)<bFoGMfrRY>e5<8
zOZzHHVQ2{)*nMplEWb9#w|MT6=WxUApJ2{Xf1#}pu)xQ}eL~+Itu$mA5fGjPObAyg
zrG!SRBHDo~PP~b32w&I5f9JrH=fla19wawipq+YARswH0kphyHe-<n+e5igU$u3I-
zKz;DO4!;I*e<s`sU?&D-l+yWuMRv)2*KtZ2XEGpv!j@sm4n^AO7HoP@*~X1EGfMm%
zWC`AfaVu*TVkj8_g#}zr53Lhz<-6Lj@0>d-hMrFO^p&;sO}7PQnMO&8NRqV1q(5FB
zKkfnopo|Ap7bJ#t)QCxqB02LkkKFS6$x!l3znA|hbS&Sd)=SBCWn;nHM=jZkTDR5X
zlQvQ}h;Ey}-icSjS?C%D$S0I53a@}ccn;UO!i{E$;I+940F8S8F>5yEI6Cl;SueKb
z=(S1AdXpfOb7TUN<V~?pMR(!|O5yLs5CoDohr2syMOfiN{lRv&7po66O_*OyQ1zqV
z$$0GiHz3N*^NE%_czXRvz}MV;QhSUQzRZJAYw{<UyE75-VO&188tD{6N?TDiK%(s$
z(95FhlJN*jqQeD(3w;(debp@AK&!T`w85JYmY&|AgPU4S0KP}gIs_trK|fPUbKfv}
zK=oh&jJRJsRPq$`$dk`0gn#2|#0uXG{>_^tU$#P7;5f4=UK!mhJcFzqq9Xd5Hv-_(
z)ZVVKcXicEx$Jx4hlUspuB#sXV0bvM`kCTzX9L6G#0JJTjreDMX|<anLmB|R_oG}_
z^qZ@wQNm%i6KBj5fjjLPi4;SR+162Z65h2A{lxfbhFFRrObHHkbNhLa>saeSts`Dp
zA%%n#I4jSl$B^)k{M`0=n%ZJFr9D5lqr>#shAnS*-Z`l21>EDeL^kk%vTpbyViQ4K
zxCpO||4kXk4_Bjo0=*1=g%$8|pG2_%86-9>vM8Q+AKS^fI$$jc)wmV4G&QtAlmTok
z@MbPxZ>Oe6oFY**-3H(eJ%dl|t2i^!7#cqa!Sh5v1W%E^!78^Q*IEjWWc}f5tcr7k
zhg{wxPp9+l$DKI&y3rQN$w#B*&K-XC5?UsG4$FN}<=_xm?#5vV@urJ$+(&?g2kVKU
zOQ$h4cxDTuWGx0=mnfGg0JA)Ebmtu7G1jqL%k@R&#_+-ds$?a8OPpN^&zy&+OVd$Y
zrWiW#H~IM>-%aE0#`Y8qrH{kFFqDNmKVJxNl{m{pFsH7;|N2UzoGCx1uPpRjZ=)P+
z3=ftNCNH3i09KeZiJ{%r36WC3VBfc61|QpH=}LGM`2<R*mG}xR<Qok2hupbk!j**H
zduG6&x^ViYXDl@}R}k+Gd$RDS`^x+pzYLE+7)ewSeFVf8H-w;*uiDWpqCaOA0YOf%
z7+S5*ZAV%7*@!AC?YpENixGE%8mi^)`I}}tzdyj%;E<rK^Dr}ng?^=>Gy4ERj4uL}
zHSlE!es|-rNmT-Gp&!q6oFlM6>R6i5`DZyH6fDRx&8Utk=-$caR|qb-O)XlxGWcrR
z4QAtF>GM)Dn8};yvQzl)07AY3dd*meXEts{ZxT>XSTsqM#&bOqC9s<hU{~rBneubN
zug8gqp&Q$o@n%2;kWNEK;N8rmIAHa&0CC?={rx(Cb<Q`z|MbL9f`!b<{LMK5j}k*T
zau;4MgmR6x;H+6IU^^v(gmqRwpF9TM<<OnfSnn*qp4WaoYKxU+XY8Bt3TQ8ZyT3h=
zQbc3_!NOh{Q2IbJy_9nr2VllGV^2xdol*4j3E~CRtL_rWPCS=eaPC#xZYN0OAxgKC
zqx6;y`o>l(iXp(~-fXkA;WK`6iXu~6EyGg(3nBZg+8oZ|lVExix|_nniEfcWPdej&
ziO!N6;U$&(1zYE6Ngd1C)5g%BAc%Ms=jx<WLMUW>@yNZC>ICAyou2E@*C$_&!l%H$
zi>Lp#@>5C_iGH4g-o-pIw1o%?s{NaQiE*6^;6Pez#0a_-KkHjX{h>Fc8U2%X-A;;U
zRF@y>KG;dx|9HU9&BRl~{iD+NV}SLBfKae`UrU`;OLDC+7|9VVA_2!29foM`7rnGo
z9J|+6!ZM0OU3&s-?Kf4m-8JGrZ+_G|(&R_<GYyEHaBwMFy=<+`ZH?nt8XVx->xwP~
zY%rbMiK-<cAV4Szd14NiMBZczgc+A^!us!~*gQ&cV1Fem(Bl3u`9vbpiPb@k<b~^(
z;bt{yMKtD$u?=EK9cR;yei#uQYd1p5NYzZhGk<}%x&o?w&&g)~g!$;o?{vA$$D^~d
zZF$S?9jyAa|1Ptl<nqDz>EMDlMK872Y=ojAZ6r>pX^P{WngWCYhq6v%rj+=fM9-So
zFwc1>k_NmYSYnPY9S=U*HS-z3F9xn(5B%cWvPP1qBJ_Sh+wOCAG*LQj@ENehRv2Sz
z%JoDw;)J?hb+oe}y0B*S2w7nf=8Rd&i`Ft?W*Mgxc*e_@Pz5k8G6=FkaG12Xi@Z|k
z0HV3vGag~r)|)+HeJlt#8C9$C=sEMQZ%O9OJDHdNh|)G{neT+`=eHpGOpv?fCj*Mb
zkv%eS?0Yp%0F`Cz2_Jq9mmK!&$N$M~Qd?$Que_4ESzb>!iky#?u+Q9=0%zO}+`sO!
zOrS4N|Jz-<E&{aWf*qVZ5<w=Wtq@g|u0Mw-;Li-f%sb=_Bk0w3RTS>+?4HU8PF#^C
z*des!Vq?)|-;XWj-k&AL6u;ZFuFLtR&2;AA%ge_T9-g9YUw=^Q<g*9&lb}I(JD~&?
z-eWYn3e;_ZPk21~9Wx^b0+)>dO)P{V-1bK5xGS;)kiX>u;;cNK+&mIl(B|*@Yv4d%
zC~%(4wl6{V6T9npAh@d~ObN^~HBk*qp$>uP2A>h-3NE#Qw3;*ej!#@y7sx5&OxboO
z8U@x>oJXPVA3!Owzzqls8u0wp1bDP*_XF$$JaapEG^Jf=R>o%t4JinyeI}zV0!uzN
znct558JWkn^G4aUUX+mbb^UKL7>8O~M~I=Dc#r|Plq-CXr{lRvxV@sx;Rp#V{OpA9
z3T?>5E(ZMy{{$DyJ~60-je{3Ze;L}ibe33^93KAoC|2wJhdNuu=bd%d<N7vg(pQo;
zVzhxB6sC{6af|q%>8m-YM#0nPW4;Zv69NLilHYk&AW!)^L+~vtYb1Z@D+_GXTwMEB
z{u@qcghwu5g<g9*U?woMH@je_A^O=8-(%<6hyP#)24lS#3T3>A$Rgf*J!LVzG|U99
zQ-SN6@hmeM6EN7AFyNZhAIFF?L{vV0JQ2AK()Aqrb0NcWJd0?&y1&mZpdw=ggf50|
z!c071TI0K30))DiLjZ8gb*9X0AjHDcTHsOx8zMmr?!jPz@fCp?$T&zMjmQ5`vcDsZ
z&6Wfof%1T3=I~6GTgK}5?17$U;dW#%E163h%Dqy(D#M7qfobTw`*TBfYO`STi&wV>
zw|@)xC&IAVZG4FX(lr1pS8QyGuiOF~I$RXxApq%RZizC`r6eto7Cwrt&oZFw<Cew!
zI(n$fCgYvl<&nbTl<=;D&N3i&ms4!n@m3kDjroeBgQ_a%hl(E8sGcF4_y+XT5hS$)
znzKP&X!o!vWm1Xu3x6Uml%q#vEN+Wv1bAM%2p;|}+$S%Os`d?Bq|D44W#rDZlC}$$
zkQQ;N>;(d+@U4R*34zqJ#Y9#3bmU(Fn^?C-$;~H%E@XMOE_-6aTXQzMB}Gm_hFnGR
zLkyWj1bForHhh}W`*C8r{+KRLW1Ot<s*Jb4DdJSATXHjL5-_-)mep#9>owxzE8J`M
z?N}$p=dj-iR1*7a!@=EeKomO<76RWv2Z8Z*B0r9fFSct1&|`rfYX^S1q$14z78!$E
zCJC-ss8+5(9bMEe)TRBsdgR{<d}rl*$*o_<mX=0dfiu1pgt2=pCWutp;C);vrNO8V
zgD%1e4f2f~I$;pCytSb8svfDMvBi-8lr5w9$Pr(h@6n1-mf`(juTI#HgXqy}6X|tL
zeB1)^${*G!<*6V2l*fUfQ8$aEn&Yv4xytW0Js&?(Jg%TDC!O$GCJFm>g#QrvhW9hN
zMP7w`GIRZBDzJ2N_wY?;s{naU<*Ty5$*{<V#-KJ6m<sng;<@i|^2R}8XdyA~brW&?
zyZ+2tQ6Z{`c=E$V4@m@WSZ$bPSvl}bwZkq?Y|kH|(VrWF99g*6_4zCI$t@u7k!o(n
zA0pWSukjlFh*u$DnAA8A%~+wH9jLRKyxUol@~usj8*Xsou#TUWQHOKd=EKjP=vhJM
zAUlxKkJCzR7p||I%MZ>Gn1~;|e`rw@TsKBLLzva5Tq=g5tP{nMf&VAFdBB1I5%a@c
zCuj*V+#g4{jH~RQ3=RL;V`(9)N-}5Lk_bneWD?Xj37(uQ*m>s=#9HSlg8^0=r-hw0
zgl7Psm~Kf#f<VFGFA!1QVTd78-Zb}=NS}#A*0{0pEKaY@VB<~RQs(E_yHCbE60aHl
ze5&*L<h|1}>K;ei-sj1DFh2KTjm*o%dOB9xn5m}!$-=Ng)wduceYRcn4i-&OC2_!K
zGKd58!$BMXh2YS`9diNH(_8RRI`=dSB}uM*kmq!dzvh~utu&0SITz#>P_;jp3`sa1
znK7Q_S5bKnq@gk_`l~}3)xC}9O)vjkPI@iS5}x6?vatfo@U1Ltg5lZml6;u`ZD{!>
z-CLi@@8F;_SspIB1t!UB&%S=A<{$^n-uk;5{pq)Okh%$Z#HH2Hw1f&zh2}{5WB6=1
z@$jVGXa5lw;<w1GQ?C-I?{Jpol^*_FeMqZuzP+{>TKq$B82wZ;#Y+X5w>@Kk@cVZI
z0O9U-rK__TxA13aaao$Y+<Kb2|ExKOUq<nI;;&g2S`=~dprnLi@I0a9v-|n^i=~Y>
zKfv}<kdW^2_3*cQ!IIj67s&njPpSh{5v&&~i85fO8(5ub+;*W3jhhSyh$<sXCpm2b
zy&e(;5o85akVfq$zD&#%T~7Sij_4=W<5mbQMfYtj3xw9Z^|{P|-S8s!KBtgJ$6UN@
zHuE(nI?R%+H|%@+{J?#+2gynLUyYDeuEJ9Yk_}KyUkqu2>>u!><2gedgaZ4Dir5T4
zfe}9r;O)S!V}Y#|!s7nSyeMo7A(~d|%GMFsARa$z34e=8ZeF@Ld-VnE+jBIo{EijV
z&$8dMWpLq~O2-69Nv6H{$AHI{MSB^5;s|!49|r*NU#%N*jJKnkA9Z7w-Gk})BC1{|
zo7Pc0!)E79vh#-$hp&ePeCa*;9yZ4h7T~cY47Zz~#2tv?a_T&MV~Tr)dcMJ{3etR4
zZewi-1f887HBTP3{Ppyt$(GCar3eZLfqxbGH5e(^_Xe!%v>^iadzYv1rXk+Fs<`B4
zYiP3Y)rmA99Wh;IWKf^wWF{qgN?MN)23@bLkm<BrLNe>bza&}aXjQ)hHWBny^w{@R
z>U26*H=*1~tJ>G9O%9T-KEd-9s;Bc!c(fZKl%?T$Oio`&KAF$jQ%w<g9!zX2uSjY&
z%h0JfaI~$SeNfRf3WD4wKfwN2dg?Ng7w=9a%>3gMjEF4JB~5(b^ZsgP;e~6!y1;M7
z^)#^+hVn1ffW?EZ3J3Kl{K+m7o|*5pr*Ka0cIeLe)`h?2ZcF{w0=b*LxiF2iS5!$m
z!%0{n`>9$>xRck;Z;$<zsQ0&u=q^7ZWe7j;uZXBI=t`|NhujVq<C<tIgqINiLBcX{
zm*q8~<&crucY5HX$7ift+5HK>()!2ueDOTe*Q)PmX6o=h#bNB=r?lht=AvD=-mQGk
zT0m|#&PiD&@RKSKyd0J#+X@ehvTXN;un1SmM}#`Ft?bm%DOdiS2CjKo>xy?z9@(c~
zpFf!WN+N;lrSt$MQr8SK&Bah`Cur|FAWJ_4HUcH|1nv~tEpVy=!a>&_3B^c)^BHBn
z&1J!XA`$^S-$M`G!MPIYDBMpE8-zar8KF?a3*B%9)d&-sx(Pi9fTRIPDS?>_fSbee
z<9e#=K$aUQ8CHa)j=cLCkx?3vShh4ndj%};6Yk}83)P#3?xb<u_?tcf&qqLvJUSlm
zWc%Zi=jVMJ3$xT*l;S#a=6aaPMC?b|H3g~xZ}+@!sIC&F!yvZ^mxk5Ql+lm0Vk)R~
z86nA_<^mpm<_s;MvJ>qPWk%Rh0?>rqc47c7J%G3nuK35$Gbl@hTX>xM{C$SOLq^v_
zj24a^;@%9ODDiBT)Ti%unWuz?&eQ6Rz7qAm2}*JO1%^nbqFrcQR=4W{=vY%AJiOr&
zh-C1Y5Nt>&#>M<Jk|B|hv_XmzUG%TEwo!$nm*($x$zV@YwS#ZKlV>LH53^F7bOqBl
zKw>WkF7>@d(tnQVH{evO`*OmgTUf5uWoYxqoT>ak)@h$aQs|8zuNN15^*(VwdcF#L
z;9l8ytH8>CHh<!EzHlu!EBomg)8^pdkl^gY&Sq0B4a0YwR;aa2)EAkm9hT^KZ?*Sk
z?EF~5q2rl$arwP<PyEW$Z<^`*=Xw6wby_dlAKAC#VM482!r!{-#a0inDktK-s>s#A
z2Wr5>qm}!`&`EC~iMTK(5)ymye2*q!a=RRusZF^s@5T?(0<Pm=Q(eHJfG}ov6j(Gs
zDB?kP&ewA;ewjJw<97Pq4jqRz?ix2z?AIx1Nk`cMMjK5bT|}rr*oygJ>(31XuJ$VI
zUIi2d6!1r%(sG9Xs<iR;{}^rc5lpoGBnXc1?CrcxKFA15Gy+O_^$dX5Z)`vo5BpQ!
z##N6E2TsvgALoSyPI?LYUY5n58u?`^skLKx`a5rKL2fehO&hGwni{?jEziFXDyZL|
z10jpGb)4dOcGO$t%~q?6gjg<xNvx9sDK^E<+H%XQv|=H(1U}`*@4}s)3<FVDFUv(>
zS=!&*_louO0d@rYzm*$*OaqZ1kXrp)H9QpFIha@rq}s(EoO&XJzzrU^RSk>7JPOkN
zBCWT?x4kq-tp{3&B3T*eaFU5j=n744ZcHWiL0>qb*2A0<_tSGZy8Turae036F|Xpp
zuXT#g){pr3)O@|Jr<=MNryX8|Dl`kU5LSanQvzu(cbZ+^ea$G)Txk@n!;-_5eR;2y
zi<}B=N<ble_veFq!B!n<ngY6zJOBc|MnM0M%}0PFwh7;NOa;08d=$lX8{mt~`rwk$
zi~04T>E|N4_%B^>88QVGL&?j7Z+jn~H-)A9^Y4isn&Ig9q3XD7;US(+#^cdy!|s6m
zfPj)d<aqQv;<p_`x6J-rw{nf*vj-BzA4u0)m*zb<bLZkj%q6?br+%G|LH@x3I$Lek
z-_){FHmb%tI!LA6j-Ds8EdGQ1&kn&J^c_Q540&NMXRQ`Jf_<pUz*FORIsgJsqVGPF
z`y!r1{yC<Z)B{W?htM8$R=_S;<vOsfFD&qgu`*tv+8iW^iqqLxrl+f{@B|MQ>Mk)%
z8#|*~%U4o5TDI3wcb$M8Fa#1_jUO9!pLf`-Gs@^O9cpSYx`iu&FIQ^<h1H!R7Dxd5
z6X-Cp!`A-Em$7nhMsIOn-ZhfI=Jl#r!ur!G2foDl|MjA7jm`uEC;@AYuHaQ@J{*-F
zl=(u;gK*D%84Y(rKOXh-IQZx`2h&5S*!IzW3CO_C5d@a@aSWh|(Mx<$BVTxCkw^@E
z*E<Rl-P8OQ(L<2NN=)>?Mpt9Q>wva-(R7_f`PD8l)XUerG~r!U6(iBzfCSSHi&&+`
z&CR-~8lo<FeGmkKoNbIBYq{?m0-fvzBrS#JN;k2^5lbs+mT!|S#|Qetd;`BVngol$
znARFs>M@CQ*TL0QEGivrL_l(foN?+${kmo;H}YBCMkfkyw6vWny)`uBlXk*=RdSbc
z?N%FOs7OspI7Qlr<gjS*sP(7n)g)(t;ia}t&m-_>Dke{qP1&_8+G|b>?qD5#*_b!^
zpv~mGlU}=t|AY~;hH+J>KM4034Qa+yYUH?w!w!W@T$8<W`<ndxH8UQ0>_CqgKU+Bw
z>SKj5aN4NbU2m&=3iH!UYK6;%V`@ByiowK%-v`XORoy)$RP2D~+*Sj^>Te&n-viPD
zKmb22fBp!FBDCZMZn#2tyd;%!g)Fh3xt$;yLK69X`Jwaz5Kt(ZZ3=8#?&$J~<eu%>
z@A1W<u+~<c@FvC4AW*T~I_3HEdD=-1YcRh|`6{AH;9S5~5Q%@gT)jl-47`3*+}!pH
zFvLE7rKoT3PhcBjD1zw!o6@>TDDBE>;83GKrHUctBIa2hC`V-`q8TMiM9aCf@o6r$
zhR!a#VXMyVuCrUwb++u^-3xyvES(A7u2w$b;BBR|ZilU!em;*{2c)JuKmPRr)j@oB
z@eXAMSiQQ{cd#gSRwi?A@~H)F1=(*Z)*Ls%EJ#uS8(x;*0`F`s`U0MR0&Qdz5!qO-
z<}qGwBW@o2#{PM4_`M%MJSf<Lc6t|w9tt+NWEi+Ip7}NS)l;wg>QNgmgW5nM;>s;!
z#tGLMA&06}I!LQTxgr{$HlAPyL@O&?`EdHTnFWtU8GV7{>@PiI!M`}d1;;T0LnIe%
z(r1V){XR*}Mt~OJ%XUC~=7RWfJ9nXt+<}CV$UB{F_gL=)+uDQlIC?1(@tG;<eb9Yn
zWvTDC8y4#gP&Ugh+`Abk{w#?lyj0~ky?uZkTFM8N+0@69qK6kHj`ou!3lr0X*}^rV
z=(*_u@4T>bIWKQ0?lSFVrPiQ|?{1!487#_u{6&<y>tlgVMFpj~v^*uk_LY}U??R%E
zm*Vq!jNliyg8x%=yV@+AvrF=h01sE_cG+?YJ;2nSIfN2>nU}8PBZB;wIhR`XR{Ll*
z$~i$%B(T<GK~galB>6?RLh-YKpZsT{sXu&y7@WIw2*}E~>h@gM+J1FZP36qH`mTGD
z1$?Hoq}P9W+Bn$1@$}@@xHL_vo6Cl!rF6I%|C`*XSc*IE2jNq@P(77@1yLA;d)k?t
zm`Z<%coo-m7MNmn2MB*G4yEszDW6l289e*(TFd>s+<|B-ZAzmn64K5FQRudIF{Ez|
za#yQCa5(?9r~)hO#0#H)2Z^_g&5QA1Gm-}4)`Tl{tH((;Milbo5-x$wNCdy>1^u2b
zUq=rm)6&fh-u9h3bg0(qxc#uI-E!&&tfX;}R{KxmAA#_i!TwlTR%f^A*WW^|LFFO9
zCx8V4oNoR_GMy`L+~xQW5fsBckMNpq{Dfu0J-XTDZL~|o+@3zpj>;c-PZurrV(6?}
zKXTmCR9355`&9QBW4uCOM7kh~x3fn4`Dvm@lBVXtb&2wkWdgT@nxz-xdSkPF|K@x_
z!K(!s*K%f722_+;EHs6%qmwj<HuxHz+ScScvlztaO9^DS?gI!46MFFK#t~xZPm33L
z{Lgj5tKePp$e-}Q`S{_HgCO#JL~;QoE*yvv`+PuEc}_X&I~O5FFYl{N7rbs92ue=E
z=D~x>w54Qap@k?z==eamjmN*t4A{wPNKfBDA1lv)6c0SW;Rk76S=&y=B;Ph(yy~#@
z4sCK*xMxGwB3@%$0NBLjZ$Z}XAcg@Dh^!9-F>PQ682DXa@07cze5}k0dkoTy=nIwr
z<SKTInW*#w2^2BZH*2220-RrzeZsGBYz-?dr#B=BY$$mWCc7>;%1H*>Pw5Tg|AlA?
zG=)lB#`tG}6OxXqilJ-hd`lX=+^vTif-3^jjiaq_0GgUx8*~=+E~(!~N-6E{^HkQ_
zEI(+(CP;);yhOCg2;4Z@c#)6o<?u<!^q^59tU?NAQDduDb2+iXjY9!T_kH@c$<d*z
z_~na2pn3JbnUQh*uN~R3i_@~4mPh|3{eH7dcNF^JnBIrVVBXXaA)!(qXvCHhB!b<Z
z_LoCb0R>cV36cX_UTo2IP$C0dNy|y3V^Kv*z;#9jarIQ$aKeygUkFt-+}FKx9AsSz
zLk<i3GAh=dh}|^l@gLKXK8=C-lgLYM87po)n?;FX$dbHsNSk?CWum)$74^E=gwnjH
z{i2M0C9gBy78j>DJ(|o;_!{{n^e<Bj4JX|Dri5w*k`EH_XnTQh8+Sg98DQaehi;SU
zwzK@@<q>b+!(C28Ad{{YeI;dKlCjDq7-;()YiP1_aD*W_&#C)?M%)o-#1D3-nm48M
z6D-CC@cn%cQ%Xm5x6kZhZM1@tXMX|djw{zv2t?t>(zu>{Ti{Na$HU)k?>Y`bqQqp2
zw6CLgy1Eyow1bey4-;^2LZhcp(`IrZD3{`J63U(^^tQYKkGp{N)_E(F(80K6r!O=_
zju|-COXP;?*6Dv5!X>|!UcweH-U1T5bX`Da3)rt4zqXl}BB0nVQzHWI4JaE~V80TJ
z5Pu9z^>1b4oSv4xNE4{cs|xRW{VQ!$YE+PkI)@*8?L~<u`6jBt6P6#N?Dl{q^qRDV
zi>;^9x7J<c)KS$&v(|PV=VoU9BVZhbNo;i|OnIE*ScB7B<%jXAu3vBbqCO!j0fj7}
zZR$*a+7i-oZX6#?@VYol>ICL_*yHT$8&+RW^N$|cHlna@d2Q(Z!DZ3%Ny5E|CyN>_
zVIjaRgM5O}F=qyUrerGn)g;=X=!)ZLN9dewT3Oc8q*Yrh1I@44DY^^$slYpny3LGY
zRv3J`(C@IgARsWmSbye0mcnh@^Gz$afDNUwhk!s_b%*&SR0}_sH`oaB26~{@zJc(8
zF+L5zf2k<JR*9?5q(%$(^OWW`%4IHft-2!6JDA$?x}@;N+8oC69I$ms=X}xHMthxm
zd>q){Iu24n+W~y7p@S0gAA95{-wh@9a#$mmf9g{fhW9aZuUF##>Wv^r^0RY}(dl*H
z${VvzeXIwYLDSrHy{}<Xqy#inVL4B}2Co9<3#;~nw!qf;ak!fc<&E2&j{Y-cNj)`F
zRllx0_tzbNcI26<ti0}8?c+;C`l2VmEb*5KrExV>pf$x8xn8F+Hz3I@+)LQok8l!1
z&YdDk#Qf}FG!>SuD!ydM{t6H5tSDt4d3g{NLb*Q}eUw1QI@?5n%IT5G1`eD%vKjZe
z=`z`XWQb(*8OWim4IPypW(<8cq1QSAP@i5Qdw`I^4+BL4u#us^<mLS(Xb^3%WHGJ;
zA4418RXECdGG;zKB2>%aA47f!EZ{dE@Jr^<og>sG^iYliEof22RCP0-V}ov5oe{{`
zXva6Lh#zFVg~3M2msIv2f^8(y2U|bxr8hWk(&;Wct&+}fuh0)KO8SB|*yA7vQgQ7*
zbJf;YYY7=zZ?z%vN|3d>giNzCrTZG}6cE25qU!1H3gOLuyhBw*Y5KcR$yUJY$))9m
zr3!V@SZ&s9sfZ%k<B%nd$aA}Esy8C(Ov-#Dy{=lTqnPcw>r)8W=I}$Q&v{MutJ2qH
z_YS6LWhcAqCVY0++WA68)$RnyS)4Jt48H{9u7b7_imBIO=6ob^kQE`ydlY$VYL5WV
zj~VXfGe)gRnv2@Mc^=s&hAPrZC+I!LTkysx*!xQ>AvSVu9NU0&gOn;j{bMRTwCD+P
zWh)Ks><p;xetf3PD9jh18WggO7m@UqT6n<m2=nt{RS2IKoF$ChR28X@%!=;Pd<b;B
zz38Fc!XM=$ZzzlW=z*DFJN3}m*vJ-I>^$vQR5Qi>RQQ&^Rz|;nzZp{7fiV|F`zoc@
zpac(OA=ocUJFyq+aIU-rd-(&U{ALBP47P6+#gJEDWI0F*O=;w{0F89)v=I!mjIA@|
z5;kOc{X)CqXc4k|l5UfKXmaV|6``~jAql54lbzEXjz1WdY*I-4$f4f^;w25iX_6w(
za=cSuhGd}Xxa%u62sHVJ()jwVcsAH|kTj-=AGPH6^*I*O2i!!%c@=@5-)Zchkq6AC
zLR3DlMF=tpEp4}8K0gYdOGW&#y}o6Qc)3)-7=LdBngPfP@X4O5Sx@<&`1EKFpT<FY
zU=$|*PkdTHF#@UfqvZarU_&%<MtP1q5jK$g5hb1%Kb*H60MLfhFgNjsWtY>Ft<dYz
z3ar0D%C<uJk~=`wbw9xHl|-Mfjr-L7-^ya%B?8=CgZm$)x>hzwLHtdAyCl2iYjXE?
zMd26Qx`UzKgvf&umZ!TYvr^?j_`Rljc;WK`Tm8pJ&RCT0JzN)A;Lv3;d8E>^XlK&%
z)V0YeddH*E9IW<FVc&3o*o7iguWRz~Wnbsz9_T2c$|0CGL1b>+$m`dizM`LFe!e1I
zD`2z#2q-$5V>g;QZ*jtVY06vt)q#yTWxKVA<q)BVRt(&dTGs_O0aPH9`H3%%I0k{l
z9>GVH5f%{ex^2EO?212Qgsh_p%_ucAb<!dbi~{m7Z;*!rGBgk({;u3D{kL*ATbs~3
zvRE4+kVNFAGuQ+~Uj18{jJnLF^-Dq@<@%+JQCH^?{TBYC@yb2<x5leKNopK_roC@J
zlQ<5D|2&$|pi1B46OCyo2m|6(?a~b29@|9I)~N|YAXix5Ur}`Beh{Ueh^&0o&UPM3
z3KByr1ExWYufE*6Y8q9#+c`)f{$_`parxkN*!V#sdQ%MuHWrYVA3k$2G~@Bu`O!JS
zDo`rKYQ0-mYc{s$`IwZ!eEY?aH2FL-1*XVOqE{8Vb=%EHx;OL8CyE|KX0&IxmK3J+
zR(}rA_;}WjC=uFh^_E+#YGUk~1lMZ365X-g4-7OD=<kZhT<Kt6%U)12Sj+3IXDor4
zr{OnNr0snCPu#d`X~fEpZA<M1|3i!l(YUkJUSBkZs09y7to+>)Jo6W!uwA4$U;@NA
ze@ji}(Rsd!Gx@-dUK7Po^-0=-YW?tqBqQW03l|HrrC@rlI(vLFODu^XJJRiH&+}1Y
z`fDI&t_bA!-4C>ChD4rRU_<gO2GF=?F6H0gwN)`QIP*z{Rb{+Gxx~l)$DAY0@5HTS
z9C19G>fW$)SI3(-<`D~=kDESeUJkZu0ky`Q32!5}RvRHUgH`hNT^?;Tppl=GpPu<Y
z$WKiiH}MFl(n>o$p#d+wZUgtGz!Ft!)!h5hu3JPKiNFy{Q?QmTXggpt6Me6P;{&zc
z3L7M%Yq-uyc!AqqO8~pyK;c*iC>P+~>RwPdZu6)8vODWp7GXo4WrapG&XbE9Zx9%V
z3-~X2AhBCVjdPm~1X(KjS$bacvv+33fBuoRSnEKoGP|;PZ1XxfDVtbm6Oru>bT<1$
zNqD9vF!J<g-|0y_VjsC#l)UMEpIz-RsOwYym5&7jNuUUAAaHjt5NMP3eYRVLy#{md
z0RMfuXcXs-HVfq1t-lShTBq!~CDP=7wARB|WIYixND;lK2oiuW0*L*=Zp;+`V_&uj
z{%bd8qR{tW2|kSgJ_SOv*#F*)se>v;DwpBP;QBwc9a5a;-+1;+!AH-r5P~-9W*M)+
zOnti{$^)~jwxoSO*D==iAS>}^U2Pbh4^ovuC!U@Tdc)uUWgFEnZ-#!`L^Gz@VfCtJ
ztr}abHjeAWiPu|<WOG?EzB-=ewikg)A@S9t_Z7F^3yYhnmH5Fd32a2cr#SJm-Sxz4
zrAxAM9*^1KUVqF<+<8MQSG_gN&$`H9YIC+lO-)k$aJ=%VM0dQT+2c{<H6$zfGU4ut
z*C2pgGHwfoTIM!SWg^c2x1ib_G1}UB)u5yO(U<0DyE|j|EXbyeD?T~!a{a24^Drlr
z-FJI`A>~sF@kR0y{ip<5egGK%M?aeRkA74cU`y<re)Ml_!EUU<XTjVf)ifD2OGgZS
z3AjiduN5r!AUE3CeX?6a+KA*ciPx>~Jbmn(<CJ?Q-K*~0cA2TVbKOcIQlIbkd-U(w
zc6`s)J0{YXaW6!9G~YZ*ANXGsP!M;Ts_h?K8mfBvV!*A`XB2g%+NTlHTa91cbQD-!
z>sxaqV!&rAGed6b?xsKU`*Ct`?Iuty$i~UxPcfor+v}*;$}O*%FL&JAJrM%*D*5@V
zqU_BdJqLo7{+iml&Gk_ak4GzP#N-1Fm<9=G0i)x<MljI}RB^1_;^rU&H-kT3%#)d3
zM88ky{l6G{^LVKD_y2!HNz{~*HB(W_l0x=OB_fqJBr(dK&?Y0A5uxl$RKzGs63Uu&
z?2=H(GRoLWi)DryFU@j(*Ne`1pZD+c{d{lVKTqeJY38*&pV#xc9*_Iu$dkKT6tTyZ
zABD@@_dE8fe_j?}bo=NR16c0@kDV*Kn!U_l9~l|E?sbrOr{Z@}zuR%)z;UUaA=nb7
z^|l#038v0UFFZu(nUn%2dQ)^?35(32*F-P<Dl3R&l84%h=g57s+L}FD&Xd#b74qV`
zM<Nf*_3JzciWqgllzpvj`f`_}W5arkn*k9k?iX5{PM1;Fw;xtwzh-DspCRcrv~AQp
zH;*CiDPAMZZ(_&i)m0R44JG;F_VpGb@733+6fUW@$7tt`wGTIOR=wh=BGx0Sw?l`g
zSa&%aPidxSbK}|k&FuZXV9J}WXrB=5qdLQp*7I`V$l_a^A#Mb3Cvjeiz}dhIZ%n*f
zQl=FO=5l@H%Fig9M7C{k!!uuZjo1x!Zyx85EEAH{7W{pVdk>G^4zfEAN9X7wK97)~
z!>APA7Nqbt?j~v5jWo84Sq6SzaApA4>~aA4F1gQV(4PC)K$qw+__UikBm)aAm<zt4
zc0)ou%S>kyWVUlL;LDm|k4P7^Z6~Ma^=9*g>hX@auxl{vMo#`etQFuL`4u{o7X)j{
z6tV?`wtad{-MAH18^2bq@A8H=XShYwAw^mTC=Cv2{Pz<he`EIUDV{yl<@o=Ww_>gd
zHsIzfhc)=7Q<RBNhK<GhLc$Uvyp8O|nYUbC6?YBu-UMr8RUkPklY?Lp)7#uf*>WP~
z`GM%n3K-wd?}wU*jWIXH|1y*;?0Smu`3a8Fv(s+f#m9PEuRm-o)>5-E-8rhJp(3yR
zzMwwhMBwX;7=w*aG!H(b|3|V1J^VkCJsypX19fsUXgpALa=HHmWkH<`l~d>mSisG(
zh?^Gz8{NE?4jQy!<?~uP>Vot<w2#!u`szO=*EY@RT;s<qKMN|{*<WN_BQ=N;TD9y0
zX%mrMM_BPw=S<Ks=HW~ikSSky`$B%UQ+`!pL>NqL0vjxDNmeU_apBw?I(iAq*?I&&
z=?IcmmjkZw`kaXF3+JiX@YaINkiy6!59jb&bQOAebZ!uj!XgxM%e>(4)~Bk!iFcmp
zmzFjW<cAidGV&N!HwJUyKKl&E4Ft*VH54pos)R-)`Guz(CQO`k>=>HfSYA?iqqx;a
z+TdHyLW$PZ-WLR>A%?@B?TZ?EO6!)!gxTTFO&=WNEs6_6Rtu=_0f&b8@t2o6b3q?3
zG1<n)xx#(AAd2iDEUGX=MUiA^axr4L;aohp2EnDFx}h9Imn;bwt6k;(LR}i-<eIer
z81O#|>*&(Iizg_w<2$G_=!?NH_d;9b(WuKuwXV{o?zd-hrt4bT!PxI5T1VPk!Y038
zdh_Dc;m6C`(nPCAR~lm!ScW<4w(x(Z_jV5Eg;8Ci`^sx^g8ptkPJYi3GTRVJCtvwu
zuOj+K+s%zh+HjCN(q~k+Xo<1V@2~|x75`s7Xph)kM&z9!Lzr-c*GO6HufpC(>abgh
z=#AK9x9pOx$I)c{X?{)XI=FGQ!{78vl5~zZ4ISw-Opq6mS;hXv-izAU9aQ=K`2k}@
z5a#S+uPsP}=2DlkC%&l2+CMqjY#u~no3Gh(q~F>aoiB)Sx<JhEaK8D_X|Ty(ql@~I
zW12n(@Ts!tGidigxJF@eQq-jX$}u(0n~M)3R)Q_zCD|E^C^XeX_u-p<ht?B9Pjyp4
z2o#mPEkXWTPHV=yrJIw`($bw@aQUJDvsHn_W`V2tBEq;e2oP&z*WyKg*}5E(UCoA>
zY`#KqD7l}57P%9X>d^(cpUN-BgT`wnejal~LK}rmt$yGh_J<;T0drLO2Xpjk{~yee
zIEpz^DV%JU1o%wxS6BYI5#$3ivjKKs`kGU`HhMwM<GZ&iw1$;5m=+C9VR1GsqgCZ`
zX5vvg%JMI7?cMnDcEZ7f?EB4^mOYz8d%az}u1ua28Aio}E7H+oluJW8p>5epEi@0y
zfyr9<eB1IvLYy0;o%@jNmQT}>pKmLHC^pweO!;!)1&r)I^59*<ix;E*>dm-clHK?@
z&467#EDhwtFolL=c``y9aZ;!HtljO_{}EmnoBvCAy}Q^p9~E9397CW@Kd(QOC$j6Q
ztBUBN#C+6zkTRL=y{__e;O=<(;m+4DvwQUfL`JtbpIyQyKTXzvMu{pdd?a)H470tS
zUSKueIqZcP@}v>NaYElUtKR3oum#YR>Z^GQo$ZY8D?grY{&M=GnZnd2kMiQ&HHy&~
z9OHy}e^wO%u}-=C7iRkc;)MS*KG1GiN0mIsg@LWBTu^flFIPHH7WeU4Ta4W&5SK~o
zLSJk&%gKI)&@t`2@6v->oYlgE3gb*B!4PR0%prpZuKNZnub|<nZJ*h>#z~qDsP~n&
zz^ifg)x{aiVdFhKH>wlgUl>U<h8Jb-K?T$hnG#CuYiZaZ{9qbvaerZ=sZQ7+T~&De
zETud_OCY<xq$4BRBFxQxrJ1{rp4zR=H%caN?A~+>6JsU6YHp07fkTv#?$8NnUajfj
zC=%u!RhxLhV}D`1d?{e5>gUm^UcDQqIaF0?%GL2)dKzpeGNcx}wQ?m9<JYNQ);;YR
z#8uPhuWAqKO<HCJbNnb6%o(w~N+>U_Kh4n{W>D!>AS~%)?DEUy4+ib|e}CrQgI5N_
zYaZb1GLYfubnV<_c&KZqj<>b^2d5CX`WZtJ5wWzu#Y@*NUN5GwDc__TC-9vjtg&2=
z)q%{gj}oIAckP|6?J>Z;uh5dI)<62aL~7HW_|pm6OU#I2zSbk#O!xv{aH0r^qUt<*
zP95#dfmE|!kxN954%_++TaE7;!bQlcl}bg2SNIL<<?Oeq+7c69o-F76crWkZhK&(9
zDG3#O&Key%esOW%{rqPWOW0C-{JM4eKbf8Cp8DMNEBm%;uII_}7NxZ=?f$<SS75#c
z><G~5EiNf33EAFsZl$RL#zo)(r7M0eDm|gJdqU&&`#$+3m$NSoSJLHQ$;9YkbmMkQ
zaFjxrc@bXm`*csfaF^V<(c#lr<L49hueO9<id(|Bo-ehu!9T&@f2-Ye*X)Mi1T$+%
z*-bEWyrplNtq@AW?UNH}#1~D7OuuM0I8cl^!l&1JiEllIFV{}BZ*15+^1LdLS8T)U
zeYP}RIdbk|#Y@M*A;UTQ(UC;SUArpjgFdzE@b#LrvRjz@Slz$XGBTuVjqYf6d)yu?
zJ@VS==mrauaK-YKHXD}W9sCuT^x9}q_c+9%#!jX4S7?~#^h85IXXcXaLMz3V#pUwN
z?F~8YC@RD+MN~}q_UwZb)v&ZDSfN>fWa36I&}vwI#`8&G;Ov3GMV4kM#)gioVq}5^
z6782Z+dsxS?{Wv6hs|(F?bytD@7`Z6OM8vh+XPpZe8he{n^AbacW!r$LfS5+*_kFK
zSxWlpPgytioij7Lz*ZUF(_*H6quw>GU{y0ef1J|H@upMcYI<Z=*0<C}%+@OE@Q<aB
zodc{lg|~$XT`Ash^!{#1AtlpSe6R7_e{M&FPBCJG&+oH2U@}d>5NA!1prH>Ro-Ymg
zqOjwWjTSxdw4=*QOMb=OHR~=AbGVi+4?-hizCKJAhziwt{Vl4LXTfX=n5Zxsj1Jd2
zWtoDbdCEr(cMo?dt<tL|Dy|WgSb0+Bg4zllg|ErDTWXoN<rviP!uuL#>|lrU9gB`#
zPv2zx`B+YXiNMO;+8T))bS@E&hn?8e^7eY&5S11^JR1VrC+>%x<l0j`5mmA$_h<F5
zv)h_!mZP}!gl)#a!FR9i2GkrQ!{b9}y9JWiBdpwZjvBoY|F`I$-BV4-$KNc(NfXB!
z4Mdo>nY5qLD-oL`ol`k=6?<*WvT}wJgpJ?4v6cvUZ74D-6R>|oD;x+W{}D6cQ8AM{
z%S!6{Ph6kw36gitM-P$rQ&I07ZC}@WT8gO0?5V*S?imnFII2X!`!7a%hAHsqH3q|;
zaJAS9_4anMh(!W%W|nN*!s5Iy%EzGDuOwC%v0d`@YkYbWPxvVNSQL3^E#QkV;PZN!
z7eltE2UiIo?ZD&_AIht*RA)QXU2A7iXgT{jZGel|>6t6X{aoI(aU$_=rdQs3DzbHK
z+>Nb8YRB<i!Afyt8BqNEZk@fIb7d}5H<&x{!&*7dnFzy%13{{y>uL;_zY-J(dgti7
z6gD`J+*Wc_!1}ZZyk`ysAzl}*a5kFij+O28H%7wGJOOiJ$`hl<`(+c>ysNeka~rdC
zO7;EYU&3ex3gNFpk5mzl>evcnkcX(GsSeMGg{4r3drKML>7}AiDdLv5!8&a^^r^f#
zddjnLU`IR!20b95T7n#9>-%4Or!UU%+57j5CikHVmFDSL^0CFwZ?$RFcWXyUlNb+?
zH6E`e<zujIi+>QF;jrMLClp545ip4RP<QYURjB<5VskLRBge6{fa*ISEMd8nW@+~G
z*ykf_6`u*UVI=scE3b`pP_y#-W_Us^Y$+m4-|7fbz&-&HCIzN%#$BqJyzUQYXFNT}
zA0@eI?!O9iihC0l7LwH%dyEJcxzsdX5Ira5?}(q6J>1Sq&K@=wf*)^AGT?RCZG8_q
z7lO=J1Id>RdV^96dD-{7Qr<bERxeKexReuFpV)E8SHn!LNnN6EIMxtjEwKpOGQwLH
z%)T<}FzlkhOQYd&bDIdO5c3A9sX%>;bdYfN5YBd2;QhSNVdAFgTo3tw0F-qg;M^{^
zF#zvL1s^ovRq%aumIo6GiN)@`&6ObhghrI%Q(Nn1P<psiOA5i1n}54a)KV!Fw_RY=
z5!Yhg7tW$EXUFfOeS}-o6@^@_qg_SoG;I}4ex1xr<P#_`)Kh!DdN&-!(?sj-U#yQ?
z$}V8pa-WiPdC-tq2g2N)q>d^$7Tv5HYKk!EgZ96$(k}c2zK?bJ+*-8#zjk)VoR22c
zbQ&GIoX>JHfD#-~Jdspqdf&+4<{KdNtePLpodVt56N)mp3dCn^a-8xj6XKmd)PsXz
z!^bt-`vWeRtd}(eE%-BT7WJ#;-)~Dg4|kk>9L}E&s)O&FILQ1P^jaqA0EX91cECs4
zDRSXybe>x3e}<V;l#p69jGe$18fIq1(lYzJCRL8NSZ9DWe3Q!E^DpJ??XgdP41zkZ
z9YuQK*^%UL!z>s-rY#EFl7>Z5uj!IMj6jKUiPTP6P`~<v`qgVe{R#!8>gunwtC{oa
z*U$g0epPEk)vs^9A9%4omeBQ{8xJ*g41P3<xSjm55|tnFpr&!QwK?#P?1l^0oh<iV
z0Y<U`<#)NBxw(!fQ4QLV@20r@8;-8p<Lta1Bcve4T?3CDj3`i6l@6T!Hy}1OWYLP9
z!^_Vt@Roih>t)}s$g%9$KRpy;d6gFSwpT_m?gF0%-x!^7d<xY%pGO4KfVk)Ve!OZe
zF^&zqNsq?NAv5Anv%cp}`4#skfc|sR(e;$c*{hNFvK)=&6qj=3p%M2Iy$LT7&|xfF
zw;x{Wo+P6B&{%ZUrgL#$$t(QTvxu3;0{Jh3(AsI|&u@$JvtrY4fEm{NSiSw)BZp1e
zpOEVmP`mGbeHVCiSWr|qZov>}RMz8W(C{{+4$I4EsonIgiS>e;Wdc~erV%_DdFm}o
zp5CQFg8!;WlRO%UyoO#@<x}86hVh{AvZsgRgbf6FZ|s&Jw#@WKUDY}$8eOS0g4a9F
zo~Qk8r&2O$-b$$A&8#HKmDB4Ob>d^t70>5t&xJ5N>x$!m$3#YKOPTv4y|d{n-L?Al
z*%QXYX4&`s3r}{wO>#zcui5dnPx%8dyi%$&xesi?Jyd6Cm+F2gWu(_$OMLtkG2dHS
zR#y7%`Q}vLFE4`srDHXfk2B3Hs8Ahl7e+?*7Blw;7A32qqdH#u^~{g^ecZL~On^#i
z?_1FPC%iZ;vC>xnJL=B5KR@2}17L7ot}9`gzV*{@Wzpd~`;%?5J(dB9G|+u6RcB-D
z2F0)64VAX84_vC<fFXvCKO&E8C9Uv7TIvQk@RZaL`kyM`M|kA+86=by$W5zSM4UmH
zsQg6fVXF{-qhVNfTuyctwyGZPKA$_~HRU<}IAnlE8<4cKev)K-B1*&3#d%p;93StP
z|8YQ+`7;cHE)RqFcqdaU^ryQD#kHzS!@b|k)xQV5R;~%+m-C;EMgSZ+W(z;tiCI!N
zg{r;IzT<5~+z&DjCwpx#jq3TM_KG?1vMuV5+H0k@f&rZFL>{tL08u;^gr7$gx01z4
z!ie7p{r0KnNw~T^k?*9fUG_IW0`SP%{JQS$=TCu4sPtm@+h->O`0Taim+=D0gOTun
z8f^974mYS0HYL>>T0010;JEO@poN>0dAj#{dNc3cjDOy)c~p_-)ydPp*6=~sSgdJi
zD!>4gDYDY<s@4%*4l;66@HZ#6ITm$1fB5po7eDr>+bM0aHKivkl=sMQ5g1(d+npux
zVdtUatQD{FyHs6DOFDQPPWM|kDMx(s;CG8@a|k{eD<$a^xAz%lV7&KZJ*6KM0iMVX
zM!!Y4Ard|^g+*+RrHY}K<b#T`3vu23wH8ss|7dIYV|F9S4M|V#4(F`^vHjhUybT{J
zb`7iE(zKFte(bjKqcvd<Hu&ccolV8BA_^~M_^do6thQs($<c_I*VSiiNt4EfJh=zl
zR4;#32d4QcbJ0gd?Y--x>UE?8UvA!gpC=b}VNdnW8dC4?+#B8_6l|~Cj$3ORn?K)q
zA-Tj#`=hTmEj_D!XY2P=sc1Xb$+VQ`JEbq)Oxdj?*=)J4S`N@T*H*<-#F6MHKgzJT
zu6(kox8k=Dedb?Xy3PK=+t9aX4b>P+Od3e;k&zZymrau;r7Z1hcc%QlU)LJJE&k+2
z&zCPIZ7TVYb2er3t4iAq4(`8hw6-=p-DsY$KSkO2bWq`n`;xe5`b%7Bl>+Q$h4_$(
z3MF@MiNf+Qzi*ml8AtaG-Oo@6xUfR#N1Wa;HN!)_Y2$2Nx2!xPHML5v!_(ev)W+9g
zwZ7vbfi0uTku@UE-&|TMsIw^VCQqN#mVc^c-GdS1@_YBb6vov|WYQznIPTNCw>n~x
z@imutg1g}<QmYKkBHN<0GyLlKMQY*Q(49Cj|Lq^HRBFCCbV5Gnw0UNOl1($&!%MMw
zXa4K7{QGNGW;l+Dh$QjOlSGN`jh9IsnxcsC?#g#Jb(>R#t!buq9Ul)`JH(w`Q&o>q
ze<6v9(^>x)#<XmzF*-1H)s4v~L8nSeI)nO~b~QYo*<yOS)M8s3B5%JIGl<!a5gSz)
zk&R}G*d1bY?t3*|t+YAo>E7bRnzr2%0<C)Fe6js9FMgQn9GhK1o4f8LW_i&~ZYH`Z
zah9?i@0NmV=oB+scl?<3u|3tR+62_)Wb4-|UpHK&l)=sU#g(@1;;ee~^;k~hOONb*
zEuUlFhS?tO*ndzlQSOD{=87>^FEcmgvSxBxufC6NQT%PElWl|Xy1`Kf0da5lG)eHw
zi$u&;tw4Mqxo&kDK6GT)WECsTR6gVUjZb?nE?cp3b&UBj?KU;6@T0l8JV)Q@+&iaz
z41RG#Ov&N2x)Fh|cLhXb)xAAp%n$zjZB@eS#22WJ52caXaAHL$O7rGVXah1*7f_lf
zL2g}lW*()vA@)OnlhgVvOq8*EHPvCA%YpX>n~Bk<yYn`5Ua8coyL(sMN=sB(ld)$F
zt6e_dWE8aA%5Up2eDXKq2@#Y6EifbO|B5RNtxdUXiyR+r1q*G3^~2MjY)^l+VgU1%
zUOR0jAHDR%z9ZK6Z($ahR<~YXE__LLIpG%4Qp;0jn&0@<4;W?z6vJHPNcbDW{PsT>
z=6;hmaiE_qo09VPK-&N4_(!Hz5;G44I?ccKo_T4e3D#?kqI}mG20I_AUc|q0g^(aS
zn7Kb(UuDo^*;s?DMz=BtpKg7A^*k7k)&N?X<Sz*ctN&SQl~6yJAM7vy@5TJY@srwU
zt&|45=t(50=jf|WeWi=CrPr57T(x@9e0fvl?IfdMr$i06Wx*ofGXmdWkKP^y#MnVB
zVhfD1UwD>i9xYGWUliHFR5%fS8VMi7VG-EbS9z`L&VGD~a5zRu{Z_Z>$RB$NNd6C#
zBX0ntc7AJj6y%1}qRrV%JBJZ+=zsy@jxson{xCQ#zv$Uowz*3VEOFkW*rW@b@rZ{3
zHHy_Tffzwn1QpdeKY;VY1E};?(|o{4m*>@SB~ocm$M{c`6>pZq{dpKg>+YuQ1d&JZ
z-ljDd)0W)|TlDNH-)@MS@P~@@zbR;TJ@lN;+%5cwVDsy|aaD9vg@TI<7&{~{4|Y|5
zg(u&ydENZAu&dTe4yH;ArRq4uZV-uz;8)tZ*hD}kz<tgeYM&$AEd19fVoMZ$)DCP|
z4P*i+>^Vt23ubd@mb#el#x-aKS6Ble@kjB%7KUYk9|{m9_e~YDZ>wy3G_xw5yv^0x
z)<;gQc<GxstUwso4-P{1NCDv1C{2}cfG@Nx@CE4RRRhVguAHCkVy8`WK@A}`ac9TJ
zCNKX^;{xU52f{Z#wa@*&RHT}>!|FSkBdR`(4XBbPb;!#17;GfoUD&enRMN{ncx?b}
zpC4Ng#C?6RWjQZfVRGzZzy&_Egsj^_Y9T-&CfQ4VJzt4lm@iKM8}W~VB5EAxRZ*!1
zP_5S%GNU4g-#;OHakJS9M@y(|d<vKH*|%z6bOEWczg)VwSXbuy4Y&ywsGgX)pBrUG
z2Zrub{$H1C2UasmKpW;IOjKP63ZRa&bgx%jO?>Ga)$w030rGLz6u11TzUPU+e{|D>
zQe}8y;_(Ip?VcQe)xjL8Swc6+OxMDv+_gG3XM%ppfwumm*2$QmJqiJbu2(?s6<=cI
z72;3sb%BC)lr}pBBGS_!&=N;+023-~GolMnze0E`*j}vMY*zm+!*Mu@ti9~UqJO3N
z&x)&gy?S*U@3Y$DQ|XI`_b}HWVL^THZlhNSwJ`ej&VRV2LrN{KlSQ_QlZ}G+^TyXX
zSSv)XDYbwrej#H7lf(;Gnql)~Z?lDiX8aF=ut)QS-d~uW1U;T?ID1(t@QSA+pOdG>
zFxNSsl;)h^p@`(QQ)DYHvYq|+GR*_4q=?Cc_j%;}LzOHFkYH)8pWWuw%sbRHdn}I!
zq3W(1TxpINGQ&t`-C`8=L>ge-DWD=N){4$-#rNfUKpcR~r9!`LkKiD9LN7333^OX@
zE8c+ZZ($upR7O(Fhf3<HGJpY&Hkl@UaO2+3I_*n#4OReaD=Xi)|52>XXNQQvL3m5y
z#3C@tpoCRm!HsUfD2cq{N5}rqB+%%tFS}Gm0Yd-wgXgHZnq-2b?fd-vQIRZx3&z*W
zExAv~F3SZ^RJ{Au9>!bU>8+yctCE}J>D|B7C6IVJBi2;<t>iihG4STB4+`qcLu{C4
z)l?~c;V1qF5T`7ZEq(dqOjV2bXe(;Ebt#FT^;y-laoD7f<RsZ>yhi|FF}Okn&gx`V
z3$vt&dfQHuL9L?~e=VDZjEKE&P<(B8YjJsH;z`H8O*C*MEDr%u?sh<`Lt%Vmg!TB3
z9RDRy4<(d-C&68aBAUa)Hh;(hBh#*_TRW5K<CKj}<|T38zYtU{3S(J@%L<CSES;;h
zkC;{q^h~#~w=mhq{bg88N@ytW1YmeahVM4u7IDNG+cKG|!*-e6=%GqnGuxIvFQUC2
z2aOmX&$t8s#w^dkG)|z7kr{?}rbj2uMv+}}WM_t4LZ&Lzy)$jTlN3wh4PPd)Z2GsR
zgQEp81bvF3-1Bn{Vd*a<Eahg;^SW{Q%}pFTJd7@e4B?phn^VIrGT1^C=Pi?F6dV8~
zAMPBP@j~C>(U0xKz{$Gi<O9<`TipG^O<iV+Oy-qSwN<A|W2Rmodsa`9^S=bN8C{rr
z^immR70^~*ItH3XH@4t!j|6%O%Uo%`!Se-hT;`P#leJ@l7+g9Tur@+SI-t|$(uiYl
z)XXDoMLb);{^Q-4HDu$vvt^6dql$_oGq-KZ``#<Jta-0z{8mCKeWlnPN?{eBn-n#K
zJV+t0s1O_0GcAPno!=>Hao5iuuabmYB)^nWE25O{$@j~vZmM9s&E6RJ-b^~cqKlG@
zAG}8{CXDx^-n^a)ab|b}3{OGLR<*gTYeNaIomz(V*pzU`Y%|-&H^yoBV&Mx<wcP@%
ze~lBw^aYvmHMrGP3jW$%D~g74Y=(_8`*Lrp+sp;hYs;J}LR(&$WB{}I$IO;CH9mpW
zkxrB9Ca!ISgZCv?6|C41Llj_X%Lxix4C>A$-mOjA4=%+>rQ>@g0~}*SBr-4)j)M=P
zZptpz-kEHle;`M3iP7bnT_!Sv7X$F8CO8`T=X6tY!XCzYI-bzc!H8<fYJW?b6Y(aV
zVa((lKN0(V@8kiR`j`nvfmtx<73x*tHN>@@C|qiLFgHVDlUmHf$cpN~w<e2Y90xD$
zZoLF}qzKX`yWz1~DX-hV#1wsMGCvv-eK(z~tax}^;yb2MS0s$P7HRfMCng?J8ru9&
zZd2t)^D8Y9hSU9GyAQmw-{U4IAe-_smf7Cu)%U{;@yYmhjTNjjqpB)8pm|HfS<ND&
zt;6>6&GjBzgI>4oAjDpnUG@C5g<^uQV#|<aN7L8)`feYdJ=M#qOyZg=Gbv#PiZxF(
z9}nX~euzch+GfWSp0nSrE4pplqPS}!qhnD;4MZrw;6P6|@79Q3OqX_imxhHKb+lJ8
zeRRtazL>4+M?)lDH?QxuivCHEJ?*9&*`4$J)9K!CGaGi8>*v4Pwn%CD<eR-AA5Hn=
zc4O=*4&0Pq#Hw|+;IJx=^sr~jy!dv>Xtn6>)Qi}A<4r2Jcdr+{Q2HZ@tv~!kk1sIc
zK&M^jc<$I?cjGlrty^0&y*5o796>HJ;tzz@i%T^{KGBlh_<mE}x3~>Q-SixvM^iUD
z%O%8|F_(9Y=%IeJtE{JL${AUzbbiqn!5#FT&D+C$?ysM^45=Axm+jB&d)SlmGyDq%
z^G)~udSy&aeR!}!!K#6ZnWKg?hU*n2RtSAxV)9!i(BOepUi=r~?KPbZ+o<>FGKTLY
z?a~`^PI*QQttCrW;2&DIKRtIUw9ZSkpGNE7*U@@e|GjZ+lZ>mdMnt{hvxt}LF{Wa_
zTOX64ekN5u>-&05yn!tAT{kgZ<7#&?$};Y3*MBRjogTSad0KBJNT=ij_!KDZ^xhq>
zk@n}4XF}d7tiMKnOp9>&DK>YRL177Vvw4D?V+@~0xP?o=^W+k+Gexgn>eF8s0L5Qs
z9a2B=Dr$0)yqWghbaZ;?cCw?%WN&Tu4h(lvlIra1O_G~+2fxD*9vUnVaT7X3UhLXa
z#w$RLIgk=GZTqq1^Y`L7gV$#lI#tK#nf0Vo<QlmuAr2T8*d|D{EpmHMg<M;9p0~Q9
z7}7a9a-ZA#(s(ssaVEYuyR)FZjS<T0sDU1%5jVIA&nSSo*8<1)#1wK(bzJ$QYJD4d
zd^x(ydf%hiA|u01we;ZOCf-^?#1${06tlN$skGmbMWHkiJ^yy43DNyj=U<;nv_F<M
z8k6sn5v9BJI1I;>oAC#maDO;O6D!m=k4-SVzUc7X*|xK8>wS(4*`CbO;ky$XC^U{o
zQB6hI>O7h`s!7;NSWT{lB4p_li{1~E*1Y-VcqsI=qF-%*<~X_hfybDnBvjia<L+!z
z(tBC)a%N@?eJR=NYqwTj<{{8l2R~`KmmXyq4INTIg+BZ!?$)Lrvm3*O@-y%v?;V9t
ze>rT*yI@nU+C&7^LhIcHv;^v{y1&z=boJX1H;bN2YJYZR5*-TL7u-bh*L)Pbu?!Vh
zM)xoim}Wy>Q9Kdi*fGSNsd|vt#FUL5<v#0a3qh@JTQB0KR0d4i{-C$@0|h%ttLMK!
zA4!K%90~DB{=3+ok$HXn=hnh*;qG?Sx4Y!x^LNepW<~#DVnYKvi-JbH^f^dCqo!%_
z?KN`k{BAXkrD1``0Q$@TifG01LBef2Nv8O1eWRfihr^wKRkO}7ucTI%=O;@0xw{jc
z+?<o#tdD7r9GiSAwnv_yGfl2T*<-&qljp3VGe4(UNoM&ke8JQu$Q+}yv1%*g$5N55
z<86LlB>W?K!b8z~Gp&QQ^+~*=&-sa>H7U;?M{VcRel1v?x`ms{+lAovqTNA~6o}=2
z?@VkrU>|v(=b`d&W}Sn%n%g5lHoVD>Q>*7|#?0|G3h}?QV!5$>Iop^$jnRGkoAApG
zB)?HmFCM<Y00<FvP{2@*70n|eP%GZ2Di_p>w}_fZiNu2wK#r}C*!4G(CH!Gfg2t~9
zll+gP))8CJvP7NDCahB*4*)U)NbtrVMTNk@SC+n+`iPFmdo|MMt-GM~{YqG+e;xJi
zQvNT_E&dpH=J7$V@p3Sw$LrELTg^qtwMOV8+E+#ACA+wda`RfJ$s?1lAe|vhPBzk$
zB_(I+|HF^>PVm>uA+NPWLX*@wuz`v_??Zx&D(UmqJ6kAL_0R+>buf@Po!>EEt9Dp5
z(O<aK!YILCoO`DN%V;0Ayw8muJ|xXHo4A^KMGFw`JC(AAVcyj&?HOi-SCVlN6j(*D
z{|~?VZ$bI`{hYPwtW&rdC8P!SYh)gBOyK5I2Q%p);&25<9+Uur{$goJQVRsa0IhV}
zLw6^!d~O_X;2WnYWZFv7<leTGpKl5B%ae9+6d2nP3e&uXx}4O{O$M=vb3vvX?%Z?*
z%7h$J;m}nt`6i<ZT^|SOkV|-T@;N-pJWD1mCMJ)Vb5yX12?*l=?u2D2^yyC(4H&xd
z$|pKK`o}!kp?Vh^FJTPUaPLu_u>cA*FrXrr8Q&p!1gc@ZgUJ?ghb*n(G%UiXe)D9h
z%ReGc46Y0cxi?f4g>3*{nLjA(Y23Iq+Y;N$9!|^x<nbym#O(0nbn^^pLdo?Ymz2w1
z7r)G<8Z};IT`#{HG1+FkoqQNRW)2R(Nn4}Y_fhKhI>8!3q#cOc0}msXFc9EA%JG7h
zu=y%GY8YTy6=Og3K92l&vA0Pk`ue7bz%wcl&)>WhTlU&8&V;ZY6=!n(5ogW=`u=xu
zrqaK}nHC5Z(0AGRp*-GJH-ad9DRCGFn0%YZOOpEMA+@bd$zOce{)-9wdzNJj-!mJI
zuA2VBjGh_-0*6dSEOrIAfU5_X;na)3{~70vjjO}O_FzvuZ~<oL_3I!=`+(R$LCs)n
zyU&*OKL<Ez_eML+OcmW{2vM25(o8OLzJ3h1(WX4ywEw)8YhKlwx)A<L0ZmlU!~q}(
z4^$#3$T3$?hU=gf5FB2UI><6$okjsyt2&2O;lz-}&72^a6c&VZa(xok0tb8Q)vGq0
zM)Pm<S}#P7%z^n<aMf}ok+cok4{(sSPIm)5I^eda<R)0n;60$wgs9Gd!^<6a;n&7U
z$f66XJ;$G$tbaV6^xjUVr$YVuP<wDmF;B5;0vy_XUQb@W8@2gyYa-5lOS)T<_DSQs
zja$$1>qf-V=b@7H0CM5}zZvfD^bff_hgn}AZyzl<=Z<AI%Z%-pIU_6GeA;QF{VU^^
zl`EE*0G}<JI@%2wKHT(XVkn+4{_O`6+~&&9;^!>|or{9$FonHZH8hh`e`RWh=gWoN
zA~1^AK!J9`c`RZ@VdQw*N*{t-X~wphAkbz$&ZD~=r#X2A{T~6{<<Va}A}8701WdXA
zCgtUQo0SAxv<-{Gy{GTTRv@zKhI;C4xa#OsQccBDM<dG_rjnh97G-NNs{0oN!a)z>
z1b;-2UmjX#Q$uB#rzq8HO;<CBb&WkqIcc|hD=rwFqg`C>v|Cj2e1`p+7rk#xn-!@L
zL2*uy<Ae{ctdMj7Ing@fs!(pcKB;O4{1#tVJBg5%*LSP!luJ9E&M4e-iTdo)wf1be
zc#CwNh|Q(GzVZv7iq1ZoRd!p~ex!5T?9)`YlW*!l^dk8!=8~?D*f@QKSDbJ^*Uoi$
zi<@Tt$LB}w@7wOiZ21v~^&*^_``$fT??7A@8x*r*yC7pM;@2qqY+0mSgH&U9b`CH0
z^5=sAxl2DTwbwrL5jX8Vs2!x59nmrt`mlW0DbJ2W$pi_KD$#GhEI&f~dbYe$OKN9p
z_#6I4`Hj2ZE|nLETQ4M+emUMk0ZD$wu?y)pcAS|=G)k0K5<Qu5i)1aeS3SmbL-IMy
zwN-=|@UKMI<5wcdBTv%Zy{?_!<KZFma^JI<yM5GU*)<roX<r3}G>OlgRcu?1D{|CJ
zHX0kNu_bNkn6YuA_S~JB>cJ%Dbn4nvo12m6)}-tHa8XJB_I2y9O%|~^oz+GkI+%Eu
zHZfJ-m$Os&(B9^aB~jw*jW&qn+NqVBJv~!&Ln$_937_m@#*`_evOSWsfkB$F3NuXC
zJ2$H=!@u#Q+1TI;s>Wj>!3T?sNLP>&)(Ao!ZqU?xU*o*#w3A_CvjpBZI>*2C8L^;Y
zq+U4hyH<Q%R*0x_d6>@F`b8@)n4i7auJ1kb?Lx78goWalot0z#55Eqpo1P%e(2vjh
zvC5eV&>HO<vtfQp$>_!odF&PP5J5H{^-#PMyZzes^#MZq!xc(Lx;DQG*^DVDQ^FZ-
z<7>*3%=PRUp1MtTGY>9PHc(HJ-nH$0m#uZ*z70`d+%4x0-i-6Fia5Hvd5~Gt(KWSk
zmFM0iYHI>as&&4q;aAj!{nGYR%D!tqAX}V7jcq!1dh#0%N}n2hh66MHlok6&+Uba2
zc;>A8$tqYX0#iBs5XGhPoYyw61m0bTVSJdSm8@9jww=;8Tb`e(>XCDo_T6SD-S^nU
z()7;j=G8BDA4r$kdY30ObtQCUTctm_YxxS3`=NW}dy1b0q&D2rmTjb_V!;9h>(Cjd
zSq)V*@-B-4^76J6ke9bk8@y);-$SYY?&I_V&xxE8otj4MH*LaDdUG}tml?`in#VpC
zPeBg&OSg0J=kT1|be>Gkyo6;dv}y&>Kgpv~o!aLuQ+J!ZL^yw2rl40qJ`a##U@`wA
z66c11=RAe#?*Oh9Y!A7ZGI5fgkF9N01q8etZr)GwW4qfTV0;1TzW?-T-zt|_gWYU{
zPvyowE*BcHZZ|mfybokF^`nn}9%g;&Nq80z@>%qJAUMy1j~8Ip#2u8v&ES~|Y1^*O
z^5Lwe^Omh<xUdc*JD!8?{dPJr=xCR>3Te#pkEUFdcB)z|$?uhfwyQ+U8USU<#~57T
zmQp>v5cm<uUh?p5Sm4m4fC<&P+kjroWbYrR|D5nDaOs1_;ivLq9T>a*X!A|OKBb<g
zMjD8rN(48YIOhz*B4;8oav1x<chxx|86PE<nXsSLz>8)@k&1&>EBcNJ)x5^NBnXiI
z1Vo_xYoA=it0Dfoofw0ckO5(AF7^z4mSt>>oN>E<#F6}Uj}uHK<oT=T%vpBu)SQ5P
zhC!<kl14OqM@AH7)%6lhd@tqvbXAk@&i@Ag$4^liBdWi1C<~~+0BGv{kMsyza@`c*
zU?3GosR?4Nywi}&4Ke3Pie2MBv#qx&kBbVV{&oc3bsV>Mz02aT?3HS}6@sRtIohwu
z@7+N!i<+}6=p5+D2WmzK)7Ml;qrnVQ|9R{dTn*bC{@c|M6tNQfp*<QeRiOg%pe;S5
z9YjcWoi%!A&^lI^nQ`fp7H#ru(V_6a9SxraB4YS>*Qux?lyQU{gewZINf8IUe~vVv
zvq(j+el6{J+_~cJm%HslIwnzj%pdFBvOu#%7<?tJNW8j}eZXIYsr4U^74ElBU)4OE
z6D)oPj(Xs+!gq@}YC#f4Fq8$-K@lAHHvIR~u%{*{V&;T-LUrJLSLQ}jht7~|TRMI%
zL{>zjPvie7vO@FX4N7M_a@~A9pZvv=dG9Yw$%4CWZZZ2ZsgA%v`&Ktc8tDx9SG8xj
zk3o7%9|wjp+2wjNFV$1O6>3|UId~4tjm+=@@TGYHRP=%wa<;tVZAVZvzfljWLGu=f
z(!0an^tL#!@^3PK6+CJ3*t37<@KHn{Rc0sbh2j6n;X~2fC5K;S9zPkNcI}AZ=THz-
z!0}@I6QjRr0L_U&;?c))ZP)lOn-irKFCe!>a-My<W`TWrbxdT%^6Q_NV}p6YR9EuN
z-(xj&sZVx&u2t*VS`^JxCd36em4<!OFGdCI!ysUvj$5)~DbE_hUnwO=phATz72*{0
zczj1e{A0u|D+Phb{T@^)HE%ZmLFec=u&m+0AC}&Dn%v1s`2|JTb<$aK&3@`xYA_{V
zkfYR&Se890fMvm&`yA@7qD<6EY0&)thupUJ(-{Y`{YtDj?jwU;KL7yOFal+~hK;Jo
zr*o^Ibad%G<xv*Jdb271dQJtLyI;{xX0@5T7Pt)e=yaQ4jXt@n=`YMH8it7jA}Opf
zV9|17xL6~=$2`Scl9Kg}#%)WGxn|Ltv0Y+gQPBf+WmW-L7+%P4m*D>_D9@#V(TzTz
zsgVh|$aQdrDT_unQgQiBVSb=-a=AXw%dgst(tEsAX;k=pn-NL~6_6F&$e~I(w)%J?
z1)@LasSMr2gn`qin&mtbjlJ%-sow~|q+#3e{YvPqaEYevM~_1l;+K8>9wFp$*?qL2
zrcEu}XSMT(A?=u<&+E^KFT?2QD12`Zr8BHlX@+Qo!cNAIy#Ns%>-1N7V(n&`f4Yxe
z(Y`oBSinPW({D(H6c)1(7{iDx<NQR@0mKE^QSU7OgGd6}w@2bn!brhq6g~E)t_f8A
zR2^$v?htA98M5z2<II2NunoYq0J1IVh3HN(w0lr6j1~Dx3x-FYMtg4O@!`{*<A*lC
zp8OzwCF1ahBkAjb02Y8(A;Ijt<}?*Rr*`vL@ym6j)j@}thwuA7wl(!|A;o8izpD_{
zI6pi2u(nju`XqlumJIF=*?|yPCB}UO7}%x$>zFwoKBLR>1l9nh=zgB3=qAga{0zWB
zLnmxY%=QcW`PjP<o4w4YCMw|8nTJaHuh^37X_}PlUX>##=;LgN>ulp20DVNhc~hrz
z3_y3MsKTf)sn2k*De4OSHetE{^7->^J9|@K*Ds}LrHPfzUf`<OmT|jezg!+9@V&0V
z1i+1o#4oN;g5ydGBPVY{jIC>HM~tpd-B@Y9?4u1hTr2X;q+gFxedWv~#vNA+DW6@|
zs<f?R@S(gKrxp)b{~}egFxtz(0N~+d51q<51*r>EVHaMgo~qYe=((K?9LgxLMa0>r
zSb%iT_w!LK45c@)j;lGJr`TUHh5Sr~9r_-RHSRGYse?hxS*hGi|LbgP;;cD5*5c-!
z^TwRB^VUaKd$5ajW~;Spj1#Ubuy)f%Del~0vKvl_gX`uPF<OQTnz40Lw=UL*eI7mM
z7;jcpEKeJ_iAgm2*rNFK<B6cQcbSjS!Uwdp=4^eA9|Qh@x8f@SBBM*HBq1_7XhKWN
zX40{u5~BKil-tx|*V80aCHdv!f9tRpL#B9sDB5eO{tF`ttuGwgrM|2Qw6l|-8Tq9|
z)*Anv@BxhnEQ{KS#)?0kj}^BRxS~s`p~~9Scx4lv-x8^Nx-dzd$KSR0Pvo9GKS6ve
z-L~{cjG(>AXlL{gK*_XA8Fu;nnC<7cEx{TFeP%ZO$}6joWDAj6@hb$f8M8*+726ba
zV%$iI%;kwQ-v^A-?&DAW{G`OX&X5g%*7sxWwajq&)LJ5doBdse&7MjQ+rQZqc-?3?
zK?tXDNls2Ad+RZyOJzdeE@$@d!j9c#g>Y|?@Wk>aQDC+x1Q#iVR++RmJWsURVUlnB
zP;0}E7(<MjkO=ndiv2g5*o$~QQolHcCm9Bh-6X5s9E(zS3%-|=XLe>9Bya=sI&ovn
zETt!H-Bls}%|G#RI2kZylJKr-G&>@HZP~yp%N?wnNwuzyqBoi&?$svj!YIhm<)gQi
zbHk|T4_#$Sv4==iOKYd%+74p0fprjV@BW*^%)9ZEfO9+YmG-$U(_KJa`8&-r=c#Mw
zT?<FP%ubh*gm{t5(mH!DG?-e*y`>H%k=BvlIW&?HTVf_qh41w2%(-M^)63a{II%T2
zZVd4t6@B%KgOOK<hlE?yx83!5(Y!(62K!~q5{&kj@^YxzNAhkL33QI@3uV_RXKac4
z(rsfBpzqkMZ6vYI6wmeQqax0fP($8X9`qe+A?KP?n0vV%Ovd!;DJi!&*Qy=nqCd*~
z>#!bAiB0t-M_&Eh(UPSW`%7%BVx#9oGTZqQKHq12#(@!38@a2s>(rCSIT~6%B^S<2
z+=^HmIPmG7D6_HkOJR1Q`UECsDQ*iiBNFjWPaq5_9bzTug;PAMp6_EfD^wm5akank
zffXv}l?%PFeKu|^P4)m`b9cuMksVX9_xsOnk-i@;;}~bUvzqj-YD<s*at0Q1qtTo>
z756%xWVg4lbmVQ-c*yBge$kw7<mi!`HsPd*2G8dr4My@&zNVGtZ_L98FA25nh(hQM
zZ+!pi!Q8AIcal0n9_5B~*01hA{Vk4s?rqZP0e{OxR=j4f=coAd&7sQ<e_m`e-NJ%$
z2|^59VNk($hA}m~Ei%mwb&EGVYucRP<-O($@l4WUOZ87}<;&XY1JXtpEyV;iqsZ8K
zBv7R65)>MX;^P*ev6krmLrq4ZvHwb*254-Ii9sbg&P0UK(KIrfM^qYF5sJFF!WY8o
z4L)3U&;PF1za;^(AcY^u=P!R8meRLAX6YmI){o%kCd2p4=Cx24fpmDj<+A|ILa{3S
zWT-I@Rm@{ma0)zwv1Gui@PKtZrY!;W0BED3ldj2o_ZNl_3LGhpJ*ea5r9Rxfom+^w
z@ZM1i`vGD0AX~P@<`!&xC^4>FU=V}B?+42l8d3c3(&$&2cLRAly-0jwKXgmCBV!OY
zmdA2qYH>CI<A8%>$vt-4+tz*r*#5x}q=MUjAL3|<tNGs55^ZKT+jvf72QN$iEx}E#
zIG#uRqdtE!Hc{4oOJ6<xoOtKB38z21e9M!hL$S{uO<q+v_Y^3XOBQ3u`T#|Urrp8L
z0ph!d=U=3{z{dV>J#^k{(ZlY&RF^zqS34c(aQD>MZ7pJZhUX#4#^8FGtsr?90hG5@
z7U=`|$*R(m+uQaCE(yRJL+|YuzDN~B8S2nH1w}1H#7)5k_aoQrC8_he2~v=tM_6@*
zfc;i>HF=1g0=<}Q_g60Jbv|y;jG4WhwRb+@f?oi$=eITl)d7p_I0Y#t%vqyWx5}Ww
zJg_Hd^4fS?{|qx~@y`eP3{X(&g5Wz&Cw13dE77!;`p^qU>LdgO0{Q0P`Y&#2;#lj0
zF}4Y<tY9|)uOV7lQ70T2E+^3~$hrp=g)tX5qLo!c#u14Pg+(dWiGJ4q3Rp3q!zZ;4
z`a?IZG#c`ii+&11>xt6m&>+XlRGL~K`)M)62TPzfA_wc@AWO{FZs02ovLV{Hr7@eY
z(A`TDzi}Ev(8|bud-(LA%!ByxD-LUpECeaeBf{OU{0PG^mT)0V{1GbdhV55qLYq9X
z3?ZYeuU&v($B(-)u?@1qh}%#KzjZ#Zd0MrQEA^)1J5JrA5I8-LZvRUbG>fIVfKn;>
z*HmBKaB=8Ee=A06de%9+)jb{)9yvw*LYb+)&o`S4hiTj^D1QlT(ztqzkaph4rvl`N
zAkbS^5qO91Hoyezq1r5(?&D3~FRP0p5QoXV)FCHC%ZTa4f}|(&iR-#xDjw%urK`VT
z@AE1kHGC?Oq^Um;A*)dtChfQE_~r+2@u!i<VOy<Q+QI;C%%U=+Q7~m{UgmP;*yp47
zw&-jyZRFd@T}!Szi8f5F^`)WDFwd#^%Fl?OSEj8YwNhk%Vi)m1nKo5RT}~&S>p2F>
zw5=C6-*(zLUQ+U+@@*nZMdXnBei4%nwM4~R8AH24NASX{HaZxTDQL*}QKWP5lXMeL
zt(#iNqvs$&<|QAz^{55stSlLGvv=K;JA9AS$8Mh0J1VwBY&VWjGC@EC5#KvNi(-wg
z52W+tjY+eZh&j`2By@r>LJ7kyu8@9?KoObL!*c1}NyUEa(apW@!}8GV9`M>Y*`c#O
z{!Nm?ZB{Am>zfO2c4K%^RxERFV$Im#SP*$$pxiXaai4SHrcqt-(WFHPo2gXITLK7i
zuN8<_UDf7pjR|#V?<e=0NlQ!X^_?jxE-neN2-|Wd(n2m$%wo;rBY?8K3f>=(u#-T-
zF1vU^!mbsd?*avp8<)C|xg_1=@wuxMx31jW4KowlGQv;^yXo;u%iov1c=JMG?iKfm
zw}*lqH-n`3qfBg6Dlz#fQeazJR8}1895^hL_l5X5YTrMp<1#Yu1Y^GG7H2MSY<)HV
zaBRK3<c#!J@2g2);Miiaw+cXTZGd|}btoIwe8O*Kk~%z2VWCH5xc<L+kKqT?umH{@
zE%HCW(7I8z32{MlC2%3$DS8JxH9k4FO|p2ur{A3Pn8*Rc)#D_$3@4KjBjw4xPvvhA
zZb5LBdEd+k{RW&6sG(I`K`2gGjWSeu-7`}~%cWQyG*$Hj<&j#g8VABl`z$UQpA67h
ze?)LBGm@v}?~24f236rc=Ikx~<4+9LJ~p{O`(EPn0wp3VHtGMPDPJK3QbuG0#XOQi
zfXT_^fl46c9EwJqpd@}kY-@?4&aCLVOxQrKk>;WBF9OKL{r=2^*O{~V$0;;ga3u_d
z!Fc^ov@NO^AA#|upS}mfY_O?5#S%qu2VB95ojbA@72aLRHv87G*!iMpv%Y5yzuxvE
z7lc<w#8bXlv1X7wrrDs+#F;+~zvmo0!!t~y{e^2PuFLaEj#}r0u1C(>0i(wmv3272
zHS!Ozk9hhx>o|k`;s{R&2_96vt$UgVFuK)lsfwNU_x>3`Kg)Ia*Zg^Kkr3}Ne()(}
z`Z^f~ER*otpZKZfV90Q`F3`+-_JdwPu1)bdT}go!J5K1Um6ny3nnpppe)r0XxMsPy
ze+b<2JxmrEWzbU_@scEi4PDnDMeBEa2ie(+hPUf@J}=LmPr47(`^TB!gq4YX9g}dy
zdqcvVm^}iklXwjvKvuAr_e_NSmJM>z1h1|EtY<kn9_eoXEN6>T_n#HB*aL3e)m{8(
zNMlGIH%q$-{$|*x44+2#wC8nAK_8-VDgx?!GBD#@Va!P$#)`SU04&!RJrA1`<&`%S
z%-CzJEp<jAPO8rkvsA?R!XYBG{^C(u8UTC2vJ&R+&gicnz`Z|DExI{N3yJh|^S~xQ
zwgp06=e|FLx_f-hi>R<cLfqxFyWQF`o{OF;SL+;v?Q#w;G55OWX)4$=4OIni1!pyb
z-9&{%W(`PWmg=fF{<KD@G_L1BLDKIlHzbc{xDHy`-$*&}60@k<Mc(SCIFv)4=o$n>
zT9qN@|8OUqyq^9V+zI-5g~s4BvF*QHa%t>o8n*x8gRvfZ^bC&_))d_nb<Ju<2sXE8
z+T1LT3W_+7<~{J1;sgmkkTt@PNw0q5+o2H|OvFwQD2P*D1OWnxZ}Lw0!ylf4?G!95
zu)~16kve1?oXde729|+=)$ei^Bzc*E#Pb_W<>IvNsp)Q4d{e!0kH88evdT5;ykJ__
z;!9~RSYz!{p18ehzU&S3c0$AAij`Tu@`?L{Emo~r>wI=mfa&^W7+~osDBP^rIueau
zc7VR7Tce|4c*n=Rg^80B&eK1$QB{Hk6u8e?VlGs#dcB1D+-nJlk5w5xC*ti8pFu2Y
zkw{uw68GakM-FO{NT6xPEqx!h*63`;V1htI!2W6I#0ZQsU4S_bib;Lc$CHeQ2nPaf
z0O*4kQS7*Lf{&C}lI0284z)k-6s2G4kT3;us`mQ4zLL5m@wz;mtE^&I8q+D|ZDN^a
z7O>5C7mI%de~HQX({&%rRz<v!Y{mp!q%uzDlZTtZg47I;sB_P7USO5hJY3W4AtY+R
zilp+SeFypgeDEB%_wBQgGL8~jWtL!ctllvghI`8l1d&5bv*A!!S*;O0Yo>jte}OkQ
zHuE%{``}P{%M7V4?mYcv@ub|<?#2rj2jGzLKU`D%ul>!3>0-nYyHch({MvSKE!F6Q
zYw3$wd6s|Ss?7TuZ$SxbVI@Dbn?GRjwWxUZL2$L;I-dXBg&i&l`^nWh9H{5+?(T7w
zC$T<olaS2O#`wkij4+C*l3L`V6?rHg7JaYZawIi4N%=t+ZbXcG5LBs!3e|W%z)LI`
z;27<p`lds4Xw`UTKK`!Tn(%lca^mrwh4=@>7Lj+apMwGJdBo$Bi<YKgN76=uroIs%
ztwM0VDgx``Z3A6~YMr?V;!~fxj?w+{>9?fR<aFy(gp&g_Yj8)m7S-=ij%gJM%agfP
z6MIK31`^FFJV`@V#u!de-wCymJu>g)8j<ZrSb5yUf_8x9p^F8odc^Sdl82t-&mG1O
zGyj;@D4b|Q7MWo(6-k%m$@AXx<bgsBKn2;YogN$o-^=TYv!8t$sE&Wk4HR0d^Lc&+
z;fs+7*e!4MiCRKwAO}-q@UXmbwjoL*D&kE%^=@i`LCqr~`DpP%DPmc&+IMYYv^<m|
z`=+b9^o~mQFUyGjV$(<$s8aXW?05t!ZA6g3C{EU>{a*mA5A0<y<nyUIP_mT|ht8L5
zdd5()dHo+swzs|I#Upygmv2O31vtAH;&ry$Y_UT<A%%b{ELpwtZ6eL$f#!Do@n?_=
zzv$6j#jwY>nwO=^^F`N@kqvhVks$a-x5b4}aUAl7EKKgbzc3jE9?HW9Gsmo|{~PSr
z@Gr0*P^~k*Z*@(>4pM4KYkMj#59dhN*ohajuNDmpw_G=9T>cH0;_b7sLBwwqO|f6{
z#Xem}UL=+^#nGK&eba&9-$wGddODmtJp8%rEs$#N52fSF_B#6Si-FXadC>$ZV4&!6
z6z0bO-P5zi=-O5B2W@2W)-vn!^NxL?SjEJah%NGt0ZRcxIuC~~0}MU%kUuZTzVSmn
zgc6e<jP}0?(mg-L*gN2iV<5u&z}rPdycs`?nM>yLqsr!|1+lyB!-)1y|3M(R%D-68
z-wQ*he@Cb$*%hJf<^L@~b#P2V62mj)?F6rL9>m~0>8T-06ylNnzmk8*cWn$f-ETWp
zlxVuqnxEDJQ=r3|i6T4VFzYFwsJ(hDCif0-WZ%dx0S%T?6Rvka9xy1p5AO5QY=Udo
zBx(n*d>&iufNHY?FI?Ee-voct8m1LTEWAOJT1XiG;q5d;UyfXD2LFfGaAsV`+?0oW
z+;3B89!{liznAyO!ePtVH-l-IwGd8msbu0H{)^k+)4a6Bz}0b@ilP*gA@H2nK`kJJ
zP=~f77w0Lf=cwlk<|(T#D=3$Fkx$LNE~VNwRAkN6mlsc-erSomLsDTBmk)ZaahF}j
zG%A@#+<*Kw+s*DU2gJQG+Al@@jv=4VW=aYKE+-q}g{dC+U<$(=yXYI`<yd2il65!7
zWe}@3F-wvS92h%zmu>0t;mq`=^3uZl#Wh#M*bfhC+iPtRA)R4*p)kL(35DSt7giW!
z8+9ldx14jl@)gtWzE_s5UBmU|QKfPOo2E-KeXXKzU%q{0WNK@;NURrA&p#8yGM5MA
ziXb$M3@LwD?DxbtUpY`V1san&aLb{iA~?LQ91P!JGq)mi6xlqTm{O&=1U63UjGp{3
z4omyqHR@XwFpwhrwa}#!L)rreigQcIPI>S$eTFsa$%HYL59E_AR2eAg@e_H-u>mM)
zZie$#(F?9qxteY5&1^#QC^%m~z5{$#^Q@MGS8GHB4>s$XbD+uahnLi0fw<4WA{#O}
z-R*3E?#(LfUN<{#jSA)Ax&@bIg4<L01bi@m<F)Pr{4Et_{o6$Z^@F7)C52IBJu|ac
zR#&<Uwl&6R_r*OtkT@sIdIW?)T~Z(F=|03ZBejyG;Qwv{Pd5qJgU`6d?dEKA*7XNc
z*V}(<KHOFL#@9!4x@qAiXIbKX;0*#S9uz@%chyKKEtCS(9{Tf>-l2CYg%Ahk>G|kE
z`|=N6<NsnMtqQ;>#2~gXErZ__NF<6M<VG9pbh`%Go_LHe-K(6zSv#xiNTn4RWMN}f
zKDB1F7E2de(U+a6<15{LmhX27^x_G241Bfud@nw)w<v|bPItZ+ziHajL;2Bvo-OC&
z5rM|b{bU!DcB46IP87&VgWC~+9tD-%^AMP;EWXT5=4~R*0w${vw*rtl=77{mO>p1T
zkb)w04#pUFs1eEqL<V14oLyofz}SsHp)}3U6Se{jeZi0yTV@>cPM`LC9c!Y1kcyka
zTjNfVsBm}p^Ghd^$LX%2<|d!Zyox?HK+0IFvdM+%tn;tt_Q=U&$P@x3sr^BPG6=@7
z1Wmyb1XWno`eKxKRZ<iNnXz{-{0qb8D*s?`C5-Ekjd`3Dl#+cAZ0aZ_yR%<rg%ZMo
z3wn*$$>Zb3SE>IXtg71Bd+u5k90o}v2cmW<ZgGBKzVlPY_qPSDi*5?@FEU&mw|z$(
z-T@e!`26?K!?c0UEI%rs3($wgg&$k$4|qwiks|01T`mAGISeJ+8n{PK2n!#(yTfka
z&HM4PR|}4k37u*k0c>q_7+%=l`~Pe0+~ZpA|Np<PB7~fhN`@jNp`%I*my)i`sgl$Z
zoy?k3C)VD{Rf#g?N=OYMq^85<Qku>x6{6FsRin_Rtyrra{GRW{<@$cU-|z4C`{Q@r
zZmvJlvi5!*AJ510{tytVt?1>1xNH6*T%0LnO1YLOJbjCt&O)+8(2#wo!(w`JgUOi}
z3z36A5vAq-MwDhA`hh4lK@p{Ge{C=w$UpoOQHmI$3Ghobt67i$5Amc`#wr7Ht-RNi
z4YKrw=eIw7b`GuLkOL%dbe2PT(dS7>?Zs`=?J&}EK?-^gs1a627m&5X2t6b06XY50
z;8Wd&`c&6kB?WPTvrv~L^bEBxeVmsywL5Zyh9qC;p$Jy6q!<ZPO35(`tmN%NI_)cI
zQ~B5un#k`CN%RcwQkeASjk;A|^D@2RrHPu9oWz`Cya$sPZ0f;@mk$D@A-}90#~a|L
zsaCXf>5JWc$vvLixX#SH%T+}FbhF$iN$rk|MTs{97x^Wm>-*fEyLsJ?VOps%+;{kT
z0yfto5;6|c^%XIw!7@Xazb~{8p`n36-1N=y>!Y9uw=u?7rF)jDsgf`bMgmZN*W-HJ
zhtbG5EVN@GjYEngg?F5utJSiY6NucI@!6jXnW$>i26(vN8soi8na`fRF2;$-C@bOE
zzCyIpjyLj4nqwKh`>`i=`<5CE_Bxms#mgKZc(J;=1@_t!-GHa#$&2GVCz`w%=Di|&
z!dpmQRA5H+A^sMdj(b#t6*%W}$zl>#TzH_@SQIMKlvc`HO_2gwzI+4j@K7;>SuQX1
z<HOtn3yO%`&8TKXV+(N6IcP}0K3JO0*yk2U*aph$k1Ij~u0lw_oS#l;r56jSYmw69
zCx6L(gPb3!<M1h%q$#kpm@!E&jsHQioH9??a7WP6OSk~6b;sKf_)=iycjxGbQNf)G
zq_~ioWZpUd9LI2m$(g80jQ3fhGeY}lE}cf7B_;L{>4gF95Tb=P7Ddposl?DzE5Y8p
z+0FCyBhteM<(3O)Y^HWlA>8>7NERq?0Dv@vuGmfi7oRU!P9(S&=qObrc9IWCnhk%9
z($Osjstc)8q#FgU_XRE0AgMqAx(WoKGp##Ue0K7wS8hCDvO(|nhI^H2i&nVrPK=KX
z!(f|n()F`Nnx)khB@VI;OqzV7rHm-hVs)nw3LUFBF+W|<B^a;b;dH~X`(h|6PdFyK
zZmTbrpm;#zY2tB|*pGGZIjnn+&~*<`V(7Z3x^Q+ShI)uv$I9!kCbY63CIJZ~w|fBV
zB^L5|L)i#3nDDsmGZr-U{8aqo?-=_>>AfFDIy!!*7sWmP($Q-7()O9GKyDz04kTSc
zp%cVEV4(wvE^gf1ykC)(X8xB?lTr2;l0LoR-K;lr*=8M+b{t$4`elmC9@^_hw0eCG
z2>?20C2Ho?4EFVXC`LcVl<i4dvM=#cL?ie<(={)-%V$q0Gv5<=WUWIP93>Da$3y>$
zHP=30sM)(T|Hh%cK^ZspecDldXP>8&Wx7X^<2%SbKE082`t+hWl}IJ6h05S`*v}9*
zbEHeFMX)HIhpj?ww!}iBD)#}UO8&wEcNmS9W7{wc`A3lKwj!jah)9C*#m4u9UI4k^
z7IsbnD}j*v1&*I^LqB8csjaTw$r%-V^76_g9X%Sla>2F-igHX3X+UceOX>VXwU1cA
zzAienuzi7}cLym#3GTBlFlYDttA%m^lAU^x3ngm6xlk4R3k^|U{?Y_lrl<&Sr2_?J
ztK@g+zzx?Uy?&8Blv{<K2zlB+8!3Uo4RAqJsg^H7eAP#-$Y&7II&>&(TkZDkn`DP{
zDs-U&P@ke9XTwZ8E}vzbi)6}De-RY>%8NoT6%NJ+HCmR6%X=Uu%vuyACUOU-Q8vGl
zI`-ClGgdnkax(kDzOFr{>g(fcY=|rFoP(e!iwVBg$756{vUbHBug6e-L&_4sM6&_t
zmOHZHcG+gT1aw6Qi7}7U>V;<`z57Lsg3-dBDA^f*MJ#fcH=9}V8|uQ^CGm$B%m#QH
zUb=`Qh=t=6^3qANiH~c?`Sr`!XG@>a;X8;SUt0Tta+(SEb3m>&+bTU02MghBv#Y6~
z(|VVJAi8J&^~R|tb`R=pOn$_4E2~UBBS4o<Lu#F8@h-03w`WbPQBONHcp9#Xr-7GU
z2t^xO@3WZdQjLA`db%#fS+HAb3?JCpuuvZ1Q?-Z0AWc+c355_~dU^uWlQqutEW-I=
z+hU(XeKC?OpD(pyz5S*O)SVCLR(~0V2Tw(TtMle8ZJiUj`}*a&nUS_fQ4qIE8L-lS
zr|fC5T`g|%5}IAkXPhV7>e_y;wRVvh6`&WO=3`H4f4}{Kz0z^sJdE<_1KGWjb?WU-
zTzVYU4Do@0IT(nVt-}XIbml1G;D7NbcgD{@C{Lq6Av5X)HU_I^qa%1lSuB48zYl(M
z(^nc33@4+uNUKps;V=b~p4wP`{G!yLqnG08j7I5950N{{y@hL)GFtm|8_p6ImhL5#
zljG$!;^3Q(W>slDgc*mPx;#vo;1vo7<}G@GTUY$!7nu${-!;Mm)y{(Q9)D<9lbwfl
zA1C{_W=LLm2_Deh<R#U~<H^h%=Hq_rZEH~7SXz7##=u|TFuU{}^DKENr9vH2P5F94
zgXgwOz%my`E<5t6WO)<WH0!?6!@=egQDbwX?Bmi$-&(pYaWcfTF4@v8-;<6sGBMP2
zc{@u0;)eJzHu{=dIbIAd<~YQUxEjovM0tyZ3R_WoFQ;}$UPF$TWrXmnb&eMF>kYsw
z7Nx)`oDl=3@Fj#u4as*5JS)&juEAmY7)Sp8p7O|u@;t_Sh<ky-ZtzZMBJbvm`R6eP
zKDPA1L7%Q5H?`~aR{ag=CTLQ9$jqjAMBGw5S>ONqWE=J*tzL~$9on|qDqaYYC}oIP
zFI2h$CJlA^xTic2DO>XJ)3~LaRuB=@XH7GFDSriV6{Jq|lf!Qk8wra__qvr6;-Q@-
z_-37HJ2|>|!-G%Y<;g1;oRH9guJ}J5jaCC@zB=EH8=4S|k6}%;i4baTJU5wXtQMf1
zlSS06&9@tF+v^CkI|KUnBUiibv_JBE2xAG+2i<|d2c8&~+RcExa|MN!CbQ;oh(pwx
z@M#cDzZUg<(g!B4)w%Bd9Rnq*#|-K0v(y(@HB&|$LGTEq8zcFf<{NJS)N)BQEj^f7
z35@^|Ib6#jbAG!?k#)>!YNsp#jm*H}0+4nmfUMdC-U#!nvxnY}Sh_i#7_Lzpfx=PE
zO<R(ns(3RmcEy%?`ZEVOg1r|IU%J{Uko~_kF=yLhUoO$AoRa~fIG!cgOc*tzfswtn
zf81<!RRT(RsSAzQiPGyQ;L8<_9lFrifrvP5HXLSKX{bE&-@OJ@Yxzr@U^^`Vn};Z-
z_`268ra>qhN_brIj`XGPI)3Hq=e2Mynlk(F6uTAMoOD|ks=sAKb8_9FhQACseWH=A
z&UL;2@MFnZ;de}$NP<^yB$4iJmL;2fIx;%b)1&ic(anMc`ic6KmG<uz?N)|(u4;hD
z1yFVhX%&q?WCaIo_91N+ygzFm%-p|E!6;}45t&_d=u1^dd^Zx(?ZaA#M<?!HC=dSQ
zHY?dFh9!8yQ79qlOZ@=pnT<NBVx5I<XHB22`0PQn{+70|r0BwA?WL#sxA*KzUina|
z6pf4)WkJ{lTxEZxn<J0Msn9f731R6~7=B*_!BRN-2&F=Q$Lv{CWW!YjSjC(pu;kbQ
z0Llp=p<4hfI4QQX<aLrYuP7inRFv}xfy2flB#COuhj1slNr<qJNX>>5m3Fa<#D<D;
z_ba=zJgn>eVZ(-3`^Ro~T*3stF1wv|<xvd;M?G|#zWVv>#EZzH5;bX{&_SvZTj_@6
z7xFa%{XrE8J60ogAs_A8oz(D+@$mhHO1;Fv+a+hq4wU?rceZ@)lueP7yr*>_<^43A
z5O$Ov{6XYZIqKz|tWL${7t{14IQcd5FfNu{KXyu@A+JRQFp7f-F?7LSNZDR9Bfkg&
zpWuV?@VmNT0g*})S|zr8c1-92Wi10<CiKo2$)G0P18Z-z|APUmM4^9cNsElJz5uBE
z{i9U3Ha;H$AI$me{OGFH$AvVwD*_%_NC)$BeFnu!91J(i9ZkXN>g>;Xjt|(Lb#S1`
zx~Jum{pH5?)80Fkb{_NStHNMdKSwfK$cB;3>e=(7$LmLsMNOY9r$G@x5AF$TGUqVY
z#$S1~TAa^K6mIHG8DEx7<g+@7JKo7_`bIhal8CyFa4)~NoP260+bzVTz+d^6cvzTG
zNhrWqMv&2v?UfIiX$Y?@tl(=BY*R}V+f?3G?($ieQVu`f^87jWZyXq%6IuC41w@W0
ziO=VR(ZF2nwc?d&w(DnWV%>z(1|<dO!so6QO)phmH%05p>9?1X>~Lw?UyXkSc|ak(
z2?mandlM7gG0?Dw<GMe040PSIv@AsdVbD7TArjMUVR?SehutvwT_08lj%w(?Urso)
z!1kA;^_7{kYqND~-Ne)VxdjSKtID{gbxXs%1$L^Lpy3EyXyQQJ1@OTdLC+)$G#v4k
z5;jy{Sj<t}!TfZ{AaC6d4V~<fDwFi1XTJ6GGbOIrR(KmhDZ-WF1M*p=_rcwcJt!f!
znuj;HXf7aMS@@*Ewy`kiby{1;nlsY(V5G=}N%c<9*djO31CHwmb8G~y_Mlh|MNA(7
zV)_D<`=$SH12jUSL4^TY4QJV3BXm7FLO0g&bZiDrok9%jhEeqLm(C~tA*<J18a)Hs
znQ4QqIUn}AIk2A%bSRj+;IKv)H~?dV!#YjJ4pOHa%0*+h!C~EUtij;&m(RaFc;#t#
z^S9@>f4d#!(Wi&OP^(`PR#B@Ebmnf7*LTejmvcRchU<wyv&Moz;;6^Ok0X!s9U%&I
ztH-J~A9RT9_|fbKSnRui6Z@J8If^f^=w0VCc6b*cGcvxx^IU=J`N#prN8A-KikQQM
zdf_sx$s6e*saE5#w%U+PJeNay9SrrtkL?lPN=9f6z<@ZXmBG<5%z5u)VK@=8lp={^
zS3u-uwC?Vg8`0&i!8Ez^4fW@ENV!swbS>ZsJjH?W7)}bP85#L_7x|#$06>uyGLYzE
z_sPpRU;h9RJ0JRsNm#)Ez12e=_v;7Ye*Pd66v>PJpq(_7()$+a`}Kn)IP@L3{qs6T
zzb2H6J-Z1}9A@YRTWzT+oXT>g78$UxMkKXB>}0LPK9y+0Dt_{>+(`^rhPFZPvwtOa
zzSLj#7e!rY*z0v)mfP!jK!WFo`b{E98}mPhx(caZIu|D#opUJTP(0T_Kk0~#8$5BY
zEM9sPWYntkWzZqp>0hB)XchhShY7d7BgUP6F!bE{zgyEDJjk#F;?8~;sjT;vwy*_s
z5Wi#an#>Uyh62|Y$Y+ekOVNDB0jxB211$FNA!S19(D)Y!+vKlGmbVm-+um%9!1m^E
zCuqpO=f3Z-qs>oBxgoTSsw(oz?Ke|rQA;_6nS25)fDC~}IX;fMPTnf$%0(|g1YW&4
zr(R;48hli1*oc21IiyCru(sT?^o9P6X>e9sJ~Hk?0$=P`bsb1#Lr_ZUpn{SLKCmJV
z(I}b6SWuT02XfJ-C#$}!o&=Osq;#qnt7BUNOGQWWsS)YiOu4gv8Ar6P6$aj;kPI(n
zbdGdWU;{&wXpZexf|uZt!_e?83KxI7AvW$FIS<nw`<g*9Bi?f&%jo+<OZuGHt=F7K
zT!-M$ekQ;>BM6PXO^}z;=RlAkU9?kxt6;?K%@kF~1=ILAX6NV(_GpRyonW%&7e4nK
zYF|xwps=rgv^Aqb9%?9mW^XE9o8mKWZUY**5JD8kY2?Xh$lbqb<j({}J)x&<r-teL
zA@)a8OsjvTn1TfeO)*`y;8%(%j3!EXFBlAsdA?j^&Va3%&<&U>1AArss+$ow(c>&l
zDDNz~JPu5~?Gy4KTI)FmW7x_%G=%hAE?Eo3q+V>J#OkCRXfinQvKIc;ZW?GP#Tq??
zvjiW|ntDn8_*{sZ+nQ3#EO>SqA~Tm{Sd$X$Iv{5p1t)&=7v;dJw^v+Kg%S9l1+{fO
z2GIhu%rfyHc&ooQg16cX$3tcX$V1zLimwFOunIPchNxe9^y3OQ>lu$bt7+ci7KtyY
z`5-2dY&3+ipd+9mYi{@NZB`XUMCY*Yag%=e`#l0Xlh!Kfu%JhI@Hg;CW=W?BntHvi
z%5r<2`NK2{DLK*nD=9Zf_@c-+!Q;dJ>)!8Ysec@i&XI`BWU1gNi#(~GKvfUh1kuNS
zfZ4o8X-eBD9}F(I?3P!2YE{k>MW%gG%<AcrRg~Xj#Y@$n6F~0*);$8O`vPNVLLj0|
z2oU$2n(CagqpNLW5}A3~043e8+^rzpd%?_7xFcazVExM;i4t1=Z}v#McyS@BAx9uR
zQ%kCm(X*f4Nk)WqU<}ugI3{SyHQgYO9(JBTL-{y3sXG@J3{l%YgmZ+SY#?xG`AFdb
z^1PZCs=`^%PWG0Rf}S5veFqy<G2nVkK@y<xkZI@xF+%cBuxZBp+3PFl#ZMk5ZF=gc
zRpMvaFcE_}37^wow{aN)uHLTG-K;ZDHDOX3jl__GCwohr>$@aZjmbWN7M*oJ@}Y;`
zPffyq?B{7oCQ@s$+E9j7mTrZ-dW27#HGpkLh(+?Ix7q0G=H@Dtf9d*c*>V`X-s6)6
zGM{908}MFoQ1Y)%*#FIYIpwDP5e#OE_<V0QPe-zh0{#OoHUZKUrpeB8ahQO1+F4U4
zh=E$awV!t_JvnG3<oKwC#m-XW6w?6q5(oP#Eq6ya<MvjA%;*NM&g5dFIBLa5WpUjc
z4ACk!w!lgGZeStqV3TQ9N<qPyh9}IVK%099c5@7i9<P1*($Sy{VK<5xVlH&*aVEe>
z@0Sou({arwVEY-kj02}_Vf)v5*B&F|g~Qp|KG$$-wRA%(7jOByHt&%N=A=6BnPfZU
zV&u!M!u&;tWOr<w;n*5mj?9ZFl<e9n(MV4ZvZwo-$qL7u|C~FrJg=|IK-K{fbj`I%
znIi{)KS2Vbw8FB<K=~8iM7PU$z(|RrWz7=zgBScz{=_(;cV_%=N((`yP-8)_gF`p#
z!dFflGL53H=yhn27`2GfK~mK@>(zztYz)@_WA8e5>Oso}`$;Mhr^Xg^oJ7*!Dvhea
zz;Ol9!iri?7i7VL=@gbKpV<hV^pESs5{)#JG4yB@x+7KCA)}2WA^oB2o>vdo3mM$T
zN?JR%(mdT<T$ux5(An<pcj?or+p@FGJsk8eK@_x4-1G%**5@wwt6ZFj%OzYu@<yJs
z+VPSf1AOuSIKZLX>&F0Z9LB?YvlUMR?{b)U_(qsvw<s26GMqmJg^-ONNI^&Em%o!l
zqNSH2-sZjdrzs&xX_Q4^H}Y=T$u8SYpIt58QL+FoMBX0_#W4*2plG`#`gNo=wFf+?
z8{j6o8m940c_-oPuC+iZ$&llQJ`kE3(Y)HFOyQ+?q*ALFE3?28aCGsKe%`Wm=$!#X
zeDt8gxPdzahmdk33dkb4CKb4`p!7)G6+Fr_rn>>pI3A*I(?w{S7LzbUw4Dpz)li3K
zZY3a=EOZ?mK%W~6o|~DmVjV@=R{dB<1&)%UKS2ne6VF<E-CytGBw2*)Jo*axltn_P
z-Qwkv{hv{gl-8|}`QoTI6`Q6ffA}2IVlGO=_Xh?Bnvi0?9BggaK3KD}_BJMzBiOV}
zwF*w`K5(AQ`bOm97541c3sw{e8CAxraAO^Cb#=@vM@QP-x`5kBzBJ$L3MiWW-LX5j
zVe<2NA4?{{0UVs*jSz;mvjk2Ze};lisi>h24K_#&#%rj<KmdSf+O&>-WvpHI@#?*p
z;l^l|nsl;&@VuQ|j*o%5lts)}vNi8<`iT}`O)N!ov2BvJu<s<M_5tS%kkG$p=zjb~
zfWCDO7=nMIh`jfoN~Wt5w8FxuC*w6_FtJJ<Y*6H%yb75i-PN7#H&Q<KE=7b-1h%hZ
zV6f)Z2kj{RVl5hhet2fG{({LG(p-5hcIX5Lj4Hh2f)V+3Z)kv*Pl2=R(&ghaQCQv$
z^}b2+W*i_N=HlVk1os=jk;ZU64-qisfD;q$%&~A9<$fEM%~6uM0x!pQQJ4f09@yhi
zmBBbLBZlQcRAt)UAtJaDA1R_LJEJCsc;D!rt3UM;;T$5^4dNanjy?kKq-lLJl?5Sw
z$opoSUH^pmNl(MT%s?RX8jiP5EaX>tsIDcSd>r1Zp`cOD#f^nOgXAjFHQ8NO;521X
zqL^_rfS@7u$P9cM3bbOPhsU_ZNM|(3lAEw}oYshe|C9)?{Qn&yIed!n68kfunI(1g
zS~LJsyw*qMR>YsxKAYQ5quNr;1;!VkERtH`r2|Bm0+RKvCb(&fhN|SXUqs7-jB-eQ
z$r;zQGW;C%f>(U5+%v<O%9D2i+J3Hdy6i8T<3fk-!ZRnxn6Sp*<u4@@|L);iu^r#?
zZJX}zW!Jy=+N*!up>LC6g#>kDU(cFJsBg%Um{4DjO-~Nb8DIf~`R=Euhu7}&+}APA
z2fZJ@<g)z_#~Wr}lAXqfuDK{1kDSvk24tKWij3<7bt1Qk|GwyHYMp(e^vV8zpxj|9
zuT%&6Ar_^Qx?Fa<#Fp4KQFe=&$~i~X$raQ$-yz)%%jtDKR;%-oak$6n3V$&E_3gU(
zZ*IMKFwgMmnHX>6CS93gAa)n9_$)!Tjm|BxlLTKYA&Bhhr2QhAL1;>!EDaFH{KAls
zFNY5p;3`_ibD)WLHsw$hInbWw;g`G69OxooMFyie(A=Ln(AT|Zd%0h-!*WWMn;3h&
z=MQ)E)5=(pO#O7G%o)uYLZf6S$`WiBh&`%Uvx-en+NH#!G54(*<jCIp<C-GN-Sl5s
z?ypokPZolM&|;uH`%6&{WjXlT?|n7_2jTJKH}^Q(48N@W7dLxPlH*cVGOKL_QsYOt
z95kVO8fe;HONE*-Qiono9p|@SpE<Y#2Z#kcpmRFsiK*dt0{UVC(vr4xLaw!|%B<z^
z9wC#ML!+(-dUE4wXk-2{beL&Qf4np0Ym2_r!q6FVhtgBdqPSbvv~Kx^y|?!b_O9Ks
zkp6iedZ@{JH6Wyw7K4gao~d3fi@;E#CE=81Vh;gMv_sffsUFoe?RBvdcl~VW!_?-)
z77UOKcI8X9-64`K62k)$>#<j-GG_CGJ9YA|XUzbZl#Y}nt{3WUJ--nJK+g!va*jbs
zu&(b`4c>5k=MDg9lmr{{g9OXq>y$wk8`$pV6CZbJ3fw9fQ^jZ8pAFlb*Tn$|>1k>$
zI;wn<(;nZ-H&-f)+J;$LG6SaV-<0*jkqUZSk;2<J4ei|S7W&=+Z==igmZsZk2dFWw
z7gPY^3f9KRJ-;2Zx5Jr&C<4KZC%TryCb1SYZM1m+&y>DKN>@`1dKqo`+%6WE-fn3B
zOzhrMG&r?0@bOsYx$O6^czz|9MYRF^j3*^~ZUK(OH#mNc&pn>flnP{%mkK18=Y!u7
z>De1r?SMMjl0^(&+Qu$L^TD8T{gAGR+{z9;fEpf;DABn{6k#G&|8pXdK9iz+1EtDq
z6r$j-Y~#CIG_F<<^@aH=Q+cHup0C^n?Afa{c3p3EB@Wgq^royy(GXt97r@H=)BsHV
zC-CZ@Ewo)z0!3-&&AsHsZ(jFC8Ltgo;MRWTc+tALHD)r;UHEO5;9(=Wykk0_aw%#F
z9;gY{b=q;wBQ+~EPCKwa-PKq>>BW0!wpjVHdZnZOC9h720avb_(%sLBFJ3?Pd9~XU
zDlpe9_*e#bCN#cvs`of3OwmF=U=|-I-6Yhh2%HfGv-lq)zScw*!`Z|2%~#!3Bc3hB
z`<qU5T4}9Pfd6kqP1;?Y<fM1;-q{=ZCNt*z=7`b8i0h!6q_<Hc3=8p5vAwhjM9mUx
z^I=vV73IjoUZb9>*lS+p{n~37b$GEpQpJHYz${h(DuNJZQX&}QOy}6L(3CappPy#G
z<4v|Av@WjAZPdGWB&T*B223`kW|HI{a=T_XHsKo^nu81h6<@p|+iOs={sR4Bn`fu<
zheha0Ha_N5r`%3gG8-+2qtd+>vdhIruuYnzrN~p6Sir<!x>?<M*tsZ=9XBbqoS;Rt
zoh^SO=b+2f&Exy~M{#X(0yK{OT&FCnwn5Fc`-&IvV)+Jw*<Qj%zD9;SWtUKw28~+-
z5%@}1;Xulxw#~l2Ydsu}Qu4PxdYJTLV4nBQv@4iBmr#_kEnR0lt~V9Ew}+_$A4*x2
z394D#WzY5BbnPQ;_rvS}wr5$1sw_{wD9odDuTcuH?2Uo#S%)vY@TS?=Vrv09r(D3Z
z`0~g)AIF-d#hbRk78f8>b;^4M`CnZtp^|7m4_X^Y-`HYrcwYKPH*5c)F>}rYm+k2G
z_F#dgjBdL=tly6LgWy`BZT1DSdL{VRj3EA<p-z+rd<%Tf53{3=JU{coa#+{H@tx^3
z*WpbqEB%06U=>cv$<8?t0C?0rw-al0q7R<%c1ez07&S>{rrm;e9O}x)4egQo)9~Ug
z!SliJIF^w`Z6Xv<pWX2aI5}8}%spfkl%aCD#kJ6iFMWkqd9ZWKhlD-|4A`3YXvKzw
zQELq)P;&;8{pCii;E7ZRHe5YL*Uo@gBD>1;G_+GBY+vKQ*A7X|49iCo4xS|LkD9cI
z1px={^P_*?JmKn<$T<+NZK~As=TtY}Zu(g-oS5{WE{9?zT$R~F+S)stw4@<9-0ZJG
z<-8*MH+CN@)fVUOJhC;)-j2baM+H=ABN9)Y)+mctH0b1%mlAZSQz={D-9ZWb5<B6x
zJ7l$efcro6IHl?Kq+0N?s$3{lwz}`LS`D*p3tT~S(EfxJNXPzlP9jUqXnZ)EZKi>x
zX*;BYP+4%4?*1DY{#}Oj-iC2OqOJgWhE@gXr@Pzx%Ndvf`SK?3tJ$}ozA4Bm`Z()^
z%kkNcDnU2Pp62d6ro3EFWtNic04yn%DBpQLwThrl*}?Vn8>!H)9|Xo;#Jzovp}`i(
z4?58n0uyV}W|w`JqA}Ak%3r34Pst}&_Ta|n?WrEJ_Qw{*yk!<kbT@W6IbEUDyAJ(6
zyy)sLGT#Q=kssoxf`1HW&oi>WAh57x8d{-(OM_)8;axxflc1;?K`+AdrKaM*y9nB9
z567A%nQ7BlS49z9n|twH`)rP`YUTQkUh$td|DyVkk-(wqsT*3LMMd{=(=l@NxS6Qc
zaGPLHXQj<~?V`mgEB;*Ox7|@;Xv{*RR*cj~lcm1koZAaib0u;|VR0-6T_)(vMO6Fy
zVY3B)Q49Z#mDJ=pTy_>ITt~!jBmWI7;vlun61hYD$pdHy<A$^Kh<x&C0k)UL6AES%
z1a4KjYN%#1Qqi(Ees#oycHa7jk6pJvJk9sLye1{O>P>0PTKh=`0@{BTS6etJQ-jGa
z>skvM9ZlC7+KkP_juKz#Ay`djLV20R)r`s}A1)xzK>SDlR}c#Z`vwxu2jze4>Pffy
zj;ZKZXq)0{2^z479A@cAPeH&USxss?-em~^i#a%E!M$QOv8c^2#yQCg)Mf8hUstVi
z%m!sq=zpG=S$n#*F{1#{M71q<F|@e!CJ5EHafGYVS$~mRjeBVz(ovhi{F@>)-i4}k
zG*stgEhU1OqD@ltvO6vzz1fmAbieA@5hXp*@k+X27YCqU;1;5{v7fiA$33Jt3b)nv
z1H85>1CV#|7VRCR1LP%j<)>C=O{rOXRcmp`l*zk&extv{(ZH#MrP1?QWeK5N&4ggc
z;Xu0}!D(F}$!c4b$`4($H}i77`!B0?_Y8IL<=}f`PqVsjf&gI30KazMUFyOx@bq|t
zr-znkp8Vm{<>r>TNsax7;sVu3>0jow=Ik4M;R#UT{lI8s1tqrhfJ%;9(H;=MuG5Y@
z$L5i%NdCRX6;9LeP~5_*cc5;a%~PA=`icsmy)zuGZFz6;Ip&};%Yo;HjwG~_`D-NM
z(g_KO64ek|PM0wSgdYQGtj27Tx5S0nC2`kBb-ssrP#We2dY5bIsm$j7y_6M7MXl3#
zg>{-<;P#)^>C5BR>CyKID}74hp-6bvP;1j%w+R?bAza(alUawn<jV#A;~=CP>YT<l
zyVH`DQk_Pu&>r>JIKOfmp8DTt<g$H`IWlJiLJ`|~NIIeu!iLkm#KBpVm3f7NyO~Eb
z_qI75FcZaUw*vY{zvbeKR|OYye|iIzzh(8RC!A=E>H1A*T;UwDJQHPecztf!!F~Ys
z{CFdDCa)Nu$=lZ2)!b0;=K#(%3c5OA_v0`T=-87w2`of7xCo;<GgxUp6~d{=l${j@
zOloqle!^2n4XTS}!#0dQ;;`b_mWC~i2IEK;ga}2_3viVY>fIwzU)5(TvMce4=73ey
zeGrk<?vdH`s>^9%?eC>WVprN(sw9qC-5%i&&_3B=uLBl(Fp@PF7eE7PG^#{B01;dy
zntLr}zFm5TZ{D0r^2vJ^eVY@EI%RLP&nsM~j7b!#^Gs;srLTpBQgfQrBUd<EVl7cq
z*s-*6?WlQqA^mZ<ms@+!cZ^4V2u!GuX0~LEbE2gW^0H5f48@reZ=?(k@X>(}0^0qh
ziwW)UDac#W`*cBakQk(Vh)D0^T1u>gp#629zX1jt1Ss`yp!viqQ0mhMP?UP}zftPP
zP5(iu^A*Ndl!h2CuO&>79=|U&6JG@dlsxm(f-O&fnhI|V<wIS~kfD0akn-^8_4zaG
zq+GF~FsqCM`J_`isST_Gm+Zl_#g4s(Ekc)P)zLexi{|7OU9g_Vg~D|1#XpwhCSP@3
zeA9i>F-J8n)Z`E!);WS;J6N|5A&;@8o^JN9DO&Isdc3*m3)6eqyUt5i%z1NnxVNCN
zC^{4$z)M|9xw$hWcLfHA2h0xV(Oum8J3<hpNU*P6%z6P=CGoO;o<En4QdbrFJgK>O
zLr?a&KJP-Se+tCaWuVXBf(CWv<EwXEPr@u^St9?PO!<Pc0mhiZJWrX>i$D8x@T}Cp
z_G*vk+F_Tc7rKUIcf(fh5Bv}B{0;Rr@FGujaRVd9izQqqGd<NVW5buyr4yigVv|(m
zm5qkr6kryb4;MQ_IYqUdlpW&X;Co69a^m)E@A<GHva;kbwCYf2!bS~csj(8RlL)$W
z|1rXpnWClQ0@%V>2L~~&l+BQDcmFdSkM39Au7-R&lWhjqv@#*zE?~~WJ@aPGyPg<n
zzXc<`B#U8jJrF@EmhB)n;z(EGc^n>g^t>!zvasWqYqj*3Yc&#lj+$YE3W3Z?{7$mq
z6Y6s`+5Gy3Kn8P+KCX~yY98D0{xd_Nkj?G7cfeXO?~(U2umu^5J5)smQWH1nE`s2G
zNs}xKq}$LjEM4~OLqsZ%1*4tZna`UwTH>FQP*WJ<LH_73oy`^Phd4L7;DEdMxDW)s
zKY(fGP@!q{@L1rndeh$~lZ?Dw{L<&?gpEVZj$e;d8cyLANp?`wWbw8W#6%HMc8B5w
z%4TQ<q8gDeaoZ}<?aL4$e6<>;8u@FQt<HJ>VWXVImqv~~hV1dFS`K~cmGo8%QMR~K
z=u}0}mTQW!<05r1c1A!7R18m|BK0%Z4_~qkhJsdQfJi-Aqju}rf$LUTzp27=ee4Fp
z2bc3>Q&x{+4o+<g=vpXIZR>rzYVg2QLf#&a_L6VsYIkdeUCGf!sZ|O-npEQfOfcha
z<JgnDM~(Nx+{(vXlY^HOnLHnEZFf*f&<eI+<~|t&$M{)Fy^*+R-Yn^{%@NFAv=b4k
zPly`P)*Lc6IJp5O*t{oijnRGkzD*W!OS}8+HeGfRX|uth`v>ANju;tKYNxx&?t|E+
zhd%@VCp@LW8ngQISP|D>s!<2#$4dhLYR>cmW9S^<>=e4520zuCeeSI*C$Il@8(IhE
zu;6-K>hqvt>cz?MUM7@iN{vt`@cd8oX;ke%1Z4tKKw;QB`idQXw@dRU5_nl#iJ#VU
zW&KDb1nItl119hyV4+2{fR81%6e?FVI6`VYZ2}(W#<IcSw<(X0gVr6i<mg{06qvei
zc9N3xPY`C%T=-A`2`&PM+2z82=fXQ>DstfuyWa+Z+{Gvbi#AUgj`_*1Al)}{kPENA
z;4@^d>wavPr``{2Kd7*Fi@@4_E<j=Jt}jNd-AY;jTvQr`!`_7YPXfHW4=1Z?d4>ID
zruq<}AXgP}#LGr_ZbH21IV{5A;F@TG_;rr>cNSCr4jeBpt>qjM-ndq>{u$tELpqCs
z)~>mJ{ba0kc8g+QrwI=1{VxMs`yu&`lPN?@7ZjX!xfbS4>bc=#w{!Id)pZ!<!TCOr
z+c%!w_Xey37Tcz;A8Yyu^?a=OXgd7k(JeHzc}DU9#`|=WM(BYXhv2agXk<gb>Ed_H
ztrj>qa=v3IAiKtDsgD^UKfmYR|L{HNjT4^AQ*Z#lz#dEn*C2QmY^im0Wjv29FexWY
zKpumLyLf@Fgp88qYWh;gW8X*ff5K|@EU|X*R&i6CgrGGGm3wf~nFZ3-;>_;BxY*u7
zQHpf&Nd>I&f2QUYe8puV02^<TI7(5H9UcU72VBo$$qb2tWEXK^=qJg}!&Y3i>3BT$
z=JM65bCkpr;8QT0ihIv|e*u1n3vl$SO~VSfHZb1R80)@c?n7z2#6=?8i~;_W!sk>C
zf5TK5oj`@&Yo_p#j60p$$DK~`T%M#bNUJk`>Oom#=klZIFQnSblFlrq;L&PW93m)0
z@{yjE&B4<MJbLSb&_t2s>MFobN;X*VIE5kaI^(<jHO9UP3D2v0kuugishK9LjV`zx
z&>nL!NXk&S+a4!z>W4;_%2G#29Ywhb<?9y2ZN^aTsNm4qN)!8WE~IOTVa-?D1Qi0Y
z1C=e0G9~1NbBOuZ0Mg683vm@3`NRHs+;v#Sp>?+D>B$CL?NskzjLd-aVs#E9WyzSh
z?&~-~D;T;NahrOv(!~ycy#8TLl*ygz$E}GREs1?+(Khpb152!zybk%_9(jL6&Jd9W
zFu|gbQ8rcLul1rq^;KBqyh@BlKWi>!D%C)`QkYV{;S?HCG&v~Y-X|<^2o5d4oo;tR
zEb2PI$JbeS>`T>Jlf;j^x2wKa<rRVd00wBxVezLPS^`c`01sSI(PDkXwXzNlm$djR
zxR1_-<TRGdy<tt&G23DpY=XXcF>x^ZDWTjId~u5pI5&I0lfM&T3kQclL6<UC;>q!&
z@B}T{37PA#`@i1C00a>BQJ#rp8d5$FDI?K!kTN(nOs0v*(sCqUUN1`%(Z|A{3|q)D
zWNAgG`f0DUt#;T=n6txfYS0zc1!4xcX^vi9Pc`GRp|mF-bsL1lJ;m5FX#^jw6sCvd
z1A#!TL<HN^#qgugon%z7#Cs404D@5uC#<i$2F!G}eO=u8VcV9Y*CXgbof+2oPY$Sl
fm7l{{z1}<rvt#^^(s$q&Ld6F2|M`#d_qP87#9rc0

literal 69292
zcmeEv2UHZ#)@Khxj)H*XQ9%I#$$6LoQKAT<NCp*=Bp{OGpa@775KyubRf6OoIf_V5
zk{Lj9m?4fZ4BP(0d+&Suedm1c*|U50ER6%z<L#=hU){cS>xSy%@5eL1DGe2M6#xQ(
z0BYb5aE#XdcFn`)ApmG;0ha&(AO|P`Du4(qT?9{JAPfK$EJMH_0Kx{4{80wTD<SOv
zC^ta({-Ob|f{6a(+Ak2XKgx_?JsU))|5;D44M6;7JrqPM8~_>k|J2}l5CG73bF6?R
za`1C<oFH(5zzG5;2%I2rg24Zm2<Y25JaBY(KC5Hx=;C<x+5;OG$0uh+MJ|h678MZ@
z6}>DfB`zcJ3mH(4`K6!y`S-tfm6(XAjGTzHoS5iYQ8775uq*-q)GvWw+6X`_A|@vK
z68g9HLZA7P_#frUXvm*55F#iL6aB~c&|eqF#Qd|I{&zj#jiy8XsrjT6{jK>B8Kgu1
zE<>MZlKw>lHvUhIh~hPP3Y=&}zfd?iP7pXj-~@pa1Wpk6{}+LO(^|yjB&31=>^l%4
zQV8@for3gVEjJ7t|FqmN@cgUgh6wVvKEfbK^bb8n@edsYtnV)P`K4q1@%Q-q@i?Fi
zkdu;<k&=*;k&#hQkW*4K(oj=TQL{3freow}gK=@Pad4dFxy*a^ydXCR2cI;*popl1
zganLNRzXG#epy^X>{lfa3JMBpDry!Q8Wyp09OuM-`#5d@=*fYfpq2$W2N2Oip!AUA
z761m`EeUAl`eo?)>i`utViHm^atcZ+kf7`oKm>t8iHM;jB*dUO3gY`qp(CazVK^tM
zM0)z>J+kvojABot-;#4*DQaZW?Zfbh-+%Iqf|B_R3oF}&i@bdNmn0;mq-A8~l&@Y>
zQB_mdxOH3aj=q7Rk;MbchgQ}$w$3iDZtfnQUIEVogMwd#gvP|aii=Np{U-5UMrKxa
zPVV~;#U-U><rS4x)lJPUt!?dJI==P~3=R#Cd><V{&(6*NSXf+IUcqi{@9ggF<9;6e
z>esJ+{(bz}v486qJ=iZIVqz#U*{^;<h}^*sl%AO6oG2-S(oM2^PN&a{Jtb$n68*NQ
zk%C)X7sGV_NgpLMj|BPx_E*>b=-Gd-W6%DVdiIZw{j*<V05uc>4jz;qKmz**e84+@
z%Kt0B3KMH?VtZN-RKr|Tqy}w{0jrX_)G498`IOurDmOMN86k1U01erkqn7wF0Es#V
zm{jo+u!vfT9y}=$uLr;|y?#<V14s<ZF@U{|YF5IH4_rS68Z3^1Rvj`YOvY?`2;6cG
zxt4$1(D(JYy70!mOQS69vWT*c+rS-U=&pPOdy`Rlj$O$*b9u2Q7dCE!ROK4rGyZR_
znpI$&+pBvb^L7ngpW0Uss|_R1izSQ5_VD)m%Ludi*kc_6<`j%IO4v}N`3`J+`wg0R
zy;6pd&Bs7E;SyFj(xsLQZ{QohqGAZIq%0?jZJb<Jgk9-V<XDVy{ajD$!F_vZ4PIYn
ze3cC;>VEkN88@~t6^TyA+b?IMW<-yH*<9$TA02Mw4z@kmv9Qd^aZ$<j2X8d%%?fMy
zmakn1E(z=1LO6|Wor=y5gB7<#7ytYe|0s@lI}vbirVE?m#X3d`xkOwyIEpuzf4KGb
z(x~2-MaeOryV&yl85G_3sb!*xE`^a-1Ru+w$xQ5*opd_3V<0F1Tao?d81QdD20}9k
zY;<i?iB<$CjBv@H4rh&I_p(XDQKN7l{^OkzEyQA1+w`luBJwh{wiYTQrCY1WNc@ql
zo95a&kZS;=4#fPF$0k7o7J^z6a6JYxjQkOAN^$xaf)MlA%J#LgYa-n0f+cd{FJ*b%
z<OWfgr#`&LK$<D{F#ts!$^l3;5l;IUKvb&|NRNR%SE(#aLPJQ#WDjWoU|Hd=YG_{2
zuLP3>JlfX|kAVvksF7FoU3M$gz|ZYj-cY=6j*muFao>g{<AB~Qd9?Ay6>`=^#{%z>
z0^Bw)x~<N5lT*&*7?>vYM_kOGro*+ja51Y7Tpj#TV)#XjSWo`N@*vCzI3R20;>6H}
z_=x7LBF>vi%^B1@*K`*gG3K0CP=^H3p|4}jgW)iA56$Gt6m@7f@|3Z^Jy$<UN=F@7
zH%Z25+X7nx^&#~Pk2J!%tZr5ae+@~$-7_Fywv172NvsdSpL2K5o2s3_PD$8t`_oQ-
zaBA33r`<O$9&qJkTNuzcNYaiI6^Yv`Q0QSPq{F?PDI^)g$!1~lQ}U``rvS#X-wI2T
z@#(2ZN?-^_0hc@Te3wPi(_&yDX5UNIt?8oW_l&brG6mbZ7~TN5p~qP3LYh5F!k@oV
zJ%sv9<Oio#KpEXb;X$T09J8tvplzze^z5~R`zMyhIi~{gz35{gT3-DaC_Dy^vIilm
zGn>uRl(?`4QCqh1Xr`e76SZs=H!@&`md5S0j~vd}UR+rrD1q@~Gf#r0fv=J+5Jfm8
z{QMZ$Ud=?!fY1HxN>^bsT~NhgU3=ztlShYBTAc_)r7iGtzm-idJ_MVxGl_tZWU_@*
zaomkz<P5H_D*Uwcr`Rfd0e1&SnXaXNkE!|?=*w4xY53ee24c>EtYx-$3>+}%centQ
zhe5EPr$E8*=`Kig8?v4D2XjahCM*ed=6X61lSNRz%%|c42sIavfnF`Z$MKzqvjLW~
z<)!t3&q#60=gIr5m&C&pLE#W+IG1+7>{!1UO^|@lOgE!g4aT(GUD2!G(*vo#tOZbJ
z#CQz{H%|Y&G<N351$D$c2w6pO;rR=2G4}MO_F~?BL|=Kf6y=>OSn&}KJ~SA@NAxtA
z>DbDi*l72D{`q#kMu9RFl(OO}A6@Kp;0B(e(1!V7D6cv|^#?gqh&{SZRolW$7-MHN
z-~xLgGHqKCJ!TZ<dAsvm192n?VD00KrH!6NGJl^~+V3+{=6tQ<5vgeZ&FNsI5Kj+6
zqvS|9Y9~CmhPL~Wp*oDqj)8(($H3CXT7kWnzeZN$A0u0Yp(Cif)*tz5;a3~{1W_Hj
zSh6FZV_@x_zs%VF=4i%|)r-29sI?tP3vQpFIXQClJpUMY<+@w@>p8y$Fk#6eL0I47
z5(rHd<_D6w&}Hq=`Yq*+`qioFW8jL$&&&Rh;kwxX!c{)7Ru<%r9^mui5OEB2fP%b&
z6_q$rg;&J|!<tvw+22U))f}2cu;|4;oS<HOyPHl+L^q}}X7}P9f<4Z?(&Q-DDVDJA
zl@LX{8JzfYcVGdDL#NXv__6vZMxpoey*)3dj)XY_VYVHg3fN_r?3Rv!U?lxLT%ZjK
zZsa`b8$Co>^LF2X_<&9W7{eCgUsUfO1uTNhK;u)0aVKb$2Oa~auw&p_8Q@EYh0Q)d
z(iv+TO0?HXKm9V!r}f!s&DTyDy&1`k-3ye;;S3vnkt6bYw0RNWScDGy!#nRBr8tyv
z-rxHPSEaUdlK)1ZuP#s((mu8S0fp(3M(v0zfwDFjl(p$}Qn<hwbstFH_;UaB1#}`r
z#5FuymYbzxr=X%?nspZA9$?XHuHqf9@-pN(TJ@Xya+DX)gJT{i2pX1)R<m{^XGm+s
z{}@c^|L$N;|I1*udi--RWAul2fSZaWjDUU%mpsTl!L#Ovl#{5X;dHtpn93(C*>n4y
z$r})b%weo!c#OC|`Mh`NA`-2MBO~}L6Tp%DH5)^Y0ZQ`*<PH&RpP)^+R6VJ}vR)(W
zPApI^v(8EH3tR!x>E6^^P5<Oi+nW>KHad`RNu}?D8xx<hbGx!4!%}ni^W}aOx+{Fp
zALcI-xzf<nq0(#*6Ud@%7+=1Ma(ZNWJ5^gj%lFz`;ZI&KaM-eb4IAL2Zh9sN?>Gx1
zZ+GGf$z{J?c`lR7sC-t=m2B7_krsCA^ROSOX7055f~m<;KfKUiT2#54#0UGwXoDm1
z*Jyj4Sr;OFZm!?x!S~nXG*2P1(t(f6dQ=9-#wO>tS&3~&A6dWymiVA+5u^*oJ+#Xe
zx5}5Z%R*HjSqR=fZIae{44hi=W5sY(M@BpEdB1gHqaX@u;8_f41)PvHE=j_n2N#A5
z=hRT8oB0KZ9>%P2Z;LT@mg}^cBk_1$4B-uW`o##_odm~u!w)T2y~8Y?JoAM2lJ(cI
z;~dfEv}Q^lY`pG1!&;18*fy=hEIxBGQC&ZG44ik1I|j^;fkUlasKpEnA9IL0I7s?A
zyqAwDX&jq+kI2fkUKN^bc8JlIY?~X9A!CGS5*X|KQA@<gO?(<&&(XuN(TnW4R%4$a
zN#U620(!K<LS{w#eL7tt+#3|S8>@t-JKz8dta<@_=|rJ`z&w)GgQ_(lRTfJ!R1v&O
zaW_e~GDenxL0Lep<&-bE1hBNT8Rpbh)D8=YV+1~MU5ES}AT(o9hjri-UpIdYumOl)
zr>TFR+AY_gxe$@zQFHxE!$*Ek5vBEEf4RbE2wE&x$lSK)2kVOX_-Tu1_-Mu@X@*Kz
zmTOumbJ+*$F{#jlhi{!9_M6B!69-ZO8LX|qL)>X2%#F7*-kvp@o>>zfAuUhmYt9u=
zImpYx7g<`J4uo=AtjosveH5#|_r|+QXD`2QoL^j+plF-WA=!+OMv$dl9Z(HSQj<Ra
zqh|WkhoI4lI(aK5x<<_?5+%!zsHWRvI<Grm(R)91-DVcqYq5&V1vA)N9!nDj5vqh!
zsB!`RkfgOV%P*5p2Of%>CWJb`nViv|ztqr<X?jGw@(s6ndiAh^dVRcSvI|hcWHifl
z=Wu2Fpt2@RizV(49O}WF>b>12NB0Wlaod?TW5|g7y91B%*U#B8xkZvU@yoxqf`U9a
z;p#HPgS-6xU06VF%4K@8(GCVH+oK8hHoI?i?AB)DgFdDlT;fGTmrI?g;-hq_v5th(
zL30ui%{jfvo`9NLmKNyu^Zi1Wr3@W3VJvZJ&eSg}7Xf`|OoiG&jTUB>)54@U;O5|)
z1=5XW;+T}YEBN+QKBzxVdN#uQCN9m<%KPKggwgBlZ(`rRCG)qFMGEvG;7f7^^=Nx3
znu|@|9TqiH%aji1+(dd7tf8$g#{iwr&3^m3uAJ|<pkeCxE%emK*ufdS!cTZ}!e+=Z
zuvvv{^FO_2ey0BOEb4GW8=HA}rgdud&vH6twfnOgN2l2&_9Nx1Ll0g~wrurCJW_9_
zj?w<~4<+H9zqsq<lji2cs|N)+qM`j9j*qj7VxKnbOM;JP(-wyAh~y!-ZZJeP`O8hy
zcx0$!9bS(`Mm-)F7Yq{n7I*_49uCXRx5-jF8)L)%$m#t<g#Qz3Xb%eQfullhF(-hl
zlLw%H+v<r(MPfF?U1~4UFklyBrmQ@ruXgy~h79VEy);05Q5h#x7j84{ZH7L&ENM<=
zTkZQUsIsaghHo&Ls8x-lm+Tu1li}lg3@GN-V=f`F1y-#Hsu4K5WU0~Qhlc%2Mnc5`
z^R#rz8+_1Fm!43>>2jQ0B5}or<hiWcqOdQhy4&GaESqNPm}#RT%zo5PzP|3ORvTzh
zbW=PxUvv5*_~7Qlh3D+a+W4OwTo^Z@y8q6kts{JqQ*lRf23cy3j~X`Lqtia3S%UV1
z>nsFWF=j8x#_9dnSS34-C&HtdGL|}YN~XwQ1h0pFtJkLiiLjp+tNBd06_*=UI~XC0
z^=t@ETte#<UrB9WUd$}{I`Q>3JzaKZuEnWrjANJ!Du}?KP2rJ>&X;^Wree)3ewOHp
z2EMahc~y}k?HOL^BVH1F+e`p^?Ne#rtiDQ$iQ1Dns;xr!Vt=hB;Y=DRnFOQ>L>&Z1
z$afF-7B8z%m$<>5kZ;4`t<YDOp2%T5^W=ZQ@(IgreTFTd;9ZFzDe~NxDW|8&7M1C=
zUqk<tQlO}Mnaq!P1=-%j3u@MfdVR*x?zOSA8;=^&3<??!s%X;EajX}(&pI}-!yq^Z
zPTdi`%4+v20}V}<o6jhEU>ZOdhPQQHxgn7;QLj9~-j%(3z%hDMjRz8mh}*qRb5xk#
zwgIm%HzsOC1$*t`m!J!qA?9R{;B@GFc}6Q0(!zVs!#d+7p){#a5OF<tL7cZ8mP}{R
zzMwF>)Yu?i@xEefvDzlM3e!fG6vRHH>0hnL>m^|LLmoSIU&;waAXdEELrN#ln=<sv
zY!v8{Mq57ezag&3wQIuL0t=Etp0X;6-_)rrwY%zili~ejWk9zd*jvf{=jbxr>nTR#
z_iXfj<*A-GKa==(%ULDvn6u-l2Ydu(j+Bi9469Q$_3qGju=$VPmG`xVhTy!hm$%Vd
z)A<EyB;RZJjJuwEc3T`+y$$!A^G@TkbFy{6<78C&nEcAsmT;mQPy9+Dt8A)k*sK*f
zp@^Nt-C2dM>g!)W6+kS>VEOVom}~Wo0*<)rE~_1`0x!NBQ+WrHKSvVJJGb#cd;QMf
zHWu5*XolaqS~7iXbe<0k2_d#8gCE%mw82Ovj)60{Y%MomqlGDTA}FKNdl+B)t(|n*
zk~Rc=1vV-$?Mmv3vB#U}n(u=QQpu4to>6#lv)E%mnPl_mrxCETN$jCQM~rilu(NxA
z*+QL7TkIMT)84C3HoN)Ujn`zb#z9gus#I|SZ|rIJsr0Uh$!_DgB7=`8t_n5RL*J8a
zYU4Kik+bSG{6<R*Im_azS%o5n<}b|%RF8a~&Y81&WRJ8X&Xxt34W54{q%tcrr~ds?
zZnQt(b>IK=Oot6ZaA~8Zg!xqwJod1Beq>m#AS!#+?b*of;%8eEB2FAjtWV@;ddWIb
z94@}%SF!VVs`Xwmzhvi|XeSCZZB0t1#Z&&6#U2A;>4E3MTD%ff*#h;9gBqae>6D2%
zVQ}UAu`ttHhP5^RU|j>uCXqPFRr3-Z<hU2M9riFP4M(3&T_27R!Ez;G*>4T3m3?0I
zmW&iR7kd8#B;4xhYOD#&KMHRGql-cPAaKMIFzIyZ2!+*yf&ld7B~#v;mBlf}#Ra{x
zy3O}wW^3pO%);T|s^Q@f5_2vWQpZ?RS%-_rFf+Tct$jIzszWd$rrl#c@gR7P0*3ie
z)|h%7T<E>c2RxAtbhOshYhH7<2bTHEFIu<{uih(PbaP5;s{Ke{nhroN8TKCo7*=a&
zBOW$ecna0@qr7iizn0LYrD8zx{?*U>A_kY{dhhD@8^tH&*xh;9qg(oH<NM1t{#Rl#
zavVBPm;BS3z4?jL8lNgk0+YOX$Qe(sw)(7M-CGIg`~CP#48Pmymk)pW6c@^`k^A+T
zM><{BU7qo)-=1g?sUPUa;k`y&73i9(AC294tB~Ap_UPf$ukohg;F8z}v?owewIO%J
zR?=_`L%Zh9AKyzB26<hrPHx-KOuEl&6FGNLoeWW<Ls}k-)}~w1r*X<$+H<=lw`TS1
zY-ZFAfrtKx``DbYnrk-L>^bd<VaNL=T2~ki7<5nZk48tej0}|iscP$~OH3+^X2!IQ
zzKJwUWa3Ht>MyHsy1kBU5U-ecCk_r9yY`0Z&fwcGWHOJu*%ndO@*(+nsBLc-&vnO_
z4B<-Lc3wJUoy9#uElCS;^F9{NMZCL(6{X&sQo_^*T0$wGu9iehh6^;1Qz-C3W06b*
zR%ld(F>2;C3M<)*yVb_Ugq0W(^>CZze-Nmw!2o3iQstf|0@(Uc6gAv<7WqQ@AUiIb
zV*R4Q9x^#B`7GHp-)oO6rYU?JGYxujCzdbr+3S4W5?s;<oKK~-hDIcAEzFZtRwe4t
zDn@r&Y!{~2TWJY$o;IwkDI%497}XJD?eQ3DWy761$@j^uU3d=ld`ff>?)=e~?as^W
zZo60>+Ss;aw}vmRMi`{OkNsPZcJ0BkRjQnUvk%1!lX<^fQvAsn<9T*xU9lhn6<#h^
zP;oiNN9gU!;eA8+w&OiPQ@8b=ui{e`bu>Niao$Y{cM=In`Rz|e9xd?{zv=G(Na)z0
zfw-9AQu1sv8rT{u1|08xjuDQr$nIplGeL3TYq(RYvl%}oqjitKg>BIvTgZ|#B<Hze
z@HwKzsi6ys$iPg8mZF%ycX+;=Jjy1Y-<m9EYPOJ>_hQ4sLhEVpw+ivfRYN<I(%nT5
z!uIQIqpH)nD0*yxdaUX!Drh$?c-zKHDxcf-qFT_Ps&XK=dsnz$+3W#xz^pLaWNqZ@
zSaVHE&%7v+rtmqWC};=@CNSni)h|&T1F_(O9;+8@bukN#WHB;ai8V1wqWVJUWB973
z$a1=O2D_{X(?T_^V#tqy*L|Rp<B7y2BGGOhWP|`!P;UWs?pbT-Vm*WHp3#1r>X5|p
z_3{L^a2obFfl8Wyw~M)jMb>{>S~Bmw;szC&KpgMP{tF)kEZeksO=`<%yF|g&Ck*o<
zcV*gZ-I2_2_FUX_Q}1&1gO@zmNx_!xR((KZ1+tq?2O4RE+_Ay<BOBEI&w5<qX6&4P
z5PD#wIl?~Ix9I#K#XYvQZD2Hcqg#Akk>d<rydo@0vsM@jS|D+W)0nd7^^nENLAY+G
z6K(c8@@v7}%KQ_~pB+K9Nsn%w0?oP@d7*3wDo;Y(RJlkXF$<nGl`^$!8cR)b_*y(U
z*1;gYL-Gpb;h+1eIL`MrhzmstE!tL2*(${*S{w|bm$_NTo@6{zBO8~THZkpVE;9%W
z0Sso9%D8VfP-gf8h2{cTXS$?3zb}_rzoWGG<|tZw?5tV&`dyl!H&vo($GYQXK}&}5
z>wTYg;IQ0HGfS*8dTe>Py>(2(czpTH1?brOv#p{$B1+-*UwX{MpSB5fbn#!irsc(n
zV~gl$O+YaC-0Fi<p%2Gtbf>n|FIH{8Y6w-4dfKhFQ*cyotxYk(eI-8ewGC;n(S<f`
z*i<3oPLu+&WIF7j#idD`rzRWhS&wE8@MUG_2!_QO)1B(gP&V0hM~g!qyZf4-e1hhs
zWSSCzy+R6)56x|I47LYPuE%ez`Cm_$x;?XVvBs_)M(m?Gi)33#tc@E^725c*eM+61
z6bd+R9qN#!;Cj$zwKMjYIhAiEcB@&wx&jZOIQN3Lk}IxRhwQxvJDTi8S*{C;e!S~`
zxt82@=vU=+{l#!^uH9YxzYIa!?jZy@j}kSkLs9m)YEF{3{Br)>G=-oZM{dXD2$4S`
z<Wow4%c@;4051~w#3`mI+3I76jm()zqilX}qYgDucPWC&Qt=U=?xkN=<Prc)^i*>Q
z%rXi`JB`=#I`4A^Ggy5e7m{6nXxF?q`|f7RH*P=CifrE{qQa)aFvMAGTG+VyAiCHX
zRRVweHvFTd+CHM}%sT%ua8`(lPzUPoy`brTl`(?4<I>y{k$Y)3&GL}e=B$^V&f8c)
zSw*Bl_k$v5PILW>#GWXJvaF%GvYVFKU-~@h<9>XieWIP7>vOG83BAsxx%}xH!XTqt
zx@rm8ljY6oG9)LSwB-4{vT7(?|JJKMxa#b>k*0iUNwJiBg@8S^>ZR6@F>=`r574?3
z586xgDn8Z6d|ysD{k^SAj^{^F(3skcgU$q3T<eQ2QJwdU`GpB_hkJ5MGu9e3pN|0}
zj)?tmyf%6ipKpGnBCT7ew?-*WNugw#E5&!!XxnsTYOG(TzrShAU}$0@XiR+2y?xG9
zvV?8tefjY4$l#oZtw~2thMei86}wLIA8DQ2w8|_cMMZ5Yo{jqj7@WQ~HmZ5mms{5+
zelk<+Av5JD?e|5}>@uUWPfqXk^GbIH$CCM*>V=R$%ssyy1I=&`d4iv$_93Ajuf^@x
zGj-}I+k>=QLM#*FVsqSS8zYHspd6qk2;qWT5i$W+2G18W2g%BYiWP2!M><DN#kv1!
zwbK041R0$R?eO8nI=A@I^p2<vSQOb=MrV>*he;V1o(uHle(RBXsEad%g*;TN8yjXY
zVbVJ%&G*P@xfSq~4y;k~#D3O|ZJy$%zh-IA`dRrww)7OanL2N{Xo2$_U2`q0A#GGu
zJ!Y9Ovf%m5ohIV5Q#fQ*k!um-O;EoBT7OJH3#GE{#$V#^KQT00Ee~9COgGe&2;s1^
z=Q8~cAZ|_!x=SB0&HI^lO{Ks+yGI|WupY1hY7!|#D@d`aX012k5q(YJ;=4qpd+*vS
zC{Iyaa6lBf6tKm<mpU7+n6eqm2-8eh_$FQIsGy0CTjUg2=uEk?x5HQcIrVY9i{`mU
zzGBvpa&Ny$$9i_3)^0Bg$-N0?!kL85NIsWfw+21E@YtPnio%^$0U>rBJ7akd*8Jqt
zj7sW1wbKh(u~JXzUhD)FN8>A~x%fp>!WC*oqs_X_wQj$aLFA-_rCl)SEb7DEYWBKn
zb~>nO@4=Znjk^5wZ&-Q0jIBndN!{>v&8vkr`*9|;$bE`!tB|V>Asc^WW>zn?ndCUt
z?6mdZfph2<_SG@q%Xc8$)b7USIGSCbuSMgrJUp^V%ym8YbyJ)BhqU{?0zp{j65H5@
z3Tfs(2KU+P^L+62xkB58Z`)_gM4S5bM>`6?Ohf&{IX(`Lu0>Y&t1XlU8KgXj=oPEp
z;U3gWk-sUG#t4_>7)jOoXuVGo_hT%uW^sj%wGhRX9~g+Q=l;@UJpOfhIOjC>(Db!O
zy|$_JZKqSk?15#CZSEDOIr(0WjY)4d2&auToh4$`%pRMm2tH=nmz?E#vz2!d>&h&3
z(aEW*{3q-5X1KFiBj)Oa`m8s0_LhLrQS3fy%#gqS@p64QXf+AIrfHqVE2r#)35)fP
zw+5Al@h3a)tB9L{8f-PGcHkJ}8G0t<!{+w$bGRsCHelXQcDc)9=1^8bUfl7q<8ArT
zYh~r@4iq<&t(dy;R7dlPBY2)^5h7vkLrnrn3iy0e&yD%Z90SZN&du0tV_&(0t3_<j
ziDcG)oEJe{_h+1A?eew!dkr!)8})SR@{o^l-iq7w-9yRAoe}zt<e;$)g9jD`G=PiO
zbi_{m3k16(#QNQgo%s1HK`x`L))?c3jyXzieLAqQ!#PJ&(Ai1^I@nGtauz<vYg=H<
zHBi*J-0LG-Y7Qf7b_*BV8aR@jw-U!HahqrwjWJ`EGdEA0ybV(51*An9db$QK`or4^
ztov>4xYFr1P`|)RpqddL<A-Bb1mZNpMbKq>%EL|vGx8#<cN1S&u5w#C{xD$yh(xjN
zA}M|7ux_!lDZIC;?cv7bChZbQycf!!Q8bK$4%1cS7I8f&7(j<lua+lIah_;`LqJ8o
z7ml(oBlx|pu@DN{(|Rk;s5ggmv<(+|ZkEYgt4)dR$GcnM9O0)>HAwDQlW$y9TwbRw
z<op}!JoO#9YGR|(yL_IP$ad={PbRq|;$?j-SlTY_$!oE7r1C?*cG{g5jlaVpR&i^G
zsB-*>bg{LLC+I;}sa*J!N+RVE?w0(I@sYba+Es8D$<=$G`kH5k^s!pg^PWSia^Dkf
z$g66<SxabFKmE=c`y%}|<Q+vRx38S@NR-i{k3FW{9NXe0wD)rO8K02ZnbTi&7Q39=
z$%boLXBFxw#mc*c8|LHLS8zGZyCwJ@7&bUS(wx{<=esRIHATYAmgT{O)O?iEgg&U%
z5u@f`jvWK_PT&$NaYh>MKH~u{6RYf_j{(7)Uubz-ftD`fl{#t6dR+X=yQh_07b=o}
zD4AxuHtwcVfy){np<EAS<4qg6x6da9`_+81Cn_!4Wj<7ZYwjA!Y+O-|v`p>clL?_J
z0doG@Ph_&oU(#t0YRLBD(LM^13#g+Qf4FM%^p@DN`R-3TLXg15*q_E0e)bJm7T{xw
zu4hn1!(M#M?{pZUuy>NOP#H6p4>oVBdx1IAdMM0g*Kea^BR(dlIN<21491FZ(0Kt{
z+GFel4GH8f8b)}&o0Wry4&E&)8}6>M)s^XAYdQDmCE#1tV>Sp`nj*%vTh67OItDBn
zGbfBX=1c1=zUGNk&Oukrk`%dw=XwJ4>$tIj(;@eVW`fQ$XkU1Dq3#+GzO%@9L^Vf9
z`?%`Hrm>`dvv#lpc=;`psGSuwM-0G~eL2gMT&ewMHD%`~<VkL(9Z}YJ5mc%Z*)<g(
zR>nPf@kZe>L}p2LRo~3+P_9(CAn5iF77PAvV}UpQ#vNIc64D<Tbu(>w_{LvJEzG%l
zxsTn4bjm=;skI;N6h^n}`b}nj_ES56Up&v%CRAdfQEc4BFsl^uPOLIc;mpVcTcVb<
zp807TGoJFwP*FRm@%olt7`Nq>MVw+ghu6pynv?Q1o2~Zkn8PxwFSD04Sl(BzyID_-
zv1<lJUBEU=$xQmI;l+(BrY;9GB5Brllfn!y-?ZGqSAOU3ly{db7j0j8`Qwg}%@#AW
zZk(sAe95AD$dr6Q``B*5TStov@01+QjdBO^Z1BQ;?ecKG*qF|y)Ke9hov~}JEl;QS
z-=Bpp-uLp8oJ$Rvz$0+do@f}0a$(oUMkkg?rTNUOuw;w(3MFQ(iX<MWFh6=T7>g~J
zG+`)U4Rc+%tKyYAJqxwIY`eTQBn{JFZFNLdfx?}tN1HigHD^sLT7=i8OP2db!;s>L
z2Tv;;#+MXwq0S9RlFhO%c~z{K?OxxNtvrHyNZ36X7$hONv;LQ&xz!%#cNsULg^jPe
zXZMkO-M(-!h!6it=34YC>Ny1xz^gU5$uW2=uJjCpL1u+CeO|HsXP*-Kn8)l>RmZ>!
zBhnO1S~GTaiq`+Tt!{UD7r*mmi@WM9K9L{zpiR4z&ZgMNcalO{nV&0f(|d+61JIX<
zn~}SFD$!0Byg`rb7b^qo4BH}u6ltXZRU_aFrrqC%6J2XCy>zE9YcXD@ctZST4(m*;
zX&j(m&pJ@x&-zUZAK@cv>ng;n6H1t3eVaO_bV)WGA5N<@uR~VhBZ!SJnXA>l^9jqe
zKc;_(P(xF(y=BKex=W1_&}=r+n~LzxlcDc&wZ3|ag9Fj`((k#w<g67-$j!h6V?V3Q
z=UfG+t^2bh_xud2Zj!}O#y(wCd)zPWCv*P2O)7_-Y*+2n=xlY!`t)ON!Hg%B2e2Pz
z4Bu`=iBIbyiZ1JMwXMg8?-@qQKRYM&j`O({EuGM2;%A1;tan#d&PKaiWIh+x9<H){
zGZNz#mw*?Oohq1jQsp1edw8irn!UTDswHCEX*%5RN{OF%wJPSh;yT+`hx6wkKy>AH
z=mAHXX#R_YqNJMpDRtW!)U^ve3CmwwSq*Qn-niyVG3F)ia}O8cNG_ZUcgh9C4bx$7
zjCO<r%o*THvncv$BaeVvp$6P#+uYP4u&zqlblR3)67A45dLQ$*xG`g4x~Wf}47e?~
z)`yiUBRv}nRr<?ll#OvBBV!>p!W$A*iOMB5567C*L2K?$B4e8wodG4DyU9dL*Sr!M
z&B<|gt-337Euw;{SK98;$VL^c?Qnz4<9qJixOFvioPCx}tP)cm^uf)ajW0TSbf0)i
z7XCd6E6vsa<ny}#h8pCL5F%`WB?Ofy7&DNc5uOZ_;6g1Y=~w!=_DgcwHGDE&j=wc^
zy&`u(=2QvEShEc5rXnkhtZ)s^IkQ~4dD^5gbGml?%h}p{r(a!4=a80}840tUqQvS=
zmH0Y4rrYW^3bjOWggCSsYBG?^EL{WK)1Wm%vz*+skg7qKuvJaRVzq2_^aGQaN{*3U
zuY%86)=sJyKjw}b@<f!ec@mK#0wf@k@mUt{4f5CHCZw73C=4?m-<~U!Z1t#bHDep9
zIhSWs?N^jDX>MZFK`n*(nzu23iV-p`0ogW7Lkn}*7zNfI#Rq(Bc6B@(Bg;Irm4~D}
z;BLsz#pP(#BpLS>lnN;s-cbiGm84WoeVF^vCig@jnDc2)Sg_!i_gY$p$%I<0c9S31
zh@*@5M^jt%^$VhE*mind)oc?EKgLZOygDW=v_{o3W6a2oe$qsgUR}b8M3*r(h9xzi
zzb0+>N!;eQZ*}>n3$PNs9@gV?Y9p>ldH8a#V3KH5ZH#F02nh-++-!8=>-h9C*QKJ@
zRh6Qh#A?Q}D^xo@TOXom`!psRcdb)MtLDrpj681cex%Xu-rHk|_x9#@U=)2K0==}|
z=E*f_w~*p&QjcXWbb7yX>y3kz{WotqMY6kOfPR*L=km<#psPfnBu)6rR3Dyymga_x
zW1frmc$l{Mk<a6pWG>I;Rxi@v-g?F|E$LPm-Nn8gs!n@NU8@&aSsB5xlnoVMWoPvL
z>4FKOoN&nx$H0s@DiH7$#+a+u_4{!)+Pxp`vU_s*f(6Hto<DCSjjMF3FlIQ(^+MLd
z=N#h+mB(21#~(U(S<~r6aGjo(bHbEH-*NXnT)n>+v=q{WQJCJcBYIq0e9glVf7VPG
zwk@=hL6|hh^AYU@&ZIFZ&vJ^X!;$abU6{E3ZMYkNv?~a#t^DQ9T|5Tp{dx}C%4U6y
zZ-*HcMaqwN6fkkZE^&4Oes9t#%V9K*bqr?UdQycjbue<H`_S9f(tS#bntATyolU$%
zD(Jma<WwdQE&!f%Ez@kq9;>bNE9LPq<0|o;v>gTvYCMZk`Ci#6hu5r!jZCvXF1fGu
zUWtz3xy}H<`u*iLq4@g)KF+hyOrzxlxBj0(mwy_nHO)mL$~yh})3%6vQL78uN5nd0
z(lfAdBljTu89Vg*osaKxNUv^34+?j;MAq!*qiFC%LpxCnHi>!FU9qipk7J7k?JND2
zS^=-%s2X3Z85+6at*vhFtg2TnAE^K(sH|)*0fxU?j0>>$l}riWd)GI_a=l?=f?^I7
z729ddc+#PoYqMS21_1`ep#mM>K14>ukrlOS&!C=G7Y6!R<k-2h)h72D$&0J9NiBSh
zo(9*HKg@**edb%p(PQAd0&+(hjPSs82TF(3s9Izwi75+BBr&TJf52$V9O&nvnx*W_
zcep-*>YSq@8D9J$7@woGN_V)oTb6@c7(mm+c%0EKO(bj(8BC17EJ~Bu;NbG;0&WiA
z>0L2i`-Iae8e0N~YEQ$*jo<5Eyg|krDQ*nI^n1aMfHK%2E^Q91R3a5z-zo~J5)QSo
zg_PLT&u2nv%-`GTT*0)uU*3)QBA5X<M`Z!_KEl}6LVx@<r}w6#U9KGEZKt9|h#49d
z)3Urqz)HgYF}_}4&z0#yYox96jhlHyP5CV&uTYpU$oqmO?>~b}uRP8?pagz;x2Lf=
z!nNM5m~r}Yk)Mw-O?~ps01Z<Roo4F5OJS~?!Lfpgw?_)CLmUP?Up$Q>roNlz1!#vL
zD8m|3FKS(6ANj0OVOZ0ym=mKSnr8ds(afRVZf)Iq-J{T?qT~m&{t8>GjeU4(e~-HU
z^<5kFL*CJBB?k1*ZWS;4+_hcOqx8wr@$YTn)jHclGYFfP^_>C97FmEXvLr4dCh6_0
zK!Qk=2!F-RWar4zR8HJ6;F;$Ud!rww^h~0<QjI$7vARjJ6-zpmd1(SZj7|8+PnzIw
z*NNc7>r~;q9et_U9!S4i?+fwNU>YM|qss@p5CMl*%vQP14(yD=k&X<e6Fe7&(IKYa
zNS!LCYVF$U&Z8(jRE`1T$VmsTA!YJ6<w2d05o|iG9ooI+4dI;Xdx?WbZYtl>*?ELN
zyZI{a6mlQEtDi@efb)wNYROTNvjPk=eO6wrwGliUwf-hEj$1R0y94s1V?cJl&^Dc@
zroPRbR1kk}wtXaPn77=WK7jHHi%&Xj)m}OULM~VP`F^PExCHbVfH7@Z0!;2|MQo{M
z7I#h3t18trpQe0%O-(3;Y}RACj8I3^3FbKJdc5Abqr^OKj~GxsKtSI&7_VfENeI5x
zl*&@vXHjVvSf=~#j%il0`Z8{K@^7sSB-_;vrI_Qi6+&pC)~*mNE9kHOfY&ZMh=_*Y
z_g5(HLFWW46jj8pHs29?jQyx#hJ0Pcu{bSRl!23OPKAB8%jZ=sElG*J7sJyiuzUa-
zqJ7*k3l$%5d+aGl_1fxywVQ=+h^bd!c16EbSRGvVWA`u;rfwF)*><@Smr%2R{n_$X
zJgr~___?SbHS19OP;l4S-fwF{<{rl<S(C^kfodElV=CQHnI~S8-5P767(z82#iQ03
za+bMG3-Fd4iGYg=C1cxXX+$UIEcJ{tFNAOa;=^@UkAdfQtwvYV#xyg)Rrf<j857@>
zLDhhi(RT2`kHECI#McQ9725lqU3oce*b2mqO3JDX#kx_L%q8FQ6T}&-*VPQLHyGWP
z*2#0Y9Qi8M`p%c}&km2B5`pcvXcUvpbxFE4Q{C_5Fo_%XDL%C|8{IOku71?mw)X|N
z&)Ne%h6SCjZ@cGBmA!>GUfc6H^wjY|ORzuf`PWcrJxd0~W5AKn^0SefU3$IeP_NHN
z5>w)l(>yTkaj51!spUZJr2hV@Pva>lU{$W3PA80|EyD_5sUN(m&-NoV&Q3m)hg<Mw
z3rip{$I>RCk4Cmc+(&U-gN48~`3Jr+Sgkt)Nk#3vwSbE`6I^rl<D_37o+{Ve)MoV&
zaZlF5RR#w*L)9WnK}iFb$RX_MyQtQKe&bbJOJPp@+lx?M2hjQqI@Yk>vr#O#+RT2Q
zL03*)S(rzeN!=Ppz|&<gk`qmaH9w+CEF=&ialhio$fZL;x1-4r3PTSDZ<H`k>kO1V
z@K=VjJr~P0_!@n_BUNTKdDb8C94G5LH=f35niI-?N9s!NtHVc+KGr{(W94*89L9}!
z&QYoD1fcH>CO9SZ98xkPn=53%z+P;Me0!=~aI2J*Tu{{qmDvrRc#7m_kb5tc_9S<Y
z{^I6VbG#wuPEzi~chgmV&aTpY>i0in$5tMzLI-t7P&kt*qGKR^3pM=)^tG7dOzM7}
z?x6M;v_b0!-CyVUKhLB7<Eg)-3*8GdW-KCOj|QfvnUo%+EvWL<Eixy1)6C{j1NDVY
z2{eGbLGI8ia;c)zf)N5E_ezFb*3T^zd8%C8J_RlN<iV>D;cGS9Nfn{lm{=Q_=V$qC
zPxl&|73=*>h$4&&4AY(B#$=UBvrQ%LMPL8HeSc;2u6QIxq4iNBYMyD9?qHLS@C=Mt
zCGeG`>0q)8EgvOq@Rr2OjL38{ou%upy9p|@vU8gUXMTV)R3B*GxeZxMBf@hQdfX7Q
zwsWJgc3>0c6aVPYwzk7NsP8^Y2lKFM8tJggTM4myyu5IU@!{7+))|<xA_rZIV<>`l
z*blbK=9ZSnv+sWDd8Fv+@RWvqrfp8ZSMpE>^(F58F);EIG+{7Tp~9wV@%n|hgZ<n6
zI|-G=))p-v&(r<#q;&z#NFs=N=&-E{`LnyKcwl58^&A!vfi{-e*!?(E`b>4J?~Qt=
zh0F{%g(oPFl=d*#e9T>z)^xW1c3bU(DtB%pYhhfCqbpNFyLacupiyeMOkK6_OX+WU
zw?HR2677VeA_S4wZ+=U|Ymv?I`qwWZVMjl~(1MV3x|ABNkA`+>tZBLf+1vTNgLkdx
z8`=H8%fTMot!ezFNzKx6f^l-nSmC2Uhx#2m9kTpULN|r0rQ>5CwcDL+Rp!N3tgP)*
zU|-RRV36|LH}x3M8dsbSC9q~A4_K2xK}!buA9T#XtL*MMJ%OuzyC0HCwRhbLDswmp
z`9|oe-@1idZ!=#g+dwfOxP)5-*x4Tr8g;G}OFVsUy#K(0^BUlpfmcHXbo-p<N~})&
z?lWy`<MZy2fchM8v}vS`v#~)f8EE6Fk$5ctp<qDh<yq=)J_?nX-g$ezBBdUAS#)bI
zUoasJ(_>H^fh?~FwGuDGsOTSSbFkLrjdakxh|U5z;_W>oM&wVMpJpc*;oF3ox%Y>Q
zv6sN=qwe_P=8E9h-C`+AQsU414n3dRHL|dDXlg%&k$Z#V2HsMk5ZXpk{7h`}yjL$-
zw~=rls;us;D%#ooM{td|1>)PB4SWtUv^tIH5=Hfb{stU5688bvsSh?I)&{IA*q)e|
zEvCu7u8Mky&=Cz!)0jt`^RbR?BwVQOy>-nvC7ORbqHVgSYPoc$3-EMo$ezaD@54s)
zcB8NZ=8AX~44aQ)Uw-L+y`AuRl#EQ6pP#O1c$5)PF@q#8d<GZg3atoQ<B8%;v=~ik
zmub`T>A+HU9%|3s$+=f=HRei=o(^B1EVbHAr_m09k;gX3QL`o5(ReOQkZZ6=S)5H?
z<n6C1_gAPuZ#L?UxcIWSEE<b!zSN#47vG0vyL;>R-~O*cZ9l>dX9Wr=@S^q)zsh7*
zR#XJv|4L!z7U{HG$N)N4!?2Ec+_L%pG6=~BFh$~BjUkvKA!mMcfFfL~3yJ@+>2r2p
z7bui`8tuPC5rqW9UmqQ%q2{wu<Ke%uBR&AzNLD;&FI@Y>wB3lie&3`zvqsBm$)!pT
z`Zf8HZ)WTR=ZE39vTdA8@}%|Esft}8NyMSR-X_EHV?23Tus)_!;oCvjQKDX*{2(8D
z<#<JM=oX3tv_k4(*ISdvGNt+?KZvQE)rCwb$#x)~`OC^J!=dR$xQw<jhX{|Y3$>k}
z++O%Mknn~d@j*x6*FpRFTfgp97NRBF@o;bo`?>eiqiwR1fGt1~*o0ftw$WLr>6|}O
zV+v|97vG>!bQLWh`3uYqLN5#w>wXgX8FM$<AJX3KJwRabF(0Y1nq%yjWH)A+vF6h1
z%^>|c$7#?@G989wk}M>`1@&kT2<6R(+T9ap?F;Fim1*RPOUS^%v~Zu_f|HC*L6?)`
zdlRyVjMBSBPq}VCR#K?7hPL2EXYHm*aM7;zvgcwvl-oXv#bnY4^oH)haMtzAsGdkL
z{?;$;mx2WS^PcDay62DGyRg$!D}KT#hHo#!hO3NIKIA<7arSBW&WsM3(wuha*kYth
zuFJZ{R5#!K*Vn1Z8)6`w9lHe#{)kqb{4v1uQ5lTccLbldGWY+IW3mvJP#vd04?>|g
z>WD&Mz8WC$Z6(9M0Oj|05!BKL;AiI^7;6~w<`{4gI|d{Rm5$y?vaicu>tp-6H9ML*
ztJub>!TeLzgbmp8rBcO(<c%4x#0MKx4H#}&9^SIQl(R5X!5v_>?Kqbf=+?tgG-cg)
z{q?!w5$c?gb6&k9pL;^gX?BSXHo@esAB;clSZn&DnDS{z@Km!N3$fQq`-K@usm?|A
z`RRJO8UbB{aCJ<x#vt#fI$s8=T=oY=W$9njZZPLroAKdXQF%)C?@Vlja%In-BdJt{
zI|r1yfe&yF7?)krT(1tM0cmV0&@~V)V1<$<m&UH{yDbrn)dCf1{GB?u-ucV-P~zO%
zKs&>laE-nriY{o~SQ=%U<RidE&K}FlEi=co!Nrc{^><Y;F!pe>7cKnCKvG+&IwrSW
zszVm$*EhW-Z&SZJgWQoSyoo#A)06~i9$Fyt^>zU|xaoJxchaag9fV59Wq40Fhn#<^
zSLKwd*yTyrn4;foq#fe;5G!tUp~PtY#YAhZ`vzBgG8hIF)0gkVIZLD9xRZj^s4jbW
ziAVElo9fN4L!BvP&2I7i6FnKr(aj8J+@;<J>WFD;0CS*#mB4|1QKTG<0Er@;FPC7&
zLuX@U`s_=?nn~e(obMv4mWNc|rqdQrjZvvFQ(0RCF|ruU>3l%=-~KDE=zk93{{Xj4
zH}}Xu8!xjx4xiL^ByHrjCnHf`ToPzPq7`v-1ds2i88tAt6%;D}dU{~EKGoBhZ+{v7
z#bulQE;gDA47VTu51AYJ_=gxo$(*maW`K&Ck)}<`JVQsxvvg`5QnDbtU8au=rpbfX
z+$Pr0U#_~5Yv<eZV*IoU)8aHH9shV*tl1*q%Q2u1LxamzJ{ZR_(8ErLr+}eN)1F<<
zz?~!ckrN&gX{r@(>|_m}x$=Nxr+tbM(t)c-Z`97(r5Lx%J$ft^=3aMj(bKKthXuUQ
zq8*$Jxa`W!*sxP?KCY0o=6^1F+4eb-GI{`9ZB@)6qe`_o)H69*7w_3#*rqO8I~;e4
z`ZC<!L>EHfz*q$qxU8FQ+;RVGqyIJ7<C31L$srrCT5}C6-dumGl&XhfN%+ZFc6O>(
zbr)@m(94N(j~TX3+$~H_3xOV6>Q(TO^TSvknC;rlGXFG^51M?GQ9tiKP`}!MTCz8W
zQTYjZm^b;6l=VxhUmjlJfAEmLvGU&Q=x%EWg5SpwQy&JWa?V_SVk$Wp)Ap4oz`Chi
zTegrmoh}anYQ!DFpqr-feSL~}yE$`>XpZq}D(9Px?(|RU4p*ADHXk%BB6c8Kao&q-
z1K=``>)bKmMz^p7+2LgTFJ>Fsz45&utU`XC)M}1Rc+vUv3osr?)aLDJOkW)zsLMKl
zg3Sl{D<A?iB{+s6m)JqU1}ZGAx24TXg+n&hFP7UQuj|E2UAcl#<c3Y9Q%;xc<6nWw
zqM7b5N%LU|`pxGa##;qT``LX~Gi>$yMra7Nwf@7K9xLMC-3vuvrRJfh?AhGjJZ<=j
zK<!)tnJ>fV7HDml6ei%n8LhIA1FtxU_jR^HWI5VX8F8N{hX5OAljqYkfCF|_BsTI3
zYK4NA;6DVeX}#Q=w1W<;qS|s@*+1tZI)1EeQHF0!CeOn(I&fJtpM{BVshna>v!3Xf
z(T73^X(Dx&888KC4+Y@a`Xo9ekf+;GKKq&sCgk4>y1v!QS#gYf(jkM+MFp~{MoC&r
zQXP(exex^7A*Y-PkDY)S{VbfN3$%xG&w1|1t1l#yw>*GXPHqF*H{^TC+_7{sdl6_l
zD5A;=<ty1#qgj0a^NqQHUZ_c0Qz7&_ZoB1-k?&Dg3w^W0LmE=C8#AI`5T%e^-hdij
ztC@Pb>?jL~fh#c*NekRgf}TqxPO02D)^uD#i*#aZcSi0t$%&*%ZvIjZNSpqcKPc7F
zNq9-neB^s;I|@`*^Mp^G!x3X(v{kiopUzwOh*wx$w{PFig^u7!W~tH`apKy;j@*&5
z8@Ce-8plLhoYJyfUj4}<cQ^>tn6jakgfj@XzU)+eVV)R+mTzk})OiZj!PTECxGv*;
zj$G2~1t)IPGobfa6@NAr^vAu`2dAn=7jsangkhd}C=&urK}I3zLxEo5CJHp&0h0?7
zf9BdT09x<!kxc|xzeC+n_L7lhTw8ygeOabc9o@}1V74q5!m2m;5%}6nOy9`#6l_iS
z@7BzJwFWZczcu&otwHh<?Zds?_nsIU3q|$_uXQrKC`Y+Fh(<lSqy6vK0@gN(%+c?D
zri~iuMFb~BiLaF}Gvi&ld&O_sBG`Iey#p%;ceJGTEKT2OCf$zq-{~ZBQe@L<=B(kT
z7R_`zA9(c|z{d$d({p+uhG*)SFnd`ZBMAqz39c^RzYUDGZ8!}qa7#d*9A5u4xJGEt
zH5fM?i=haby$~(4ycHdJsV)UwOQo8U)4yXX*LKG=|3cY^t1Vs(>0l!+IuOHy_<&41
zGxNQII1AK|#m+;$YRw7-r%DbTk|cQnEx93~NA~y1Dx#hTkvE+`0%mUS{5gbwBys)k
z`UN{4JzfU{|JW_c+1l~(S@FvvfXo$jE#eD*B+8!}<P0B;0*Z;3{V86r;jZ`{qebVf
zU0fc^2@5+oU%vOi@xJ9{3rBllk9&`WMK6m818}6r<9il%mM&-STUyyTDDZB6uID{#
z^FV=DUs6j%>#?$>wT+tB6U$p(H*Q;a*;&Xw;6);6DB&J*9`=vzEnV)N^{{{B;4J5%
zaQ=_l<-qc<uZ7Pe;7=Yrl+(Sc@)reorf~kRdvSMnzw9o4+3|^$u&Au8tgwifu$Y(-
zNFn6x>ELqDL&(9I`>zVFS~^=iv3cxb<LGeqSB3ZPJG#0koOgA#c_8=j-b2az4<1Mg
z-M=UPKuA>d!9AgS55z@<9*B!Skd_pc5ql_l|NP%KX#e;h&HtxRfbD@@l2d+Sc@Nx#
z>$aogBgB7epDnoXzhCyxdMvNrbFoDH+P*?aL|RBp^!BffxPEPE@h=zsNdp)D)wzG^
zEaJ~^K>WbcKhOrDKl^{+IBDd!Kt6%%1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg;J1iR
zxa$P2-$LNGh)=ld1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg;J1iRxa$P2-$LNGh)=ld
z1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg;J1iRxa$P2
z-$LNGh)=ld1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg;J1iRxa$P2-$LNGh)=ld1g_sg
z;J1iRxa<EoT>s42uyg>^G~B^_j6dE~2_+)>^$$FV!G9#=zux&sLP<tON={8lO-)5f
zMMXo)aEgYOo|cO06!R(i(~L|^Ow@E|SeO}E7#Nut|9Dd+6ugF*go1>Gf{})bhVi$L
zKi*UcF@sn`A?HutR0)**KmVr6qg(Gn`GEh2KTvRcgs}huB@<?KPYb&n{M^U%9WLYM
zV4=&GU4tKeLiSnDuWogo(tS_~W+y_i;ddjwp3cKC2ldZjI|4r7J}!-}U=rU&{jc>H
zqxzq6j#Q}cZ|shNtdSwi=5sj3tndrA44WyoKF6~0-SDsWYiDgt_*Nd1X#huH0)6lh
z{#Q1h@hlmEDi8HjEDGmq-Uw#j)tyDnRJVis$O~*`5Lm6|$c|2%pGM6Tn`5%TZ3Xmk
z&BwsiffjIA0l@@3A9UB40Mo~SNqmkkV7SXg;H%xfBGJ1jV&u{t9GH~%Y!ybhUidW)
zXNd|&?r6ca!LK?{O|k#6;&i$p)W5e5W|jW?9oF-M>5K6MVeox@l2~a1)desKdD~u9
ztGZvfK(Nq$zVvg2GvlZ0S*9!;OlNl_AV&ziJa#C!rH5$AOrRfK8E|7*h`XjD6sz~}
zw$n=v0THq#?cr*<E$vZWf>r`L>d4<7wPR3d48FJuUE_r9M1#9mn`#IlTg`;~C8(Ay
zwsoftmMxytRVsWmZ$#3=#j)I)zM4%3KO$@I#;_#Lw%t2V$_c(M)bkivmp|0?xV5K)
zF^vkro93*tMFjr%UL2|LKRA2ycqses4}63q%VdvYDqAH@_9cuZNzzm*BIYjHk|fDK
zBZcfmD9R{FvP^}PZ7{Zy>}xS*RMyFi7#Fkj`%L$JKhOO<&-e9vy?(zx^vd<R%zUoT
zbw203&pGdNj_l@wdqyWlcG$XaZZHMQUrqd<?Th1zfZ|8BDGGrFSLY^#vCrngzu@?A
zjc#V*>;sHvag<~O64o&K7tFCH<%96vl0Ac}!GGkva(Qk3ehS9Xm;*g4a}8fYJ`=9N
zEn!a$q-I7<pJr7_IPb0~x&3ZCzjk!Mtj!?tA$+9G@pZSEX#}c2NaOi@iDppE8Lzhw
z-aPeI5qM>m!Me+`<aT4kOhV}fZElM6m6U6mUS|h%6LVZN%|5KEWQRIy%bc<R-F){}
z@J*urM<_v40eCS4DvK?vn&E6Yr(du|4=iZjL(*WML;U;?NuYwEk$=lr9(=lsLQW|$
zQwx!^WVmICH7i_y<)cWebxbJM&QFS>oQXnNVk>)wKBCHrG%<Qt18N;xghG}GnX~E%
z8bcncdQ;c8fIMOJ$K7M=N}e*f_F)LNUR7i2+OB$eaA1;fljcfQ)`9iHP#gsxui!H4
zCO5PvXinfx^N_5L@TPsU+8R&5j6fV1Wx6w%gdcHiJ3TJV@Jys8TOEH};nI?2UGXM!
zQ_>;WgT2Z|6HK;mJMn+yogYYfWrQq)H$l?d4{?G{z7-UCwegzM69ZY<)ZOdFN96el
zJL=alvKq--BTQc<tTc~H4J>W3#eA?`ped<%wq6ld^yXi2VS*u4(Qy$*oEPk%KnhxT
zx_)P0<(BY+bv{AGF5ZuKK3&I`Lbb}Z@o%k<g5oE0;IUZ2p$NwpRsm*@@<(k$17xy`
zkF?)Z+2(l+-Je>DH3B;zPyG6QnZSZ|f<dd2M8{t+pD`s?Gp4+&+0?+kGLy-jvwoK#
z65<%x-XacDs^DA1vCRk*ah#3hO(?pnJ18#CsGC4R8f}f_+gRNm6P>~k|F%t-*_D71
z3)O*`?B=q0X<3cyhvZFftT}$QVQVk6kk{14)xcL@0?l0SvJ9}DL>XOtDjvRo#3Dix
zdV9&vm6<+MeP0h8IK!usX8gx7p{4B@c*sxgMlg7fLQd8rie5C^!f0Muv;LCl@ZR^F
zXOB+4jH;b$^g$bW{u#`bp`XWD#{*agBWw}Nh+3c@o<*Tf|BoKZ|DUtQegrDe!5$}I
zxAoF06?MRgzfCCFn=eTUSpP^_B_V9zwyV3R*xJNa#F`p!1YP3=BE=l>g8ctM+#}BY
zf<5t};@GlamL86z@gKkQt(E>C=j8uT@!u>snb>{s)o1m*jRdPWyOLBd9x_E4OLDAN
zr{@y#Mh|mO*yFqz%KAD{hvv)?VD{<jUof_`24#rmF$uK72FS*maqv;m8K1O^ukA`l
zKU)jOt0wHoYYW&uR()-9bA!o}(CkJwnBNx-`h@g_6mpw82%NpI2&37soln51tbhFc
zzH0!;LSKjrxDCVETmKw1s!Yn~YP+9ZRuCYsX&a|=MSygv+f)2mQkuA>>NU_;L;%Q7
z`u!o?Jf8tKDJ2T!4yG}K!42&Fy?rMbX7AkdhIOM=-x433w`|LMzi<}K*7IuYTHBS&
zJG%EUlbGGOMz7Z>PcnQB=MQYulc$811Q_=oky30Xj_Wx>@8XI+0W$-u^0~d_jS&_v
zoM)=Nno;6p%-EqFvEyQv`k|Ybj`7W5I%UEN=ZnGWROw*cAQQKy3uLYk)9FY9twYom
z85&&D3Vuy@XsMKU&Hnc_<e%5Ng%*b9vw()~pto@w^oeVG97~7NxbKOJmq5F8@MJz<
zT`ge)Fsvo6(HScevd~7Z(7#(0;@@Q4`tH20(-YrB5t|Htp@^g#Lw7NDxJDH$0?MM0
z8#Kc@n%5MWF~Rz87TW}u)YLC5c6$kUJtw?n9NfwOlf@OWL``muFvQKG5In=+Oc?ct
zG=<nXxH#PWpO?<$@$1cC$~|AX15r*T!z(op&+gwM;(B?|=ZB|Xk%BPa9<+aHXenq8
zI%CIGD4&@A1<QUw!L#M9xw?4z09i<g-A@(;ukr(uLHJ&s09&(}TxmeWE9pZclaV+Q
zS7<2ck<^L7y_ZXtMfS_9BvAG5WO)2xG`HO4<~tQ>XJ6g3@MDjE>DP+ds_O~fYA4E)
z#5djvQ{dkH1@n*r<F7A5UcX>}h@d&r8gvn6ArOZ<PzHVt?h0DC^?{>>qFb|pl`w+R
zxugZKlW9Z?jh{cc8;EW5lT>6R7W`qxnqW4JYU0PJYCwrC?<_HKpmGrAb(tu=ZNzG)
zM_H!k>V-0NGFy7GWfV!1r@I`WgO)v<qeE@g18-htIXHQ1ixi#MzGYpD<5=8m_|^z8
z)<H14jjdaMI~=Ud3eQ?qMbHmoR*n1uxeZdd>Go-UJFajRCE0};1buq}rBbmuK@+AM
z{dU+nRf>fv`$~OqJ#?%yCB$q@C;;EziC{i}&{Qxb&c4rVJ9K@GJ8L1WPoI@2Z=cG8
zDcMH==@HCDFp{}S;0dKbOUb2^8LMYlV47}w1Zd9il7r_aOY?D5FJ>3y#uuI?lfSfi
zfq@m7KHvX%p0M6lWl3f#+kmD=$2S`nl;u2QThVFDoPN+Veu9{sd(adnKX(e{D~|I_
zjnC)i$>G-a3{4>BL4Qbf1bygV(q4?|MAPisX#Xkf7#c9#>f0Ir7WS$6Cp9=ve5^Y+
zPZke^-F6b4tRw&hKDTzKrpoy!2!4IFS|rFBJuv^S)m*(GkoX$U&cTq7EZ7<FN*`k~
zi1afHt42up8rWNaZ1OJvxQB!;5^oZh987e6!EWv(wx&WCyZ-q*F?)0;|5_j&(@NlD
zAM96s2^yX(C1aU8*+bDyG}WN9lPdhZ_4|OT>ITME^c$rMP2=sO!%zo`eh{^4WRDwS
zt;2A(C`O{eW<LgEc7;C0i37@}2W^hn1JsEO>g!A`=pb_5V~CsOG(@w<YT*9&B24-?
zm{9(YAKqOT0nDAL)#Uvxft!VKz)d9K76TO)I8i`3_uTCxPE_I+uZ_$8g1yon`USHi
z6yfOy(W^$u{}QL!E@;mRJI5;y%s58LaTC&rGILBkSH!ey{xdkaEI3cO<q~Cg!U(50
z8Mv=sdEjLj+w}`}Fk$h<GI|8VJ!(ZM<iyQ)ajk)<>~{Qligl7FKXyF%nc^nvadr>=
z_cdKU)+!4u@qIZPbOL!PSjbJ3nUg2%<fMZK8a0#04X^71(~J|?;6MNXbCIz?0uGAE
z!M+GRD#zXOrJt;k^LP`DV)^Zhq`4^=lQxuaWauZ@Lor(hj+@{ZPo#Sxp`p1dwxk0U
z9*+g%UPi}O;+H#UVT+2F54q=Z-8EjUdIzL;Ihcd~J#5*VT>B~#nTbdR-)f85f@@T*
zSAu-01~kD^Cn(?Q)lkXf9+gZ(Bt`NG@%~Li6EA_G5gbpP^oelZejqtAs#s$P*~V3d
zf?m8Sq$FQvS@bLDNW6Rb;K|iOd3nXR08kEb<uMa094WLYaAS~k;MM%|S3(PXB$fFP
zdR2z)#=~_vR#e1o|4WxEi@gi0ayes)@(q7jm}+6VWxap9Ywk=h$RQuJ*V{yxH&cSH
ze_{?D0PX*8>q0#}gW47X;^NjglniGVcL1~KN0dU%^M!&}nT*rB$H&=){eWBa!-*2-
z`G69965~9G^2EouZ6DZMsfng6#1RNTo@#dmnBKays5NWb=3L6!4PMrp2p!(b!gCX3
zpa-lY*j~_Pr^0_!gensg*Nl`nGvYiKe2nD3{_&0-JKD`*ypgXf_(m*@P9{CltRRbe
zXBvy=_R51dCm|_k_`YEQlYyb1CM3I=Lg6g)>1zMj2uz9hX|X458ZN`GwL8zYPo(k9
zwL}8>7RZ9YaOd0Pa%N>DHTf#btuD?vZRZs6{s)Rlh2i_DBEkzWwZfqRBdNEUz;>XB
zAux3bs9oy)nv#yEJ_V$iPV=u8GvZR%Rt%w&u6E7U1I!xitJ^Ux>`sjs`G)tjPUOwn
zP%1L6I{%`Z{2&2z2hZ2qk|Uh0zB}OV-OmYJ;HOg3xnkf{X#;C3;tpIU6y;w1zb>2y
z7hv3wS|3JE8&0AEDv3BwrMY9u6VUpGdLmUBGVj2ky2@_s2jb#Ylo)Cr<%wI|N$BZ<
zG#ncdFffT;@bN|LW_oOD9_D>%o5)!oW}?*V`(H9tZH{UzdfE4vRYY2jueDO`>^g!a
zNhW(v_1tLx!v+kUUOUJsCVm~os(~}J0HimYy^fQK`uf#O0r%H2Eh@qGBBa?C1!F$d
z_-42S#>w^I`RwsX%Y(Mk%K}oprQ8p|C%TIGdsV<9pC)D#M~k^fZKz(HxCPXb4`Jp6
z?@}Q+>{QI3m-67`g%LE@o<PasL;*dvbd2zU%u^;0v*LhU$#Ij@h$o32C~!n#F-%xF
z*g8w125O?bmfM?)0D>fdS<^oZgVrVN%!3nom<_Xd6<|e96mX||UJdnwc0JDURsCNu
zaquK4j`Z>(ku8y$I_l!K(#^Z&?w_|HRt*q;-2qxjb+IKJxJPqZP)s#f+)Pk1wtt9P
z^*`6T`K)<E;Q#$21a6WgfIn;^Gu51b!DfP%ZGhBy{052O=m3y-7{JI=U9^9r$a)vh
zmedC$h3&u^zhyYal$Km3OjY<Aq;R!oUfouIyp;~#&K^c#RD=OT&d$}Kc}+E?uCOHf
zR24DC!<=MjXu4Xa&Xu>BAakTpKqI_C(g`03Pz1RZv&P2*Cwxyq6TulA<tJVqH7y9R
z(fV}WgiZJW8uCEi#4R0RYXS8*Ol&Fz;Hezlgon>&R%hnWS)?}x%-6!_-bOd+g$!TY
zc4LsZ6ZPk(@Pkhg;(ZEmL5vt#+$cAo&KrDCP&JJ6q7$cwt2AIg#5EIH@NwL9ALbN}
zG-U=fbhiiz1&OJHi7S{*AwOH?h?{D?N}-$+PCx~mu1Q-Ain(%QEO9IRs5k$b_Mb`|
z`!6Lv4NfMScQSYW&&ga8NSGpefR~KtiAV)_spsqM!81kU8qI4%S$o)Lduuf*en^{|
z*YEly8DELXBP-=E8%W}2&M*jgW$)<=B$OD@+g^#(G^&_#(_KGay37CEhIsjvx1WR}
z_%NQpzHScT<V0Bff}LB%Eu9RSA`5awz<$wBE{J`JKtp)b!Nk&;ETMx5iUPMO-WgWW
zRyRLkmP{u3Lj98w@|CHOYHGYDXw<l`>djz<>Cv&E2VO({?{{Y0e+(;f+lN1DBQJ0V
zehDo4(@&P(G>VBx{B1)L-V*xZ(M0)W9JD+5b{Tea1p3XJo(fa#FLPSxJpQfEPW=%j
z+47deF*LalZAgH2BG^(Z4Vc$MO{T~eGui&-#G22^_Itjja1UG?Zf`T$Ii<l3kHX@7
z!V1O{pSxg&&)Ry0`)$jVr<^Bj;lE=s59X1Nr1Q*2Dfhq3hiBDW;@#c@Ua)B4ubX_E
z&4eMfKB`Si*M<;h?wLPc59%52`JT4b|5PySZtn6LiHd{NFeLQI5UDx~gxADptCt6B
zC|iOD_fYC`_2a+A1V8^nI^gcovOs`2!VNosSo9-H0{HOTzGM@#KX5kFQ`yp=sVJH}
z)lY|lyM4`XeV-L0sL6XJeWYc_hr36vYn^cVd6O%k<U50e0uhbGHFyZ<B)e`05cr+^
zv-lC0)R8I*9`W-pwE-hu>{>NK#p9WOI@R?Jps6VM2AlaQsvnwyi>rv-xL`$3CQUN~
z$E}qQGc2#~I=?ya#`3btPd5$)1F4}&{-a1zm_K-+O>+vgvUk+EYlFz`ud}r_+G#KR
z5mhv)J~IuYMxoT%ay%6-er@$q1QMul^YToz-bCL5FBqb2ZtBZ);0kLnM4E{bzhGXp
z%d8fKZ_K(-@hTOqE}T}zz+cv=69esp&$m&!Mle+FBMMH`jqEn;>JuO4%*lA<RI^JS
z7O*%pjb=;Wxc0<m3=;v)q_rvx8|7KQ4Tw@@ge8~`fgb@8&U$+NyU4upPGA(e&S}Mu
zm{b|IPsy))hk|yhv!zAah_8oQI+0D|vVFSYH5$oUNF_UHgdDhE^a_bZoFb;M<)MyJ
zT%$v+y#Wax&v2d|Rm-_N+N?9Z+x^~$r`rTxDR0JgGakyoz7Z!Lxa}T9c@t6;s^aR^
zXC2*4yYqTgsuR&e-wcjDeR6=WsXnw3^>|h=a*Ab-{Yc!Xiy8SzmEq#)KS_g*gVm}Z
zyT4eRQ!qAuye(Sjm~})Wqj;kJE>NQcI*kA}KGwj%c<|kevtmk4K~$Ca^B&`eHVPS`
z2}c9&L=c+DbO&@iro!>|5;<0BNAEQaKX}WKaQ?Wxhe*kL>CRUPX>AV?gvUbJFz7SW
zzh^$eg7K5W%_(xR2`?P;J^ixFf8U2g$=d`ZW-#5)Qdzp}U36}dZ;=lX9<kpY=esR)
z%Y9vFVDen|&6G+oaS=Q%3RrJ1l*lZY*M=&Ys|q9E@*_KyM>Cy9<yCL_A8Xh-sXQ~g
zfm$0kQOK4lrh>sgiMgBTp9-FY1nF{I9HKvYMhnX{)x@YsPUU*@FOL$l38VS{u#g0v
z9VLwBaF3$?VKm7j2Y$g?b^ivw2{Jt)Llad|T;*8_43ytwY(@-~#-2bwcUCDY9)jKN
z<xMUJTI>vV4;VtAA4l;++0f^i#@0`-UwLm@8}ngXgSxm;%QXyrwJV9Z#0Me|{2+AD
z(k(PgU~A(+&_WHn8T|bv3<X>kEui~z<MFX5x{Dm-_zlB03!Fr9V6{5GU{Sp|#x*>B
zl?Xm%-M>F&t}42IBP2qp&({RqwQH60r{!L^eKT2$d~#sE?#dxWjY$NgDGdDSK>F}6
z*z+~qbRi*wNcoA8Cr%6fZL<i9oM%LT!fiyQ&CN>y!{><Y=xyqqcT;w<{P3+QLtZs?
zvo7B}nQn~+$pdKss2>D@?7^TO%K?)BuDYQv{^wON(1zD7?%zKMO>RGijwbM92gsXr
z!Av>`?>I1zoUdqKdYXv7w!z)j^Pbe5(2t#~8yO4G)rBVHntTMXG&q3Us2WSM>AHNY
zt3cObAS*CgQ9VADQwh}g?E(<{N3y|*e4N@$URgtOchu)`3UNMUQSOKF4HXPjJPk>>
z^rLL>li|F?nUy=}tNYjCHm=^}A}r`PxiMW*zhLD1L||Oe&{g31!`C*~qQRFw;i<X*
z`RHn791+0b7>q=1;NuWCk`+Uy?mHn=@u4<aG+gG(gjB40X=GzIj14An{@1Efp+KR=
zU$B3CyvEYTdIS^$TuyK3IDN9scp+wC2_u0Hf9m?)OZSe2QtLHC6_2(s*ct$~K;z8U
zZ-vwk(Cf2%>+w%VZM^u8T>U0tE^k)rI7wv726K-(n4^|qU{4Od|BVXj#Q`cHf?%Q$
zxRyxh0{TvfW<=>4&8L2UK*foUV4Q}XXW~6OurJEa?$<IDV6^86aP9+`muF_i$zaQb
zQ&L5Js!eGz1C&}%V*CSA25cgB>pAPl96Dy=Q!-dMn*Q+@OxjGnD=^<T%!B03u*ln&
zqAUrUxYO`6Yi)T-fNymdrV>LxXom8v3r8&>?g8gfH&0w>(xCB?99P(#av!@hVqf-@
z^WgISn4V`hG3Qh))db)3S^m7YwrJF90d+ASf=9mrtuUX{?eQ^e`+{kvzU)w9h(eRT
z_}N|jX>F<Zhvpn<9F}%SBJ(+9RTzRH84T(hFsmO17c7iqYTwu_v3Rp<2ho&B>G%cP
zjG8`AZ{z%efw;=;Ja`;<1HCLtSMm}{+NW4*R>As9@SQy!_x2`j5D0T5n}MuXbWVf~
zC*S0F0UJy=NX#4c&fWXgUTHDh@aq}(1b3kGhCjiFx^H$~0cMLh0i1K}RtVwBu;#v_
zd`>jo(QEhqNwkl_>uvA(cM2U|b)3jbE;ZW{ah4vJ;7`pA*F-o(FM3m0^Uo*lpg@QH
z5;FkdqCMEUoJSG+iz3kUAH`*3zPS=rk>@{bdEfIS^qlMLW`UXCrX2%DBTk#`!*$nC
zQdvKd0Q$MjG0M3c`{?;pxhAw+h?jj&#DS`{HxEo7YMMyA(5RLXc+~ce(4GzBWYXK%
zQb-DcCPV2opyF-^`GpOgWdv3G%H0|Hm?+6JxOtENG`RJPbok9n^@<Sk0R2;Tui0P1
zH*)oMo+#c;<0s*_?xmnfUAJ;2e(T=&g{4Q@B1YL8lrMN4*m!7vTmd#A1m3ET*;Fg{
zBqZnP8ClZlij+mc`{$aBqqWUqqfm;(iE=XVErd8x0ATdIcI*f6&-xdP=UYes-vZ5%
zQH*%S3xxr=e~%9I!1Ld}37#v=0$113k@KZ={AoHde(BM9=Hi?~cz-(jz=hG{jzWQ=
zSH*zU#`fXqXd)kWKuN!xVH00zf4-GF+H+~(lFG3deo4dKq2E(SQn|t_6UY%v>q_oU
z`lq524Ef8bUb-gx`SD{f)uZxr1w%j}!tCY*@PI_>!FwWV;TS>lh;js5TB-q4X_LHQ
zf}}h`I=v)TRv5$(sMeNIQK6?z+u76nZN!NRA+A;%3E-nt03=MYr@0-d#Q?Gx2*(0P
zBHtPdphTku$`d6C@S5;7qF9LAV(TYvpMzbi?}~@z4f#XuLj8^nTzMcLp6nw)K5U+`
zk1}M7AD^9elYDD`o~f~G?3wrD?ZZ2F8#VlbEd%ocr=4%WcA}(k^L)V|h|r1U`|mG(
z6hh)|^rw@ViS#!`bdq^b&}UQsmN&Hgk*;v*^U|5;UfFGGOTvRr>>)z2xQPcKO5uf(
z@F7aoTECcfG?u$nCgoI@@FCbId*`9+8#kt0L2<6}v2-x-2urX|TlQ`!c``Y$d1Z9r
zcIiTp?>nSgig5mL*_4WC;gKPb)r3EW0PeS(ivI;$_=sV<BEkMrgg7F(AoRrB-fJ-O
z-+GzNGY0>+UaqG?xJf(Y?ePuW?Bma##-A%5wFzDKaUW&t1<!gcr;s?2m%9$AG(Rs2
zPI4x!g~RF0s}(z^AicpB7V*&({tZmg{fB8GF3e-t)(HAH@-57gHk8BVwtyD1j{T@|
zIL(wo7%gs;%T=SdJX+3pRQmbMd&RZg^>n^20p>QY-u#(7co*@%&DSmzrGvNugg8CH
z5C=9;$MJ;ji#z$h5k~^K!pjr55gY3I$5gWD>{=y<^W%ZqJ;p`x7y<u1+G+cQjAC#)
zm=phqD*hc|RP${^`7DfvlQ6Fd(R<kTRNwt`pY4iY`D{JCyM)!Qj?z+$30<Mtfb$_h
zH<-_7tRpqKsrBkbT5^9LNj+t&yJWRF`CH~TajMZr&D8`pP>RtvcwQZxbt*!mhpj_-
zgm8RWQ_&wY_a1w@sABtBQ7O(WjEP7_C{z%j-Ena=v(4;%mDN2#b$bI!?DXs27&@z-
zxV0`O^)#ZesI3bD^kF(i)@%zT=gK&mUlMZNSCOX=^P{Pj^S8AF?kN`Mf$!7_WF7Iv
zF=4>FIB0_@BP+0_f*HybL?T=B+@33Lz6uwZ$KLB-*D&5BoClv0ndnN^G*gUlqNgSx
zpQMGGDmz3oy(z8ClUJHWIT}m{$^u&^pMnOn?WW!2UiO$+3;rMk^DMN$Zwnn~I!8g>
z#?Wo?U=WNL8(tPtcx*6YziG-{AJwmn#sIa&+chcL(e;iHa?%bRhmx&TrY1s9bGr`p
zPt;`_2GnJ2)#67ThH)RxE$*N6XG=O#3!5>C<4A^C4k6_Feld(gE>kAg2cS+_SXA7Q
z%nuxWb>Sv{3C2Ki`GFj@^Z==U2pNHX)Cd4RCUk++!?629SdCdk@mjyK5cd<_<DhqW
zP1>jHx4wzwZ@PlpxW>-};jCyZ#NwI3sd%<d5zh=(`CaIEei*>BSi_BlsoAv-la9c+
zs6@Cha0!=oq={&{JLE2I{@%Lmc-7pHFoc1W5$v3!b$|KU*Z39*Y@?fiv?1yS;3shr
z4Bn8T;nrhyyvcMsxTrmyM2(Ph{!~@;MbT5fLPpYZ#}z4ocbFg8P-a&@qJm5VtA_(^
znQ11^IEXKCBae-WwD_6HT-f0B{Jp1QBjG(7_{;!u5J!JQ4u6pm%o!(VpLnq9-NohW
zJ=I~kW|y$id}{+NZJ_+jP54+RLwZ+8W^#R%i5e^ys}S0A%NH^Hf)lYO?13d37R0a`
z<p6~EY65J-AHt}mOF?VtVAgT(xI8D5E#gPTOMk|=I(>1|%(gkVIe5I`;i8R)F5f_e
z2i;?+86BgfNpDGd)fiellRjdlGBR8;eNqafy7k#W2LWYu3JRL|t*oZvF7H{&vE?bN
zr{nF3=}Coogx4TGgINy{GeA`9feKG7LryxfWeO=a&4^oAB>hv)6DS_J?57>RQz1n8
zr0DEPNh`cFjQs+_O%yNO9yjP_BcIj!;EKoE0CWSvm^Vq;tT^u0IuH(z1;HgUm`0zl
z>cTt<EL;}k0bUXd&DpH6b~F$EZHg)sy#R2<=d<+sr;Ix8-C)&+G~o|&2X|lbT}Dsf
zf$szCFZmXh=leW{fc;I@7TLwKzk6;=-?2+Q%%0>FgMIr}uLhE#V?Ys+Fjf&j<we`E
zPeaKQk?<B-g`v1VUJuZeYom>((nD-qNrqPDN;sfAV4Ok|Bi6|Xx4sB8B}ZcpqzJY4
zd?3FlE|25AK_h8=x%xc+B#8d!HwKTZ(d+Z`M~0nUa|~Q9JstN-Yc*^PX+%5<mtz|x
zP9iu$yolHh5R72R%>RO|H`Db&0AUk9%iag!{ent;!yZmKCHM&lZ<o-%#Xq$>tcV>r
zt<6Uz(!ZmU@JosyvMcbOr;J1C{u7@nf#>>)aeyerRqyaEna+MFmQPwA-D+Dqw7qe)
ziD|XQ@>)VMJvh(UIzY0N7Mi(o74_xiZ)$ywb`Z@8wL34-(dRX~a1(j>azs4tV(P7I
zOl&PO^qd#Yr>I~~kCk!IyyWQx{yBV86o~wDHwsUnM)LtYkfVRfDsjSmcHYwJXQ{j4
z*d}rPSIgW}G~AX5sZfSGMeZ-<HM@3!dF3zV)pijo<_ZJoBEVv-%vUjj9T<)Ym8MFw
zA1054tE8ec##VGRf{$}XSp=$3@+Iun5aqLsgHO{;V|l7+ZsWHPJAN2S^Q|7IJM!Wi
zysT{tVM9pPiNOeyL4~6Qf?wxEe|$Q%RSPElm4SJV`n?q8|5}RHewjyy1STsZis&oc
zjYD(-6`7)o5_Ot(+fh|J@ME$(*7kAgAHjb4hVGavv^;nV8U%kpv{O6;fRuF?{_={n
zBf$Ui7J!echUV@d`f7l+0G)aoAA=D$2`GcW0P_P3>6L2xFPVY10uu9k<9u43g7e@n
zupqFtKp{4vc!4dask)w}c3xm>-tz$LE(Um&jpjh7;B(D5MP_?v>UY!23i3xsTxQ}g
zFvuUKSsBA$&!Ja{87{!P>WTmX>c`>0=c6LId+VQY9-w@>!~nb#s$tl~Y9dSKX_rSk
zC;xuSTf2owC_${A4~A}sfRC}YphrGH+OnVif_;{-%e$eXAq9)__^@KN#^^%@a6h6d
zR$_@42?FCGIVAnyLH*1s&)!3Xfm16{;@A`63agGl7QmZiGgfG}jKCudbWD(`(%=WO
zy`4egv5cM-4XyU3+!`V}j7fmhyXIS{m=O$RZ!v`+J?=D)8NcWk_N=kvNzo~{r(jsX
zT3Whp<s`0R1)vM!h)bhBR*j*TvAkR`FkGIpUq+PmAw3tJmj`zrv%_d&JMi>l=-*zn
z9$YxY>(Iawi>0Y;f9fmofW-Y?rzhL|)E|B%-X#=y|2N-}e-Xi>$@sUSHW7W0VzXxQ
zfDA%#vZiQwD^Z(zzFFUKbJMakZ#54xT#*5Ja9#kUWt=R=LtfD%xF%x3B}dex|7|yU
z$iLuO0X6x0o5jme0lNU4c5_UsMY=g613|aNMAw@@IF_ZaF+M&*xp*36i|jVNC02yo
zd3ARmpE6-R(Iv?KXrFc85C4T9=gZ5hk~(yM?mKyaUnMPk<JVdVMoj}kvU1loFjqW;
zbZBVdd}?RNp1qkir@Bt?&71{%xpRO}(ZkT;Ht^Eb-9p*eK46TRBK?`+P|UeP_5nJL
zwmcXgB)!Sv`N0L{iVK3UtzXkIQPrL~!KD{vf!$nm9X|^=9ve=Uw|||02|1kd9l&{*
zp?pxWUfg^p;Bp+}CsOWVfuics23A`H2s=n6rE|4$|NfnOPor}=b<~c6iCeZSH8=sq
zP(E*Aoe_0#>3ZHw*dqSI!bAba#exi!*+2h`10E~-NQ4Q)fP@=aaOz__JSKY^l>1)&
zn7Kl~|0un~qDJVA1>rGp`Crt-|3OosMJP^oiL)*Hww$1Us&X$I-V>|#_T?jxrFh<M
z8kz@hOND@SWIs#={0=?@FSCOxUYg_`aho>aL)Dv2D`ds6x0m=bg`cR{2NaH0JTFtZ
zdh(9(q6TFF0#69E>k(e)BYFhY6lDg$5ip3B^dS;qROoE|Z@$e)=M!7$K=Q{O2XR{B
zUveRtB?2%!la5jK+p%5MYB?0V-1HhVulmc?oN$qfjHV4_b=cBZ$8W!2$sj(pLaE0C
zQb$6>_7ZQ|6YsyNtT0n0b=(aFQYu@H2|hyF)eKf{@f8vA@kd_1;PkjE#?B<^=(;H5
z>?KVvkVhp@#`eyg=;tbhB(ydS>g-vOnpxa^@Me)pN=6_Py^8bk|Lf)Lb6kS6Y`j<M
zw?RS-{v&;*7wU-BJ$s)-kIQtlf7gi;3e1La!%?2e=i5lc3OUjk`b2fYho(N4%FOWi
zoQnse&F!Q>eA0%k=h(Qgw(ECf?jfKPMWN^)aGTrMeMsrw3|F8zVoyN;&>iS#{+r?2
zjq^qWH;(F<f;9}8Yc@mB^=nF|!*X8*26;R`<Mdv|p}AMGq(lhy@fu->2<~J?L%tK3
zXfq*j+HOY#J@y{`@gV=Ri`%dpStZb7cPqcfE)(}f)3D<#6t^2CRx3icX&6^xz*BTJ
zx486OOANQ`G+SIV{1$!ET>gyhq(G#p2Jq$52KUrjFjlDI1<%H8BF_btj@b)-RKI#C
z*3yc9JPMT$>@M4!PHwi>Tt<reW*RR?x1aY-6wW*;YMgX)khmK+QHl{@hckqjH+uAt
zqL7W_P>I}u6d-REp~v>!eSgAyu4|6wx&XlMBrXcOmCZj?L6#07+H@oFE}?1UV>O2!
zK2Bag0l#z;a|JO<oB(0R>>NreTi%AN%g0z@OCbQ;W`2t9=nS5_8L({{oX1+rR`w0g
z^@^N%db>4m-|4o;E7M^T__u5+MtK8DQcwPpi6)@#@N&j_6EACQT^$X-n44-a3PFmA
z0dilGC~te^WAr!g+zG=iPpn10IDJ$#r+lHcGj(x|YTWIR7llX@DV|l@HMFN<%dTs-
z=TfL^=M;3Ztg6)O`2cP9qhmUD(2A>tr}}fE_JU;TnX>do)D{zdhVrpYQqwrHSC2KE
z|I<wbi1t8W(jEBWcFr^1a55Nj3}*Or>JPenX4Of~?$o5Xb}8R)-zZcH!<hkIT^FhX
zN5Y_KEEGqflA}7CUGOZi@XMb(9shswbl9sAd=U6H-j~9u@J%5I*PaS{9j7<db;P<?
zX@+_67X%;NPeBn5bFP9|tq<|m+SL3CLj>Iip6)u6Id|Y)?3VCIOM}p@t>zo~=CWZ+
z3(!TtnZf<dodH2@BHn-0%IOtDsEvGEAu}gX<_8{#hn--v`mP=F!lLlU1Ovih;GuYS
zCDiZer3Go~P!|40bHppF+~(07ck*}oE)#hm1gL6pEZ^Lke}V}Hgq;^kYm5DH*Y57$
zo($V2)prx~kjOhU0B=5kKny|fHHc3Km}%4HZgZ7p6AMFf4%B!1k817yOm65ga_D(!
z1N^FN6M29o#n=aW$tUQoJWZ$ax2AiMwtvVXferLo^kMd8I-G=$3S;H~X3_MT*v~ot
z-JfUWY^CmL<%#mq?)d&dK)!I^v-2nsH$g17HOlln(F`|H0bcSD3ByzZ^swb+f3{v$
zBT%<`1|WZ`mCE*|fP}wS8$9k8Owx=W3b&_M@z_LMQy-7;aFK$H0f9>*o8U*SVIf&;
z3CI5*d2Bum9z}N+1-vz5$d^k3U>1;fECSCiB>(2K9L&u2Pq?;UGptcXvb2u9<AA8~
zRzxWbYm94@2MGSV-oNO$fVYKQ)yKsXnS3>fRnZ|UFhiQl2l*D+Jr8kgQZTy_z6a~@
z#mTwkXvdKJy6Q0pyNbaIR*ncOWMNO4yOzDc2YE#_$i<i=Iuv;f$2OWOz55re|4-%+
z2gKE4?IAs$egiwBnabAa0t{v3$O@$}iYo+7HM=R%_r~P=W_#WZ;Aywvr-3dXo*%B>
zCoh0ou0AHzr^g=T4#Wl1b}@iq>c=hs_g(?)wqq+2kTlf+)_X{t#8i>XR~q24<HnHk
z1a1=)*DxwuUUo6ex^jTV`IdCmK0ssJo*&H@(tp7Q!9u(Iupltl2n6cuXypQ$_B&m?
z?8w%xY6QID->UiohJv||qdWM^`eMrQtz%nAWRd0l1U~Oz1xr`E!fDAICpQP>=x+}E
zhWyK>U}o(w`^3;sS0Hh&jC5{-KL|w8J$S?<0$b9Hsvcjjg6#?eT0S8NFq764FFKu|
z0%p>!;W&AdNtJG){XnW8cCmHbZUTo5DhDI`z7ksTVj=#=8F9BON`-7HeQB7JH3_XB
z1~!Q4E*c){mNXYA=X>9#$Jrm!(STKiVgN0V>L=Ug`tppxlTofr2EXXU#LD+tL@OBv
zBL1jJxyJBLcw^Y!yVrwQuRY5v4&A@kyP$gXX8DtsOD%fe)nENwX(WyeHK1OL<9&SG
z^L?=UpvN1FXWe%9pO+K%2&lSWayRbBfWf|T*!8al$BJi@8Ix@)j8Z=(yhj}WFWA;H
z$;CyNxuP;JoOY<|)9a=qDYopZ7q=!Y;xL26fTjx}drUVso$SY-9{ADK!H~~XE45MG
zuS`TKnFN99P_2NS;Dmz4blG7HGDir_UDpWC+T4w=YbpKrX&`!!|GDbu#dPE6M%er~
zh;VJeb+rZ;P7bA_rorZ=-N7-W$q)u>0vrkk_^3nRqpswj&)ubUt<KnM&~D5DQX2@?
zcirZ+W88qH?P^<jw7^DoDS_+;2x_Ws<M||*)OwSJvZ>)wbBkZFHjNu?hFts<JHg*#
z=5sdcHBdXNKN0VQhF)QQGC1EsUVWsCvO@DIbR9lB9fppsS8JDFB1-!l6Y(Z^H8wlG
z%4@#S&i}D7$nf)+%c4PZy<&d^f~x6gF{tU>=Ggn=+pF5jt0Gn=M^79uRJovix3Nuz
zrRWu;8PjjD&+Pq^pu3x|dl(7P8_ImSA|mvfrZ9M8DY8W&IIe<)lEBP$FzXI)knzG_
zyL6PfwaQ|Us6)N<CS`qvy7if(Yu77@A6ZAT<Q*i0E%R%ViBb)yiKMsSEM^Wx;$Et@
zao8!ui?1*pgq!UD7cvx$NO=J=13h*CzKQ|>rT~@CpvmOXw_ePP(0u@G_lXcWvc9VX
z0)R1IJo>L>L;&E(auE!nl%O&91O1iZzAhai9WyGiRJAMeinfhHU`pH|(H{WQdt7lq
zF6YIJcqvPBM5iC_Fy?h3qTGuFcK;aQ>&ouJ@$LfnS%*i(0wMj4Yzs~v${QZ<CJ2p9
z;^86TZO+W($1~Y=ou!XrGM4U={3VSx-p-rg0~31zBfUEVs{uaW3(%yNfQ%m7KwP?%
zu|{O+`^wdChxh?(aOf}ljqLn9bE)oG!CKL_W|c*gm}o9Pl=|E{lA5|<dX4k-_^Peh
zWAC);vcRZAD|ztm`*kxoyKto45nF-Y^#YJY)|xA`3gU2ro=_+SANvbdp_Y7(5-Hwh
z@jB-~f>+hcTL+TH-IIqEp*;BQ86PdoC9o_tu40H6)sZGv?8DvFJs&i;`PvyzyKv~h
zb3~XZIJ{BD{?HBrqS7D%H-7{Wrh4ZTI7MY!KvbR|i(u;xJR304nBX8tYf0T(eD+>r
zS;vp=_|PKE|0C1dkSX)!f4NUzQEZvXNkj@(3ES(Y&{wNN?ZjBT%xXG41otl-t3A}a
zrK4r9x#^Vzo%vmO;DRM9nSjFt);CkH!njT-bK0A@=gByi_RYMpn?E{o?k+H)1OG|M
z2gFpsF$)aq;zR*TPEWi!qH_5=qGJ42BxM0`2xJSNjoErUcb=}&ZVV6}ou-IyFsq#T
z{GzO=U}P>Vs56FB8=UE=b^lqkhiJ;vKcaW?uL5lt`xFA<Mr(~`GNhBm_9X&H{*!8x
z%+(7~CV{kOir#;UTF8S2k05mc2`(UUu(<LD6I~oBBruf|)hK##HEO<to=+MrC@Xjt
zVM?bZb4sF}E^m98?53}{!Enx82FIiSrT#6MI11)A20{E&<VGe_;SjFPn3?><r@F4C
zG$ZB_5IKRvUw1#b83p?VQ>x@_bj<celw+Fea3`z#E0J;IiuJ_mI~{r-*CH<eNwI`s
zMyj0Z8A1)HxV7AZK-C|QgPx3bnl`ruw$nDNq+{-3ezTVm;`p^F8<5g*t94*Taq{X_
zA-T!mln7JGf}-!Je*CkGE3$9GB6$n=r_8%aOrj7WsnosCtMT#6HMH<!PR(|KIGw|k
zgIBb}1I;(fj6xcdj;Ur_W_pK1Tw2yzZ+Ps<y>!QC#a~kA+I!e?*={26jzI=efX&a4
znppp?C<NcQcCZec{pC(+D>wviEfhBKo$FJJLK)&H#lPL#BRu_30Q3V0q6*tGTv|~e
z2;*H0nVh5gIW*sy88sO??NfBNwn^AlBI`)5u#E>hG6tIgz{_s-KTi;Gf*f7X4+TVm
zm|_f@$3RH?Cj()p)G$;N><k4n^Et(peUrlMT@!wX{q(!g?*75yzNz|DY*IpKQ&D?+
zqq=ES*XPgWxdRL|FvT8Xr`womeL)+pz0*SpUNpW_pMCONBG&Hx)(1wd69Kau6n&Ys
zYliR6&Ga>m1?uLw5Fo{_&P9B2YsD1i$@O<$jX2?Y&4~RBuc%8CjM{}j>gUhlj(wLs
zuNH;wT0Nh0eIdQPnmsH43(;F@u9vE>WZZzTWZ5M(27(zqWB<G?XJ19C!yo#?_g8+X
zq^+lsTjnqp7;J|=R+sLVQmrTEh-SED{xMjQGp7-hX}I@fR(zT^F688mcUKJ!3Asp|
zCwjEie^d!2^$16T8x2Su<MyW>iSki0hebYpHa70h|CKdW#ty{Xo|1lXy7j2^3%w1t
zE{-LjuqGU3-{EVSt9bOOqi&W5(P|2R8zY3>3;k@(MZJ8>C}9qn$-GM&)2-PbZ}M($
zKHr-I7MQzHCsN1;ozZ;n&20QxhuIfn$Km`1W4*pRtgEb4v)D&$yFT1{*+o4VFit$9
zOCHJXYXlEHROVkvb8lIj9J@IBtRV8@tAj%@xjP@CxYPRkq9oVDU>g@*50k7a`|}5p
zdoHCED9k4?@=m{n(Jku@+^2nM+S!N8Fw5EZv+OcwgK?f~zLE10gJ#9CI>VOHMV&8R
z&kcPGoI)oWDD4^0ytW`Z=eFZ5eXg_6{5AP={ywSAtt)@r-y=f5zQ|`NRB#OkTgq7w
zz~Gv+BO*ZrXx;lugH)HNZ!$FJzniQcd%ssDh$MdI<b|z#gM<ighG4;9j^@DkbiG;Y
zt%;Z4FfQLQ)9JcmtYla=N!hxd+{g@l6FZiql}68Vow^)0A(a3<B+77KO$A+Xia1ht
z@AFDcLAC4M+5Qg3S=7x~{W?Qe-PQ23G-cOfOi&1^0i>=HpQ`0hBPHA1UOGx9@-+PB
zYlbLi2m=$>D1y#0gqo|!^pnKIdMW(bdJrlMQ@uC1b~5c%ReWbgj%0DS<frDzA|pa?
z$m@IFB(bAgR8?25;`iSf$Os)Q*8GfKc(;URYo`Kso!X!F6h{G7aR2xnpjm*D8lBCy
zLphYLdCn7Z2<9wsnmh+5W9<@!la4xc1SX{f+{I)AekqEEWVoCG8b@gu!?t9|e9QP$
z<tsY)b5_#WST|~ug;^|dzu8+(0I<Yf<k)&aNO=;!2?}o*6;Cen$+qqs$bIZ}{%)uL
z?$*Pv|Ag_5UvcvttRoSQgG6s++#8U4*;H#4?h#n(Vy#!Zb}J<%X=2~D-1~Ygch+g#
z`$}G*@TK4sH$jj6d8RsJF!i|$+3Aa|PpJQI79^<eu@HLI3Bx%Ium`b#^nMisNbjgn
zpeyYW^Z^XdQG6Bx9L4n~K+Fg`&htco5g}m|*%EYv+Ywe1t|DiK^h|e*&oa5pRwK2y
z8FyrZ&uiQMg3VpagOef=%rvNo!r2RoX|UTMUZ6-zTEF|E<nDv{pqM5DSR4?u%>X=g
z|9C|CkE*|U>Mm*0ZvjtzHrILUg`Y{;Y#isQZa4zY4u@_$n|aeSGQ+GM=-=nkwD0Z{
zK$;J8oLyl{L=q>run(YSQK0VjFpSP)iMNsw5vH6xU3(pp5^_*?%laPojM61mRgB1k
zt&-*@4>v9^0G8veB|vkWNGS(J4{IKT)XI)XH(q5Bc6*Ta0cFcgI#VgQJM$Vp5FmU{
zmupTw2w;#jWM#vPgMP4G7CDeH5H=xc?D%zsE#22*Oq`!%kZkEIK(?kDoVTtW2tF~h
zCh%-f?q1EGKF;d0T9he{yKw+Sj(EQMv@t%`WIIsMi@rX8ao9Ki$zg8-#v_RcYE!2E
zs!bUz1Qd}L1tLv`K{`!eX%Ra-*H$g9a3Jfr&l>yLtn@u&SR=+{0^hy7t_~y<0w{`d
z%xjRwlQ}?Q)2;F6^9?qxcJ6%cEg^CyS9wcXLAsDU|FR+=V<dZK5_g~`?jqzPf*5kl
zG=|zEDo)N<fpg1E^4(jzNK3|d5Q;wY{K{s|{C-hZHYXUAS?~OhA9xEWXLCeV8pIIi
zk5uvy)@&Si1CSSWy^>t=unumznb1ufP2{E5{YPu4>+w{w)a+Va3@7t}(!IMrKcaOM
z>~!-U-u&e0-|pCfSE%1O15yKU_z3$b<PjVQQUj0Lm?n4ThSOBzvqHD+-1^O|4iJ)H
zYak0G#yT33#dL)13ZSf}!Ayg&nDJ+CE>%r`ym44ZD$1q+8;&D=uh+qKOa0Bsc3o)1
zCuNh_GW%O3d6_PmH_1<CGHE4NX3?=mM_yRMf+e-$)`BJtl|KWj0I0u2O}jG;INZeF
zEG1D02!Y^5h`<n{PTh*oE1IrXv`3xppD2IuINJJ38O2uM-BdQ`dM7pzs^JQ!(kGdL
z^!g$OinKOZ6Iu!#99vE_M5-o{R9+^}ZrNzqz7_`f%sDt7;T-o*+WKh8&{wZkAj_B*
zOdMX$1VedbU`3zL#-<l_d5EAzlfE7Q5Pc}1OQ!iZ>l_D2=LiU{&Lf@MLN;9C4Ekqg
z68+Ny2C7-%Q;kn4R6VAb*uJMA$!cr4*hjhDA@9w`qr`XeFYa#}*RBUu$gcj)YiX_7
zv8BPh3>SsJM)HcOQOQP5A;|FTV*?lOaU5{@R=9xHm&M&mq6c$h;Zis<M1&GxY{!;J
zQ<gShESN;HG$6GVlG5hBYvG?oib)}zI4PaD-F%IrhD`~mi9A#}G7jZ|OI!<%VQYm)
zhMx<1rV6rq8pf}#pU{R)ej|7TJd6c;78M~3GM(xJwP<Rxi{tCM%Kp(#<-V`h_BW)z
zenT6f3Sg1Ic@p4&+iyS%%x6&L3kcJq;Fjv;;r~o;{;Jc#Syo2Bd!|VQd8%sKDsphm
z@gt8P^qV(MOeUD1DamLj04yu?k5nz@?|A$Nn$N~)U45?Ss>_UdZrfCL<zCtgm#DW>
zFXxVw$+hP0b~^vI<MpUZ^jWp5Q++?FL=Wm^71EV);q$x8d^!%bTqdsuqfFZu53hdT
z)$^1lQ<5{XohXgEj8tGNcjuBwVIG78U7Bpj<;&;lGrz0F>WfO<ABz|kJ}nxj(Wfl4
zNWy+WC?TlQ#%rc^^)ZUMjT45YAF+sV#eyU2JFaiubQG7G`=suKrcu3$RZtj1KRMJ_
zJ>BP8f@uE01qV{$*~gRVXNu`@&GG_JS^Jwn{Jf#zFPK>dyNX*Ccr>uZS;z0qqow*c
zJvu9d<%?QL?iN)7X=r=24Sj*eVW?BHV*E-}dvxmrO{|M#5=IB@;zd5c;4^uUc5sn;
z40h^>=vVjkW%@;XOJ77rzvqq><-X|5xE0oJGp00#zBD8lNO2*Hjx=OCBK!v{<$HTw
zor5-Z7c1r+EN<HNX<gZRQ{VpO;yR59G%39E;QrIK*<&)6t?zQV--dUqnRm!uhl!6B
ze{NsQe(2#G^h)OJm3xoArjIdMSq>eY0ZY(%iGss;eYNoYmm<PhM<dQN)ML!l2yqpr
z7pWaASwn80%H~tql&paLp@OH*oaCRj{a*iwlM2A5&~Zq{517`Ao93_zgL?~QtKho~
z^wXYpZE4%K&0}+shqB?<fL0R`XHISq9`<EM!7Cv@c5V{c5}G;KMWXSe_uljkG+wB_
z_b}C{_3H-l<MQu~Ca^J`FK|t%^gS4%YXrC~eLQF5%u8E^9qnZsf@|-kcisPXpEjlK
zI4}_qayD^a!5%#gwfQvXktJ?*uGl3d_5DpJlby2y&URK6FyD31<~6=!MvIyE83w#!
zPr)5fF%>T|Iy^=`duC=3t+*y@pZshjw>dCFW~s93%X_st<Rl;rs#B_H!VDJ|=mu2`
z<61dT8Q?!f^4jCOX)!NFaCBq(%6T`AE#VFIl2yyGCdYt)tM(&52px|X&m2`er?olB
zI4v#l@SK<LY-)%9s6Tfj-{b<|44ih`%m6J2Mx30-MOu6}JUILIM83+aNm1WUfd4^x
zCOQ_!M1V#1JgEo&M&IBaQxhRjd7{z_%E%%eooZ{}4oH4Dv@9%<?yIbSP&zP!kdE^J
zfdqL?dONNk+sCVfgp_CD<StM#WnT^|rlOFjrQ?LDn-j!nnwfHhGd(qC;n{D(O!Nnz
z?SL?IMOc2J6KC}cR(Twx#{8iBsM$Y@^RO^3uRsg~ywbmjdoXMfj&$D)j_U?>87!a+
zLAnj23v&G%eHch)5JRbeP9jwwjR|}V9i}XW8xhW3e?X0S^RMa$%<E<PN;4W#0W;j=
zl?;bWjz^Y33F9lgsvYl%Y}14vSIs|M>x5kymjI7{fo%xbsK{p##~AA?%SL^%d#miv
zFN*AP-}JOxY+eee*tIa2A)yQq2}e=^HH>)U2OCLA?3nw!zqqw76!}GGVVmd`p>u9G
z>8wV5kgk__3}Ng;5$Ik&<?<WPjIQ2(D}Z-~?0)CB1=sy%Duf@QSH)Cx?%**M>_Gjx
zdhnM|q^<iVzvaQZ#|9Qbpuvd8YM{%}j!*icq(gE}4({=%l?-;CZaTT)nAWz5qN#LV
z3OSP7m#fMt;!4cssxs^!CFef&DXPpajn1&VAsua@p6ffi8^*4K2I!bW;BKdo>qAr=
zX-m!{-?RNc)~D_<W=I}*rM;jc$p5f#sL-$-rNHgORIQ}`f?Z5qKMeV{7-R2xo%6Yl
zlquQnag}m7DXlF@3iBBEca7RFPz8$ORe^$}F`36N{lBT~nExiY{|AkoM`;(%X0yQp
zyCcZu_*e#rfqq4;3eOFrF7hfqZs0r+w-s==YSB-96=DFJPw7S4%yjafRJ-q6zss^W
z5VEkk5f^)j6EBn$D<F4zYwz5FA>Eo(TD-?lRElgopCz9qnapM^M8Q)~e;`MFNyOL0
zRxzs<CDm8;#Fy{-RLVvEc=4(1j1%I1ilN@x86KBofL=&7NYO=#3{U57ud4f#%Rx!n
zQS(rgQg>8i5(5RQw;o;lo3v3`3owPidnkit45ivbc&Z}C@?AGu+1S_M&WOG85r$>(
z%VQ_SL0Egp98pND3`Uiso5?JgE5PXam`}k`>@DF8cx$$L?6tvU|7G8|^AkQPoA$pv
zp1!QNmd~i+(U1vLgC?XL5U=hCD@88h8QM#vOZ0HUrx**A)(_vG>C9780I>VC;;1+u
z9t9Q_2@ae1dFVaZQZgvFJAh|fN2*c~(5@<wE$?eu!;s*cyhmx@t0-H7dI+Ac6Lds6
zHVn7eo@)j1mNMc&jYaiI43CocyATA)(0@?+yAb3=?xJ9B=%19lN1-h+><c!EQIOi~
zFW`;c*>~c=OCIm(hUexhDcU-&GFQOHu%&|OWD4SziRN>=tt-`L4+J0fT0Kf?kCM~?
zWx`!ZUTKfiN*lS-0F?Idiouq`T{I%K_T=tgRYZi<Y^4{P=mj7Ixq3b*`eE=;V-W!L
z`SKVij~WNhXIY2<!pTl^;j4v^sc|f`YgS2vf#!<nwb8VmfGSZ0M;=rf#c)630M+9+
zXStT%7JIGkd=q!DdtA0(na3=)`Owyn4O$rA!FZGv%eJ5-D}7V(#cvwx^t#xt{etn?
z?#k!7_3bVULZkn%2s4|$Fi&8F9|K{POa6rUz1QCFiFVpu9_xAflQ3e8(1*N9e1ijT
z`w}5VY5hxj%A*%Pz0m3KI?n}`t%OxG(?GUi@1W84DGc4z^1Rn0`{yp`eA{r*In`G&
z1!vri1pL&E2ukTk25SRe_{38%VlC9^Ni&cBo_17s_c_vAb-_adi&ss>+@Wm5CTQ=9
z0~Gw+6_m#*RWh%~?sK>%)?LUFm3QJB9_qtxzk%HX@!QhTH?2#v;@KAAf_06DgmP4~
zcWJkO6dDtPrOzd-a`#a$t@lrAI9a^cQRGc+X{g?epD9{It*uKf|2FCQSpVE8nLZWm
zt-Y&y@HI)Z=+nV)_Q3P3<CT34TjlSpzpy0qxGbNFAi2U@oQ0Bu;NmWz`UCYe#B<cH
zXxZrX>sjN3$mMUZZZ5`b!wL+gu~7piWJ$=q*|=6r|4!DGnYC)IZJX~$E7tMJPd&3B
zw7u%zHTg<U>q=IQK6#mQ8B2(zmYB)G4?oP9&tfCq&h5>&E48w|)umWnUvN403|!({
zn|fWiejR0`!ZfUZyg|8NcSUFPQ|XG`E{wLm(u*%Z+0Xv0@xNh!m4^x<3w4W2z26)&
zBl_&FS2~r>IV?T4(qA0hCNq28Y+p_*UWje_eC%_3&fexjHKOS|Lj_!HmxP4qG|Y3l
zft*LJ#!;uUXZs(YIE{65Osw*9|0%xr<GDwUh0bZ^2~{5#iHT&m*^ZE!ws8SQeJXXs
zQs|O=YrcPEpoo3IevM1p-jA9_mBEDqI>Wu<HIZz){EkUiH-^~QH)`Wn)zB+)FF>CA
zEeyML$fDSknL~*@|7o<d5@oz$p0>?q^!)AilCP3xh4km=hO+$?y+<w2v^@7wLiBz2
znKV6p=8#sbdWwyysm6>?ND*m3OSjl&%#Std_FnZu&Bfm8`G~j$54+)aH7-BLIbFtQ
z17?PY22d3Qnid5=;@fb&eiy^Oa(N)5W%SI`>k@I1^G~PJ44bm)bp|9ZBC9#f`d)RS
zo!D|os;=E#UG26TJ7>COH=D8?cLCIMf0gJNDKLp*n8j70$80gKj{=lja|dEf1drl8
z%SJzse_r$|ztfYU>hRz?2Ynwn5`cPz;=}fnH!KlFLjIrL&O9E<_Wk=Ki7ZWI%Qh9F
zknGAb+AK-aE|jShN}42@GG;``5~boUWhzMv#+ni)ds^&FD9ebHZKf=Pndv#M(S3ir
zzrWu<&+GNPo<ICyn#?ulbzaALET7|jxH-1z>HAI?7oXSf+w2q_Yfz!`qm}JdrmyV6
zHRHVMMay<q=}x*@r;B`Pte9%wS+>ks+ScbQE(7an35HI@kmEJGg-F=VIo$hM$Nf3O
z^5Cf%lN*fe73I0_O~E~2Lpb}iI1uEWV9}@*)R@x6Z0j@{@q(iiB6>bncza|2&Wgo`
zsZDe&e<7!%xtES~j6UM8(#mZzF$eYPVzXTJP@DP-yZ|iAg$Bj&d2BeT3%!wkr`aD@
zT3HL>7^^3#jNBvM0U=y5NRfj}dN4~}NSj&vqL{(!jyg)YHd(xpKO8AGbnP0aL3G1y
zE}Zwjov`59UEG7sq}{y-adri{h0QXcx4Q<~x12ZScUW5jsEZLHi8$z1`wp^7CL@_T
zF&|cpI<9*ds`%FEep$6!%aPKHNW;-_`rpF6@R5Indt00rp{$}*f1z%oNb6Y6eYV%Z
zEJK?jqXH8xU+7u~U5cuntMV6XgdaI3CbVYHFO+Edj;{7`EGJkLggXj|mWd3NC+1K;
zo}=3_!b{8751ywFmX#!8gSiLi{|-2=6)s{y^*MtJ=jx~V$Ok4C-R>&B9lBy=L+lIX
z{a+Jw`tj|lliqBz5y!q~R0*Q%Ky}+pS0hc$aaw$3)v|M<FJ<X@*x`C6p(D9Q!Ciq>
z(0V0pq$JhdGHLYfMIqsA>w=kJ<T!yf3x*~pSI*0)#Pq85kKzN5`8~2quuFeCI(zG8
z-rM-mhIy1SOHehVG5ohwr2v{dk+!pObbP2D{UNRTHmUB%Lid4=9rmluEA=?n@b~jO
z0{+DsLAnA2yb=1JxDgN{y~gG<A}PSsQ;LkXbn*zM9QJ?Ya8#yjPf^aXL#OTg`fK{!
zYhX7%1Ksf>Rv|Ackv?-U7>@$Tk@TzqINLVG!XTdQfbe>0vq_9HBFlE$5w%x*f%y4-
z)(=XwCNuDy>UwDWMZE$i-Ifjjfmq7FH~~ZG5zW*tPFN4RQWdyi36uP>%|#IcZrFg~
zyo*ro16MzU1P;ZL>LRTO<F+gMa}GtanCeIETCUF+UK}pOkgQ3rE7fSW*5X9&Z#b2Y
z75lU@@4VEFCgXZptsoH*RGlbo`z_i$9+l$N9p%1&)7wKpBn3sIf<mJ}QV>%kE3F%n
zXCz(o(@KO~!f(J}N|lL2J@IjtP@hp5gnjkon}TVZYw*qSGftM7OU0iGeVLscvQg6p
z<p@Uf6)~vtEC1sb5JomrddD$h7Q{f%pbmfrl@1OSR6Px#HcEz+2tqJ(fJ_*T9YXnF
zjK~O&2>=wa&~nyR!^DOfL(AEd75h(2UhA^STce_$)qCxr-1+$7ddTqxP6l&=9(~`J
z>vBTANHc$T=lfUgX40{tR$F{Hoqd5JWaSeE`(Y!^*di*A6B{V!u34<{ySnh3jcN(`
zJfuVr87&!PwB$A4QdY5^r_ae~J=xuF24`D8ehpvO`)ssc1QGaE`hp5fVhB-z+5e*g
zi<`LKN4SzQk3)D|b(o3h`b38RM)%yRK8@Ro;;!O7q94M*X5~xfu=S$@q||<tj}E&$
z`1aGt{7l+Q5j&OL^d2fbKQI!&C0CYk!m2PQ;~h)#<n{f$6#i-mGd@}8{6u*VYu(q_
zaV%W&c1yPh{6?yXF&@ob+cHudl-cRCFu)`tY*|sF`K6N*atCJO$?5mZxsVV7v}73w
zQ~p6q7PN-&{5jK56?ST~)+Xt(ot}1{F!j~3NizN7sM?>^Xp;YSs6u;w?AM0a=x?LN
zSRb?K%z)?T%(7iep4wHL<}J`-tP`eR;1o`3f}&TCRamK}!U@RaTDKN-M>+>KzHXc0
zCmF2YbJE_cFgZ-|tA*Q{Sk?QEG86~$8X~qF(1!|ug2DApwv3&XTFpFG=r(;{=E0Q#
z%P)^>g$GvK(<=N&Mc*56Zd#fgeUR!)C?qtn*h@*@>)0o1F2PY@3pEBMJ#Aq^y7l9t
zyPr!P+#*DE(^HJ<2TmkiDaE|*Qe^KeC~)a7%CXnWxEJ4l#iKS>sQH}3_z2#JQqg5;
z2CK0&=NHQ329+CSPwC0(QtIRD!Wmayz2O(?`OV&nkUY*Any-A~Gw09PhOhkhncR15
z>$;|sZOV=g+qNd*J>$%RQ^|4{mJBX5In&mmv%k&!$o?au7CX<y;atbNFTr!k*Cs(Z
zKZc&8?8NWLj+h;$_$CmvE<|+F`#;A{yq<Bcr7Q-`v?9l>Mrk0-V^*7Z-95K?^vm<e
zU10}a?0LE6<idF|wy&-HUhsVClOoPnIk@ljAne0U?!^z_qdpTA4mb`uc~vR|X3AY@
zovo7fx0YFaX)|i-h!KZjm&);!(s6H{*q?TDpjFao^&9fuAI&HFShP4U)DJ}Dn@CFO
z6=WS=Qr5V-X=kcOAoFErd#P_3d(wu?`Vg!$Yd~(NidnBGu9<aZ>#oOD9NgG7+?kd1
zn0V=vakQ-TGEaNXSH+qW-!pqleay7BKirj=_@k-&DtI>Ef1wO5sF6umIS;<>p|>#e
zn|m5hje5K)xfQBekng2CI!w0Nd&a@M&q_$W7tWN(5jN}RWFiNDyr)~V^F)G^M@H~N
z{K3~NqW3qfkJz!jM^U9G<ouUilrlJ?POLJKA~Sl&DkyT_(qEfB_X&Jv*UJnWVTfGr
zw0!n+efZvKqp<3pty$f5T*lBHy$ZiKs~if?*D*%YH+?McO;l1T*?(i_zWkCkKiyh<
zGmK}C>;IvjMWF&rrbLg^SW{(Y-7=PbNUTpxr6a-N#Yg5gqaT-=Ork6GA@@*)i?kMH
zkZ_QDILEBF&llt#ocg5$RgT#mb`O}f<kw@DSc<aiUze_6D_k`Bth}+=Bq%8P^Tr>w
zebHT-r(JGc?wg(jS!+C1jjuxN?n%Egjz)9(Hns(PaI}B<JU2U+9_NsLGj;jiJ!<~c
zdqYhj*pv&rGaRs$BF8y<S!2EEFs{K9Z}$}mzfktg%X9DEi!cnowlQI$-#0`^SWAaw
z^(~}4B$7)B$FOQ4!SlxpsNg^*4eBeEv<{t0R|JcJ_ED0{ie$ETyW~Yo9+y8F?NPD`
z_3$i~|8$lCeWSAmoOnp$Z+SxWsGNFkRycJbxho>u^XT5y&tk7)U%6+_nt2yO+bg2Y
z-PV%%FqfX+=zAok>sUoKbFKKbA=fTrPHhi9GLZF=lUh||8+Ly6`6mnR3oP-Ac^7tw
zR^eGY^f_AHad4L@F|N+hB>ks@ljqKL9BFq@yEhtNY+*{=ouWk72M>tWo>bYLTOa2O
zM2nbb%C9<;O^V|jMRk)U<Z71r-!z&11`4&EtRQ|g9=a~P6gZ3l1+Hv&`GtC@&g9v$
z(G^mLP@PdNjZ4h!9yCaPylbbrOj?q4YUktci%^!z{DnXYbK>~J7cP0sNv&)%W3-vM
z9!=bEQqH9{M#pP@{3v4(Oa&x0FeAO)OQ^FRkjGNM-yE4;%{}Z+m$HPtir{!tvANw<
z{X=kWRPcLqq1ulkxAWi8Ax@pghsJ)SCBeg?&3LXQp}$319_lQzo24?&zkkOO#_w_l
zC5sHEr#r3`QL<>Xkeqt;JP;*|^IFa7`<{>rQGRDCwotKFtVXSx?*2cJ&B8y_=UN!>
z(pW(YgCZ+2N6^CH6Zo=uL~W0YNPnNKhU8Jv-SLy*Bx~$3dd!FB-a^0yR3PUs|7H&O
zNydmbLDGN5ucND&P^3w?=2Ilm`}L`{K63mL>4K<!!&Tx-+4XOOix%}^A46%9DvHKM
zr9geM>;`3yEJ^>;$+d*?AJ7#O=<*aGOI?K9Na^tCwJn&n=5EZ%MmhpI-(|{tSM=>^
zQ4hS<VK^^jkwY!565IZ4e-3P_5h2#>u9mFSoa}<O5zmwX&yH*NuF6zS(o7ygjdUx8
z)k+by<F?cz0vJFnK7vZ9vp}~5N_zytXu@Uew86BDCOzr!aSblvg}-+`7bu;PT`#e~
zZkM5$`g0w25abl%Imd(1ErW|8aZ{@^v3qjoG{uu15%wF=*YCxZ_vdeSgM0rQ_cVp!
zXwX2_hvKf|NYK8OYO~4L?%}PU|I{qKe>Mk^_8tOZw>#uUMT}XcnX_9+r<+JySQSo1
z?19Kd@v0d`5n<9rQJOLat6hZnES{Z5e7z)N#EdI_3C;2BhU=K?=SC5cR80>xzEq9h
zu)ZseNf7f<k_z)q*j%UptpN&#%f%O})r`|x@k@#D)hUa{^IM8>S^Eb~rItmV(jVA=
zHD}N;sBMBI3|Eo@8caeY4_nv=KIpC;qHO>@)MKSrDhZ&68~=tLj!cNPfAMd$sdvR5
zzXB**Y~EO<o{<1$3ohv#%2wc#;_GYvV180()_T&@ba#mU+zTFE4m*q=l@0(q7kv)I
zaguq+@3gt!oyVU6)R{W`F14E&1Pv+Y5ht!4-{GB@gCiJ@5I@-p&A-5SbR;3kScn5I
zw@5O$-H8n)+b=5cV-re+KLk(1ix7-mPilZh4#A7_s!->kfkLmZK1zvH*d@=3%b~Sb
zY2Enw(be*CW^B*Z^$hSwC8?lajY^7wz{X9B<NQ4yNL*OfhawL2%5z^pf2SX#dt8Xi
zfTh&p9tHK=F(!d4U(1&pq~z6uj@;-qMWtAZslS+`47zhGBj>`GB`x|V-OUe09gz1r
zVvea#qiiVX#~0u*d4YhRLb;>4m%N29ai#(CLXWc+Cw4=`&8`m17`l)W@9*Q4-j1))
z$a~XxRc?>k1)c#Tnj6MTp?J}wQbaiYJ$Pv%;+e;Q1hA^0b@cxEBkU@I(hE)G6#1HN
z@|Btk$9ilc0@*q|3w!OF2$>Io_m5K;8TxOIQHTOxDH)o@W$DNhQm4;O69~>=CvVY#
z!mCjX*Jt|4gAi;Qo^t|s2{XQ{7{Zw_b2{fKHx`W9bLfGnuf%l-Z!Be1zx1HFZhBxR
zdHv(IT;K<OU8>6R>FsbuZRPpHTOCO!L2X{&{tI;gnjoPKVFTUwltUs2>Q<b2WGob-
z^^x(#bCtghrYVRFvbqHfT4lH3sl~Fh!a&bo46^=RNjO$vtnnO}vQW^$z(9@D2CPd#
zmJn(LV!Zc0_(>ty54Mo|Yhxz<PhP!{5q=S+%#FO9nAFR7t+!yR0?0;T=S}mkSxzo7
z-u|xtWwl*XsSo_QV$xA|eMNVNW5tEQ2$IXQK~ovd){fp0M2(=d={zy*jcAs%ZE(0h
zp0%x8`a3<}uEq*iL0?j!OjGmT@lEDHP5Mw%LCY%bvqGVz=fChHAIl1{&0<RpiC>v3
zsd4}+cgyf;^K%$@s1)A!Hu|%nkd=?y<f+DC=sOW0e_U&z$eQU|WmR0EJ$MuqYNa!?
z0Pc<>#}GSk3+W{kX@s-Gy^-!o3Aa{l)e|%tM4lv!KxFDCa_Iy+dvHUIE9wWe!)wx$
zv-1HTnk>cy5XHB@A&R={c6NI-7TXM6!`FYHY{eA#)eN`(-4(|8$(}VGoOEBtnFT}Z
z)RO5@l3mo638(kr8)pqs8`N$H4Ycxv$?rj6Vpe{|3kkO<6o4cZ78b78%xFG<ORpXs
zeX~&GTK&orGyYOs&)9zmaFyr|;mHur%^u2?E_3+vkz9Y8H!z!?ed=i6@6zp{vUYRU
z#;4lmC^UP>Ms!4oJ<G&hEHxwcRdiw4b+1yrFPx(J`5Zg!6|8Z(Oy;Hd<9j_QY)xkH
zERv9CC0+qGwRD^1CN_3k0ekc%;aRPZ{C!&Gnn(7Ryf-c&-8o8aI6IH7I-$39Xn)HZ
zeOi{rtKt{_y3Oya?tZ+J;PBlap9eO;7Bg)+XKV4m&Oin41`CmjkcE=Ke?Z7W18A;n
zXO(Ns@K<()9U>svI`rCAwfdTBOA-0vs)F!-L-RFz4eC%l+%BKVeRR1wLdPFiz!8LY
zqD%^AFX@|n^@u|SMPkXJ+qwyvrT5SMT;{g|WuuiP6_gHW8frTY0@7?QerEMnZUBoA
zZwd9^J-&_=N}ngg9~*nB`yV#i+>hJ)W~3^33|R!WXC53YzHOFR_NLuM?9oWVL#q~7
zGJSbbxTef9Nx2_Jp_EN6;wbLV<^Y`%%#Om+oEHgAKR#E&*(Z1Q&>1oH`*I-XXr(C9
ze+!DvAcCR}aucGGD!+@FBy+-p55u>99{9XNuLYo3>D6&@ISFFRj-Jt(2BGj{tS6-d
z&wO4myMbhtP3MF&l{<Crp6FPW`L#vk>{&0Ni}T0JXoD;0iK=G1UNufg1Pv)eYE<u&
zqa-WG*;aJ<MO85xB>p3wA}wNDjKCd56tLdHP4wf04mW02{HzU0;3P1WEp&WOeOEjb
zw&R+#^wDJ~p}vbqTg3L9U?v(YPVZ#;lLNIuj}Ll3&%^l{eEP92R>py5#G}$d!<F(+
z-$c<|-vrcsz?3F9S!RUfSx6^1K<VM;v@m<NZ>ln0n0u046UoK)-3_#BH2&;9&{kJo
zH)G!$s&Ph6dc$itMrmy!Ry4lEI*`%mL5A$3AYB%O<R5$DL#$UopH~5P2_i<K^|f`$
zy=c*scNSCMC@Ztx|DY&Ths)RNk0`Jl_p?Q-qzr+e++UhCncY3amUxn|?DEEl-&?m>
z6e^?4yB@$t?tMrM>LsTI^yn=LUSaX%EN|X!ABndI%Z@yWJ1zSC!gU)=R+khD9ciul
z&G!+<V{=YJhSDY=k8aFa?h$)u5qBToXF3BG`N_W)*=H1ucrc*G+QhqOQesxg*Kac!
z5@|eo(|1Cm@Ro4Y;(0<=rvV36Z{obW**D;dHM4rA%i@*AB?CvKDaO8RzS_NL4vjC~
z$VOMv7h%0V%R?kR1GYBEv`|Ig4}rXq3N6l9-<-~zHR3m8<O<?DM0-cBKr@^E;x3m1
zL;JEn5UlU3r>2_EUyOrBP+lpRJI}H36ty{1H#KMKD*P8vm5NWUUu@IUitm6^zuJuJ
z__u`42m1K*LFg>OT#)|gQ|&Q|&jaY=tJGQ)r>?O$*k^jU4SO6PUAnAkH2<?BQ$f(B
zW#EK-EWqePAr+){{5L*R6rt?8^-x2|NTX&Q;%Rx$jLZz3*<7d;{$N}0yyYkvbCqAH
z6rGV~aQ9VD(It^C{m?h`a(asXeAqT)6~U%%XbB>He}it?^$$V8)+0>YQw!`xGs$nk
zDPBolK}-hJ-!!BG(+`v~Xb;-bqSojS7`|}2?03D+&<PbR-klp+_GpOpcQesF7Oo79
z;+nRkwOHx_3>IN>uNu|WlhHah6nha5<Yd><Wq>+ofaVcT^Z?BxZDm_(w8QX90}HLh
zuS-?>mN|cM;5{zYH^WC+uf$F*L7uLeeINA5;4PFb=Oagz)`%waphabuUhBk=Sh1%6
z>BO1v&i66Pit~2#ESbt4HX8MrV1|fmKls;=IZlNn#i6i`_C@Yt<HN>5$g#FuFZE@M
z-ahC3VMg=k$G>{{vF}rJF`9*ajgbmi6@V6phoV70E&gp#jKtn6?HAzUkmzr$bCxMO
z{Dhspg+&e5H4e&L|FeSiJ;92rJE|F!{MY6AYx@?{27LO#IFRbA2{ZE$cSq<UB&`R9
zCku@|>7d32>I87w7J|z!V2gr}6ZwI347z175fqjZj=v@Z>mA^<rrEW5^rZesA7D6R
ztBjXu9}Q54-Y)mxRQ?C7ILYd%>vvbLim^o>yF1=!hB76@eq;8gu@EOGbKU`sL?E;`
zrV1E5|3=OU&F;PZ^PmT`j_hSh?LxY6F+_w^z6rW;Kibx-t36Cu&-j9{k^K9#cqpXd
zF60NWd;VJ_2FP|Q>n$D}0f^%fAK)7J0OUh(yPQaSGstyR7326tko?Ok7P<fFxb){g
z+qG1B&@B@y>Cku2X&YnOAq0U(eC?i+Hsd!?=ujEncXs~8luwK=ctJR``yUjV4MvAj
zv6plN9A1E)ahJa1o6JxI2Q8T3Eu_V*+zo83)BikZ1=gy+L43M?j@iItX^r4m$$Qy$
z(Iy9v)J=Bo_R;P`lwr})?dx{exzcw~JSpwT71-SRi&;QK^?5b)N;w8mTzrw7{V4Qt
z(b@+g)~n#5Dga$4x`G~}q?Xnj56_|0?2unMLn-*d#(v3D_5zqNt&D8V)~YDkS%8)F
z3G7&Ouko+j%yN$<H_hL`5lPuX$*&o%@1=Gmzium)XFIh{q+Katc0Ej#5efb-Hi}mC
zz$YQ)4ID>nECe((RG?Z!lk}eYC<GQN-FC6OaOrYw&b4H9@pW$-L?ih1)O<`OU6pj2
zWfobysV_6grD4L#y{l~sS6q62`HQGK3!HbI2B&&xg4S8jIYtQUhT%Man+FvA7zUB(
z;D1YW=xLG-qOhBgD`chH@u=kG_>WxZ*0|aKJSxE0Z1H~Ec;$?vp<+u_qWNT<nak`k
zV2iCF>btS3AO2WLedg-mWwG(&>9~g~7<V5gn&XcKKBA%}$VV<pL#vq3G#2JHVC5{a
zX&v8+2*64Ph+XxHP?*=S#lGb%3eHzQ=x7>4+7#pXVnpRi>*cI95R=?axkd;GdhEWx
zMuQ=fJFjlo)&a{qb(0ATHGlz}{Mvu$raGf&6w&ZqZ+GZfoaFILoo_Qv0CF_0S+i4C
z==x9<N-NA#xR)O3>UO+Tu~GM|s?|fof|5%sG<5y0U+j*43-xxq5ZAtC1)Yt%bT$~_
z&_AT^$cKjIEFtwYk~3_3IB7#K5`Rv*a0=3h`0@_-`18m7AL$L%Qk3&Xy$;7I`uzZ7
z3{6__03mG}4Z?rRENxW2a^;eHyCcZT{DuoAk>U9kstexw%B)Kf5W9b>cnQb$h);`_
zm0Gf)wS8xSzT}W|hdgYcD<3X>_`QKHh>jS{ZX+g7K4O2MMU!^>cpMKVcs_Sf4V80>
zb{NI2^Kjo}gLyz<ZKKNhVDg=7r0@_LOz6<m2G7m>NBwIbV(wgTt~G9DL!;BZF|gva
zi)1lQU!}Dg%QWnd#?Ts-wjWPrGGZ5Oz`%-6gHIzE?Qw%q&$H2la6N}H><qo($Jk5C
z)^|skth{N=b8T{5*Rdp0?E8kYiGdL89Vrh)+0B$%Gvw3)$3pZ>`FA7P$>#4ehW6=?
z)vZ=hJWJGSDxsExIez<QM&NUW3!gKLI^P>6EWbKWjMhZB(hW^f;gm(Ci#hblnNuaq
zRr-L)3HrE?>HSuIv#yYksEYGf{o!<Qe6#?p`FqO8*c6O&fm-59LFNZKOW|ym%wtg?
z`Ul(V0#5W3#+ShAG0=WP`V_BFjPDIL+rS!5RI*LCx}oPM8~!%+=KQODDcZv0K`_Ru
z2N_<3LjprU%hTS_KxbRgEd?Wc?&UjTB)!kAm%7uTai&%THj@`}E8{}xNBI(*rXkSL
z5Ec?2%xL!%Blgbo4|@kOJcYmAv4TE{iigm#)<*3stnW>ZRuASfC68bDgqRFXK(EL}
zb4@_k&F7kcZu8_=gb=O;Ys%5rtYW=hT==1;rA{T6bY$ca?0Xeif{chy^fBbO{DlJX
z$p^KW@&Pt&DUIoQy5Gh!LWT681SpzT>_~q27~qSdC<viC5@6bvW^850gGT=gOq*7R
zgSC1Mxh0Yr2i?naEbl_YxU6ZDhvB2f&;=K*`01*>s-aFLjw>J3hw&AzQ0IS!(~&s@
zs55%!&l=F<&EZM!V(s#>^Is`Mw=K?nc{<J3!J``JV35}MAM<Dg<7Za0XLtYK4ymCj
z^Fk<|_(l9yjG{hQkLfl9=p$c4$A(GW`|otLg*DWyPfX%CdU)>LKUC;mT<Pol?H&h^
zbQ&_*1~rq;SD^!HGy)4rRbNP|O2aM!iYXktn-m~h1I$lQIc))4Z?ij4tVn1dX1uIx
z_rdl9U3z!?J}&d>+JjK6On!=Tt%D#8mEdbZn=BD2;d^n{QII_)=?*W^8^JsZgot1;
zsz8azLp}?#wt&ikD*8Q9Br~K2b;=?%0x^XQx{M`2O!2rz5`st*KuqTc3BP<@r#N+Q
zkw0?L0H)Fhwe=vVt+}zB4?VB&z(cb<*c-I;D8fVgnj7Je13a|HTB;n{x3=H(`G0`)
zK%eh!x8pmdBlLMaEWqbYdFj|5YUw=QQ%m1tOv;k)7pkuCGVkT>&AticWR0V8mS1j<
zQ~&*c_I*H+w{pEXA2KLqx+F&ei{5)lzN0PbNoQ7`@yyIEO_@B|Wpe7VTFuw0&)~qa
zqEnDyU?W5Y*s)4F2pV9a1s0b~oI(WKX~fj>nJj@|TQ9lhvHjp|Se_SB5B(`Td5d?e
z*lAXmIKU|9uPVxURRUAI-h9bEcl4u!>g%t|;sK0uU$CIyPTZ$dV5XRO{u-!yhe8J(
z<XM3tK8jGp3!gWhwK5dW*kT>>2-N-OP>%9_=<yzQf*6MaG%DmXb`uAN%J~XKIr$}p
z`98H8^mBW}#8fYiZV4^}xN3C{Ji|F`y&4D`qZQ<f>fr0%Rnk5yZ@5kK3`WBoKT39)
zd?We{w)Daz7GpAi)s@EHR8dq~5|Bj{sQn2mZRarHi{~)lcoR5F_-kQnlmIN0tq-|<
z_kIKx+RA#y)GEg+a6FtEiZ>_C!9x8cPh9*g9(uZ_jjrx3JTA<~VE=r~frJJmRmz|{
zkW@L~Y5-hz2232h&59kv4+kSTXAYny3lKfp<?e+DL~k%PbjrDTS@CUi|D1yjGNR9&
z$fhJKSiG$Q2AQt}Fvz+ieTNHz?8lbJo&VDHxNn)ta#funyaeJQS}T$3Qk0v?3Y<s>
zMpi++Sm&cFK_)j0^7VDqJ>)cNma5&o;2C1oEC9w*h@z8^*@$`!_ryoudGdKEXi@j>
z(N@fUv-*6k$uu}(B0{{sxa($hxWF|t=#A+d`fNS4&9QuHIHUJn_OiurAPjnOtpfr5
zk0QZS6v75%SpXAI&k|4%WbGM~aRW5{VLzV-gBOmyXiSU2d#F_J(X15`rci#=l%mWj
z;C*qI{CrI<Fe^XkT&1?EH6X~M)7L4ZFCKSI&UF6n>o+aG@NbTT+q^Cko@+@p<RNBL
z*mAGAik$jX_|CeZA)JHowE=|BG*7l;Uet1Fb42a(^~?CgWPLNFGXOpc9jO2xCBWCX
zVzxgAfse*^T(W<>W3kxu{+akX0lI7<uLlFHzCsuPR-KlC$A5N7Hg%icdv*Dt?Wmn~
zHnbA}-u9tI{6Z}x9b_gerlw5UH)|C~tjo)}yZ9>lxz9}~_aCQ8^50o6C;%T=kB~K-
zMUV%m@?xX0)!Waj=iZ*yssio;KB7C{D<S|J&c`%P3_1B%wT-2^d<c^C5qDhsG41jh
zzw6%^S=z#1XqTz1eep41gaE<lwxhAwLL`oMT=P!ThWQs;RSsQC0*znyB&6G~Cm=!5
zVFaI|GYCD9EC)(77*I>8EKcf<wqgsbL<Eo4SY{dCzW8V#!q|1|DFj5M3Zm-%hp`KY
zNMP*tUdDvL?2Nai%Q;{TVPeT{wtCI_uhE1Fy0lx@_o*}PPAW@kvMughHH?gH6ByjD
zf8TzHX8^rD2Cm{iB*zBPPQDP!H>rXy;+>+{?CRV+o@|fkU=KXd7S@7<cOdNUdP;3A
zF^K<K8ls+do$pi*X$m}A6jH|&0`HSK^pn9C7lDo<0^o}wkCt2^@7%UezUYWc?jMXj
zp%DrTM@Jlb`U%3N3+dptJ@t`KdOnldZl`+b@som`Zd$9)Pd}>ymK`Mz1NRZyU5dOS
zNCxMF&mRu_uXdN?a9w0d*#=7yL`L6A(qrD$*<W1pqNQs>qq)z{DK`2=f5bXhHXx%F
z{)3DrNV?!%j!)h`;&PL|*V${)`|U#35Y!x^Jp$PhrX7}{zz$T(<z1SkrP<lfn>9+%
zhu*5>=7tz<=o_Hj(ix+3)b+V{+6obNBYphH4$(p9VX&U_X8_-u$`;<iCPbJ7AK~+-
zwq4&!ED*Jgwf#}CO8rE9@>&Rzzpwvy2N=>3Cg=kD_xVeJvIl=V-hJ-;HC-S0-$O&p
z_+mBS<{4xm`7Hu(Dda|-!5XB%jI9(5cH-~Z5EHXIkyl~=`9O-77YVnjahEf*1SR*q
zJC};hr&eI+m_9mh5qcO*Y|{UyPXS5}>-j#|6Et}7pMeN;c<lsKf~nK%F#o(5f~8O(
zfHI~1JzQgBF=LK+4F=4aU62%EiF-7pz?j+>$}*+O<j&XKBbkTZ<bHitn^K$qA3*)I
z3tTKxHA-x-<Jqi$Yfac8+6ut=F^JamiBvv!3n-Qt(Iiif5hToD)_|iZoGlScI$+qq
zt$Bk#Drh;;9;*|+gj|eR+c!Q{10mdhQ629i9U2FdP5-7k?zOs1%Pp1QdN*Nv64jJn
zLNly&#}Kq<T7+e6F%5ZOzj@m{l;h2HZ>eu)j)nwcSh#wQ*4KFKF=~t}E!uMTQ}3z7
z!1W$38W%`$V=wQ*_Jx`|LtvM0Svo)$)`~g1tgJkH&`IB=U;!|YU4Vg1O~!^3#}Hp=
zYR(s;LtKcY8h-Q6{XoME3ji6EehSB50cbO5jt8&{HQ_bj@V>`FPWTXlkpwra(z%_2
zru4vyh?6yleH&RN5iv|{{eqwu!@UVa^^dA`jd#|K;qjc=>V0^$r9vi$y30kW!U5C~
z0hf-wU6E*x*<gc#`aWv_9g81d%kkj<Lc!8i!rlQFuL4{=G`JyLI(T?s%D^>&)T#}7
z2}A&vptZ!Xrn^CuDFos$Vc3%}5TG5ufTR$>0z~a4l76tRf7fxPqX0`=bk1mnh=$iU
zd_4xC-)ZT=NZX1j%FJ5ExJM6Gv7NM$<sQZKH96`wC)YeyF&rRi2>lWMbRYEeIs!0)
zFz}!?Mub?V&^LlCiz?8uzQZmw!AlU+9oyE7oiZ^kaX8DlcHL)1)}sAqJ7*Zti2NMa
zjRB_O!V+LA0^krDYFX_!TQmdCoxUG0p5Ee|4Gt&SfYMOb8}<uDkbxsoR;U}iHGS~b
zb{9Jk*x26isw|M-CHC1Sss_jUFWr-*F<;Uk5|jQyjSi1K53xjZq3~~E<asauM^-od
zzWuPU9tb#j=P`f854(VD3>|vVo+)(z(a{qEAf5*u{fcCpof<1v3ZXRL-s#5;eY*~a
z=`bv$h%gI{w4&5Y5<Q%dR+LO7cJhuWIgl)#-Wxyl7+GwDH||@ihLj~JGpmMvyqeq%
zkI(hFvjzue&4e9a0<s<}KlhH!jaYjK!;{)!a*<;%6=tacAj}))g$4CtLq|*1Nm}f{
z@Zn=|5+6LarMz9bvaZT&<Gnk<K5QCO0a5Q3R#1h9Qncx9TnoQr4_zJ3Tb{=KCJod5
zCK-ujWJC)Pr+AcX=uFxTg=QB#f%_llDEME_QMAB0Qa9h!QM!!Az=l#-$V`God}$)K
zLMbtPF1VFg)gk6_R5x0{e?_tAkV%2bq>3biUnojH@+@>i;sXXP|7X)W51WOMjv-;V
zt5(!_>$Q_6KK5hFTq0D|A0NIpZql$rlvxA5N*|ghX{`vp3M4565y#vHi06tWLANTc
zA-=;O4m5$c(T22kB_rO3tHkRL($+VNb9TO4J8sekLs8LxTBZikw~#!a@4<Pq-lt0u
zJIU5Uny9verNTnQ09`vU%K3!*D)#pD)X)3tA6Wt3SI1(^Yj?^XkF+3y;GWMH-1C@v
z369scHeG$V=d9=VWmd~d3ia=wiJpm+Mdkl55N&~E7I0F3j_3pZD)rA1eXv>nYewI*
zTd-}NfHYZOf$zZVYa#6hS%SRbU~YMmLbF)I%d^YR1hKq@M<K7P<6O}#!?op6&qDru
zFtB4{c>O1T2g2cnFo>p5IoskWgjQgPcOyZ|=6c|y=p}J=ruz6w?|K+KSwR)K8p}?n
zRJf3oAcuJu^1uR$9tWIa$#ihHqo|-faMR~Fr|~~v@~~CG3IG)h3Z_6$*}ik<iara9
znQx+$bVCv~;uh#k()mg?|NQB<SoTBs^jwY+6sgQ0%LD{8Z{fCQ(@%L%kqKpBG(VDm
zLSEsvfCrZU`+akywCO2cs!5FgV$yjwKkd;csQ3mVq`^wPml~UvFTXerkB623XY7sO
zj1M7PAf2C)2$Isd2DIVcR!erV7%=VlT-jNB=G>sug(?vLpO>4ln1xTS%|kY8wv=G>
zpyEAr9ZWsK#*E|In|mG=^a4bE<}NLy;MLv3qxW+d59M=frLWi=%8cJM)-bMaEevMB
zm{m>tN1n3%CDaiYTocGsmK@xiuu$=arhonWbu)1_%H8k)h4KZ+oP{u5PMH-)%lfz`
zO4b&kqS}<(y-g6M|D=IW5$eII*~Gg`79VoQaHvmRITEff+SI-)OI_IDqf_m%Lq*49
zHoaSM7&Jy6Fu#|32yWSNNIT2F<I4gHj}Af8?KuS-lKJLQDqKlRf8SNb8ou$LcNzIz
zh!Zo5C80Riky7&lw&-Q>dIvkyZe_R~bnou^SnRh!=8c4rfr`gZtM!bbu@RwJ8?FhP
zQHD_=f+}=<L%?1C-HoHZ85z1`2@YPrrFYYd3aCi7p?hILeft<wE`kc`u|h_ntLFQ)
zZe@QXQ`K+)S9F|oK1puENTFc}S3CHxjW%*7@$EDwEpq%-rsHl-5K~84V*mR*D3`x^
zqO>T(K}G!M3H}YriBYU4Eh?o$q?;cDDkYGTFPSwVH^DJ`mI8mLcLJ%DVHdS`b%HL&
zY5vS5Z+20&(5{7b8{{})vyMKd)+>1T$jeV$IMyP_<+WrV*w~q{*-%Civ-RiJ@hg}~
z0w*1^fsCEaWQ-siXrODh`1lV)`^eOJqANnMTj807;&ibPYiyFjFz#N$0XQY0(=7oe
zyS=i%d$l@b@xpIqv_jm-Vb)2?2Pg0cBvT=X=lhcmgEWPNZB^LLUK101AD@3@CxIdi
z)oI%@RUKRzT@*N3;^okG%)#wrWUipB`U+6Yoo-9ZmId5HgJ;|GC}n9Y-J2Sxgu7g-
z_>Ez0+0fIZUXZk-;fUEzjZj-ni8be^Be6R__CY2gbSp^?YHMR15^gQUj=ieL+)Nq!
z@G4$vW%&EcHnpmNrAgw-*dd$UT8%5jI9cojyjW*{AA<2|{KiHL{lu_y=oc{b*9HUe
z#J?LIWhbV$%$g3#!{kXGYZh=>skzzth|rArTWB`pJOo4nI`YTKD@Z~OCyNd4cl#8c
z9y+djb$@wNQF>yZxoWP@4`FBCU2AP3W!uY^0DTm~Uu~ECeaqvJTaMy~0Z*t@FjV>X
zI{w6UxJ};X;4%>1M#f3&-+;=Z2xX#)*yk_jVngl;*VfWrLpwlGoBqgfhVK^;F$6?w
zFW*%+ETF!Q1;n?%V<tt8zq@O<i$g&+nm25;1IH2S>oXa<c_Eeq(K?N=pX!<MmyO@~
z+BvaAFB3A>cnAh^>&y-0hVg!qyc>K%JFWLt{XxORQt?5OFCaznQWIkTng$HpBFX&C
z{PB$V_9XjK@cD<QSU*8Iax9l#(5Q##K0DaivGc?xXdhsrIlhdd%C+I$HwG00S-N%N
zom``ORF<xu+8#*_!LVi<H5afzo}4I{9FNUk8Bgi;Jy(OziQF8m@FM50t<ijsyDwE)
zTS#{9un#2Z>_C20;hZ7gMXAsy9R#aDKm=M~ID{tfT<O1{IPB!JiGNRkw&?iIJq+8&
zlM}cHtkL=tWOdHn^iP~68<Xu5+bnqJRz8pFU-M8~*DAgcx0Bk2pHDgi1x=k@*Fl36
zGk*8Nj5!R)t?oa1y7Yyt(5J>NvZ$T^{t=p1fXffysIwJ-bEe)~f-AQcg1A5bBT38G
zS92gH^+4CggqU~L21!>G7l?m9cm2*<t18ka_%2jv{=D2>iRNlTz}HIIs%ZQj1<??|
zxy--?Rc8M}@nxpExhLWg>M$6Baa%6s7wS^U6g+>lZ`-5)AHLbndKslxKNyzo+05<-
zA(pQu@lAw$bbDWKSMpPr1K*0SWX1T(Ri%B>lWllmBVM#t#C}}e<h$`-Y4;W|5kyG_
zRhX|%vgO^+zw1~|M!^CY502a4_xYe~`|?%P0gHsRK3mk!W~-rzf$OqD+%|!@jsW-0
ztPk=!f&~x=m6gGGUg044nT0`Pd=q@rUF6*qP~stPUdM*hO7IWv@v~<9_jJX4eHeLP
zpla8PjWeD_MsmB1W)-hHFS~QuRhhaGMRC-q6J^7VzwV(8c<IK;BZ$&4D*bq(^ZK~d
zfCmS+5RM<0aMZ2yShjja=>F>;B^f_qaV77v>2PD>!A>NV{zCQb<*hoB7=pcB&pA5w
z-?w29J?YUz7{{~^^$sLIX+Q9-BRne#S*b62vW@1kr<`q3&xBi~Z%>GC+adbJ4r)?8
zluE*7sQV$)%W<#Ov|%EIT9mAQ;DbSinV(LS%80&_T)lc+F{24GIM~P(9S(tosZ^rG
z6dPp_U1ywp)8ZJe*|+PQHz`S#Y3$WF8ld9*>BYlNn+2;{cG^f)osS&Z@UVLb!qS>b
zE3<96FIx(fGi3&Jf*j3VUDD1(0y{8KV^SEoc`zlUe$tP3%i6#juU3lrzCOO3qH=sv
z9(<v^&j*QTerP|~uuK<O#(M!8Oge#bd}QS>lshkly!>0yv72?NptVUdaO-d>Z~CBf
z!+g&ck-v~NOlQV|U+(t5Eu;|n-Ha3e;;bdfvN^y)=dRgKFc}YC<QIoOxUD5-m=!Cu
z3w^}MJ=Gx^W#AAUAd9-OtI-A{3GS_%wJM+&>|RsQ-}o}Dx*TRQWT<aD9+WS4tKDh&
zTshh{!=|>{4{wS<j77P&9RJykCyJ6{EQOfy65qyB9c2y<tvC7ba9cm4AH4#FQw2Yu
Uw8OMP`0;~il=lCJpI`0&2Ot`W?EnA(

diff --git a/release/src/router/smartdns/etc/init.d/smartdns b/release/src/router/smartdns/etc/init.d/smartdns
index ca6c0149e4..367af38a10 100644
--- a/release/src/router/smartdns/etc/init.d/smartdns
+++ b/release/src/router/smartdns/etc/init.d/smartdns
@@ -34,14 +34,14 @@ test -x $SMARTDNS || exit 5
 
 case $1 in
 	start)
-		$SMARTDNS $SMART_DNS_OPTS
+		$SMARTDNS "$SMART_DNS_OPTS"
 		while true; do
 			if [ -e "$PIDFILE" ]; then
 				break;
 			fi
 			sleep .5
 		done
-		PID="`cat $PIDFILE 2>/dev/null`"
+		PID="$(cat $PIDFILE 2>/dev/null)"
 		if [ -z "$PID" ]; then
 			echo "start smartdns server failed."
 			exit 1
@@ -57,25 +57,25 @@ case $1 in
 			echo "smartdns server is stopped."
 			exit 0
 		fi
-		PID="`cat $PIDFILE 2>/dev/null`"
+		PID="$(cat $PIDFILE 2>/dev/null)"
 		if [ ! -e "/proc/$PID" ] || [ -z "$PID" ]; then
 			echo "smartdns server is stopped"
 			exit 0
 		fi
 
-		kill -TERM $PID
+		kill -TERM "$PID"
 		if [ $? -ne 0 ]; then
 			echo "Stop smartdns server failed."
 			exit 1;
 		fi
-		rm -f $PIDFILE
+		rm -f "$PIDFILE"
 		echo "Stop smartdns server success."
 		;;
 	restart)
-		$0 stop && sleep 1 && $0 start
+		"$0" stop && sleep 1 && "$0" start
 		;;
 	status)
-		PID="`cat $PIDFILE 2>/dev/null`"
+		PID="$(cat "$PIDFILE" 2>/dev/null)"
 		if [ ! -e "/proc/$PID" ] || [ -z "$PID" ]; then
 			echo "smartdns server is not running."
 			exit 1
diff --git a/release/src/router/smartdns/etc/smartdns/smartdns.conf b/release/src/router/smartdns/etc/smartdns/smartdns.conf
index 27b2212112..c5af23f2ca 100644
--- a/release/src/router/smartdns/etc/smartdns/smartdns.conf
+++ b/release/src/router/smartdns/etc/smartdns/smartdns.conf
@@ -1,4 +1,4 @@
-# dns server name, defaut is host name
+# dns server name, default is host name
 # server-name, 
 # example:
 #   server-name smartdns
@@ -22,6 +22,7 @@
 #   -no-cache: skip cache.
 #   -no-rule-soa: Skip address SOA(#) rules.
 #   -no-dualstack-selection: Disable dualstack ip selection.
+#   -force-aaaa-soa: force AAAA query return SOA.
 # example: 
 #  IPV4: 
 #    bind :53
@@ -43,6 +44,14 @@ cache-size 512
 # prefetch-domain [yes|no]
 # prefetch-domain yes
 
+# cache serve expired 
+# serve-expired [yes|no]
+# serve-expired yes
+
+# cache serve expired TTL
+# serve-expired-ttl [num]
+# serve-expired-ttl 0
+
 # List of hosts that supply bogus NX domain results 
 # bogus-nxdomain [ip/subnet]
 
@@ -97,12 +106,20 @@ log-level info
 # dns audit
 # audit-enable [yes|no]: enable or disable audit.
 # audit-enable yes
-# audit-SOA [yes|no]: enable or disalbe log soa result.
+# audit-SOA [yes|no]: enable or disable log soa result.
 # audit-size size of each audit file, support k,m,g
 # audit-file /var/log/smartdns-audit.log
 # audit-size 128k
 # audit-num 2
 
+# certificate file
+# ca-file [file]
+# ca-file /etc/ssl/certs/ca-certificates.crt
+
+# certificate path
+# ca-path [path]
+# ca-path /etc/ss/certs
+
 # remote udp dns server list
 # server [IP]:[PORT] [-blacklist-ip] [-whitelist-ip] [-check-edns] [-group [group] ...] [-exclude-default-group]
 # default port is 53
@@ -121,8 +138,9 @@ log-level info
 # remote tls dns server list
 # server-tls [IP]:[PORT] [-blacklist-ip] [-whitelist-ip] [-spki-pin [sha256-pin]] [-group [group] ...] [-exclude-default-group]
 #   -spki-pin: TLS spki pin to verify.
-#   -tls-host-check: cert hostname to verify.
-#   -hostname: TLS sni hostname.
+#   -tls-host-verify: cert hostname to verify.
+#   -host-name: TLS sni hostname.
+#   -no-check-certificate: no check certificate.
 # Get SPKI with this command:
 #    echo | openssl s_client -connect '[ip]:853' | openssl x509 -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64
 # default port is 853
@@ -132,9 +150,10 @@ log-level info
 # remote https dns server list
 # server-https https://[host]:[port]/path [-blacklist-ip] [-whitelist-ip] [-spki-pin [sha256-pin]] [-group [group] ...] [-exclude-default-group]
 #   -spki-pin: TLS spki pin to verify.
-#   -tls-host-check: cert hostname to verify.
-#   -hostname: TLS sni hostname.
+#   -tls-host-verify: cert hostname to verify.
+#   -host-name: TLS sni hostname.
 #   -http-host: http host.
+#   -no-check-certificate: no check certificate.
 # default port is 443
 # server-https https://cloudflare-dns.com/dns-query
 
@@ -156,3 +175,12 @@ log-level info
 # ipset /domain/[ipset|-]
 # ipset /www.example.com/block, set ipset with ipset name of block 
 # ipset /www.example.com/-, ignore this domain
+
+# set domain rules
+# domain-rules /domain/ [-speed-check-mode [...]]
+# rules:
+#   -speed-check-mode [mode]: speed check mode
+#                             speed-check-mode [ping|tcp:port|none|,]
+#   -address [address|-]: same as address option
+#   -nameserver [group|-]: same as nameserver option
+#   -ipset [ipset|-]: same as ipset option
diff --git a/release/src/router/smartdns/package/build-pkg.sh b/release/src/router/smartdns/package/build-pkg.sh
index bb9c5aaa68..f3e6b36161 100644
--- a/release/src/router/smartdns/package/build-pkg.sh
+++ b/release/src/router/smartdns/package/build-pkg.sh
@@ -13,8 +13,8 @@ showhelp()
 {
 	echo "Usage: $0 [OPTION]"
 	echo "Options:"
-	echo " --platform [luci|debian|openwrt|optware|linux]    build for platform. "
-	echo " --arch [all|armhf|arm64|x86_64|...]               build for architecture, e.g. "
+	echo " --platform [luci|luci-compat|debian|openwrt|optware|linux]    build for platform. "
+	echo " --arch [all|armhf|arm64|x86-64|...]               build for architecture, e.g. "
 	echo " --cross-tool [cross-tool]                         cross compiler, e.g. mips-openwrt-linux-"
 	echo ""
 	echo "Advance Options:"
@@ -26,8 +26,10 @@ showhelp()
 	echo "Example:"
 	echo " build luci:"
 	echo "   $0 --platform luci"
+	echo " build luci:"
+	echo "   $0 --platform luci-compat"
 	echo " build debian:"
-	echo "   $0 --platform debian --arch x86_64"
+	echo "   $0 --platform debian --arch x86-64"
 	echo " build raspbian pi:"
 	echo "   $0 --platform debian --arch armhf"
 	echo " build optware mips:"
@@ -35,14 +37,14 @@ showhelp()
 	echo " build openwrt mips:"
 	echo "   $0 --platform openwrt --arch mips_24kc"
 	echo " build generic linux:"
-	echo "   $0 --platform linux --arch x86_64"
+	echo "   $0 --platform linux --arch x86-64"
 }
 
 build_smartdns()
 {
 	if [ "$PLATFORM" != "luci" ]; then
-		make -C $CODE_DIR/src clean 
-		make -C $CODE_DIR/src all -j8 VER=$VER $MAKE_ARGS
+		make -C $CODE_DIR clean $MAKE_ARGS
+		make -C $CODE_DIR all -j8 VER=$VER $MAKE_ARGS
 		if [ $? -ne 0 ]; then
 			echo "make smartdns failed"
 			exit 1
diff --git a/release/src/router/smartdns/package/linux/install b/release/src/router/smartdns/package/linux/install
new file mode 100644
index 0000000000..b8466b6980
--- /dev/null
+++ b/release/src/router/smartdns/package/linux/install
@@ -0,0 +1,249 @@
+#!/bin/sh
+#
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+INST_DIR=$(cd $(dirname $0);pwd)
+ISWSL=1 # 1 means not WSL, 0 means wsl 
+
+showhelp()
+{
+	echo "Usage: install [OPTION]"
+	echo "Options:"
+	echo " -i               install smartdns."
+	echo " -u               uninstall smartdns."
+	echo " --prefix [dir]   prefix directory."
+	echo " -h               show this message."
+}
+
+start_service()
+{
+	if [ $ISSYSTEMD -ne 0 ]; then
+		chkconfig smartdns on >/dev/null 2>&1
+		service smartdns start
+		return $?
+	fi
+
+	systemctl daemon-reload
+	systemctl enable smartdns
+	systemctl start smartdns
+}
+
+stop_service()
+{
+	if [ $ISSYSTEMD -ne 0 ]; then
+		service smartdns stop
+		chkconfig smartdns off >/dev/null 2>&1
+		return 0
+	fi
+
+	systemctl stop smartdns
+	systemctl disable smartdns
+
+	return 0
+}
+
+clean_service()
+{
+	if [ $ISSYSTEMD -ne 0 ]; then
+		return 0
+	fi
+	systemctl daemon-reload
+}
+
+get_systemd_path()
+{
+	service="`systemctl --no-legend| grep '\.service' | head -n 1 | awk '{print $1}'`"
+	SERVICE_PATH="`systemctl show $service | grep FragmentPath | awk -F'=' '{print $2}'`"
+	dirname $SERVICE_PATH
+}
+
+install_files()
+{
+	install -v -d $SMARTDNS_CONF_DIR
+	if [ $? -ne 0 ]; then
+		return 1
+	fi
+
+	install -v -m 0755 -t $PREFIX/usr/sbin usr/sbin/smartdns
+	if [ $? -ne 0 ]; then
+		return 1
+	fi
+
+	if [ -e "$PREFIX$SMARTDNS_CONF_DIR/smartdns.conf" ]; then
+		cp etc/smartdns/smartdns.conf $PREFIX$SMARTDNS_CONF_DIR/smartdns.conf.pkg
+	else 
+		install -v -m 0640 -t  $PREFIX$SMARTDNS_CONF_DIR etc/smartdns/smartdns.conf
+		if [ $? -ne 0 ]; then
+			return 1
+		fi
+	fi
+
+	install -v -m 0640 -t  $PREFIX/etc/default etc/default/smartdns
+	if [ $? -ne 0 ]; then
+		return 1
+	fi
+	
+	install -v -m 0755 -t $SMARTDNS_INIT_DIR etc/init.d/smartdns 
+	if [ $? -ne 0 ]; then
+		if [ $ISSYSTEMD -ne 0 ]; then
+			return 1
+		fi
+	fi
+
+	if [ $ISSYSTEMD -eq 0 ]; then
+		SYSTEM_UNIT_PATH="`get_systemd_path`"
+		if [ -z "$SYSTEM_UNIT_PATH" ]; then
+			return 1
+		fi
+		install -v -m 0644 -t $PREFIX$SYSTEM_UNIT_PATH systemd/smartdns.service 
+		if [ $? -ne 0 ]; then
+			return 1
+		fi
+	fi
+
+	return 0
+}
+
+uninstall_smartdns()
+{
+	if [ -z "$PREFIX" ]; then
+		stop_service 2>/dev/null
+	fi	
+	rmdir $PREFIX$SMARTDNS_CONF_DIR 2>/dev/null
+	rm -f $PREFIX/usr/sbin/smartdns
+	rm -f $PREFIX/etc/default/smartdns
+
+	if [ $ISWSL -eq 0 ]; then
+		sed -i '\#%sudo ALL=NOPASSWD: /etc/init.d/smartdns#d' /etc/sudoers 2>/dev/null
+	fi
+
+	if [ $ISSYSTEMD -eq 0 ]; then
+		SYSTEM_UNIT_PATH="`get_systemd_path`"
+		if [ ! -z "$SYSTEM_UNIT_PATH" ]; then
+			rm -f $PREFIX$SYSTEM_UNIT_PATH/smartdns.service
+		fi
+	fi
+
+	if [ -z "$PREFIX" ]; then
+		clean_service
+	fi	
+}
+
+
+install_smartdns()
+{
+	local ret
+
+	which smartdns >/dev/null 2>&1
+	if [ $? -eq 0 ]; then
+		echo "Already installed."
+		return 1
+	fi
+
+	install_files
+	ret=$?
+	if [ $ret -ne 0 ]; then
+		uninstall_smartdns
+		return $ret
+	fi
+
+	if [ -z "$PREFIX" ]; then
+		start_service
+	fi
+
+	if [ $ISWSL -eq 0 ]; then
+		grep "%sudo ALL=NOPASSWD: /etc/init.d/smartdns" /etc/sudoers >/dev/null 2>&1
+		if [ $? -ne 0 ]; then
+			echo "%sudo ALL=NOPASSWD: /etc/init.d/smartdns" >> /etc/sudoers
+		fi
+	fi
+
+	return 0
+}
+
+init_dir()
+{
+	local ID=`id -u`
+	if [ $ID -ne 0 ]; then
+		echo "Please run as root."
+		return 1
+	fi
+
+	SMARTDNS_CONF_DIR=$PREFIX/etc/smartdns
+	SMARTDNS_INIT_DIR=$PREFIX/etc/init.d
+	which systemctl >/dev/null 2>&1
+	ISSYSTEMD="$?"
+	# Running under WSL (Windows Subsystem for Linux)?
+	cat /proc/version | grep Microsoft >/dev/null 2>&1; 
+	if [ $? -eq 0 ]; then
+		ISSYSTEMD=1
+		ISWSL=0
+	fi
+
+	cd $INST_DIR
+}
+
+main()
+{
+	ACTION=""
+
+	OPTS=`getopt -o iuh --long help,prefix: \
+		-n  "" -- "$@"`
+
+	if [ $? != 0 ] ; then echo "Terminating..." >&2 ; exit 1 ; fi
+
+	# Note the quotes around `$TEMP': they are essential!
+	eval set -- "$OPTS"
+
+	while true; do
+		case "$1" in
+		--prefix)
+			PREFIX="$2"
+			shift 2;;
+		-h | --help )
+			showhelp
+			return 0
+			shift ;;
+		-i )
+			ACTION="INSTALL"
+			shift ;;
+		-u )
+			ACTION="UNINSTALL"
+			shift ;;
+		-- ) shift; break ;;
+		* ) break ;;
+  		esac
+	done
+
+	init_dir
+
+	if [ -z "$ACTION" ]; then
+		showhelp
+		return 0
+	elif [ "$ACTION" = "INSTALL" ]; then
+		install_smartdns
+		return $?
+	elif [ "$ACTION" = "UNINSTALL" ]; then
+		uninstall_smartdns
+		return 0
+	fi	
+
+}
+
+main $@
+exit $?
+
+
diff --git a/release/src/router/smartdns/package/linux/make.sh b/release/src/router/smartdns/package/linux/make.sh
index c200c343a8..32aeba9ce8 100644
--- a/release/src/router/smartdns/package/linux/make.sh
+++ b/release/src/router/smartdns/package/linux/make.sh
@@ -23,12 +23,17 @@ build()
 	cd $PKG_ROOT/
 
 	# Generic x86_64
-	mkdir $PKG_ROOT/smartdns/src -p
+	mkdir $PKG_ROOT/smartdns/usr/sbin -p
 	mkdir $PKG_ROOT/smartdns/package -p
+	mkdir $PKG_ROOT/smartdns/systemd -p 
+	
 	cd $SMARTDNS_DIR
 	cp package/windows $PKG_ROOT/smartdns/package/ -a
-	cp etc systemd *.md LICENSE install $PKG_ROOT/smartdns/ -a
-	cp src/smartdns $PKG_ROOT/smartdns/src -a
+	cp etc *.md LICENSE package/linux/install $PKG_ROOT/smartdns/ -a
+	cp systemd/smartdns.service $PKG_ROOT/smartdns/systemd
+	cp src/smartdns $PKG_ROOT/smartdns/usr/sbin -a
+	chmod +x $PKG_ROOT/smartdns/install
+
 	if [ $? -ne 0 ]; then
 		echo "copy smartdns file failed"
 		rm -fr $PKG_ROOT
diff --git a/release/src/router/smartdns/package/luci-compat/control/control b/release/src/router/smartdns/package/luci-compat/control/control
new file mode 100644
index 0000000000..e0feefc030
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/control/control
@@ -0,0 +1,7 @@
+Package: luci-app-smartdns
+Version: git-18.201.27126-7bf0367-1
+Depends: libc, smartdns
+Source: feeds/luci/applications/luci-app-smartdns
+Section: luci
+Architecture: all
+Description:  A smartdns server
diff --git a/release/src/router/smartdns/package/luci-compat/control/postinst b/release/src/router/smartdns/package/luci-compat/control/postinst
new file mode 100644
index 0000000000..3a5aa3a1f8
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/control/postinst
@@ -0,0 +1,21 @@
+#!/bin/sh
+#
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+[ "${IPKG_NO_SCRIPT}" = "1" ] && exit 0
+[ -x ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_postinst $0 $@
diff --git a/release/src/router/smartdns/package/luci-compat/control/postinst-pkg b/release/src/router/smartdns/package/luci-compat/control/postinst-pkg
new file mode 100644
index 0000000000..ded67b630f
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/control/postinst-pkg
@@ -0,0 +1,4 @@
+[ -n "${IPKG_INSTROOT}" ] || {
+	(. /etc/uci-defaults/50_luci-smartdns) && rm -f /etc/uci-defaults/50_luci-smartdns
+	exit 0
+}
diff --git a/release/src/router/smartdns/package/luci-compat/control/prerm b/release/src/router/smartdns/package/luci-compat/control/prerm
new file mode 100644
index 0000000000..0468c7a50e
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/control/prerm
@@ -0,0 +1,20 @@
+#!/bin/sh
+#
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+[ -x ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/release/src/router/smartdns/package/luci-compat/debian-binary b/release/src/router/smartdns/package/luci-compat/debian-binary
new file mode 100644
index 0000000000..cd5ac039d6
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/debian-binary
@@ -0,0 +1 @@
+2.0
diff --git a/release/src/router/smartdns/package/luci-compat/files/etc/uci-defaults/50_luci-smartdns b/release/src/router/smartdns/package/luci-compat/files/etc/uci-defaults/50_luci-smartdns
new file mode 100644
index 0000000000..c05b86bc72
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/etc/uci-defaults/50_luci-smartdns
@@ -0,0 +1,26 @@
+#!/bin/sh
+#
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@smartdns[-1]
+	add ucitrack smartdns
+	set ucitrack.@smartdns[-1].init=smartdns
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/controller/smartdns.lua b/release/src/router/smartdns/package/luci-compat/files/luci/controller/smartdns.lua
new file mode 100644
index 0000000000..a8bd737383
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/controller/smartdns.lua
@@ -0,0 +1,83 @@
+--
+-- Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+--
+-- smartdns is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU General Public License as published by
+-- the Free Software Foundation, either version 3 of the License, or
+-- (at your option) any later version.
+--
+-- smartdns is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU General Public License for more details.
+--
+-- You should have received a copy of the GNU General Public License
+-- along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+module("luci.controller.smartdns", package.seeall)
+local smartdns = require "luci.model.smartdns"
+
+function index()
+	if not nixio.fs.access("/etc/config/smartdns") then
+		return
+	end
+
+	local page
+	page = entry({"admin", "services", "smartdns"}, cbi("smartdns/smartdns"), _("SmartDNS"), 60)
+	page.dependent = true
+	page = entry({"admin", "services", "smartdns", "status"}, call("act_status"))
+	page.leaf = true
+	page = entry({"admin", "services", "smartdns", "upstream"}, cbi("smartdns/upstream"), nil)
+	page.leaf = true
+end
+
+local function is_running()
+	return luci.sys.call("pidof smartdns >/dev/null") == 0
+end
+
+function act_status()
+	local e={}
+	local ipv6_server;
+	local redirect_mode="none";
+
+	e.ipv6_works = 2;
+	e.ipv4_works = 2;
+	e.ipv6_server = 1;
+	e.dnsmasq_forward = 0;
+	redirect_mode = smartdns.get_config_option("smartdns", "smartdns", "redirect", nil);
+	if redirect_mode == "redirect" then
+		e.redirect = 1
+	elseif redirect_mode == "dnsmasq-upstream" then
+		e.redirect = 2
+	else
+		e.redirect = 0
+	end
+
+	e.local_port = smartdns.get_config_option("smartdns", "smartdns", "port", nil);
+	ipv6_server = smartdns.get_config_option("smartdns", "smartdns", "ipv6_server", nil);
+	if e.redirect == 1 then 
+		if e.local_port ~= nil and e.local_port ~= "53" then
+			e.ipv4_works = luci.sys.call("iptables -t nat -nL PREROUTING 2>/dev/null | grep REDIRECT | grep dpt:53 | grep %q >/dev/null 2>&1" % e.local_port) == 0
+			if ipv6_server == "1" then
+				e.ipv6_works = luci.sys.call("ip6tables -t nat -nL PREROUTING 2>/dev/null| grep REDIRECT | grep dpt:53 | grep %q >/dev/null 2>&1" % e.local_port) == 0
+			else 
+				e.ipv6_works = 2
+			end
+		else
+			e.redirect = 0
+		end
+	elseif e.redirect == 2 then
+		local str;
+		local dnsmasq_server = luci.sys.exec("uci get dhcp.@dnsmasq[0].server")
+		if e.local_port ~= nil then
+			str = "127.0.0.1#" .. e.local_port 
+			if  string.sub(dnsmasq_server,1,string.len(str)) == str then 
+				e.dnsmasq_forward = 1
+			end
+		end
+	end
+	e.running = is_running()
+
+	luci.http.prepare_content("application/json")
+	luci.http.write_json(e)
+end
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/i18n/smartdns.zh-cn.po b/release/src/router/smartdns/package/luci-compat/files/luci/i18n/smartdns.zh-cn.po
new file mode 100644
index 0000000000..338035ac22
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/i18n/smartdns.zh-cn.po
@@ -0,0 +1,299 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "SmartDNS"
+msgstr "SmartDNS"
+
+msgid "SmartDNS is a local high-performance DNS server"
+msgstr "SmartDNS是一个本地高性能DNS服务器"
+
+msgid "SmartDNS Server"
+msgstr "SmartDNS 服务器"
+
+msgid "SmartDNS is a local high-performance DNS server, supports finding fastest IP, supports ad filtering, and supports avoiding DNS poisoning."
+msgstr "SmartDNS是一个本地高性能DNS服务器，支持返回最快IP，支持广告过滤。"
+
+msgid "Custom Settings"
+msgstr "自定义设置"
+
+msgid "General Settings"
+msgstr "基本设置"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "Advanced Settings"
+msgstr "高级设置"
+
+msgid "Generate Coredump"
+msgstr "生成coredump"
+
+msgid "Generate Coredump file when smartdns crash, coredump file is located at /tmp/smartdns.xxx.core."
+msgstr "当smartdns异常时生成coredump文件，coredump文件在/tmp/smartdns.xxx.core."
+
+msgid "Server Name"
+msgstr "服务器名称"
+
+msgid "Smartdns server name"
+msgstr "SmartDNS的服务器名称，默认为smartdns，留空为主机名"
+
+msgid "SmartDNS is a local dns server to find fastest ip."
+msgstr "本地高性能服务器，优化网络访问性能。"
+
+msgid "Enable or disable smartdns server"
+msgstr "启用或禁用SmartDNS服务"
+
+msgid "Local Port"
+msgstr "本地端口"
+
+msgid "Smartdns local server port"
+msgstr "SmartDNS本地服务端口"
+
+msgid "IPV4 53 Port Redirect Failure"
+msgstr "IPV4 53端口重定向失败"
+
+msgid "IPV6 53 Port Redirect Failure"
+msgstr "IPV6 53端口重定向失败"
+
+msgid "Dnsmasq Forwared To Smartdns Failure"
+msgstr "重定向dnsmasq到smartdns失败"
+
+msgid "TCP Server"
+msgstr "TCP服务器"
+
+msgid "Enable TCP DNS Server"
+msgstr "启用TCP服务器"
+
+msgid "IPV6 Server"
+msgstr "IPV6服务器"
+
+msgid "Enable IPV6 DNS Server"
+msgstr "启用IPV6服务器"
+
+msgid "Dual-stack IP Selection"
+msgstr "双栈IP优选"
+
+msgid "Enable IP selection between IPV4 and IPV6"
+msgstr "启用或禁用IPV4，IPV6间的IP优选策略。"
+
+msgid "Domain prefetch"
+msgstr "域名预加载"
+
+msgid "Enable domain prefetch, accelerate domain response speed."
+msgstr "启用域名预加载，加速域名响应速度。"
+
+msgid "Serve expired"
+msgstr "过期缓存服务"
+
+msgid "Attempts to serve old responses from cache with a TTL of 0 in the response without waiting for the actual resolution to finish."
+msgstr "查询性能优化，有请求时尝试回应TTL为0的过期记录，以避免查询等待。"
+
+msgid "Redirect"
+msgstr "重定向"
+
+msgid "SmartDNS redirect mode"
+msgstr "SmartDNS 重定向模式"
+
+msgid "Run as dnsmasq upstream server"
+msgstr "作为dnsmasq的上游服务器"
+
+msgid "Redirect 53 port to SmartDNS"
+msgstr "重定向53端口到SmartDNS"
+
+msgid "Cache Size"
+msgstr "缓存大小"
+
+msgid "DNS domain result cache size"
+msgstr "缓存DNS的结果，缓存大小，配置零则不缓存"
+
+msgid "Domain TTL"
+msgstr "域名TTL"
+
+msgid "TTL for all domain result."
+msgstr "设置所有域名的TTL值"
+
+msgid "Domain TTL Min"
+msgstr "域名TTL最小值"
+
+msgid "Minimum TTL for all domain result."
+msgstr "设置所有域名的TTL最小值"
+
+msgid "Domain TTL Max"
+msgstr "域名TTL最大值"
+
+msgid "Maximum TTL for all domain result."
+msgstr "设置所有域名的TTL最大值"
+
+msgid "smartdns custom settings"
+msgstr "smartdns 自定义设置，具体配置参数参考指导"
+
+msgid "Second Server Settings"
+msgstr "第二DNS服务器"
+
+msgid "Enable or disable second DNS server."
+msgstr "是否启用第二DNS服务器。"
+
+msgid "Skip Speed Check"
+msgstr "跳过测速"
+
+msgid "Do not check speed."
+msgstr "禁用测速。"
+
+msgid "Server Group"
+msgstr "服务器组"
+
+msgid "Query DNS through specific dns server group, such as office, home."
+msgstr "使用指定服务器组查询，比如office, home。"
+
+msgid "Skip Address Rules"
+msgstr "跳过address规则"
+
+msgid "Skip address rules."
+msgstr "跳过address规则。"
+
+msgid "Skip Nameserver Rule"
+msgstr "跳过Nameserver规则"
+
+msgid "Skip nameserver rules."
+msgstr "跳过Nameserver规则。"
+
+msgid "Skip Ipset Rule"
+msgstr "跳过ipset规则"
+
+msgid "Skip ipset rules."
+msgstr "跳过ipset规则。"
+
+msgid "Skip SOA Address Rule"
+msgstr "跳过address SOA(#)规则"
+
+msgid "Skip SOA address rules."
+msgstr "跳过address SOA(#)规则。"
+
+msgid "Skip Dualstack Selection"
+msgstr "跳过双栈优选"
+
+msgid "Skip Dualstack Selection."
+msgstr "跳过双栈优选。"
+
+msgid "Skip Cache"
+msgstr "跳过cache"
+
+msgid "Skip Cache."
+msgstr "跳过cache。"
+
+msgid "Upstream Servers"
+msgstr "上游服务器"
+
+msgid "Upstream Servers, support UDP, TCP protocol. Please configure multiple DNS servers, including multiple foreign DNS servers."
+msgstr "上游DNS服务器列表，支持UDP，TCP协议，请配置多个上游DNS服务器，包括多个国内外服务器"
+
+msgid "DNS Server Name"
+msgstr "DNS服务器名称"
+
+msgid "port"
+msgstr "端口"
+
+msgid "DNS Server port"
+msgstr "DNS服务器端口"
+
+msgid "DNS Server ip"
+msgstr "DNS服务器IP"
+
+msgid "type"
+msgstr "类型"
+
+msgid "DNS Server type"
+msgstr "协议类型"
+
+msgid "Domain Address"
+msgstr "域名地址"
+
+msgid "TLS Hostname Verify"
+msgstr "校验TLS主机名"
+
+msgid "Set TLS hostname to verify."
+msgstr "设置校验TLS主机名。"
+
+msgid "No check certificate"
+msgstr "停用证书校验"
+
+msgid "Do not check certificate."
+msgstr "不校验证书的合法性。"
+
+msgid "TLS SNI name"
+msgstr "TLS SNI名称"
+
+msgid "HTTP Host"
+msgstr "HTTP主机"
+
+msgid "Sets the server name indication for query."
+msgstr "设置查询时使用的服务器SNI名称。"
+
+msgid "Set the HTTP host used for the query. Use this parameter when the host of the URL address is an IP address."
+msgstr "设置查询时使用的HTTP主机，当URL地址的host是IP地址时，使用此参数。"
+
+msgid "Server Group"
+msgstr "服务器组"
+
+msgid "DNS Server group belongs to, used with nameserver, such as office, home."
+msgstr "DNS服务器所属组， 配合nameserver使用，例如：office，home。"
+
+msgid "IP Blacklist Filtering"
+msgstr "IP黑名单过滤"
+
+msgid "Anti Answer Forgery"
+msgstr "反回答伪造"
+
+msgid "Anti answer forgery, if DNS does not work properly after enabling, please turn off this feature"
+msgstr "反回答伪造，如果启用后DNS工作不正常，请关闭此功能。"
+
+msgid "Filtering IP with blacklist"
+msgstr "使用IP黑名单过滤"
+
+msgid "TLS SPKI Pinning"
+msgstr "TLS SPKI 指纹"
+
+msgid "Used to verify the validity of the TLS server, The value is Base64 encoded SPKI fingerprint, leaving blank to indicate that the validity of TLS is not verified."
+msgstr "用于校验TLS服务器的有效性，数值为Base64编码的SPKI指纹, 留空表示不验证TLS的合法性"
+
+msgid "Additional Server Args"
+msgstr "额外的服务器参数"
+
+msgid "Additional Args for upstream dns servers"
+msgstr "额外的上游DNS服务器参数"
+
+msgid "Upstream DNS Server Configuration"
+msgstr "上游DNS服务器配置"
+
+msgid "Set Specific domain ip address."
+msgstr "指定特定域名的IP地址"
+
+msgid "Specify an IP address to return for any host in the given domains, Queries in the domains are never forwarded and always replied to with the specified IP address which may be IPv4 or IPv6."
+msgstr "配置特定域名返回特定的IP地址，域名查询将不到上游服务器请求，直接返回配置的IP地址，可用于广告屏蔽。"
+
+msgid "IP Blacklist"
+msgstr "IP黑名单"
+
+msgid "Set Specific ip blacklist."
+msgstr "设置IP黑名单列表"
+
+msgid "Configure IP blacklists that will be filtered from the results of specific DNS server."
+msgstr "配置需要从指定域名服务器结果过滤的IP黑名单。"
+
+msgid "Technical Support"
+msgstr "技术支持"
+
+msgid "If you like this software, please buy me a cup of coffee."
+msgstr "如果本软件对你有帮助，请给作者加个蛋。"
+
+msgid "SmartDNS official website"
+msgstr "SmartDNS官方网站"
+
+msgid "open website"
+msgstr "打开网站"
+
+msgid "Donate to smartdns"
+msgstr "捐助smartdns项目"
+
+msgid "Donate"
+msgstr "捐助"
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/smartdns.lua b/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/smartdns.lua
new file mode 100644
index 0000000000..b9ba907faa
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/smartdns.lua
@@ -0,0 +1,342 @@
+--
+-- Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+--
+-- smartdns is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU General Public License as published by
+-- the Free Software Foundation, either version 3 of the License, or
+-- (at your option) any later version.
+--
+-- smartdns is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU General Public License for more details.
+--
+-- You should have received a copy of the GNU General Public License
+-- along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+require ("nixio.fs")
+require ("luci.http")
+require ("luci.dispatcher")
+require ("nixio.fs")
+
+m = Map("smartdns")
+m.title	= translate("SmartDNS Server")
+m.description = translate("SmartDNS is a local high-performance DNS server, supports finding fastest IP, supports ad filtering, and supports avoiding DNS poisoning.")
+
+m:section(SimpleSection).template  = "smartdns/smartdns_status"
+
+-- Basic
+s = m:section(TypedSection, "smartdns", translate("Settings"), translate("General Settings"))
+s.anonymous = true
+
+s:tab("settings", translate("General Settings"))
+s:tab("seconddns", translate("Second Server Settings"))
+s:tab("custom", translate("Custom Settings"))
+
+---- Eanble
+o = s:taboption("settings", Flag, "enabled", translate("Enable"), translate("Enable or disable smartdns server"))
+o.default     = o.disabled
+o.rempty      = false
+
+---- server name
+o = s:taboption("settings", Value, "server_name", translate("Server Name"), translate("Smartdns server name"))
+o.default     = "smartdns"
+o.datatype    = "hostname"
+o.rempty      = false
+
+---- Port
+o = s:taboption("settings", Value, "port", translate("Local Port"), translate("Smartdns local server port"))
+o.placeholder = 6053
+o.default     = 6053
+o.datatype    = "port"
+o.rempty      = false
+
+---- Enable TCP server
+o = s:taboption("settings", Flag, "tcp_server", translate("TCP Server"), translate("Enable TCP DNS Server"))
+o.rmempty     = false
+o.default     = o.enabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "1"
+end
+
+---- Support IPV6
+o = s:taboption("settings", Flag, "ipv6_server", translate("IPV6 Server"), translate("Enable IPV6 DNS Server"))
+o.rmempty     = false
+o.default     = o.enabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "1"
+end
+
+---- Support DualStack ip selection
+o = s:taboption("settings", Flag, "dualstack_ip_selection", translate("Dual-stack IP Selection"), translate("Enable IP selection between IPV4 and IPV6"))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- Domain prefetch load 
+o = s:taboption("settings", Flag, "prefetch_domain", translate("Domain prefetch"), translate("Enable domain prefetch, accelerate domain response speed."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- Domain Serve expired
+o = s:taboption("settings", Flag, "serve_expired", translate("Serve expired"), 
+	translate("Attempts to serve old responses from cache with a TTL of 0 in the response without waiting for the actual resolution to finish."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- Redirect
+o = s:taboption("settings", ListValue, "redirect", translate("Redirect"), translate("SmartDNS redirect mode"))
+o.placeholder = "none"
+o:value("none", translate("none"))
+o:value("dnsmasq-upstream", translate("Run as dnsmasq upstream server"))
+o:value("redirect", translate("Redirect 53 port to SmartDNS"))
+o.default     = "none"
+o.rempty      = false
+
+---- cache-size
+o = s:taboption("settings", Value, "cache_size", translate("Cache Size"), translate("DNS domain result cache size"))
+o.rempty      = true
+
+---- rr-ttl
+o = s:taboption("settings", Value, "rr_ttl", translate("Domain TTL"), translate("TTL for all domain result."))
+o.rempty      = true
+
+---- rr-ttl-min
+o = s:taboption("settings", Value, "rr_ttl_min", translate("Domain TTL Min"), translate("Minimum TTL for all domain result."))
+o.rempty      = true
+o.placeholder = "300"
+o.default     = 300
+o.optional    = true
+
+---- second dns server
+---- rr-ttl-max
+o = s:taboption("settings", Value, "rr_ttl_max", translate("Domain TTL Max"), translate("Maximum TTL for all domain result."))
+o.rempty      = true
+
+---- Eanble
+o = s:taboption("seconddns", Flag, "seconddns_enabled", translate("Enable"), translate("Enable or disable second DNS server."))
+o.default     = o.disabled
+o.rempty      = false
+
+---- Port
+o = s:taboption("seconddns", Value, "seconddns_port", translate("Local Port"), translate("Smartdns local server port"))
+o.placeholder = 6553
+o.default     = 6553
+o.datatype    = "port"
+o.rempty      = false
+
+---- Enable TCP server
+o = s:taboption("seconddns", Flag, "seconddns_tcp_server", translate("TCP Server"), translate("Enable TCP DNS Server"))
+o.rmempty     = false
+o.default     = o.enabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "1"
+end
+
+---- dns server group
+o = s:taboption("seconddns", Value, "seconddns_server_group", translate("Server Group"), translate("Query DNS through specific dns server group, such as office, home."))
+o.rmempty     = true
+o.placeholder = "default"
+o.datatype    = "hostname"
+o.rempty      = true
+
+o = s:taboption("seconddns", Flag, "seconddns_no_speed_check", translate("Skip Speed Check"), translate("Do not check speed."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- skip address rules
+o = s:taboption("seconddns", Flag, "seconddns_no_rule_addr", translate("Skip Address Rules"), translate("Skip address rules."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- skip name server rules
+o = s:taboption("seconddns", Flag, "seconddns_no_rule_nameserver", translate("Skip Nameserver Rule"), translate("Skip nameserver rules."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- skip ipset rules
+o = s:taboption("seconddns", Flag, "seconddns_no_rule_ipset", translate("Skip Ipset Rule"), translate("Skip ipset rules."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- skip soa address rule
+o = s:taboption("seconddns", Flag, "seconddns_no_rule_soa", translate("Skip SOA Address Rule"), translate("Skip SOA address rules."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+o = s:taboption("seconddns", Flag, "seconddns_no_dualstack_selection", translate("Skip Dualstack Selection"), translate("Skip Dualstack Selection."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- skip cache
+o = s:taboption("seconddns", Flag, "seconddns_no_cache", translate("Skip Cache"), translate("Skip Cache."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- Force AAAA SOA
+o = s:taboption("seconddns", Flag, "force_aaaa_soa", translate("Force AAAA SOA"), translate("Force AAAA SOA."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+----- custom settings
+custom = s:taboption("custom", Value, "Custom Settings",
+	translate(""), 
+	translate("smartdns custom settings"))
+
+custom.template = "cbi/tvalue"
+custom.rows = 20
+
+function custom.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/smartdns/custom.conf")
+end
+
+function custom.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("/etc/smartdns/custom.conf", value)
+end
+
+o = s:taboption("custom", Flag, "coredump", translate("Generate Coredump"), translate("Generate Coredump file when smartdns crash, coredump file is located at /tmp/smartdns.xxx.core."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+-- Upstream servers
+s = m:section(TypedSection, "server", translate("Upstream Servers"), translate("Upstream Servers, support UDP, TCP protocol. " ..
+	"Please configure multiple DNS servers, including multiple foreign DNS servers."))
+	
+s.anonymous = true
+s.addremove = true
+s.template = "cbi/tblsection"
+s.extedit  = luci.dispatcher.build_url("admin/services/smartdns/upstream/%s")
+
+---- enable flag
+o = s:option(Flag, "enabled", translate("Enable"), translate("Enable"))
+o.rmempty     = false
+o.default     = o.enabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "1"
+end
+
+---- name
+s:option(Value, "name", translate("DNS Server Name"), translate("DNS Server Name"))
+
+---- IP address
+o = s:option(Value, "ip", translate("ip"), translate("DNS Server ip"))
+o.datatype = "or(ipaddr, string)"
+o.rmempty = false 
+---- port
+o = s:option(Value, "port", translate("port"), translate("DNS Server port"))
+o.placeholder = "default"
+o.datatype    = "port"
+o.rempty      = true
+o:depends("type", "udp")
+o:depends("type", "tcp")
+o:depends("type", "tls")
+
+---- type
+o = s:option(ListValue, "type", translate("type"), translate("DNS Server type"))
+o.placeholder = "udp"
+o:value("udp", translate("udp"))
+o:value("tcp", translate("tcp"))
+o:value("tls", translate("tls"))
+o:value("https", translate("https"))
+o.default     = "udp"
+o.rempty      = false
+
+s = m:section(TypedSection, "smartdns", translate("Advanced Settings"), translate("Advanced Settings"));
+s.anonymous = true;
+
+s:tab("domain-address", translate("Domain Address"), translate("Set Specific domain ip address."));
+s:tab("blackip-list", translate("IP Blacklist"), translate("Set Specific ip blacklist."));
+
+-- Doman addresss
+addr = s:taboption("domain-address", Value, "address",
+	translate(""), 
+	translate("Specify an IP address to return for any host in the given domains, Queries in the domains are never forwarded and always replied to with the specified IP address which may be IPv4 or IPv6."))
+
+addr.template = "cbi/tvalue"
+addr.rows = 20
+
+function addr.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/smartdns/address.conf")
+end
+
+function addr.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("/etc/smartdns/address.conf", value)
+end
+
+-- IP Blacklist
+addr = s:taboption("blackip-list", Value, "blacklist_ip",
+	translate(""), 
+	translate("Configure IP blacklists that will be filtered from the results of specific DNS server."))
+
+addr.template = "cbi/tvalue"
+addr.rows = 20
+
+function addr.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/smartdns/blacklist-ip.conf")
+end
+
+function addr.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("/etc/smartdns/blacklist-ip.conf", value)
+end
+
+-- Technical Support
+s = m:section(TypedSection, "smartdns", translate("Technical Support"), 
+	translate("If you like this software, please buy me a cup of coffee."))
+s.anonymous = true
+
+o = s:option(Button, "web")
+o.title = translate("SmartDNS official website")
+o.inputtitle = translate("open website")
+o.inputstyle = "apply"
+o.write = function()
+	luci.http.redirect("https://pymumu.github.io/smartdns")
+end
+
+o = s:option(Button, "Donate")
+o.title = translate("Donate to smartdns")
+o.inputtitle = translate("Donate")
+o.inputstyle = "apply"
+o.write = function()
+	luci.http.redirect("https://pymumu.github.io/smartdns/#donate")
+end
+
+return m
+
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/upstream.lua b/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/upstream.lua
new file mode 100644
index 0000000000..1bb612fe9b
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/model/cbi/smartdns/upstream.lua
@@ -0,0 +1,129 @@
+--
+-- Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+--
+-- smartdns is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU General Public License as published by
+-- the Free Software Foundation, either version 3 of the License, or
+-- (at your option) any later version.
+--
+-- smartdns is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU General Public License for more details.
+--
+-- You should have received a copy of the GNU General Public License
+-- along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+local sid = arg[1]
+
+m = Map("smartdns", "%s - %s" %{translate("SmartDNS Server"), translate("Upstream DNS Server Configuration")})
+m.redirect = luci.dispatcher.build_url("admin/services/smartdns")
+
+if m.uci:get("smartdns", sid) ~= "server" then
+	luci.http.redirect(m.redirect)
+	return
+end
+
+-- [[ Edit Server ]]--
+s = m:section(NamedSection, sid, "server")
+s.anonymous = true
+s.addremove   = false
+
+---- name
+s:option(Value, "name", translate("DNS Server Name"), translate("DNS Server Name"))
+
+---- IP address
+o = s:option(Value, "ip", translate("ip"), translate("DNS Server ip"))
+o.datatype = "or(host, string)"
+o.rmempty = false 
+---- port
+o = s:option(Value, "port", translate("port"), translate("DNS Server port"))
+o.placeholder = "default"
+o.datatype    = "port"
+o.rempty      = true
+o:depends("type", "udp")
+o:depends("type", "tcp")
+o:depends("type", "tls")
+
+---- type
+o = s:option(ListValue, "type", translate("type"), translate("DNS Server type"))
+o.placeholder = "udp"
+o:value("udp", translate("udp"))
+o:value("tcp", translate("tcp"))
+o:value("tls", translate("tls"))
+o:value("https", translate("https"))
+o.default     = "udp"
+o.rempty      = false
+
+---- server group
+o = s:option(Value, "server_group", translate("Server Group"), translate("DNS Server group belongs to, used with nameserver, such as office, home."))
+o.rmempty     = true
+o.placeholder = "default"
+o.datatype    = "hostname"
+o.rempty      = true
+
+---- blacklist_ip
+o = s:option(Flag, "blacklist_ip", translate("IP Blacklist Filtering"), translate("Filtering IP with blacklist"))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+
+---- TLS host verify
+o = s:option(Value, "tls_host_verify", translate("TLS Hostname Verify"), translate("Set TLS hostname to verify."))
+o.default     = ""
+o.datatype    = "string"
+o.rempty      = true
+o:depends("type", "tls")
+o:depends("type", "https")
+
+---- certificate verify
+o = s:option(Flag, "no_check_certificate", translate("No check certificate"), translate("Do not check certificate."))
+o.rmempty     = false
+o.default     = o.disabled
+o.cfgvalue    = function(...)
+    return Flag.cfgvalue(...) or "0"
+end
+o:depends("type", "tls")
+o:depends("type", "https")
+
+---- SNI host name
+o = s:option(Value, "host_name", translate("TLS SNI name"), translate("Sets the server name indication for query."))
+o.default     = ""
+o.datatype    = "hostname"
+o.rempty      = true
+o:depends("type", "tls")
+o:depends("type", "https")
+
+---- http host
+o = s:option(Value, "http_host", translate("HTTP Host"), translate("Set the HTTP host used for the query. Use this parameter when the host of the URL address is an IP address."))
+o.default     = ""
+o.datatype    = "hostname"
+o.rempty      = true
+o:depends("type", "https")
+
+---- anti-Answer-Forgery
+-- o = s:option(Flag, "check_edns", translate("Anti Answer Forgery"), translate("Anti answer forgery, if DNS does not work properly after enabling, please turn off this feature"))
+-- o.rmempty     = false
+-- o.default     = o.disabled
+-- o:depends("type", "udp")
+-- o.cfgvalue    = function(...)
+--     return Flag.cfgvalue(...) or "0"
+-- end
+
+---- SPKI pin
+o = s:option(Value, "spki_pin", translate("TLS SPKI Pinning"), translate("Used to verify the validity of the TLS server, The value is Base64 encoded SPKI fingerprint, leaving blank to indicate that the validity of TLS is not verified."))
+o.default     = ""
+o.datatype    = "string"
+o.rempty      = true
+o:depends("type", "tls")
+o:depends("type", "https")
+
+---- other args
+o = s:option(Value, "addition_arg", translate("Additional Server Args"), translate("Additional Args for upstream dns servers"))
+o.default     = ""
+o.rempty      = true
+o.optional    = true
+
+return m
\ No newline at end of file
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/model/smartdns.lua b/release/src/router/smartdns/package/luci-compat/files/luci/model/smartdns.lua
new file mode 100644
index 0000000000..ff32306c42
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/model/smartdns.lua
@@ -0,0 +1,31 @@
+--
+-- Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+--
+-- smartdns is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU General Public License as published by
+-- the Free Software Foundation, either version 3 of the License, or
+-- (at your option) any later version.
+--
+-- smartdns is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU General Public License for more details.
+--
+-- You should have received a copy of the GNU General Public License
+-- along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+require ("nixio.fs")
+require ("luci.http")
+require ("luci.dispatcher")
+require ("nixio.fs")
+
+local uci = require "luci.model.uci".cursor()
+
+module("luci.model.smartdns", package.seeall)
+
+function get_config_option(module, section, option, default)
+	return uci:get_first(module, section, option) or default
+end
+
+return m
+
diff --git a/release/src/router/smartdns/package/luci-compat/files/luci/view/smartdns/smartdns_status.htm b/release/src/router/smartdns/package/luci-compat/files/luci/view/smartdns/smartdns_status.htm
new file mode 100644
index 0000000000..c56dc20770
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/files/luci/view/smartdns/smartdns_status.htm
@@ -0,0 +1,41 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=luci.dispatcher.build_url("admin", "services", "smartdns", "status")%>', null,
+	function(x, data) {
+		var tb = document.getElementById('smartdns_status');
+		if (data && tb) {
+			var links = "";
+			if (data.running) {
+				links = '<b><font color=green>SmartDNS - <%:RUNNING%></font></b></em>';
+				if (data.redirect) {
+					if (data.redirect == 1) {
+						if (data.ipv4_works == 0) {
+							links += "<br></br><b><font color=red><%:IPV4 53 Port Redirect Failure%></font></b>"
+						}
+						
+						if (data.ipv6_works != 2) {
+							if (data.ipv6_works == 0) {
+								links += "<br></br><b><font color=red><%:IPV6 53 Port Redirect Failure%></font></b>"
+							}
+						}
+					} else if (data.redirect == 2) {
+						if (data.dnsmasq_forward == 0) {
+							links += "<br></br><b><font color=red><%:Dnsmasq Forwared To Smartdns Failure%></font></b>"
+						}
+					}
+				}
+			} else {
+				links = '<b><font color=red>SmartDNS - <%:NOT RUNNING%></font></b>';
+			}
+
+			tb.innerHTML = links;
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="smartdns_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/release/src/router/smartdns/package/luci-compat/make.sh b/release/src/router/smartdns/package/luci-compat/make.sh
new file mode 100644
index 0000000000..1cbce90359
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/make.sh
@@ -0,0 +1,135 @@
+#!/bin/sh
+#
+# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+#
+# smartdns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# smartdns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+CURR_DIR=$(cd $(dirname $0);pwd)
+
+VER="`date +"1.%Y.%m.%d-%H%M"`"
+SMARTDNS_DIR=$CURR_DIR/../../
+PO2LMO=
+
+showhelp()
+{
+	echo "Usage: make [OPTION]"
+	echo "Options:"
+	echo " -o               output directory."
+	echo " --arch           archtecture."
+	echo " --ver            version."
+	echo " -h               show this message."
+}
+
+build_tool()
+{
+	make -C $ROOT/tool/po2lmo -j 
+	PO2LMO="$ROOT/tool/po2lmo/src/po2lmo"
+
+}
+
+clean_tool()
+{
+	make -C $ROOT/tool/po2lmo clean
+}
+
+build()
+{
+
+	ROOT=/tmp/luci-app-smartdns
+	rm -fr $ROOT
+
+	mkdir -p $ROOT
+	cp $CURR_DIR/* $ROOT/ -af
+	cd $ROOT/
+	build_tool
+	mkdir $ROOT/root/usr/lib/lua/ -p
+	cp $ROOT/files/luci $ROOT/root/usr/lib/lua/ -af
+	
+	#Generate Language
+	$PO2LMO $ROOT/files/luci/i18n/smartdns.zh-cn.po $ROOT/root/usr/lib/lua/luci/i18n/smartdns.zh-cn.lmo
+	rm $ROOT/root/usr/lib/lua/luci/i18n/smartdns.zh-cn.po
+
+	cp $ROOT/files/etc $ROOT/root/ -af
+	INST_SIZE="`du -sb $ROOT/root/ | awk '{print $1}'`"
+	
+	sed -i "s/^Architecture.*/Architecture: all/g" $ROOT/control/control
+	sed -i "s/Version:.*/Version: $VER/" $ROOT/control/control
+
+	if [ ! -z "$INST_SIZE" ]; then
+		echo "Installed-Size: $INST_SIZE" >> $ROOT/control/control
+	fi
+
+	cd $ROOT/control
+	chmod +x *
+	tar zcf ../control.tar.gz ./
+	cd $ROOT
+
+	tar zcf $ROOT/data.tar.gz -C root .
+	tar zcf $OUTPUTDIR/luci-app-smartdns.$VER.$FILEARCH.ipk ./control.tar.gz ./data.tar.gz ./debian-binary
+
+	rm -fr $ROOT/
+}
+
+main()
+{
+	OPTS=`getopt -o o:h --long arch:,ver:,filearch: \
+		-n  "" -- "$@"`
+
+	if [ $? != 0 ] ; then echo "Terminating..." >&2 ; exit 1 ; fi
+
+	# Note the quotes around `$TEMP': they are essential!
+	eval set -- "$OPTS"
+
+	while true; do
+		case "$1" in
+		--arch)
+			ARCH="$2"
+			shift 2;;
+		--filearch)
+			FILEARCH="$2"
+			shift 2;;
+		--ver)
+			VER="$2"
+			shift 2;;
+		-o )
+			OUTPUTDIR="$2"
+			shift 2;;
+		-h | --help )
+			showhelp
+			return 0
+			shift ;;
+		-- ) shift; break ;;
+		* ) break ;;
+		esac
+	done
+
+	if [ -z "$ARCH" ]; then
+		echo "please input arch."
+		return 1;
+	fi
+
+	if [ -z "$FILEARCH" ]; then
+		FILEARCH=$ARCH
+	fi
+
+	if [ -z "$OUTPUTDIR" ]; then
+		OUTPUTDIR=$CURR_DIR;
+	fi
+
+	build
+}
+
+main $@
+exit $?
+
+
diff --git a/release/src/router/smartdns/package/luci-compat/tool/po2lmo/Makefile b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/Makefile
new file mode 100644
index 0000000000..ad2c133207
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/Makefile
@@ -0,0 +1,12 @@
+
+INSTALL = install
+PREFIX  = /usr/bin
+
+po2lmo: src/po2lmo.o src/template_lmo.o
+	$(CC) $(LDFLAGS) -o src/po2lmo src/po2lmo.o src/template_lmo.o
+
+install:
+	$(INSTALL) -m 755 src/po2lmo $(PREFIX)
+
+clean:
+	$(RM) src/po2lmo src/*.o
diff --git a/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/po2lmo.c b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/po2lmo.c
new file mode 100644
index 0000000000..0da792b680
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/po2lmo.c
@@ -0,0 +1,247 @@
+/*
+ * lmo - Lua Machine Objects - PO to LMO conversion tool
+ *
+ *   Copyright (C) 2009-2012 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include "template_lmo.h"
+
+static void die(const char *msg)
+{
+	fprintf(stderr, "Error: %s\n", msg);
+	exit(1);
+}
+
+static void usage(const char *name)
+{
+	fprintf(stderr, "Usage: %s input.po output.lmo\n", name);
+	exit(1);
+}
+
+static void print(const void *ptr, size_t size, size_t nmemb, FILE *stream)
+{
+	if( fwrite(ptr, size, nmemb, stream) == 0 )
+		die("Failed to write stdout");
+}
+
+static int extract_string(const char *src, char *dest, int len)
+{
+	int pos = 0;
+	int esc = 0;
+	int off = -1;
+
+	for( pos = 0; (pos < strlen(src)) && (pos < len); pos++ )
+	{
+		if( (off == -1) && (src[pos] == '"') )
+		{
+			off = pos + 1;
+		}
+		else if( off >= 0 )
+		{
+			if( esc == 1 )
+			{
+				switch (src[pos])
+				{
+				case '"':
+				case '\\':
+					off++;
+					break;
+				}
+				dest[pos-off] = src[pos];
+				esc = 0;
+			}
+			else if( src[pos] == '\\' )
+			{
+				dest[pos-off] = src[pos];
+				esc = 1;
+			}
+			else if( src[pos] != '"' )
+			{
+				dest[pos-off] = src[pos];
+			}
+			else
+			{
+				dest[pos-off] = '\0';
+				break;
+			}
+		}
+	}
+
+	return (off > -1) ? strlen(dest) : -1;
+}
+
+static int cmp_index(const void *a, const void *b)
+{
+	uint32_t x = ((const lmo_entry_t *)a)->key_id;
+	uint32_t y = ((const lmo_entry_t *)b)->key_id;
+
+	if (x < y)
+		return -1;
+	else if (x > y)
+		return 1;
+
+	return 0;
+}
+
+static void print_uint32(uint32_t x, FILE *out)
+{
+	uint32_t y = htonl(x);
+	print(&y, sizeof(uint32_t), 1, out);
+}
+
+static void print_index(void *array, int n, FILE *out)
+{
+	lmo_entry_t *e;
+
+	qsort(array, n, sizeof(*e), cmp_index);
+
+	for (e = array; n > 0; n--, e++)
+	{
+		print_uint32(e->key_id, out);
+		print_uint32(e->val_id, out);
+		print_uint32(e->offset, out);
+		print_uint32(e->length, out);
+	}
+}
+
+int main(int argc, char *argv[])
+{
+	char line[4096];
+	char key[4096];
+	char val[4096];
+	char tmp[4096];
+	int state  = 0;
+	int offset = 0;
+	int length = 0;
+	int n_entries = 0;
+	void *array = NULL;
+	lmo_entry_t *entry = NULL;
+	uint32_t key_id, val_id;
+
+	FILE *in;
+	FILE *out;
+
+	if( (argc != 3) || ((in = fopen(argv[1], "r")) == NULL) || ((out = fopen(argv[2], "w")) == NULL) )
+		usage(argv[0]);
+
+	memset(line, 0, sizeof(key));
+	memset(key, 0, sizeof(val));
+	memset(val, 0, sizeof(val));
+
+	while( (NULL != fgets(line, sizeof(line), in)) || (state >= 2 && feof(in)) )
+	{
+		if( state == 0 && strstr(line, "msgid \"") == line )
+		{
+			switch(extract_string(line, key, sizeof(key)))
+			{
+				case -1:
+					die("Syntax error in msgid");
+				case 0:
+					state = 1;
+					break;
+				default:
+					state = 2;
+			}
+		}
+		else if( state == 1 || state == 2 )
+		{
+			if( strstr(line, "msgstr \"") == line || state == 2 )
+			{
+				switch(extract_string(line, val, sizeof(val)))
+				{
+					case -1:
+						state = 4;
+						break;
+					default:
+						state = 3;
+				}
+			}
+			else
+			{
+				switch(extract_string(line, tmp, sizeof(tmp)))
+				{
+					case -1:
+						state = 2;
+						break;
+					default:
+						strcat(key, tmp);
+				}
+			}
+		}
+		else if( state == 3 )
+		{
+			switch(extract_string(line, tmp, sizeof(tmp)))
+			{
+				case -1:
+					state = 4;
+					break;
+				default:
+					strcat(val, tmp);
+			}
+		}
+
+		if( state == 4 )
+		{
+			if( strlen(key) > 0 && strlen(val) > 0 )
+			{
+				key_id = sfh_hash(key, strlen(key));
+				val_id = sfh_hash(val, strlen(val));
+
+				if( key_id != val_id )
+				{
+					n_entries++;
+					array = realloc(array, n_entries * sizeof(lmo_entry_t));
+					entry = (lmo_entry_t *)array + n_entries - 1;
+
+					if (!array)
+						die("Out of memory");
+
+					entry->key_id = key_id;
+					entry->val_id = val_id;
+					entry->offset = offset;
+					entry->length = strlen(val);
+
+					length = strlen(val) + ((4 - (strlen(val) % 4)) % 4);
+
+					print(val, length, 1, out);
+					offset += length;
+				}
+			}
+
+			state = 0;
+			memset(key, 0, sizeof(key));
+			memset(val, 0, sizeof(val));
+		}
+
+		memset(line, 0, sizeof(line));
+	}
+
+	print_index(array, n_entries, out);
+
+	if( offset > 0 )
+	{
+		print_uint32(offset, out);
+		fsync(fileno(out));
+		fclose(out);
+	}
+	else
+	{
+		fclose(out);
+		unlink(argv[2]);
+	}
+
+	fclose(in);
+	return(0);
+}
diff --git a/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.c b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.c
new file mode 100644
index 0000000000..27205a7228
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.c
@@ -0,0 +1,328 @@
+/*
+ * lmo - Lua Machine Objects - Base functions
+ *
+ *   Copyright (C) 2009-2010 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include "template_lmo.h"
+
+/*
+ * Hash function from http://www.azillionmonkeys.com/qed/hash.html
+ * Copyright (C) 2004-2008 by Paul Hsieh
+ */
+
+uint32_t sfh_hash(const char *data, int len)
+{
+	uint32_t hash = len, tmp;
+	int rem;
+
+	if (len <= 0 || data == NULL) return 0;
+
+	rem = len & 3;
+	len >>= 2;
+
+	/* Main loop */
+	for (;len > 0; len--) {
+		hash  += sfh_get16(data);
+		tmp    = (sfh_get16(data+2) << 11) ^ hash;
+		hash   = (hash << 16) ^ tmp;
+		data  += 2*sizeof(uint16_t);
+		hash  += hash >> 11;
+	}
+
+	/* Handle end cases */
+	switch (rem) {
+		case 3: hash += sfh_get16(data);
+			hash ^= hash << 16;
+			hash ^= data[sizeof(uint16_t)] << 18;
+			hash += hash >> 11;
+			break;
+		case 2: hash += sfh_get16(data);
+			hash ^= hash << 11;
+			hash += hash >> 17;
+			break;
+		case 1: hash += *data;
+			hash ^= hash << 10;
+			hash += hash >> 1;
+	}
+
+	/* Force "avalanching" of final 127 bits */
+	hash ^= hash << 3;
+	hash += hash >> 5;
+	hash ^= hash << 4;
+	hash += hash >> 17;
+	hash ^= hash << 25;
+	hash += hash >> 6;
+
+	return hash;
+}
+
+uint32_t lmo_canon_hash(const char *str, int len)
+{
+	char res[4096];
+	char *ptr, prev;
+	int off;
+
+	if (!str || len >= sizeof(res))
+		return 0;
+
+	for (prev = ' ', ptr = res, off = 0; off < len; prev = *str, off++, str++)
+	{
+		if (isspace(*str))
+		{
+			if (!isspace(prev))
+				*ptr++ = ' ';
+		}
+		else
+		{
+			*ptr++ = *str;
+		}
+	}
+
+	if ((ptr > res) && isspace(*(ptr-1)))
+		ptr--;
+
+	return sfh_hash(res, ptr - res);
+}
+
+lmo_archive_t * lmo_open(const char *file)
+{
+	int in = -1;
+	uint32_t idx_offset = 0;
+	struct stat s;
+
+	lmo_archive_t *ar = NULL;
+
+	if (stat(file, &s) == -1)
+		goto err;
+
+	if ((in = open(file, O_RDONLY)) == -1)
+		goto err;
+
+	if ((ar = (lmo_archive_t *)malloc(sizeof(*ar))) != NULL)
+	{
+		memset(ar, 0, sizeof(*ar));
+
+		ar->fd     = in;
+		ar->size = s.st_size;
+
+		fcntl(ar->fd, F_SETFD, fcntl(ar->fd, F_GETFD) | FD_CLOEXEC);
+
+		if ((ar->mmap = mmap(NULL, ar->size, PROT_READ, MAP_SHARED, ar->fd, 0)) == MAP_FAILED)
+			goto err;
+
+		idx_offset = ntohl(*((const uint32_t *)
+		                     (ar->mmap + ar->size - sizeof(uint32_t))));
+
+		if (idx_offset >= ar->size)
+			goto err;
+
+		ar->index  = (lmo_entry_t *)(ar->mmap + idx_offset);
+		ar->length = (ar->size - idx_offset - sizeof(uint32_t)) / sizeof(lmo_entry_t);
+		ar->end    = ar->mmap + ar->size;
+
+		return ar;
+	}
+
+err:
+	if (in > -1)
+		close(in);
+
+	if (ar != NULL)
+	{
+		if ((ar->mmap != NULL) && (ar->mmap != MAP_FAILED))
+			munmap(ar->mmap, ar->size);
+
+		free(ar);
+	}
+
+	return NULL;
+}
+
+void lmo_close(lmo_archive_t *ar)
+{
+	if (ar != NULL)
+	{
+		if ((ar->mmap != NULL) && (ar->mmap != MAP_FAILED))
+			munmap(ar->mmap, ar->size);
+
+		close(ar->fd);
+		free(ar);
+
+		ar = NULL;
+	}
+}
+
+
+lmo_catalog_t *_lmo_catalogs = NULL;
+lmo_catalog_t *_lmo_active_catalog = NULL;
+
+int lmo_load_catalog(const char *lang, const char *dir)
+{
+	DIR *dh = NULL;
+	char pattern[16];
+	char path[PATH_MAX];
+	struct dirent *de = NULL;
+
+	lmo_archive_t *ar = NULL;
+	lmo_catalog_t *cat = NULL;
+
+	if (!lmo_change_catalog(lang))
+		return 0;
+
+	if (!dir || !(dh = opendir(dir)))
+		goto err;
+
+	if (!(cat = malloc(sizeof(*cat))))
+		goto err;
+
+	memset(cat, 0, sizeof(*cat));
+
+	snprintf(cat->lang, sizeof(cat->lang), "%s", lang);
+	snprintf(pattern, sizeof(pattern), "*.%s.lmo", lang);
+
+	while ((de = readdir(dh)) != NULL)
+	{
+		if (!fnmatch(pattern, de->d_name, 0))
+		{
+			snprintf(path, sizeof(path), "%s/%s", dir, de->d_name);
+			ar = lmo_open(path);
+
+			if (ar)
+			{
+				ar->next = cat->archives;
+				cat->archives = ar;
+			}
+		}
+	}
+
+	closedir(dh);
+
+	cat->next = _lmo_catalogs;
+	_lmo_catalogs = cat;
+
+	if (!_lmo_active_catalog)
+		_lmo_active_catalog = cat;
+
+	return 0;
+
+err:
+	if (dh) closedir(dh);
+	if (cat) free(cat);
+
+	return -1;
+}
+
+int lmo_change_catalog(const char *lang)
+{
+	lmo_catalog_t *cat;
+
+	for (cat = _lmo_catalogs; cat; cat = cat->next)
+	{
+		if (!strncmp(cat->lang, lang, sizeof(cat->lang)))
+		{
+			_lmo_active_catalog = cat;
+			return 0;
+		}
+	}
+
+	return -1;
+}
+
+static lmo_entry_t * lmo_find_entry(lmo_archive_t *ar, uint32_t hash)
+{
+	unsigned int m, l, r;
+	uint32_t k;
+
+	l = 0;
+	r = ar->length - 1;
+
+	while (1)
+	{
+		m = l + ((r - l) / 2);
+
+		if (r < l)
+			break;
+
+		k = ntohl(ar->index[m].key_id);
+
+		if (k == hash)
+			return &ar->index[m];
+
+		if (k > hash)
+		{
+			if (!m)
+				break;
+
+			r = m - 1;
+		}
+		else
+		{
+			l = m + 1;
+		}
+	}
+
+	return NULL;
+}
+
+int lmo_translate(const char *key, int keylen, char **out, int *outlen)
+{
+	uint32_t hash;
+	lmo_entry_t *e;
+	lmo_archive_t *ar;
+
+	if (!key || !_lmo_active_catalog)
+		return -2;
+
+	hash = lmo_canon_hash(key, keylen);
+
+	for (ar = _lmo_active_catalog->archives; ar; ar = ar->next)
+	{
+		if ((e = lmo_find_entry(ar, hash)) != NULL)
+		{
+			*out = ar->mmap + ntohl(e->offset);
+			*outlen = ntohl(e->length);
+			return 0;
+		}
+	}
+
+	return -1;
+}
+
+void lmo_close_catalog(const char *lang)
+{
+	lmo_archive_t *ar, *next;
+	lmo_catalog_t *cat, *prev;
+
+	for (prev = NULL, cat = _lmo_catalogs; cat; prev = cat, cat = cat->next)
+	{
+		if (!strncmp(cat->lang, lang, sizeof(cat->lang)))
+		{
+			if (prev)
+				prev->next = cat->next;
+			else
+				_lmo_catalogs = cat->next;
+
+			for (ar = cat->archives; ar; ar = next)
+			{
+				next = ar->next;
+				lmo_close(ar);
+			}
+
+			free(cat);
+			break;
+		}
+	}
+}
diff --git a/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.h b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.h
new file mode 100644
index 0000000000..57f59aa56b
--- /dev/null
+++ b/release/src/router/smartdns/package/luci-compat/tool/po2lmo/src/template_lmo.h
@@ -0,0 +1,92 @@
+/*
+ * lmo - Lua Machine Objects - General header
+ *
+ *   Copyright (C) 2009-2012 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#ifndef _TEMPLATE_LMO_H_
+#define _TEMPLATE_LMO_H_
+
+#include <stdlib.h>
+#include <stdio.h>
+#include <stdint.h>
+#include <string.h>
+#include <fcntl.h>
+#include <sys/stat.h>
+#include <sys/mman.h>
+#include <arpa/inet.h>
+#include <unistd.h>
+#include <errno.h>
+#include <fnmatch.h>
+#include <dirent.h>
+#include <ctype.h>
+#include <limits.h>
+
+#if (defined(__GNUC__) && defined(__i386__))
+#define sfh_get16(d) (*((const uint16_t *) (d)))
+#else
+#define sfh_get16(d) ((((uint32_t)(((const uint8_t *)(d))[1])) << 8)\
+					   +(uint32_t)(((const uint8_t *)(d))[0]) )
+#endif
+
+
+struct lmo_entry {
+	uint32_t key_id;
+	uint32_t val_id;
+	uint32_t offset;
+	uint32_t length;
+} __attribute__((packed));
+
+typedef struct lmo_entry lmo_entry_t;
+
+
+struct lmo_archive {
+	int         fd;
+	int	        length;
+	uint32_t    size;
+	lmo_entry_t *index;
+	char        *mmap;
+	char		*end;
+	struct lmo_archive *next;
+};
+
+typedef struct lmo_archive lmo_archive_t;
+
+
+struct lmo_catalog {
+	char lang[6];
+	struct lmo_archive *archives;
+	struct lmo_catalog *next;
+};
+
+typedef struct lmo_catalog lmo_catalog_t;
+
+
+uint32_t sfh_hash(const char *data, int len);
+uint32_t lmo_canon_hash(const char *data, int len);
+
+lmo_archive_t * lmo_open(const char *file);
+void lmo_close(lmo_archive_t *ar);
+
+
+extern lmo_catalog_t *_lmo_catalogs;
+extern lmo_catalog_t *_lmo_active_catalog;
+
+int lmo_load_catalog(const char *lang, const char *dir);
+int lmo_change_catalog(const char *lang);
+int lmo_translate(const char *key, int keylen, char **out, int *outlen);
+void lmo_close_catalog(const char *lang);
+
+#endif
diff --git a/release/src/router/smartdns/package/luci/control/control b/release/src/router/smartdns/package/luci/control/control
index 2cd9e99934..e0feefc030 100644
--- a/release/src/router/smartdns/package/luci/control/control
+++ b/release/src/router/smartdns/package/luci/control/control
@@ -4,5 +4,4 @@ Depends: libc, smartdns
 Source: feeds/luci/applications/luci-app-smartdns
 Section: luci
 Architecture: all
-Installed-Size: 1040
-Description:  A smartdns server module
+Description:  A smartdns server
diff --git a/release/src/router/smartdns/package/luci/control/postinst-pkg b/release/src/router/smartdns/package/luci/control/postinst-pkg
index ded67b630f..e69de29bb2 100644
--- a/release/src/router/smartdns/package/luci/control/postinst-pkg
+++ b/release/src/router/smartdns/package/luci/control/postinst-pkg
@@ -1,4 +0,0 @@
-[ -n "${IPKG_INSTROOT}" ] || {
-	(. /etc/uci-defaults/50_luci-smartdns) && rm -f /etc/uci-defaults/50_luci-smartdns
-	exit 0
-}
diff --git a/release/src/router/smartdns/package/luci/files/luci/i18n/smartdns.zh-cn.po b/release/src/router/smartdns/package/luci/files/luci/i18n/smartdns.zh-cn.po
index 567cdf15fa..ee00152f18 100644
--- a/release/src/router/smartdns/package/luci/files/luci/i18n/smartdns.zh-cn.po
+++ b/release/src/router/smartdns/package/luci/files/luci/i18n/smartdns.zh-cn.po
@@ -1,282 +1,311 @@
-msgid ""
-msgstr "Content-Type: text/plain; charset=UTF-8\n"
-
-msgid "SmartDNS"
-msgstr "SmartDNS"
-
-msgid "SmartDNS is a local high-performance DNS server"
-msgstr "SmartDNS是一个本地高性能DNS服务器"
-
-msgid "SmartDNS Server"
-msgstr "SmartDNS 服务器"
-
-msgid "SmartDNS is a local high-performance DNS server, supports finding fastest IP, supports ad filtering, and supports avoiding DNS poisoning."
-msgstr "SmartDNS是一个本地高性能DNS服务器，支持返回最快IP，支持广告过滤。"
-
-msgid "Custom Settings"
-msgstr "自定义设置"
-
-msgid "Generate Coredump"
-msgstr "生成coredump"
-
-msgid "Generate Coredump file when smartdns crash, coredump file is located at /tmp/smartdns.xxx.core."
-msgstr "当smartdns异常时生成coredump文件，coredump文件在/tmp/smartdns.xxx.core."
-
-msgid "Server Name"
-msgstr "服务器名称"
-
-msgid "Smartdns server name"
-msgstr "SmartDNS的服务器名称，默认为smartdns，留空为主机名"
-
-msgid "SmartDNS is a local dns server to find fastest ip."
-msgstr "本地高性能服务器，优化网络访问性能。"
-
-msgid "Enable or disable smartdns server"
-msgstr "启用或禁用SmartDNS服务"
-
-msgid "Local Port"
-msgstr "本地端口"
-
-msgid "Smartdns local server port"
-msgstr "SmartDNS本地服务端口"
-
-msgid "IPV4 53 Port Redirect Failure"
-msgstr "IPV4 53端口重定向失败"
-
-msgid "IPV6 53 Port Redirect Failure"
-msgstr "IPV6 53端口重定向失败"
-
-msgid "Dnsmasq Forwared To Smartdns Failure"
-msgstr "重定向dnsmasq到smartdns失败"
-
-msgid "TCP Server"
-msgstr "TCP服务器"
-
-msgid "Enable TCP DNS Server"
-msgstr "启用TCP服务器"
-
-msgid "IPV6 Server"
-msgstr "IPV6服务器"
-
-msgid "Enable IPV6 DNS Server"
-msgstr "启用IPV6服务器"
-
-msgid "Dual-stack IP Selection"
-msgstr "双栈IP优选"
-
-msgid "Enable IP selection between IPV4 and IPV6"
-msgstr "启用或禁用IPV4，IPV6间的IP优选策略。"
-
-msgid "Domain prefetch"
-msgstr "域名预加载"
-
-msgid "Enable domain prefetch, accelerate domain response speed."
-msgstr "启用域名预加载，加速域名响应速度。"
-
-msgid "Redirect"
-msgstr "重定向"
-
-msgid "SmartDNS redirect mode"
-msgstr "SmartDNS 重定向模式"
-
-msgid "Run as dnsmasq upstream server"
-msgstr "作为dnsmasq的上游服务器"
-
-msgid "Redirect 53 port to SmartDNS"
-msgstr "重定向53端口到SmartDNS"
-
-msgid "Cache Size"
-msgstr "缓存大小"
-
-msgid "DNS domain result cache size"
-msgstr "缓存DNS的结果，缓存大小，配置零则不缓存"
-
-msgid "Domain TTL"
-msgstr "域名TTL"
-
-msgid "TTL for all domain result."
-msgstr "设置所有域名的TTL值"
-
-msgid "Domain TTL Min"
-msgstr "域名TTL最小值"
-
-msgid "Minimum TTL for all domain result."
-msgstr "设置所有域名的TTL最小值"
-
-msgid "Domain TTL Max"
-msgstr "域名TTL最大值"
-
-msgid "Maximum TTL for all domain result."
-msgstr "设置所有域名的TTL最大值"
-
-msgid "smartdns custom settings"
-msgstr "smartdns 自定义设置，具体配置参数参考指导"
-
-msgid "Second Server Settings"
-msgstr "第二DNS服务器"
-
-msgid "Enable or disable second DNS server."
-msgstr "是否启用第二DNS服务器。"
-
-msgid "Skip Speed Check"
-msgstr "跳过测速"
-
-msgid "Do not check speed."
-msgstr "禁用测速。"
-
-msgid "Server Group"
-msgstr "服务器组"
-
-msgid "Query DNS through specific dns server group, such as office, home."
-msgstr "使用指定服务器组查询，比如office, home。"
-
-msgid "Skip Address Rules"
-msgstr "跳过address规则"
-
-msgid "Skip address rules."
-msgstr "跳过address规则。"
-
-msgid "Skip Nameserver Rule"
-msgstr "跳过Nameserver规则"
-
-msgid "Skip nameserver rules."
-msgstr "跳过Nameserver规则。"
-
-msgid "Skip Ipset Rule"
-msgstr "跳过ipset规则"
-
-msgid "Skip ipset rules."
-msgstr "跳过ipset规则。"
-
-msgid "Skip SOA Address Rule"
-msgstr "跳过address SOA(#)规则"
-
-msgid "Skip SOA address rules."
-msgstr "跳过address SOA(#)规则。"
-
-msgid "Skip Dualstack Selection"
-msgstr "跳过双栈优选"
-
-msgid "Skip Sualstack Selection."
-msgstr "跳过双栈优选。"
-
-msgid "Skip Cache"
-msgstr "跳过cache"
-
-msgid "Skip Cache."
-msgstr "跳过cache。"
-
-msgid "Upstream Servers"
-msgstr "上游服务器"
-
-msgid "Upstream Servers, support UDP, TCP protocol. Please configure multiple DNS servers, including multiple foreign DNS servers."
-msgstr "上游DNS服务器列表，支持UDP，TCP协议，请配置多个上游DNS服务器，包括多个国内外服务器"
-
-msgid "DNS Server Name"
-msgstr "DNS服务器名称"
-
-msgid "port"
-msgstr "端口"
-
-msgid "DNS Server port"
-msgstr "DNS服务器端口"
-
-msgid "DNS Server ip"
-msgstr "DNS服务器IP"
-
-msgid "type"
-msgstr "类型"
-
-msgid "DNS Server type"
-msgstr "协议类型"
-
-msgid "Domain Address"
-msgstr "域名地址"
-
-msgid "TLS Hostname Verify"
-msgstr "校验TLS主机名"
-
-msgid "Set TLS hostname to verify."
-msgstr "设置校验TLS主机名。"
-
-msgid "TLS SNI name"
-msgstr "TLS SNI名称"
-
-msgid "HTTP Host"
-msgstr "HTTP主机"
-
-msgid "Sets the server name indication for query."
-msgstr "设置查询时使用的服务器SNI名称。"
-
-msgid "Set the HTTP host used for the query. Use this parameter when the host of the URL address is an IP address."
-msgstr "设置查询时使用的HTTP主机，当URL地址的host是IP地址时，使用此参数。"
-
-msgid "Server Group"
-msgstr "服务器组"
-
-msgid "DNS Server group belongs to, used with nameserver, such as office, home."
-msgsr "DNS服务器所属组， 配合nameserver使用，例如：office，home。"
-
-msgid "IP Blacklist Filtering"
-msgstr "IP黑名单过滤"
-
-msgid "Anti Answer Forgery"
-msgstr "反回答伪造"
-
-msgid "Anti answer forgery, if DNS does not work properly after enabling, please turn off this feature"
-msgstr "反回答伪造，如果启用后DNS工作不正常，请关闭此功能。"
-
-msgid "Filtering IP with blacklist"
-msgstr "使用IP黑名单过滤"
-
-msgid "TLS SPKI Pinning"
-msgstr "TLS SPKI 指纹"
-
-msgid "Used to verify the validity of the TLS server, The value is Base64 encoded SPKI fingerprint, leaving blank to indicate that the validity of TLS is not verified."
-msgstr "用于校验TLS服务器的有效性，数值为Base64编码的SPKI指纹, 留空表示不验证TLS的合法性"
-
-msgid "Additional Server Args"
-msgstr "额外的服务器参数"
-
-msgid "Additional Args for upstream dns servers"
-msgstr "额外的上游DNS服务器参数"
-
-msgid "Upstream DNS Server Configuration"
-msgstr "上游DNS服务器配置"
-
-msgid "Set Specific domain ip address."
-msgstr "指定特定域名的IP地址"
-
-msgid "Specify an IP address to return for any host in the given domains, Queries in the domains are never forwarded and always replied to with the specified IP address which may be IPv4 or IPv6."
-msgstr "配置特定域名返回特定的IP地址，域名查询将不到上游服务器请求，直接返回配置的IP地址，可用于广告屏蔽。"
-
-msgid "IP Blacklist"
-msgstr "IP黑名单"
-
-msgid "Set Specific ip blacklist."
-msgstr "设置IP黑名单列表"
-
-msgid "Configure IP blacklists that will be filtered from the results of specific DNS server."
-msgstr "配置需要从指定域名服务器结果过滤的IP黑名单。"
-
-msgid "Technical Support"
-msgstr "技术支持"
-
-msgid "If you like this software, please buy me a cup of coffee."
-msgstr "如果本软件对你有帮助，请给作者加个蛋。"
-
-msgid "SmartDNS official website"
-msgstr "SmartDNS官方网站"
-
-msgid "open website"
-msgstr "打开网站"
-
-msgid "Donate to smartdns"
-msgstr "捐助smartdns项目"
-
-msgid "Donate"
-msgstr "捐助"
-
-
-
-
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "SmartDNS"
+msgstr "SmartDNS"
+
+msgid "SmartDNS is a local high-performance DNS server"
+msgstr "SmartDNS是一个本地高性能DNS服务器"
+
+msgid "SmartDNS Server"
+msgstr "SmartDNS 服务器"
+
+msgid "SmartDNS is a local high-performance DNS server, supports finding fastest IP, supports ad filtering, and supports avoiding DNS poisoning."
+msgstr "SmartDNS是一个本地高性能DNS服务器，支持返回最快IP，支持广告过滤。"
+
+msgid "Custom Settings"
+msgstr "自定义设置"
+
+msgid "General Settings"
+msgstr "基本设置"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "Advanced Settings"
+msgstr "高级设置"
+
+msgid "RUNNING"
+msgstr "运行中"
+
+msgid "NOT RUNNING"
+msgstr "未运行"
+
+msgid "Generate Coredump"
+msgstr "生成coredump"
+
+msgid "Generate Coredump file when smartdns crash, coredump file is located at /tmp/smartdns.xxx.core."
+msgstr "当smartdns异常时生成coredump文件，coredump文件在/tmp/smartdns.xxx.core."
+
+msgid "Server Name"
+msgstr "服务器名称"
+
+msgid "Smartdns server name"
+msgstr "SmartDNS的服务器名称，默认为smartdns，留空为主机名"
+
+msgid "SmartDNS is a local dns server to find fastest ip."
+msgstr "本地高性能服务器，优化网络访问性能。"
+
+msgid "Enable or disable smartdns server"
+msgstr "启用或禁用SmartDNS服务"
+
+msgid "Local Port"
+msgstr "本地端口"
+
+msgid "Smartdns local server port"
+msgstr "SmartDNS本地服务端口"
+
+msgid "IPV4 53 Port Redirect Failure"
+msgstr "IPV4 53端口重定向失败"
+
+msgid "IPV6 53 Port Redirect Failure"
+msgstr "IPV6 53端口重定向失败"
+
+msgid "Dnsmasq Forwared To Smartdns Failure"
+msgstr "重定向dnsmasq到smartdns失败"
+
+msgid "TCP Server"
+msgstr "TCP服务器"
+
+msgid "Enable TCP DNS Server"
+msgstr "启用TCP服务器"
+
+msgid "IPV6 Server"
+msgstr "IPV6服务器"
+
+msgid "Enable IPV6 DNS Server"
+msgstr "启用IPV6服务器"
+
+msgid "Dual-stack IP Selection"
+msgstr "双栈IP优选"
+
+msgid "Enable IP selection between IPV4 and IPV6"
+msgstr "启用或禁用IPV4，IPV6间的IP优选策略。"
+
+msgid "Domain prefetch"
+msgstr "域名预加载"
+
+msgid "Enable domain prefetch, accelerate domain response speed."
+msgstr "启用域名预加载，加速域名响应速度。"
+
+msgid "Serve expired"
+msgstr "缓存过期服务"
+
+msgid "Attempts to serve old responses from cache with a TTL of 0 in the response without waiting for the actual resolution to finish."
+msgstr "查询性能优化，有请求时尝试回应TTL为0的过期记录，以避免查询等待。"
+
+msgid "Redirect"
+msgstr "重定向"
+
+msgid "SmartDNS redirect mode"
+msgstr "SmartDNS 重定向模式"
+
+msgid "Run as dnsmasq upstream server"
+msgstr "作为dnsmasq的上游服务器"
+
+msgid "Redirect 53 port to SmartDNS"
+msgstr "重定向53端口到SmartDNS"
+
+msgid "Cache Size"
+msgstr "缓存大小"
+
+msgid "DNS domain result cache size"
+msgstr "缓存DNS的结果，缓存大小，配置零则不缓存"
+
+msgid "Domain TTL"
+msgstr "域名TTL"
+
+msgid "TTL for all domain result."
+msgstr "设置所有域名的TTL值"
+
+msgid "Domain TTL Min"
+msgstr "域名TTL最小值"
+
+msgid "Minimum TTL for all domain result."
+msgstr "设置所有域名的TTL最小值"
+
+msgid "Domain TTL Max"
+msgstr "域名TTL最大值"
+
+msgid "Maximum TTL for all domain result."
+msgstr "设置所有域名的TTL最大值"
+
+msgid "smartdns custom settings"
+msgstr "smartdns 自定义设置，具体配置参数参考指导"
+
+msgid "Second Server Settings"
+msgstr "第二DNS服务器"
+
+msgid "Enable or disable second DNS server."
+msgstr "是否启用第二DNS服务器。"
+
+msgid "Skip Speed Check"
+msgstr "跳过测速"
+
+msgid "Do not check speed."
+msgstr "禁用测速。"
+
+msgid "Server Group"
+msgstr "服务器组"
+
+msgid "Query DNS through specific dns server group, such as office, home."
+msgstr "使用指定服务器组查询，比如office, home。"
+
+msgid "Skip Address Rules"
+msgstr "跳过address规则"
+
+msgid "Skip address rules."
+msgstr "跳过address规则。"
+
+msgid "Skip Nameserver Rule"
+msgstr "跳过Nameserver规则"
+
+msgid "Skip nameserver rules."
+msgstr "跳过Nameserver规则。"
+
+msgid "Skip Ipset Rule"
+msgstr "跳过ipset规则"
+
+msgid "Skip ipset rules."
+msgstr "跳过ipset规则。"
+
+msgid "Skip SOA Address Rule"
+msgstr "跳过address SOA(#)规则"
+
+msgid "Skip SOA address rules."
+msgstr "跳过address SOA(#)规则。"
+
+msgid "Skip Dualstack Selection"
+msgstr "跳过双栈优选"
+
+msgid "Skip Dualstack Selection."
+msgstr "跳过双栈优选。"
+
+msgid "Skip Cache"
+msgstr "跳过cache"
+
+msgid "Skip Cache."
+msgstr "跳过cache。"
+
+msgid "Force AAAA SOA"
+msgstr "停用IPV6地址解析"
+
+msgid "Force AAAA SOA."
+msgstr "停用IPV6地址解析。"
+
+msgid "Upstream Servers"
+msgstr "上游服务器"
+
+msgid "Upstream Servers, support UDP, TCP protocol. Please configure multiple DNS servers, including multiple foreign DNS servers."
+msgstr "上游DNS服务器列表，支持UDP，TCP协议，请配置多个上游DNS服务器，包括多个国内外服务器"
+
+msgid "DNS Server Name"
+msgstr "DNS服务器名称"
+
+msgid "port"
+msgstr "端口"
+
+msgid "DNS Server port"
+msgstr "DNS服务器端口"
+
+msgid "DNS Server ip"
+msgstr "DNS服务器IP"
+
+msgid "type"
+msgstr "类型"
+
+msgid "DNS Server type"
+msgstr "协议类型"
+
+msgid "Domain Address"
+msgstr "域名地址"
+
+msgid "TLS Hostname Verify"
+msgstr "校验TLS主机名"
+
+msgid "Set TLS hostname to verify."
+msgstr "设置校验TLS主机名。"
+
+msgid "No check certificate"
+msgstr "停用证书校验"
+
+msgid "Do not check certificate."
+msgstr "不校验证书的合法性。"
+
+msgid "TLS SNI name"
+msgstr "TLS SNI名称"
+
+msgid "HTTP Host"
+msgstr "HTTP主机"
+
+msgid "Sets the server name indication for query."
+msgstr "设置查询时使用的服务器SNI名称。"
+
+msgid "Set the HTTP host used for the query. Use this parameter when the host of the URL address is an IP address."
+msgstr "设置查询时使用的HTTP主机，当URL地址的host是IP地址时，使用此参数。"
+
+msgid "Server Group"
+msgstr "服务器组"
+
+msgid "DNS Server group belongs to, used with nameserver, such as office, home."
+msgstr "DNS服务器所属组， 配合nameserver使用，例如：office，home。"
+
+msgid "IP Blacklist Filtering"
+msgstr "IP黑名单过滤"
+
+msgid "Anti Answer Forgery"
+msgstr "反回答伪造"
+
+msgid "Anti answer forgery, if DNS does not work properly after enabling, please turn off this feature"
+msgstr "反回答伪造，如果启用后DNS工作不正常，请关闭此功能。"
+
+msgid "Filtering IP with blacklist"
+msgstr "使用IP黑名单过滤"
+
+msgid "TLS SPKI Pinning"
+msgstr "TLS SPKI 指纹"
+
+msgid "Used to verify the validity of the TLS server, The value is Base64 encoded SPKI fingerprint, leaving blank to indicate that the validity of TLS is not verified."
+msgstr "用于校验TLS服务器的有效性，数值为Base64编码的SPKI指纹, 留空表示不验证TLS的合法性"
+
+msgid "Additional Server Args"
+msgstr "额外的服务器参数"
+
+msgid "Additional Args for upstream dns servers"
+msgstr "额外的上游DNS服务器参数"
+
+msgid "Upstream DNS Server Configuration"
+msgstr "上游DNS服务器配置"
+
+msgid "Set Specific domain ip address."
+msgstr "指定特定域名的IP地址"
+
+msgid "Specify an IP address to return for any host in the given domains, Queries in the domains are never forwarded and always replied to with the specified IP address which may be IPv4 or IPv6."
+msgstr "配置特定域名返回特定的IP地址，域名查询将不到上游服务器请求，直接返回配置的IP地址，可用于广告屏蔽。"
+
+msgid "IP Blacklist"
+msgstr "IP黑名单"
+
+msgid "Set Specific ip blacklist."
+msgstr "设置IP黑名单列表"
+
+msgid "Configure IP blacklists that will be filtered from the results of specific DNS server."
+msgstr "配置需要从指定域名服务器结果过滤的IP黑名单。"
+
+msgid "Technical Support"
+msgstr "技术支持"
+
+msgid "If you like this software, please buy me a cup of coffee."
+msgstr "如果本软件对你有帮助，请给作者加个蛋。"
+
+msgid "SmartDNS official website"
+msgstr "SmartDNS官方网站"
+
+msgid "open website"
+msgstr "打开网站"
+
+msgid "Donate to smartdns"
+msgstr "捐助smartdns项目"
+
+msgid "Donate"
+msgstr "捐助"
diff --git a/release/src/router/smartdns/package/luci/files/root/usr/share/luci/menu.d/luci-app-smartdns.json b/release/src/router/smartdns/package/luci/files/root/usr/share/luci/menu.d/luci-app-smartdns.json
new file mode 100644
index 0000000000..91b4402484
--- /dev/null
+++ b/release/src/router/smartdns/package/luci/files/root/usr/share/luci/menu.d/luci-app-smartdns.json
@@ -0,0 +1,12 @@
+{
+	"admin/services/smartdns": {
+		"title": "SmartDNS",
+		"action": {
+			"type": "view",
+			"path": "smartdns/smartdns"
+		},
+		"depends": {
+			"uci": { "smartdns": true }
+		}
+	}
+}
diff --git a/release/src/router/smartdns/package/luci/files/root/usr/share/rpcd/acl.d/luci-app-smartdns.json b/release/src/router/smartdns/package/luci/files/root/usr/share/rpcd/acl.d/luci-app-smartdns.json
new file mode 100644
index 0000000000..78fbb1c509
--- /dev/null
+++ b/release/src/router/smartdns/package/luci/files/root/usr/share/rpcd/acl.d/luci-app-smartdns.json
@@ -0,0 +1,23 @@
+{
+	"luci-app-smartdns": {
+		"description": "Grant access to LuCI app smartdns",
+		"read": {
+			"file": {
+				"/etc/smartdns/*": [ "read" ],
+				"/usr/sbin/iptables -t nat -nL PREROUTING": [ "exec" ],
+				"/usr/sbin/ip6tables -t nat -nL PREROUTING": [ "exec" ],
+				"/usr/sbin/smartdns": [ "exec" ]
+			},
+			"ubus": {
+				"service": [ "list" ]
+			},
+			"uci": [ "smartdns" ]
+		},
+		"write": {
+			"file": {
+				"/etc/smartdns/*": [ "write" ]
+			},
+			"uci": [ "smartdns" ]
+		}
+	}
+}
diff --git a/release/src/router/smartdns/package/luci/files/root/www/luci-static/resources/view/smartdns/smartdns.js b/release/src/router/smartdns/package/luci/files/root/www/luci-static/resources/view/smartdns/smartdns.js
new file mode 100644
index 0000000000..4d137753c7
--- /dev/null
+++ b/release/src/router/smartdns/package/luci/files/root/www/luci-static/resources/view/smartdns/smartdns.js
@@ -0,0 +1,492 @@
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+'use strict';
+'require fs';
+'require uci';
+'require form';
+'require rpc';
+
+var conf = 'smartdns';
+var callServiceList = rpc.declare({
+	object: 'service',
+	method: 'list',
+	params: ['name'],
+	expect: { '': {} }
+});
+
+function getPidOfSmartdns() {
+	return L.resolveDefault(callServiceList(conf), {})
+		.then(function (res) {
+			var isrunning = false;
+			try {
+				isrunning = res[conf]['instances']['smartdns']['running'];
+			} catch (e) { }
+			return isrunning;
+		});
+}
+
+function getIPTablesRedirect() {
+	return fs.exec('/usr/sbin/iptables', ['-t', 'nat', '-nL', 'PREROUTING']).then(function (res) {
+		if (res.code === 0) {
+			return res.stdout.trim();
+		} else {
+			return "";
+		}
+	});
+}
+
+function getIP6TablesRedirect() {
+	return fs.exec('/usr/sbin/ip6tables', ['-t', 'nat', '-nL', 'PREROUTING']).then(function (res) {
+		if (res.code === 0) {
+			return res.stdout.trim();
+		} else {
+			return "";
+		}
+	});
+}
+
+function smartdnsServiceStatus() {
+	return Promise.all([
+		getPidOfSmartdns(),
+		getIPTablesRedirect(),
+		getIP6TablesRedirect()
+	]);
+}
+
+function smartdnsRenderStatus(res) {
+	var renderHTML = "";
+	var isRunning = res[0];
+	var ipt = res[1];
+	var ip6t = res[2];
+
+	var serverPort = uci.get_first('smartdns', 'smartdns', 'port');
+	var redirectMode = uci.get_first('smartdns', 'smartdns', 'redirect');
+	var ipv6Enabled = uci.get_first('smartdns', 'smartdns', 'ipv6_server');
+
+	if (isRunning) {
+		renderHTML += "<span style=\"color:green;font-weight:bold\">SmartDNS - " + _("RUNNING") + "</span>";
+	} else {
+		renderHTML += "<span style=\"color:red;font-weight:bold\">SmartDNS - " + _("NOT RUNNING") + "</span>";
+		return renderHTML;
+	}
+
+	if (redirectMode === "dnsmasq-upstream") {
+		var matchLine = "127.0.0.1#" + serverPort;
+		var dnsmasqServer = uci.get_first('dhcp', 'dnsmasq', 'server') || "";
+
+		if (dnsmasqServer.indexOf(matchLine) < 0) {
+			renderHTML += "<br /><span style=\"color:red;font-weight:bold\">" + _("Dnsmasq Forwared To Smartdns Failure") + "</span>";
+		}
+	} else if (redirectMode === "redirect") {
+		var redirectRules = (ipt || '').split(/\n/).filter(function (rule) {
+			return rule.match(/REDIRECT/) && rule.match(/dpt:53/) && rule.match("ports " + serverPort);
+		});
+
+		if (redirectRules.length <= 0) {
+			renderHTML += "<br /><span style=\"color:red;font-weight:bold\">" + _("IPV4 53 Port Redirect Failure") + "</span>";
+			if (ipv6Enabled) {
+				var redirectRules = (ip6t || '').split(/\n/).filter(function (rule) {
+					return rule.match(/REDIRECT/) && rule.match(/dpt:53/) && rule.match("ports " + serverPort);
+				});
+				if (redirectRules.length <= 0) {
+					renderHTML += "<br /><span style=\"color:red;font-weight:bold\">" + _("IPV6 53 Port Redirect Failure") + "</span>";
+				}
+			}
+		}
+	}
+
+	return renderHTML;
+}
+
+return L.view.extend({
+	load: function () {
+		return Promise.all([
+			uci.load('smartdns'),
+			uci.load('dhcp')
+		]);
+	},
+	render: function (stats) {
+		var m, s, o;
+
+		m = new form.Map('smartdns', _('SmartDNS'));
+		m.title = _("SmartDNS Server");
+		m.description = _("SmartDNS is a local high-performance DNS server, supports finding fastest IP, "
+			+ "supports ad filtering, and supports avoiding DNS poisoning.");
+
+		s = m.section(form.NamedSection, '_status');
+		s.anonymous = true;
+		s.render = function (section_id) {
+			L.Poll.add(function () {
+				return L.resolveDefault(smartdnsServiceStatus()).then(function (res) {
+					var view = document.getElementById("service_status");
+					view.innerHTML = smartdnsRenderStatus(res);
+				});
+			});
+
+			return E('div', { class: 'cbi-map' },
+				E('div', { class: 'cbi-section' }, [
+					E('div', { id: 'service_status' },
+						_('Collecting data ...'))
+				])
+			);
+		}
+
+		// Basic;
+		s = m.section(form.TypedSection, "smartdns", _("Settings"), _("General Settings"));
+		s.anonymous = true;
+
+		s.tab("settings", _("General Settings"));
+		s.tab("seconddns", _("Second Server Settings"));
+		s.tab("custom", _("Custom Settings"));
+
+		// Eanble;
+		o = s.taboption("settings", form.Flag, "enabled", _("Enable"), _("Enable or disable smartdns server"));
+		o.default = o.disabled;
+		o.rempty = false;
+
+		// server name;
+		o = s.taboption("settings", form.Value, "server_name", _("Server Name"), _("Smartdns server name"));
+		o.default = "smartdns";
+		o.datatype = "hostname";
+		o.rempty = false;
+
+		// Port;
+		o = s.taboption("settings", form.Value, "port", _("Local Port"), _("Smartdns local server port"));
+		o.placeholder = 6053;
+		o.default = 6053;
+		o.datatype = "port";
+		o.rempty = false;
+
+		// Enable TCP server;
+		o = s.taboption("settings", form.Flag, "tcp_server", _("TCP Server"), _("Enable TCP DNS Server"));
+		o.rmempty = false;
+		o.default = o.enabled;
+
+		// Support IPV6;
+		o = s.taboption("settings", form.Flag, "ipv6_server", _("IPV6 Server"), _("Enable IPV6 DNS Server"));
+		o.rmempty = false;
+		o.default = o.enabled;
+
+		// Support DualStack ip selection;
+		o = s.taboption("settings", form.Flag, "dualstack_ip_selection", _("Dual-stack IP Selection"),
+			_("Enable IP selection between IPV4 and IPV6"));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// Domain prefetch load ;
+		o = s.taboption("settings", form.Flag, "prefetch_domain", _("Domain prefetch"),
+			_("Enable domain prefetch, accelerate domain response speed."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// Domain Serve expired
+		o = s.taboption("settings", form.Flag, "serve_expired", _("Serve expired"),
+			_("Attempts to serve old responses from cache with a TTL of 0 in the response without waiting for the actual resolution to finish."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// Redirect;
+		o = s.taboption("settings", form.ListValue, "redirect", _("Redirect"), _("SmartDNS redirect mode"));
+		o.placeholder = "none";
+		o.value("none", _("none"));
+		o.value("dnsmasq-upstream", _("Run as dnsmasq upstream server"));
+		o.value("redirect", _("Redirect 53 port to SmartDNS"));
+		o.default = "none";
+		o.rempty = false;
+
+		// cache-size;
+		o = s.taboption("settings", form.Value, "cache_size", _("Cache Size"), _("DNS domain result cache size"));
+		o.rempty = true;
+
+		// rr-ttl;
+		o = s.taboption("settings", form.Value, "rr_ttl", _("Domain TTL"), _("TTL for all domain result."));
+		o.rempty = true;
+
+		// rr-ttl-min;
+		o = s.taboption("settings", form.Value, "rr_ttl_min", _("Domain TTL Min"),
+			_("Minimum TTL for all domain result."));
+		o.rempty = true;
+		o.placeholder = "300";
+		o.default = 300;
+		o.optional = true;
+
+		// second dns server;
+		// rr-ttl-max;
+		o = s.taboption("settings", form.Value, "rr_ttl_max", _("Domain TTL Max"),
+			_("Maximum TTL for all domain result."));
+		o.rempty = true;
+
+		// Eanble;
+		o = s.taboption("seconddns", form.Flag, "seconddns_enabled", _("Enable"),
+			_("Enable or disable second DNS server."));
+		o.default = o.disabled;
+		o.rempty = false;
+
+		// Port;
+		o = s.taboption("seconddns", form.Value, "seconddns_port", _("Local Port"), _("Smartdns local server port"));
+		o.placeholder = 6553;
+		o.default = 6553;
+		o.datatype = "port";
+		o.rempty = false;
+
+		// Enable TCP server;
+		o = s.taboption("seconddns", form.Flag, "seconddns_tcp_server", _("TCP Server"), _("Enable TCP DNS Server"));
+		o.rmempty = false;
+		o.default = o.enabled;
+
+		// dns server group;
+		o = s.taboption("seconddns", form.Value, "seconddns_server_group", _("Server Group"),
+			_("Query DNS through specific dns server group, such as office, home."));
+		o.rmempty = true;
+		o.placeholder = "default";
+		o.datatype = "hostname";
+		o.rempty = true;
+
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_speed_check", _("Skip Speed Check"),
+			_("Do not check speed."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// skip address rules;
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_rule_addr", _("Skip Address Rules"),
+			_("Skip address rules."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// skip name server rules;
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_rule_nameserver", _("Skip Nameserver Rule"),
+			_("Skip nameserver rules."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// skip ipset rules;
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_rule_ipset", _("Skip Ipset Rule"),
+			_("Skip ipset rules."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// skip soa address rule;
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_rule_soa", _("Skip SOA Address Rule"),
+			_("Skip SOA address rules."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_dualstack_selection", _("Skip Dualstack Selection"),
+			_("Skip Dualstack Selection."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// skip cache;
+		o = s.taboption("seconddns", form.Flag, "seconddns_no_cache", _("Skip Cache"), _("Skip Cache."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// Force AAAA SOA
+		o = s.taboption("seconddns", form.Flag, "force_aaaa_soa", _("Force AAAA SOA"), _("Force AAAA SOA."));
+		o.rmempty = false;
+		o.default = o.disabled;
+
+		// custom settings;
+		o = s.taboption("custom", form.TextValue, "custom_conf",
+			"", _("smartdns custom settings"));
+
+		o.rows = 20;
+		o.cfgvalue = function (section_id) {
+			return fs.trimmed('/etc/smartdns/custom.conf');
+		};
+		o.write = function (section_id, formvalue) {
+			return fs.write('/etc/smartdns/custom.conf', formvalue.trim().replace(/\r\n/g, '\n') + '\n');
+		};
+
+		o = s.taboption("custom", form.Flag, "coredump", _("Generate Coredump"),
+			_("Generate Coredump file when smartdns crash, coredump file is located at /tmp/smartdns.xxx.core."));
+		o.rmempty = false;
+		o.default = o.disabled;
+		// Upstream servers;
+		s = m.section(form.GridSection, "server", _("Upstream Servers"),
+			_("Upstream Servers, support UDP, TCP protocol. Please configure multiple DNS servers, "
+				+ "including multiple foreign DNS servers."));
+		s.anonymous = true;
+		s.addremove = true;
+
+		s.tab('general', _('General Settings'));
+		s.tab('advanced', _('Advanced Settings'));
+
+		// enable flag;
+		o = s.taboption("general", form.Flag, "enabled", _("Enable"), _("Enable"));
+		o.rmempty = false;
+		o.default = o.enabled;
+		o.editable = true;
+
+		// name;
+		o = s.taboption("general", form.Value, "name", _("DNS Server Name"), _("DNS Server Name"));
+
+		// IP address;
+		o = s.taboption("general", form.Value, "ip", _("ip"), _("DNS Server ip"));
+		o.datatype = "or(ipaddr, string)";
+		o.rmempty = false;
+
+		// port;
+		o = s.taboption("general", form.Value, "port", _("port"), _("DNS Server port"));
+		o.placeholder = "default";
+		o.datatype = "port";
+		o.rempty = true;
+		o.depends("type", "udp");
+		o.depends("type", "tcp");
+		o.depends("type", "tls");
+
+		// type;
+		o = s.taboption("general", form.ListValue, "type", _("type"), _("DNS Server type"));
+		o.placeholder = "udp";
+		o.value("udp", _("udp"));
+		o.value("tcp", _("tcp"));
+		o.value("tls", _("tls"));
+		o.value("https", _("https"));
+		o.default = "udp";
+		o.rempty = false;
+
+		// Advanced Options
+		// server group
+		o = s.taboption("advanced", form.Value, "server_group", _("Server Group"), _("DNS Server group belongs to, "
+			+ "used with nameserver, such as office, home."))
+		o.rmempty = true
+		o.placeholder = "default"
+		o.datatype = "hostname"
+		o.rempty = true
+		o.modalonly = true;
+
+		// blacklist_ip
+		o = s.taboption("advanced", form.Flag, "blacklist_ip", _("IP Blacklist Filtering"),
+			_("Filtering IP with blacklist"))
+		o.rmempty = false
+		o.default = o.disabled
+		o.modalonly = true;
+
+		// TLS host verify
+		o = s.taboption("advanced", form.Value, "tls_host_verify", _("TLS Hostname Verify"),
+			_("Set TLS hostname to verify."))
+		o.default = ""
+		o.datatype = "string"
+		o.rempty = true
+		o.modalonly = true;
+		o.depends("type", "tls")
+		o.depends("type", "https")
+
+		// certificate verify
+		o = s.taboption("advanced", form.Flag, "no_check_certificate", _("No check certificate"),
+			_("Do not check certificate."))
+		o.rmempty = false
+		o.default = o.disabled
+		o.modalonly = true;
+		o.depends("type", "tls")
+		o.depends("type", "https")
+
+		// SNI host name
+		o = s.taboption("advanced", form.Value, "host_name", _("TLS SNI name"),
+			_("Sets the server name indication for query."))
+		o.default = ""
+		o.datatype = "hostname"
+		o.rempty = true
+		o.modalonly = true;
+		o.depends("type", "tls")
+		o.depends("type", "https")
+
+		// http host
+		o = s.taboption("advanced", form.Value, "http_host", _("HTTP Host"),
+			_("Set the HTTP host used for the query. Use this parameter when the host of the URL address is an IP address."))
+		o.default = ""
+		o.datatype = "hostname"
+		o.rempty = true
+		o.modalonly = true;
+		o.depends("type", "https")
+
+		// SPKI pin
+		o = s.taboption("advanced", form.Value, "spki_pin", _("TLS SPKI Pinning"),
+			_("Used to verify the validity of the TLS server, The value is Base64 encoded SPKI fingerprint, "
+				+ "leaving blank to indicate that the validity of TLS is not verified."))
+		o.default = ""
+		o.datatype = "string"
+		o.rempty = true
+		o.modalonly = true;
+		o.depends("type", "tls")
+		o.depends("type", "https")
+
+		// other args
+		o = s.taboption("advanced", form.Value, "addition_arg", _("Additional Server Args"),
+			_("Additional Args for upstream dns servers"))
+		o.default = ""
+		o.rempty = true
+		o.modalonly = true;
+
+		// Doman addresss;
+		s = m.section(form.TypedSection, "smartdns", _("Advanced Settings"), _("Advanced Settings"));
+		s.anonymous = true;
+
+		s.tab("domain-address", _("Domain Address"), _("Set Specific domain ip address."));
+		s.tab("blackip-list", _("IP Blacklist"), _("Set Specific ip blacklist."));
+
+		o = s.taboption("domain-address", form.TextValue, "address_conf",
+			"",
+			_("Specify an IP address to return for any host in the given domains, Queries in the domains are never "
+				+ "forwarded and always replied to with the specified IP address which may be IPv4 or IPv6."));
+		o.rows = 20;
+		o.cfgvalue = function (section_id) {
+			return fs.trimmed('/etc/smartdns/address.conf');
+		};
+		o.write = function (section_id, formvalue) {
+			return fs.write('/etc/smartdns/address.conf', formvalue.trim().replace(/\r\n/g, '\n') + '\n');
+		};
+
+		// IP Blacklist;
+		// blacklist;
+		o = s.taboption("blackip-list", form.TextValue, "blackip_ip_conf",
+			"", _("Configure IP blacklists that will be filtered from the results of specific DNS server."));
+		o.rows = 20;
+		o.cfgvalue = function (section_id) {
+			return fs.trimmed('/etc/smartdns/blacklist-ip.conf');
+		};
+		o.write = function (section_id, formvalue) {
+			return fs.write('/etc/smartdns/blacklist-ip.conf', formvalue.trim().replace(/\r\n/g, '\n') + '\n');
+		};
+
+		// Doman addresss;
+		s = m.section(form.TypedSection, "smartdns", _("Technical Support"),
+			_("If you like this software, please buy me a cup of coffee."));
+		s.anonymous = true;
+
+		o = s.option(form.Button, "web");
+		o.title = _("SmartDNS official website");
+		o.inputtitle = _("open website");
+		o.inputstyle = "apply";
+		o.onclick = function () {
+			window.open("https://pymumu.github.io/smartdns", '_blank');
+		};
+
+		o = s.option(form.Button, "Donate");
+		o.title = _("Donate to smartdns");
+		o.inputtitle = _("Donate");
+		o.inputstyle = "apply";
+		o.onclick = function () {
+			window.open("https://pymumu.github.io/smartdns/#donate", '_blank');
+		};
+
+		return m.render();
+	}
+});
diff --git a/release/src/router/smartdns/package/luci/make.sh b/release/src/router/smartdns/package/luci/make.sh
index e5b404a7bd..ed3ff201a4 100644
--- a/release/src/router/smartdns/package/luci/make.sh
+++ b/release/src/router/smartdns/package/luci/make.sh
@@ -52,14 +52,16 @@ build()
 	cp $CURR_DIR/* $ROOT/ -af
 	cd $ROOT/
 	build_tool
-	mkdir $ROOT/root/usr/lib/lua/ -p
-	cp $ROOT/files/luci $ROOT/root/usr/lib/lua/ -af
 	
+	mkdir $ROOT/root/usr/lib/lua/luci -p
+	mkdir $ROOT/root/usr/share/rpcd/acl.d/ -p
+	cp $ROOT/files/luci/i18n $ROOT/root/usr/lib/lua/luci/ -avf
+
 	#Generate Language
 	$PO2LMO $ROOT/files/luci/i18n/smartdns.zh-cn.po $ROOT/root/usr/lib/lua/luci/i18n/smartdns.zh-cn.lmo
 	rm $ROOT/root/usr/lib/lua/luci/i18n/smartdns.zh-cn.po
 
-	cp $ROOT/files/etc $ROOT/root/ -af
+	cp $ROOT/files/root/* $ROOT/root/ -avf
 	INST_SIZE="`du -sb $ROOT/root/ | awk '{print $1}'`"
 	
 	sed -i "s/^Architecture.*/Architecture: all/g" $ROOT/control/control
@@ -75,7 +77,7 @@ build()
 	cd $ROOT
 
 	tar zcf $ROOT/data.tar.gz -C root .
-	tar zcf $OUTPUTDIR/luci-app-smartdns.$VER.$FILEARCH.ipk control.tar.gz data.tar.gz debian-binary
+	tar zcf $OUTPUTDIR/luci-app-smartdns.$VER.$FILEARCH.ipk ./control.tar.gz ./data.tar.gz ./debian-binary
 
 	rm -fr $ROOT/
 }
diff --git a/release/src/router/smartdns/package/openwrt/Makefile b/release/src/router/smartdns/package/openwrt/Makefile
index ac1d5bd1a4..60b1681680 100644
--- a/release/src/router/smartdns/package/openwrt/Makefile
+++ b/release/src/router/smartdns/package/openwrt/Makefile
@@ -1,58 +1,45 @@
 #
-# Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+# Copyright (c) 2018-2019 Nick Peng (pymumu@gmail.com)
+# This is free software, licensed under the GNU General Public License v3.
 #
-# smartdns is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# smartdns is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=smartdns
+PKG_VERSION:=1.2019.28
+PKG_RELEASE:=1
+
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
 
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_URL:=https://github.com/pymumu/smartdns.git
+PKG_SOURCE_URL:=https://www.github.com/pymumu/smartdns.git
+PKG_SOURCE_VERSION:=982002e836e486fb4e360bc10e84e7e7197caf46
+PKG_MIRROR_HASH:=ae889b521ecf114660ce5597af5c361f5970a7dcb75dadf61b938ba3d2baba54
 
-PKG_REV:=d51f5e6eeba7bfde1b108fe32d540bd429550573
-PKG_VERSION:=1.2019.11.02-1102
-PKG_RELEASE:=1
-PKG_LICENSE:=GPL-3.0
+PKG_MAINTAINER:=Nick Peng <pymumu@gmail.com>
+PKG_LICENSE:=GPL-3.0-or-later
+PKG_LICENSE_FILES:=LICENSE
 
-PKG_SOURCE_VERSION:=$(PKG_REV)
-PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
-PKG_SOURCE:=$(PKG_SOURCE_SUBDIR).tar.gz
-PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_SOURCE_SUBDIR)
+PKG_BUILD_PARALLEL:=1
 
 include $(INCLUDE_DIR)/package.mk
 
-MAKE_ARGS := CFLAGS="$(TARGET_CFLAGS)" CC=$(TARGET_CC)
+MAKE_VARS += VER=$(PKG_VERSION) 
+MAKE_PATH:=src
 
 define Package/smartdns
   SECTION:=net
   CATEGORY:=Network
   TITLE:=smartdns server
-  URL:=http://github.com/pymumu/smartdns/
-  MAINTAINER:=Nick Peng <pymumu@gmail.com>
-  DEPENDS:=+libopenssl
+  DEPENDS:=+libpthread +libopenssl
+  URL:=https://www.github.com/pymumu/smartdns/
 endef
 
 define Package/smartdns/description
-SmartDNS is a local DNS server. SmartDNS accepts DNS query requests from local clients, obtains DNS query results from multiple upstream DNS servers, and returns the fastest access results to clients.
-endef
-
-define Build/Configure
-	mkdir -p $(PKG_INSTALL_DIR)
-endef
-
-define Build/Compile
-	$(MAKE) -C $(PKG_BUILD_DIR)/src $(MAKE_ARGS) all
+SmartDNS is a local DNS server which accepts DNS query requests from local network clients,
+get DNS query results from multiple upstream DNS servers concurrently, and returns the fastest IP to clients.
+Unlike dnsmasq's all-servers, smartdns returns the fastest IP. 
 endef
 
 define Package/smartdns/conffiles
diff --git a/release/src/router/smartdns/package/openwrt/address.conf b/release/src/router/smartdns/package/openwrt/address.conf
index 592b3caf91..0f41344463 100644
--- a/release/src/router/smartdns/package/openwrt/address.conf
+++ b/release/src/router/smartdns/package/openwrt/address.conf
@@ -1,16 +1,16 @@
-# Add domains which you want to force to an IP address here.
-# The example below send any host in example.com to a local webserver.
-# address /domain/[ip|-|-4|-6|#|#4|#6]
-# address /www.example.com/1.2.3.4, return ip 1.2.3.4 to client
-# address /www.example.com/-, ignore address, query from upstream, suffix 4, for ipv4, 6 for ipv6, none for all
-# address /www.example.com/#, return SOA to client, suffix 4, for ipv4, 6 for ipv6, none for all
-
-# specific ipset to domain
-# ipset /domain/[ipset|-]
-# ipset /www.example.com/block, set ipset with ipset name of block 
-# ipset /www.example.com/-, ignore this domain
-
-# specific nameserver to domain
-# nameserver /domain/[group|-]
-# nameserver /www.example.com/office, Set the domain name to use the appropriate server group.
-# nameserver /www.example.com/-, ignore this domain
+# Add domains which you want to force to an IP address here.
+# The example below send any host in example.com to a local webserver.
+# address /domain/[ip|-|-4|-6|#|#4|#6]
+# address /www.example.com/1.2.3.4, return ip 1.2.3.4 to client
+# address /www.example.com/-, ignore address, query from upstream, suffix 4, for ipv4, 6 for ipv6, none for all
+# address /www.example.com/#, return SOA to client, suffix 4, for ipv4, 6 for ipv6, none for all
+
+# specific ipset to domain
+# ipset /domain/[ipset|-]
+# ipset /www.example.com/block, set ipset with ipset name of block 
+# ipset /www.example.com/-, ignore this domain
+
+# specific nameserver to domain
+# nameserver /domain/[group|-]
+# nameserver /www.example.com/office, Set the domain name to use the appropriate server group.
+# nameserver /www.example.com/-, ignore this domain
diff --git a/release/src/router/smartdns/package/openwrt/blacklist-ip.conf b/release/src/router/smartdns/package/openwrt/blacklist-ip.conf
index ddb0965c38..7d26a7f2d6 100644
--- a/release/src/router/smartdns/package/openwrt/blacklist-ip.conf
+++ b/release/src/router/smartdns/package/openwrt/blacklist-ip.conf
@@ -1,4 +1,4 @@
-# Add IP blacklist which you want to filtering from some DNS server here.
-# The example below filtering ip from the result of DNS server which is configured with -blacklist-ip.
-# blacklist-ip [ip/subnet]
+# Add IP blacklist which you want to filtering from some DNS server here.
+# The example below filtering ip from the result of DNS server which is configured with -blacklist-ip.
+# blacklist-ip [ip/subnet]
 # blacklist-ip 254.0.0.1/16
\ No newline at end of file
diff --git a/release/src/router/smartdns/package/openwrt/custom.conf b/release/src/router/smartdns/package/openwrt/custom.conf
index 3713dfadf3..0d146302f3 100644
--- a/release/src/router/smartdns/package/openwrt/custom.conf
+++ b/release/src/router/smartdns/package/openwrt/custom.conf
@@ -1,14 +1,14 @@
-# Add custom settings here.
-
-# set log level
-# log-level [level], level=fatal, error, warn, notice, info, debug
-# log-level error
-
-# log-size k,m,g
-# log-size 128k
-
-# log-file /var/log/smartdns.log
-# log-num 2
-
-# List of hosts that supply bogus NX domain results 
+# Add custom settings here.
+
+# set log level
+# log-level [level], level=fatal, error, warn, notice, info, debug
+# log-level error
+
+# log-size k,m,g
+# log-size 128k
+
+# log-file /var/log/smartdns.log
+# log-num 2
+
+# List of hosts that supply bogus NX domain results 
 # bogus-nxdomain [ip/subnet]
\ No newline at end of file
diff --git a/release/src/router/smartdns/package/openwrt/files/etc/init.d/smartdns b/release/src/router/smartdns/package/openwrt/files/etc/init.d/smartdns
index f4eabc7f30..d04a36af8e 100644
--- a/release/src/router/smartdns/package/openwrt/files/etc/init.d/smartdns
+++ b/release/src/router/smartdns/package/openwrt/files/etc/init.d/smartdns
@@ -22,7 +22,6 @@ SERVICE_USE_PID=1
 SERVICE_WRITE_PID=1
 SERVICE_DAEMONIZE=1
 SERVICE_PID_FILE="/var/run/smartdns.pid"
-BASECONFIGFILE="/etc/smartdns/smartdns.conf"
 SMARTDNS_CONF_DIR="/etc/smartdns"
 SMARTDNS_VAR_CONF_DIR="/var/etc/smartdns"
 SMARTDNS_CONF="$SMARTDNS_VAR_CONF_DIR/smartdns.conf"
@@ -37,22 +36,18 @@ set_forward_dnsmasq()
 {
 	local PORT="$1"
 	addr="127.0.0.1#$PORT"
-	OLD_SERVER="`uci get dhcp.@dnsmasq[0].server 2>/dev/null`"
-	echo $OLD_SERVER | grep "^$addr" >/dev/null 2>&1
-	if [ $? -eq 0 ]; then
+	OLD_SERVER="$(uci get dhcp.@dnsmasq[0].server 2>/dev/null)"
+	if echo "$OLD_SERVER" | grep "^$addr" >/dev/null 2>&1; then
 		return
 	fi
 	uci delete dhcp.@dnsmasq[0].server 2>/dev/null
-	uci add_list dhcp.@dnsmasq[0].server=$addr
+	uci add_list dhcp.@dnsmasq[0].server="$addr"
 	for server in $OLD_SERVER; do
-		if [ "$server" = "$addr" ]; then
-			continue
-		fi
-		uci add_list dhcp.@dnsmasq[0].server=$server
+		[ "$server" = "$addr" ] && continue
+		uci add_list dhcp.@dnsmasq[0].server="$server"
 	done
-	uci delete dhcp.@dnsmasq[0].resolvfile 2>/dev/null
 	uci set dhcp.@dnsmasq[0].noresolv=1
-	uci commit dhcp 
+	uci commit dhcp
 	/etc/init.d/dnsmasq restart
 }
 
@@ -60,18 +55,16 @@ stop_forward_dnsmasq()
 {
 	local OLD_PORT="$1"
 	addr="127.0.0.1#$OLD_PORT"
-	OLD_SERVER="`uci get dhcp.@dnsmasq[0].server 2>/dev/null`"
-	echo $OLD_SERVER | grep "^$addr" >/dev/null 2>&1
-	if [ $? -ne 0 ]; then
+	OLD_SERVER="$(uci get dhcp.@dnsmasq[0].server 2>/dev/null)"
+	if ! echo "$OLD_SERVER" | grep "^$addr" >/dev/null 2>&1; then
 		return
 	fi
 
-	uci del_list dhcp.@dnsmasq[0].server=$addr 2>/dev/null
-	addrlist="`uci get dhcp.@dnsmasq[0].server 2>/dev/null`"
-	if [ -z "$addrlist" ] ; then
-		uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto 2>/dev/null
+	uci del_list dhcp.@dnsmasq[0].server="$addr" 2>/dev/null
+	addrlist="$(uci get dhcp.@dnsmasq[0].server 2>/dev/null)"
+	[ -z "$addrlist" ] && {
 		uci delete dhcp.@dnsmasq[0].noresolv 2>/dev/null
-	fi
+	}
 	uci commit dhcp
 	/etc/init.d/dnsmasq restart
 }
@@ -81,26 +74,24 @@ set_iptable()
 	local ipv6_server=$1
 	local tcp_server=$2
 
-	IPS="`ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F : '{print $2}'`"
+	IPS="$(ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F : '{print $2}')"
 	for IP in $IPS
 	do
-		if [ "$tcp_server" == "1" ]; then
-			iptables -t nat -A PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT >/dev/null 2>&1
+		if [ "$tcp_server" = "1" ]; then
+			iptables -t nat -A PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" >/dev/null 2>&1
 		fi
-		iptables -t nat -A PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT >/dev/null 2>&1
+		iptables -t nat -A PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" >/dev/null 2>&1
 	done
 
-	if [ "$ipv6_server" == 0 ]; then
-		return
-	fi
+	[ "$ipv6_server" = 0 ] && return
 
-	IPS="`ifconfig | grep "inet6 addr" | grep -v " fe80::" | grep -v " ::1" | grep "Global" | awk '{print $3}'`"
+	IPS="$(ifconfig | grep "inet6 addr" | grep -v " fe80::" | grep -v " ::1" | grep "Global" | awk '{print $3}')"
 	for IP in $IPS
 	do
-		if [ "$tcp_server" == "1" ]; then
-			ip6tables -t nat -A PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT >/dev/null 2>&1
+		if [ "$tcp_server" = "1" ]; then
+			ip6tables -t nat -A PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" >/dev/null 2>&1
 		fi
-		ip6tables -t nat -A PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT >/dev/null 2>&1
+		ip6tables -t nat -A PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" >/dev/null 2>&1
 	done
 
 }
@@ -109,24 +100,22 @@ clear_iptable()
 {
 	local OLD_PORT="$1"
 	local ipv6_server=$2
-	IPS="`ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F : '{print $2}'`"
+	IPS="$(ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F : '{print $2}')"
 	for IP in $IPS
 	do
-		iptables -t nat -D PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $OLD_PORT >/dev/null 2>&1
-		iptables -t nat -D PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $OLD_PORT >/dev/null 2>&1
+		iptables -t nat -D PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$OLD_PORT" >/dev/null 2>&1
+		iptables -t nat -D PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$OLD_PORT" >/dev/null 2>&1
 	done
 
-	if [ "$ipv6_server" == 0 ]; then
-		return
-	fi
+	[ "$ipv6_server" = 0 ] && return
 
-	IPS="`ifconfig | grep "inet6 addr" | grep -v " fe80::" | grep -v " ::1" | grep "Global" | awk '{print $3}'`"
+	IPS="$(ifconfig | grep "inet6 addr" | grep -v " fe80::" | grep -v " ::1" | grep "Global" | awk '{print $3}')"
 	for IP in $IPS
 	do
-		ip6tables -t nat -D PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $OLD_PORT >/dev/null 2>&1
-		ip6tables -t nat -D PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $OLD_PORT >/dev/null 2>&1
+		ip6tables -t nat -D PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$OLD_PORT" >/dev/null 2>&1
+		ip6tables -t nat -D PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$OLD_PORT" >/dev/null 2>&1
 	done
-	
+
 }
 
 service_triggers() {
@@ -134,7 +123,6 @@ service_triggers() {
 	procd_add_reload_trigger smartdns
 }
 
-
 conf_append()
 {
 	echo "$1 $2" >> $SMARTDNS_CONF_TMP
@@ -144,23 +132,16 @@ get_tz()
 {
 	SET_TZ=""
 
-	if [ -e "/etc/localtime" ]; then
-		return 
-	fi
-	
+	[ -e "/etc/localtime" ] && return
+
 	for tzfile in /etc/TZ /var/etc/TZ
 	do
-		if [ ! -e "$tzfile" ]; then
-			continue
-		fi
-		
-		tz="`cat $tzfile 2>/dev/null`"
+		[ -e "$tzfile" ] || continue
+		tz="$(cat $tzfile 2>/dev/null)"
 	done
-	
-	if [ -z "$tz" ]; then
-		return	
-	fi
-	
+
+	[ -z "$tz" ] && return
+
 	SET_TZ=$tz
 }
 
@@ -170,22 +151,21 @@ load_server()
 	local ADDITIONAL_ARGS=""
 	local DNS_ADDRESS=""
 
-	config_get_bool "enabled" "$section" "enabled" "1"
-	config_get "port" "$section" "port" ""
-	config_get "type" "$section" "type" "udp"
-	config_get "ip" "$section" "ip" ""
-	config_get "tls_host_verify" "$section" "tls_host_verify" ""
-	config_get "host_name" "$section" "host_name" ""
-	config_get "http_host" "$section" "http_host" ""
-	config_get "server_group" "$section" "server_group" ""
-	config_get "blacklist_ip" "$section" "blacklist_ip" "0"
-	config_get "check_edns" "$section" "check_edns" "0"
-	config_get "spki_pin" "$section" "spki_pin" ""
-	config_get "addition_arg" "$section" "addition_arg" ""
-
-	if [ "$enabled" = "0" ]; then
-		return
-	fi
+	config_get_bool enabled "$section" "enabled" "1"
+	config_get port "$section" "port" ""
+	config_get type "$section" "type" "udp"
+	config_get ip "$section" "ip" ""
+	config_get tls_host_verify "$section" "tls_host_verify" ""
+	config_get no_check_certificate "$section" "no_check_certificate" ""
+	config_get host_name "$section" "host_name" ""
+	config_get http_host "$section" "http_host" ""
+	config_get server_group "$section" "server_group" ""
+	config_get blacklist_ip "$section" "blacklist_ip" "0"
+	config_get check_edns "$section" "check_edns" "0"
+	config_get spki_pin "$section" "spki_pin" ""
+	config_get addition_arg "$section" "addition_arg" ""
+
+	[ "$enabled" = "0" ] && return
 
 	if [ -z "$ip" ] || [ -z "$type" ]; then
 		return
@@ -200,107 +180,71 @@ load_server()
 		SERVER="server-https"
 	fi
 
-	if [ ! -z "`echo $ip | grep ":" | grep -v "https://"`" ]; then
-		if [ -z "`echo $ip | grep "\["`" ]; then
+	if echo "$ip" | grep ":" | grep -q -v "https://" >/dev/null 2>&1; then
+		if ! echo "$ip" | grep -q "\\[" >/dev/null 2>&1; then
 			ip="[$ip]"
 		fi
 	fi
 
-	if [ ! -z "$tls_host_verify" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -tls-host-verify $tls_host_verify"
-	fi
-
-	if [ ! -z "$host_name" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -host-name $host_name"
-	fi
-
-	if [ ! -z "$http_host" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -http-host $http_host"
-	fi
-
-	if [ ! -z "$server_group" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -group $server_group"
-	fi
-
-	if [ "$blacklist_ip" != "0" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -blacklist-ip"
-	fi
+	[ -z "$tls_host_verify" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -tls-host-verify $tls_host_verify"
+	[ -z "$no_check_certificate" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -no-check-certificate"
+	[ -z "$host_name" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -host-name $host_name"
+	[ -z "$http_host" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -http-host $http_host"
+	[ -z "$server_group" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -group $server_group"
+	[ "$blacklist_ip" = "0" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -blacklist-ip"
+	[ "$check_edns" = "0" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -check-edns"
+	[ -z "$spki_pin" ] || ADDITIONAL_ARGS="$ADDITIONAL_ARGS -spki-pin $spki_pin"
 
-	if [ "$check_edns" != "0" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -check-edns"
-	fi
-
-	if [ ! -z "$spki_pin" ]; then
-		ADDITIONAL_ARGS="$ADDITIONAL_ARGS -spki-pin $spki_pin"
-	fi
-
-	if [ ! -z "$port" ]; then
-		DNS_ADDRESS="$ip:$port"
-	else
+	if [ -z "$port" ]; then
 		DNS_ADDRESS="$ip"
+	else
+		DNS_ADDRESS="$ip:$port"
 	fi
 
-	if [ "$type" = "https" ]; then
-		DNS_ADDRESS="$ip"
-	fi
+	[ "$type" = "https" ] && DNS_ADDRESS="$ip"
 
 	conf_append "$SERVER" "$DNS_ADDRESS $ADDITIONAL_ARGS $addition_arg"
 }
 
-load_second_server() 
+load_second_server()
 {
 	local section="$1"
 	local ARGS=""
 	local ADDR=""
 
-	config_get_bool "seconddns_enabled" "$section" "seconddns_enabled" "0"
-	if [ "$seconddns_enabled" = "0" ]; then
-		return
-	fi
+	config_get_bool seconddns_enabled "$section" "seconddns_enabled" "0"
+	[ "$seconddns_enabled" = "0" ] && return
 
-	config_get "seconddns_port" "$section" "seconddns_port" "7053"
+	config_get seconddns_port "$section" "seconddns_port" "6553"
 
-	config_get_bool "seconddns_no_speed_check" "$section" "seconddns_no_speed_check" "0"
-	if [ "$seconddns_no_speed_check" = "1" ]; then
-		ARGS="$ARGS -no-speed-check"
-	fi
+	config_get_bool seconddns_no_speed_check "$section" "seconddns_no_speed_check" "0"
+	[ "$seconddns_no_speed_check" = "1" ] && ARGS="$ARGS -no-speed-check"
 
-	config_get "seconddns_server_group" "$section" "seconddns_server_group" ""
-	if [ ! -z "$seconddns_server_group" ]; then
-		ARGS="$ARGS -group $seconddns_server_group"
-	fi
+	config_get seconddns_server_group "$section" "seconddns_server_group" ""
+	[ -z "$seconddns_server_group" ] || ARGS="$ARGS -group $seconddns_server_group"
 
-	config_get_bool "seconddns_no_rule_addr" "$section" "seconddns_no_rule_addr" "0"
-	if [ "$seconddns_no_rule_addr" = "1" ]; then
-		ARGS="$ARGS -no-rule-addr"
-	fi
+	config_get_bool seconddns_no_rule_addr "$section" "seconddns_no_rule_addr" "0"
+	[ "$seconddns_no_rule_addr" = "1" ] && ARGS="$ARGS -no-rule-addr"
 
-	config_get_bool "seconddns_no_rule_nameserver" "$section" "seconddns_no_rule_nameserver" "0"
-	if [ "$seconddns_no_rule_nameserver" = "1" ]; then
-		ARGS="$ARGS -no-rule-nameserver"
-	fi
+	config_get_bool seconddns_no_rule_nameserver "$section" "seconddns_no_rule_nameserver" "0"
+	[ "$seconddns_no_rule_nameserver" = "1" ] && ARGS="$ARGS -no-rule-nameserver"
 
-	config_get_bool "seconddns_no_rule_ipset" "$section" "seconddns_no_rule_ipset" "0"
-	if [ "$seconddns_no_rule_ipset" = "1" ]; then
-		ARGS="$ARGS -no-rule-ipset"
-	fi
+	config_get_bool seconddns_no_rule_ipset "$section" "seconddns_no_rule_ipset" "0"
+	[ "$seconddns_no_rule_ipset" = "1" ] && ARGS="$ARGS -no-rule-ipset"
 
-	config_get_bool "seconddns_no_rule_soa" "$section" "seconddns_no_rule_soa" "0"
-	if [ "$seconddns_no_rule_soa" = "1" ]; then
-		ARGS="$ARGS -no-rule-soa"
-	fi
+	config_get_bool seconddns_no_rule_soa "$section" "seconddns_no_rule_soa" "0"
+	[ "$seconddns_no_rule_soa" = "1" ] && ARGS="$ARGS -no-rule-soa"
 
-	config_get_bool "seconddns_no_dualstack_selection" "$section" "seconddns_no_dualstack_selection" "0"
-	if [ "$seconddns_no_dualstack_selection" = "1" ]; then
-		ARGS="$ARGS -no-dualstack-selection"
-	fi
+	config_get_bool seconddns_no_dualstack_selection "$section" "seconddns_no_dualstack_selection" "0"
+	[ "$seconddns_no_dualstack_selection" = "1" ] && ARGS="$ARGS -no-dualstack-selection"
 
-	config_get_bool "seconddns_no_cache" "$section" "seconddns_no_cache" "0"
-	if [ "$seconddns_no_cache" = "1" ]; then
-		ARGS="$ARGS -no-cache"
-	fi
+	config_get_bool seconddns_no_cache "$section" "seconddns_no_cache" "0"
+	[ "$seconddns_no_cache" = "1" ] && ARGS="$ARGS -no-cache"
+
+	config_get_bool force_aaaa_soa "$section" "force_aaaa_soa" "0"
+	[ "$force_aaaa_soa" = "1" ] && ARGS="$ARGS -force-aaaa-soa"
 
-	config_get "ipv6_server" "$section" "ipv6_server" "1"
+	config_get ipv6_server "$section" "ipv6_server" "1"
 	if [ "$ipv6_server" = "1" ]; then
 		ADDR="[::]"
 	else
@@ -309,12 +253,10 @@ load_second_server()
 
 	conf_append "bind" "$ADDR:$seconddns_port $ARGS"
 	config_get_bool "seconddns_tcp_server" "$section" "seconddns_tcp_server" "1"
-	if [ "$seconddns_tcp_server" = "1" ]; then
-		conf_append "bind-tcp" "$ADDR:$seconddns_port $ARGS"
-	fi
+	[ "$seconddns_tcp_server" = "1" ] && conf_append "bind-tcp" "$ADDR:$seconddns_port $ARGS"
 }
 
-load_service() 
+load_service()
 {
 	local section="$1"
 	args=""
@@ -322,102 +264,77 @@ load_service()
 	mkdir -p $SMARTDNS_VAR_CONF_DIR
 	rm -f $SMARTDNS_CONF_TMP
 
-	config_get_bool "enabled" "$section" "enabled" '0'
+	config_get_bool enabled "$section" "enabled" '0'
 
-	config_get "server_name" "$section" "server_name" ""
-	if [ ! -z "$server_name" ]; then
-		conf_append "server-name" "$server_name"	
-	fi
+	config_get server_name "$section" "server_name" ""
+	[ -z "$server_name" ] || conf_append "server-name" "$server_name"
 
-	config_get "coredump" "$section" "coredump" "0"
-	if [ "$coredump" = "1" ]; then
-		COREDUMP="1"
-	fi
+	config_get coredump "$section" "coredump" "0"
+	[ "$coredump" = "1" ] && COREDUMP="1"
 
-	config_get "port" "$section" "port" "6053"
-	config_get "ipv6_server" "$section" "ipv6_server" "1"
-	config_get "tcp_server" "$section" "tcp_server" "1"
+	config_get port "$section" "port" "6053"
+	config_get ipv6_server "$section" "ipv6_server" "1"
+	config_get tcp_server "$section" "tcp_server" "1"
 	if [ "$ipv6_server" = "1" ]; then
 		conf_append "bind" "[::]:$port"
 	else
 		conf_append "bind" ":$port"
 	fi
 
-	if [ "$tcp_server" = "1" ]; then
+	[ "$tcp_server" = "1" ] && {
 		if [ "$ipv6_server" = "1" ]; then
 			conf_append "bind-tcp" "[::]:$port"
 		else
 			conf_append "bind-tcp" ":$port"
 		fi
-	fi
-	config_get "dualstack_ip_selection" "$section" "dualstack_ip_selection" "0"
-	if [ "$dualstack_ip_selection" = "1" ]; then
-		conf_append "dualstack-ip-selection" "yes"
-	fi
+	}
+	config_get dualstack_ip_selection "$section" "dualstack_ip_selection" "0"
+	[ "$dualstack_ip_selection" = "1" ] && conf_append "dualstack-ip-selection" "yes"
 
-	config_get "prefetch_domain" "$section" "prefetch_domain" "0"
-	if [ "$prefetch_domain" = "1" ]; then
-		conf_append "prefetch-domain" "yes"
-	fi
+	config_get prefetch_domain "$section" "prefetch_domain" "0"
+	[ "$prefetch_domain" = "1" ] && conf_append "prefetch-domain" "yes"
+
+	config_get serve_expired "$section" "serve_expired" "0"
+	[ "$serve_expired" = "1" ] && conf_append "serve-expired" "yes"
 
 	SMARTDNS_PORT="$port"
 
-	config_get "cache_size" "$section" "cache_size" ""
-	if [ ! -z "$cache_size" ]; then
-		conf_append "cache-size" "$cache_size"
-	fi
+	config_get cache_size "$section" "cache_size" ""
+	[ -z "$cache_size" ] || conf_append "cache-size" "$cache_size"
 
-	config_get "rr_ttl" "$section" "rr_ttl" ""
-	if [ ! -z "$rr_ttl" ]; then
-		conf_append "rr-ttl" "$rr_ttl"
-	fi
+	config_get rr_ttl "$section" "rr_ttl" ""
+	[ -z "$rr_ttl" ] || conf_append "rr-ttl" "$rr_ttl"
 
-	config_get "rr_ttl_min" "$section" "rr_ttl_min" ""
-	if [ ! -z "$rr_ttl_min" ]; then
-		conf_append "rr-ttl-min" "$rr_ttl_min"
-	fi
+	config_get rr_ttl_min "$section" "rr_ttl_min" ""
+	[ -z "$rr_ttl_min" ] || conf_append "rr-ttl-min" "$rr_ttl_min"
 
-	config_get "rr_ttl_max" "$section" "rr_ttl_max" ""
-	if [ ! -z "$rr_ttl_max" ]; then
-		conf_append "rr-ttl-max" "$rr_ttl_max"
-	fi
+	config_get rr_ttl_max "$section" "rr_ttl_max" ""
+	[ -z "$rr_ttl_max" ] || conf_append "rr-ttl-max" "$rr_ttl_max"
 
-	config_get "log_size" "$section" "log_size" "64K"
-	if [ ! -z "$log_size" ]; then
-		conf_append "log-size" "$log_size"
-	fi
+	config_get log_size "$section" "log_size" "64K"
+	[ -z "$log_size" ] || conf_append "log-size" "$log_size"
 
-	config_get "log_num" "$section" "log_num" "1"
-	if [ ! -z "$log_num" ]; then
-		conf_append "log-num" "$log_num"
-	fi
+	config_get log_num "$section" "log_num" "1"
+	[ -z "$log_num" ] || conf_append "log-num" "$log_num"
 
-	config_get "log_level" "$section" "log_level" "error"
-	if [ ! -z "$log_level" ]; then
-		conf_append "log-level" "$log_level"
-	fi
+	config_get log_level "$section" "log_level" "error"
+	[ -z "$log_level" ]|| conf_append "log-level" "$log_level"
 
-	config_get "log_file" "$section" "log_file" ""
-	if [ ! -z "$log_file" ]; then
-		conf_append "log-file" "$log_file"
-	fi
+	config_get log_file "$section" "log_file" ""
+	[ -z "$log_file" ] || conf_append "log-file" "$log_file"
 
-	config_get "redirect" "$section" "redirect" "none"
-	config_get "old_redirect" "$section" "old_redirect" "none"
-	config_get "old_port" "$section" "old_port" "0"
-	config_get "old_enabled" "$section" "old_enabled" "0"
+	config_get redirect "$section" "redirect" "none"
+	config_get old_redirect "$section" "old_redirect" "none"
+	config_get old_port "$section" "old_port" "0"
+	config_get old_enabled "$section" "old_enabled" "0"
 
 	if [ "$old_redirect" != "$redirect" ] || [ "$old_port" != "$SMARTDNS_PORT" ] || [ "$old_enabled" = "1" -a "$enabled" = "0" ]; then
-		if [ "$old_redirect" != "none" ]; then
-			if [ "$old_port" != "0" ]; then
-				clear_iptable "$old_port" "$ipv6_server"
-			fi
-			if [ "$old_redirect" == "dnsmasq-upstream" ]; then
-				stop_forward_dnsmasq "$old_port"
-			fi
-		fi
+		[ "$old_redirect" = "none" ] || {
+			[ "$old_port" = "0" ] || clear_iptable "$old_port" "$ipv6_server"
+			[ "$old_redirect" = "dnsmasq-upstream" ] && stop_forward_dnsmasq "$old_port"
+		}
 	fi
-	
+
 	uci delete smartdns.@smartdns[0].old_redirect 2>/dev/null
 	uci delete smartdns.@smartdns[0].old_port 2>/dev/null
 	uci delete smartdns.@smartdns[0].old_enabled 2>/dev/null
@@ -438,31 +355,29 @@ load_service()
 
 	config_foreach load_server "server"
 
-	echo "conf-file $ADDRESS_CONF" >> $SMARTDNS_CONF_TMP
-	echo "conf-file $BLACKLIST_IP_CONF" >> $SMARTDNS_CONF_TMP
-	echo "conf-file $CUSTOM_CONF" >> $SMARTDNS_CONF_TMP
+	{
+		echo "conf-file $ADDRESS_CONF"
+		echo "conf-file $BLACKLIST_IP_CONF"
+		echo "conf-file $CUSTOM_CONF"
+	} >> $SMARTDNS_CONF_TMP
 	mv $SMARTDNS_CONF_TMP $SMARTDNS_CONF
 
 	procd_open_instance "smartdns"
-	if [ "$COREDUMP" = "1" ]; then
+	[ "$COREDUMP" = "1" ] && {
 		args="$args -S"
 		procd_set_param limits core="unlimited"
-	fi
-	
+	}
+
 	get_tz
-	if [ ! -z "$SET_TZ" ]; then
-		procd_set_param env TZ="$SET_TZ"
-	fi
+	[ -z "$SET_TZ" ] || procd_set_param env TZ="$SET_TZ"
 
 	procd_set_param command /usr/sbin/smartdns -f -c $SMARTDNS_CONF $args
-	if [ "$RESPAWN" = "1" ]; then
-		procd_set_param respawn ${respawn_threshold:-3600} ${respawn_timeout:-5} ${respawn_retry:-5}
-	fi
+	[ "$RESPAWN" = "1" ] &&	procd_set_param respawn ${respawn_threshold:-3600} ${respawn_timeout:-5} ${respawn_retry:-5}
 	procd_set_param file "$SMARTDNS_CONF"
 	procd_close_instance
 }
 
-start_service() 
+start_service()
 {
 	config_load "smartdns"
 	config_foreach load_service "smartdns"
diff --git a/release/src/router/smartdns/package/optware/S50smartdns b/release/src/router/smartdns/package/optware/S50smartdns
index 3924a4d12d..393b96289d 100644
--- a/release/src/router/smartdns/package/optware/S50smartdns
+++ b/release/src/router/smartdns/package/optware/S50smartdns
@@ -43,56 +43,56 @@ set_iptable()
 		redirect_tcp=1;
 	fi
 
-	IPS="`ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}'`"
+	IPS="$(ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}')"
 	for IP in $IPS
 	do
 		if [ $redirect_tcp -eq 1 ]; then
-			iptables -t nat -A PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT > /dev/null 2>&1
+			iptables -t nat -A PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" > /dev/null 2>&1
 		fi
-		iptables -t nat -A PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT > /dev/null 2>&1
+		iptables -t nat -A PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" > /dev/null 2>&1
 	done
 
 }
 
 clear_iptable()
 {
-	IPS="`ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}'`"
+	IPS="$(ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}')"
 	for IP in $IPS
 	do
-		iptables -t nat -D PREROUTING -p tcp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT > /dev/null 2>&1
-		iptables -t nat -D PREROUTING -p udp -d $IP --dport 53 -j REDIRECT --to-ports $SMARTDNS_PORT > /dev/null 2>&1
+		iptables -t nat -D PREROUTING -p tcp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" > /dev/null 2>&1
+		iptables -t nat -D PREROUTING -p udp -d "$IP" --dport 53 -j REDIRECT --to-ports "$SMARTDNS_PORT" > /dev/null 2>&1
 	done
 	
 }
 
 get_dnsmasq_cmd()
 {
-	CMD="`ps | grep -e '[a-zA-Z]\{0,2\} \{1,\}dnsmasq' | grep -v grep 2>/dev/null`"
+	CMD="$(ps 2>/dev/null | grep -e '[a-zA-Z]\{0,2\} \{1,\}dnsmasq' | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi
 
-	CMD="`ps | grep '/usr/sbin/dnsmasq' | grep -v grep 2>/dev/null`"
+	CMD="$(ps 2>/dev/null | grep '/usr/sbin/dnsmasq' | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi
 
-	CMD="`ps | grep 'dnsmasq' | grep -v grep 2>/dev/null`"
+	CMD="$(ps 2>/dev/null | grep 'dnsmasq' | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi
 
-	CMD="`ps ax | grep -e '[a-zA-Z]\{0,2\} \{1,\}dnsmasq' | grep -v grep 2>/dev/null`"
+	CMD="$(ps ax 2>/dev/null | grep -e '[a-zA-Z]\{0,2\} \{1,\}dnsmasq' | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi
 
-	CMD="`ps ax | grep /usr/sbin/dnsmasq | grep -v grep 2>/dev/null`"
+	CMD="$(ps ax 2>/dev/null | grep /usr/sbin/dnsmasq | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi
 
-	CMD="`ps ax | grep 'dnsmasq' | grep -v grep 2>/dev/null`"
+	CMD="$(ps ax 2>/dev/null | grep 'dnsmasq' | grep -v grep 2>/dev/null)"
 	if [ ! -z "$CMD" ]; then
 		return
 	fi	
@@ -108,15 +108,15 @@ restart_dnsmasq()
 		return 1
 	fi
 
-	PID=`echo "$CMD" | awk '{print $1}'`
+	PID="$(echo "$CMD" | awk '{print $1}')"
 	if [ ! -d "/proc/$PID" ]; then
 		echo "dnsmasq is not running"
 		return 1
 	fi
 
-	kill -9 $PID
+	kill -9 "$PID"
 
-	DNSMASQ_CMD="`echo $CMD | awk '{for(i=5; i<=NF;i++)printf \$i " "}'`"
+	DNSMASQ_CMD="$(echo "$CMD" | awk '{for(i=5; i<=NF;i++)printf $i " "}')"
 
 	$DNSMASQ_CMD
 }
@@ -124,21 +124,20 @@ restart_dnsmasq()
 get_server_ip()
 {
 	CONF_FILE=$1
-	IPS="`ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}'`"
-	LOCAL_SERVER_IP=""
+	IPS="$(ifconfig | grep "inet addr" | grep -v ":127" | grep "Bcast" | awk '{print $2}' | awk -F: '{print $2}')"
 	for IP in $IPS
 	do
 		N=3
 		while [ $N -gt 0 ]
 		do
-			ADDR=`echo $IP | awk -F. "{for(i=1;i<=$N;i++)printf \\$i\".\"}"`
-			grep "dhcp-range=" $CONF_FILE | grep $ADDR >/dev/null 2>&1
+			ADDR="$(echo "$IP" | awk -F. "{for(i=1;i<="$N";i++)printf \$i\".\"}")"
+			grep "dhcp-range=" "$CONF_FILE" | grep "$ADDR" >/dev/null 2>&1
 			if [ $? -eq 0 ]; then
-					SERVER_TAG="`grep "^dhcp-range *=" $CONF_FILE | grep $ADDR | awk -F= '{print $2}' | awk -F, '{print $1}'`"
+					SERVER_TAG="$(grep "^dhcp-range *=" "$CONF_FILE" | grep "$ADDR" | awk -F= '{print $2}' | awk -F, '{print $1}')"
 					LOCAL_SERVER_IP="$IP"
-					return 0
+					return 1
 			fi
-			N="`expr $N - 1`"
+			N=$((N-1))
 		done
 	done
 
@@ -152,19 +151,20 @@ set_dnsmasq_conf()
 	local CONF_FILE=$1
 
 	get_server_ip $CONF_FILE
+
 	if [ "$LOCAL_SERVER_IP" ] && [ "$SERVER_TAG" ]; then
-		grep "dhcp-option *=" $CONF_FILE | grep "$SERVER_TAG,6,$LOCAL_SERVER_IP" > /dev/null 2>&1
+		grep "dhcp-option *=" "$CONF_FILE" | grep "$SERVER_TAG,6,$LOCAL_SERVER_IP" > /dev/null 2>&1
 		if [ $? -ne 0 ]; then
-			sed -i "/^dhcp-option *=$SERVER_TAG,6,/d" $CONF_FILE
-			echo "dhcp-option=$SERVER_TAG,6,$LOCAL_SERVER_IP" >> $CONF_FILE
+			sed -i "/^dhcp-option *=$SERVER_TAG,6,/d" "$CONF_FILE"
+			echo "dhcp-option=$SERVER_TAG,6,$LOCAL_SERVER_IP" >> "$CONF_FILE"
 			RESTART_DNSMASQ=1
 		fi
 	fi
 
-	grep "^port *=0" $CONF_FILE > /dev/null 2>&1
+	grep "^port *=0" "$CONF_FILE" > /dev/null 2>&1
 	if [ $? -ne 0 ]; then
-		sed -i "/^port *=/d" $CONF_FILE
-		echo "port=0" >> $CONF_FILE
+		sed -i "/^port *=/d" "$CONF_FILE"
+		echo "port=0" >> "$CONF_FILE"
 		RESTART_DNSMASQ=1
 	fi
 }
@@ -179,7 +179,7 @@ set_dnsmasq()
 			continue
 		fi
 
-		set_dnsmasq_conf $conf
+		set_dnsmasq_conf "$conf"
 	done
 	
 	if [ $RESTART_DNSMASQ -ne 0 ]; then
@@ -193,18 +193,18 @@ clear_dnsmasq_conf()
 	local SERVER_TAG=""
 	local CONF_FILE=$1
 	
-	get_server_ip $CONF_FILE
+	get_server_ip "$CONF_FILE"
 	if [ "$LOCAL_SERVER_IP" ] && [ "$SERVER_TAG" ]; then
-		grep "dhcp-option *=" $CONF_FILE | grep "$SERVER_TAG,6,$LOCAL_SERVER_IP" > /dev/null 2>&1
+		grep "dhcp-option *=" "$CONF_FILE" | grep "$SERVER_TAG,6,$LOCAL_SERVER_IP" > /dev/null 2>&1
 		if [ $? -eq 0 ]; then
-			sed -i "/^dhcp-option *=$SERVER_TAG,6,/d" $CONF_FILE
+			sed -i "/^dhcp-option *=$SERVER_TAG,6,/d" "$CONF_FILE"
 			RESTART_DNSMASQ=1
 		fi
 	fi
 
-	grep "^port *=" $CONF_FILE > /dev/null 2>&1
+	grep "^port *=" "$CONF_FILE" > /dev/null 2>&1
 	if [ $? -eq 0 ]; then
-		sed -i "/^port *=/d" $CONF_FILE
+		sed -i "/^port *=/d" "$CONF_FILE"
 		RESTART_DNSMASQ=1
 	fi
 }
@@ -219,7 +219,7 @@ clear_dnsmasq()
 			continue
 		fi
 
-		clear_dnsmasq_conf $conf
+		clear_dnsmasq_conf "$conf"
 	done
 
 	if [ $RESTART_DNSMASQ -ne 0 ]; then
@@ -232,11 +232,11 @@ set_smartdns_port()
 	if [ "$SMARTDNS_WORKMODE" = "0" ]; then
 		return 0
 	elif [ "$SMARTDNS_WORKMODE" = "1" ]; then
-		sed -i "s/^\(bind .*\):53 *\(.*\)\$/\1:$SMARTDNS_PORT \2/g" $SMARTDNS_CONF
-		sed -i "s/^\(bind-tcp .*\):53 *\(.*\)\$/\1:$SMARTDNS_PORT \2/g" $SMARTDNS_CONF
+		sed -i "s/^\\(bind .*\\):53 *\\(.*\\)\$/\\1:$SMARTDNS_PORT \\2/g" $SMARTDNS_CONF
+		sed -i "s/^\\(bind-tcp .*\\):53 *\\(.*\\)\$/\\1:$SMARTDNS_PORT \\2/g" $SMARTDNS_CONF
 	elif [ "$SMARTDNS_WORKMODE" = "2" ]; then
-		sed -i "s/^\(bind .*\):$SMARTDNS_PORT *\(.*\)\$/\1:53 \2/g" $SMARTDNS_CONF
-		sed -i "s/^\(bind-tcp .*\):$SMARTDNS_PORT *\(.*\)\$/\1:53 \2/g" $SMARTDNS_CONF
+		sed -i "s/^\\(bind .*\\):$SMARTDNS_PORT *\\(.*\\)\$/\\1:53 \\2/g" $SMARTDNS_CONF
+		sed -i "s/^\\(bind-tcp .*\\):$SMARTDNS_PORT *\\(.*\\)\$/\\1:53 \\2/g" $SMARTDNS_CONF
 	else
 		return 1
 	fi	
@@ -286,7 +286,7 @@ get_tz()
 			continue
 		fi
 		
-		tz="`cat $tzfile 2>/dev/null`"
+		tz="$(cat $tzfile 2>/dev/null)"
 	done
 	
 	if [ -z "$tz" ]; then
@@ -311,7 +311,7 @@ case "$1" in
 	fi
 	;;
 	status)
-	pid="`cat $SMARTDNS_PID |head -n 1 2>/dev/null`"
+	pid="$(cat $SMARTDNS_PID |head -n 1 2>/dev/null)"
 	if [ -z "$pid" ]; then
 		echo "smartdns not running."
 		return 0
@@ -326,7 +326,7 @@ case "$1" in
 	;;
 	stop)
 	clear_rule
-	pid="`cat $SMARTDNS_PID | head -n 1 2>/dev/null`"
+	pid="$(cat "$SMARTDNS_PID" | head -n 1 2>/dev/null)"
 	if [ -z "$pid" ]; then
 		echo "smartdns not running."
 		return 0
@@ -336,7 +336,7 @@ case "$1" in
 		return 0;
 	fi
 
-	kill -9 $pid 2>/dev/null
+	kill -9 "$pid" 2>/dev/null
 	;;
 	restart)
 	$0 stop
diff --git a/release/src/router/smartdns/src/Makefile b/release/src/router/smartdns/src/Makefile
index 5d78531e8b..95e51c8e36 100644
--- a/release/src/router/smartdns/src/Makefile
+++ b/release/src/router/smartdns/src/Makefile
@@ -14,25 +14,26 @@
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
-
+include $(TOP)/.config
 BIN=smartdns 
-ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3 SBRAC1900P SBRAC3200P RTAC68U))
+ifeq ($(BUILD_NAME), $(filter $(BUILD_NAME), RT-AC88U RT-AC3100 RT-AC3200 RT-AC68U RT-AC5300))
 OBJS_LIB=lib/rbtree.o lib/art.o lib/bitops.o lib/radix.o lib/conf.o lib/ifaddrs.o
 else
 OBJS_LIB=lib/rbtree.o lib/art.o lib/bitops.o lib/radix.o lib/conf.o
 endif
 OBJS=smartdns.o fast_ping.o dns_client.o dns_server.o dns.o util.o tlog.o dns_conf.o dns_cache.o http_parse.o $(OBJS_LIB)
-ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), GTAC5300 GTAC2900 RTAC86U R7900P R8000P))
+ifeq ($(RTCONFIG_HND_ROUTER),y)
 CFLAGS +=-O1 -g -Wall -Wstrict-prototypes -fno-omit-frame-pointer -Wstrict-aliasing 
 else
 CFLAGS +=-O2 -g -Wall -Wstrict-prototypes -fno-omit-frame-pointer -Wstrict-aliasing 
 endif
 CFLAGS +=-I./include -I$(TOP)/openssl/include
-CFLAGS += -DBASE_FILE_NAME=\"$(notdir $<)\"
-LDFLAGS +=-L$(TOP)/openssl -lssl -lcrypto
 ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), RTACRH17 RTAC82U))
 LDFLAGS +=-ldl
 endif
+
+CFLAGS += -DBASE_FILE_NAME=\"$(notdir $<)\"
+LDFLAGS +=-L$(TOP)/openssl -lssl -lcrypto
 CFLAGS += -DSMARTDNS_VERION=\"$(MERLINR_VER_MINOR)\"
 CXXFLAGS=-O2 -g -Wall -std=c++11 
 CXXFLAGS +=-Iinclude
@@ -42,12 +43,19 @@ CXXFLAGS +=-Iinclude
 LDFLAGS += -lssl -lcrypto -lpthread 
 #endif
 
-.PHONY: all
+ifneq ($(RTCONFIG_RALINK),y)
+.PHONY: all clean
 
 all: $(BIN)
  
 $(BIN) : $(OBJS)
 	$(CC) $(OBJS) -o $@ $(LDFLAGS)
+else
+.PHONY: all clean
+all:
+	cp ./smartdns_mipsle ./smartdns
+endif
 
 clean:
 	$(RM) $(OBJS) $(BIN)
+
diff --git a/release/src/router/smartdns/src/dns.c b/release/src/router/smartdns/src/dns.c
index 7f040c3cad..0e4399234c 100644
--- a/release/src/router/smartdns/src/dns.c
+++ b/release/src/router/smartdns/src/dns.c
@@ -1,2004 +1,2017 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#define _GNU_SOURCE
-#include "dns.h"
-#include "tlog.h"
-#include "stringutil.h"
-#include <fcntl.h>
-#include <stdio.h>
-#include <string.h>
-#include <sys/stat.h>
-#include <sys/types.h>
-#include <unistd.h>
-#include <arpa/inet.h>
-
-#define QR_MASK 0x8000
-#define OPCODE_MASK 0x7800
-#define AA_MASK 0x0400
-#define TC_MASK 0x0200
-#define RD_MASK 0x0100
-#define RA_MASK 0x0080
-#define RCODE_MASK 0x000F
-#define DNS_RR_END (0XFFFF)
-
-#define UNUSED(expr)                                                                                                                                           \
-	do {                                                                                                                                                       \
-		(void)(expr);                                                                                                                                          \
-	} while (0)
-
-/* read short and move pointer */
-static short _dns_read_short(unsigned char **buffer)
-{
-	unsigned short value;
-
-	value = ntohs(*((unsigned short *)(*buffer)));
-	*buffer += 2;
-	return value;
-}
-
-/* write char and move pointer */
-static __attribute__((unused)) void _dns_write_char(unsigned char **buffer, unsigned char value)
-{
-	**buffer = value;
-	*buffer += 1;
-}
-
-/* read char and move pointer */
-static unsigned char _dns_read_char(unsigned char **buffer)
-{
-	unsigned char value = **buffer;
-	*buffer += 1;
-	return value;
-}
-
-/* write short and move pointer */
-static void _dns_write_short(unsigned char **buffer, unsigned short value)
-{
-	value = htons(value);
-	*((unsigned short *)(*buffer)) = value;
-	*buffer += 2;
-}
-
-/* write int and move pointer */
-static void _dns_write_int(unsigned char **buffer, unsigned int value)
-{
-	value = htonl(value);
-	*((unsigned int *)(*buffer)) = value;
-	*buffer += 4;
-}
-
-/* read int and move pointer */
-static unsigned int _dns_read_int(unsigned char **buffer)
-{
-	unsigned int value;
-
-	value = ntohl(*((unsigned int *)(*buffer)));
-	*buffer += 4;
-
-	return value;
-}
-
-/* iterator get rrs begin */
-struct dns_rrs *dns_get_rrs_start(struct dns_packet *packet, dns_rr_type type, int *count)
-{
-	unsigned short start;
-	struct dns_head *head = &packet->head;
-
-	/* get rrs count by rrs type */
-	switch (type) {
-	case DNS_RRS_QD:
-		*count = head->qdcount;
-		start = packet->questions;
-		break;
-	case DNS_RRS_AN:
-		*count = head->ancount;
-		start = packet->answers;
-		break;
-	case DNS_RRS_NS:
-		*count = head->nscount;
-		start = packet->nameservers;
-		break;
-	case DNS_RRS_NR:
-		*count = head->nrcount;
-		start = packet->additional;
-		break;
-	case DNS_RRS_OPT:
-		*count = packet->optcount;
-		start = packet->optional;
-		break;
-	default:
-		return NULL;
-		break;
-	}
-
-	/* if not resource record, reutrn null */
-	if (start == DNS_RR_END) {
-		return NULL;
-	}
-
-	/* return rrs data start address */
-	return (struct dns_rrs *)(packet->data + start);
-}
-
-/* iterator next rrs */
-struct dns_rrs *dns_get_rrs_next(struct dns_packet *packet, struct dns_rrs *rrs)
-{
-	if (rrs->next == DNS_RR_END) {
-		return NULL;
-	}
-
-	return (struct dns_rrs *)(packet->data + rrs->next);
-}
-
-/* iterator add rrs begin */
-static unsigned char *_dns_add_rrs_start(struct dns_packet *packet, int *maxlen)
-{
-	struct dns_rrs *rrs;
-	unsigned char *end = packet->data + packet->len;
-
-	rrs = (struct dns_rrs *)end;
-	*maxlen = packet->size - packet->len - sizeof(*packet) - sizeof(*rrs);
-	if (*maxlen <= 0) {
-		/* if size exceeds max packet size, return NULL */
-		return NULL;
-	}
-	return rrs->data;
-}
-
-/* iterator add rrs end */
-static int _dns_rr_add_end(struct dns_packet *packet, int type, dns_type_t rtype, int len)
-{
-	struct dns_rrs *rrs;
-	struct dns_rrs *rrs_next;
-	struct dns_head *head = &packet->head;
-	unsigned char *end = packet->data + packet->len;
-	unsigned short *count;
-	unsigned short *start;
-
-	rrs = (struct dns_rrs *)end;
-	if (packet->len + len > packet->size - sizeof(*packet) - sizeof(*rrs)) {
-		return -1;
-	}
-
-	switch (type) {
-	case DNS_RRS_QD:
-		count = &head->qdcount;
-		start = &packet->questions;
-		break;
-	case DNS_RRS_AN:
-		count = &head->ancount;
-		start = &packet->answers;
-		break;
-	case DNS_RRS_NS:
-		count = &head->nscount;
-		start = &packet->nameservers;
-		break;
-	case DNS_RRS_NR:
-		count = &head->nrcount;
-		start = &packet->additional;
-		break;
-	case DNS_RRS_OPT:
-		count = &packet->optcount;
-		start = &packet->optional;
-		break;
-	default:
-		return -1;
-		break;
-	}
-
-	/* add data to end of dns_packet, and set previouse rrs point to this rrs */
-	if (*start != DNS_RR_END) {
-		rrs_next = (struct dns_rrs *)(packet->data + *start);
-		while (rrs_next->next != DNS_RR_END) {
-			rrs_next = (struct dns_rrs *)(packet->data + rrs_next->next);
-		}
-		rrs_next->next = packet->len;
-	} else {
-		*start = packet->len;
-	}
-
-	/* update rrs head info */
-	rrs->len = len;
-	rrs->type = rtype;
-	rrs->next = DNS_RR_END;
-
-	/* update total data length */
-	*count += 1;
-	packet->len += len + sizeof(*rrs);
-	return 0;
-}
-
-static inline int _dns_data_left_len(struct dns_data_context *data_context)
-{
-	/* check whether data length out of bound */
-	return data_context->maxsize - (data_context->ptr - data_context->data);
-}
-
-static int _dns_add_qr_head(struct dns_data_context *data_context, char *domain, int qtype, int qclass)
-{
-	/* question head */
-	/* |domain         |
-	 * |qtype | qclass |
-	 */
-	while (1) {
-		if (_dns_data_left_len(data_context) < 4) {
-			return -1;
-		}
-		*data_context->ptr = *domain;
-		if (*domain == '\0') {
-			data_context->ptr++;
-			break;
-		}
-		data_context->ptr++;
-		domain++;
-	}
-
-	if (_dns_data_left_len(data_context) < 4) {
-		return -1;
-	}
-
-	*((unsigned short *)(data_context->ptr)) = qtype;
-	data_context->ptr += 2;
-
-	*((unsigned short *)(data_context->ptr)) = qclass;
-	data_context->ptr += 2;
-
-	return 0;
-}
-
-static int _dns_get_qr_head(struct dns_data_context *data_context, char *domain, int maxsize, int *qtype, int *qclass)
-{
-	int i;
-	int is_read_all = 0;
-	/* question head */
-	/* |domain         |
-	 * |qtype | qclass |
-	 */
-	for (i = 0; i < maxsize - 1; i++) {
-		if (_dns_data_left_len(data_context) < 4) {
-			return -1;
-		}
-		*domain = *data_context->ptr;
-		if (*data_context->ptr == '\0') {
-			domain++;
-			data_context->ptr++;
-			i++;
-			is_read_all = 1;
-			break;
-		}
-		*domain = *data_context->ptr;
-		domain++;
-		data_context->ptr++;
-	}
-
-	*domain = '\0';
-	if (is_read_all == 0) {
-		return -1;
-	}
-
-	if (_dns_data_left_len(data_context) < 4) {
-		return -1;
-	}
-
-	*qtype = *((unsigned short *)(data_context->ptr));
-	data_context->ptr += 2;
-
-	*qclass = *((unsigned short *)(data_context->ptr));
-	data_context->ptr += 2;
-
-	return 0;
-}
-
-static int _dns_add_rr_head(struct dns_data_context *data_context, char *domain, int qtype, int qclass, int ttl, int rr_len)
-{
-	int len = 0;
-
-	/* resource record head */
-	/* |domain          |
-	 * |qtype  | qclass |
-	 * |       ttl      |
-	 * | rrlen | rrdata |
-	 */
-	len = _dns_add_qr_head(data_context, domain, qtype, qclass);
-	if (len < 0) {
-		return -1;
-	}
-
-	if (_dns_data_left_len(data_context) < 6) {
-		return -1;
-	}
-
-	*((unsigned int *)(data_context->ptr)) = ttl;
-	data_context->ptr += 4;
-
-	*((unsigned short *)(data_context->ptr)) = rr_len;
-	data_context->ptr += 2;
-
-	return 0;
-}
-
-static int _dns_get_rr_head(struct dns_data_context *data_context, char *domain, int maxsize, int *qtype, int *qclass, int *ttl, int *rr_len)
-{
-	int len = 0;
-
-	/* resource record head */
-	/* |domain          |
-	 * |qtype  | qclass |
-	 * |       ttl      |
-	 * | rrlen | rrdata |
-	 */
-	len = _dns_get_qr_head(data_context, domain, maxsize, qtype, qclass);
-
-	if (_dns_data_left_len(data_context) < 6) {
-		return -1;
-	}
-
-	*ttl = *((unsigned int *)(data_context->ptr));
-	data_context->ptr += 4;
-
-	*rr_len = *((unsigned short *)(data_context->ptr));
-	data_context->ptr += 2;
-
-	return len;
-}
-
-static int _dns_add_RAW(struct dns_packet *packet, dns_rr_type rrtype, dns_type_t rtype, char *domain, int ttl, void *raw, int raw_len)
-{
-	int maxlen = 0;
-	int len = 0;
-	struct dns_data_context data_context;
-
-	/* resource record */
-	/* |domain          |
-	 * |qtype  | qclass |
-	 * |       ttl      |
-	 * | rrlen | rrdata |
-	 */
-	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
-	if (data == NULL) {
-		return -1;
-	}
-
-	if (raw_len >= maxlen) {
-		return -1;
-	}
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = maxlen;
-
-	/* add rr head */
-	len = _dns_add_rr_head(&data_context, domain, rtype, DNS_C_IN, ttl, raw_len);
-	if (len < 0) {
-		return -1;
-	}
-
-	/* add rr data */
-	memcpy(data_context.ptr, raw, raw_len);
-	data_context.ptr += raw_len;
-	len = data_context.ptr - data_context.data;
-
-	return _dns_rr_add_end(packet, rrtype, rtype, len);
-}
-
-static int _dns_get_RAW(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, void *raw, int *raw_len)
-{
-	int qtype = 0;
-	int qclass = 0;
-	int rr_len = 0;
-	int ret = 0;
-	struct dns_data_context data_context;
-
-	/* resource record head */
-	/* |domain          |
-	 * |qtype  | qclass |
-	 * |       ttl      |
-	 * | rrlen | rrdata |
-	 */
-	unsigned char *data = rrs->data;
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = rrs->len;
-
-	/* get rr head */
-	ret = _dns_get_rr_head(&data_context, domain, maxsize, &qtype, &qclass, ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (qtype != rrs->type || rr_len > *raw_len) {
-		return -1;
-	}
-
-	/* get rr data */
-	memcpy(raw, data_context.ptr, rr_len);
-	data_context.ptr += rr_len;
-	*raw_len = rr_len;
-
-	return 0;
-}
-
-static int _dns_add_opt_RAW(struct dns_packet *packet, dns_opt_code_t opt_rrtype, void *raw, int raw_len)
-{
-	unsigned char opt_data[DNS_MAX_OPT_LEN];
-	struct dns_opt *opt = (struct dns_opt *)opt_data;
-	int len = 0;
-
-	opt->code = DNS_OPT_T_TCP_KEEPALIVE;
-	opt->length = sizeof(unsigned short);
-
-	memcpy(opt->data, raw, raw_len);
-	len += raw_len;
-	len += sizeof(*opt);
-
-	return _dns_add_RAW(packet, DNS_RRS_OPT, DNS_OPT_T_TCP_KEEPALIVE, "", 0, opt_data, len);
-}
-
-static int _dns_get_opt_RAW(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, struct dns_opt *dns_opt, int *dns_optlen)
-{
-	*dns_optlen = DNS_MAX_OPT_LEN;
-
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, dns_opt, dns_optlen);
-}
-
-static int __attribute__((unused))  _dns_add_OPT(struct dns_packet *packet, dns_rr_type type, unsigned short opt_code, unsigned short opt_len, struct dns_opt *opt)
-{
-	// TODO
-
-	int maxlen = 0;
-	int len = 0;
-	struct dns_data_context data_context;
-	int total_len = sizeof(*opt) + opt->length;
-	int ttl = 0;
-
-	/*
-	+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  0: |                          OPTION-CODE                          |
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  2: |                         OPTION-LENGTH                         |
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  4: |                                                               |
-	 /                          OPTION-DATA                          /
-	 /                                                               /
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-	*/
-	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
-	if (data == NULL) {
-		return -1;
-	}
-
-	if (total_len > maxlen) {
-		return -1;
-	}
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = maxlen;
-
-	ttl = (opt_code << 16) | opt_len;
-
-	/* add rr head */
-	len = _dns_add_rr_head(&data_context, "", type, DNS_C_IN, ttl, total_len);
-	if (len < 0) {
-		return -1;
-	}
-
-	/* add rr data */
-	memcpy(data_context.ptr, opt, total_len);
-	data_context.ptr += total_len;
-	len = data_context.ptr - data_context.data;
-
-	return _dns_rr_add_end(packet, type, DNS_T_OPT, len);
-}
-
-static int __attribute__((unused)) _dns_get_OPT(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, struct dns_opt *opt, int *opt_maxlen)
-{
-	// TODO
-
-	int qtype = 0;
-	int qclass = 0;
-	int rr_len = 0;
-	int ret = 0;
-	struct dns_data_context data_context;
-	char domain[DNS_MAX_CNAME_LEN];
-	int maxsize = DNS_MAX_CNAME_LEN;
-	int ttl = 0;
-	unsigned char *data = rrs->data;
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = rrs->len;
-
-	/* get rr head */
-	ret = _dns_get_rr_head(&data_context, domain, maxsize, &qtype, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (qtype != rrs->type || rr_len > *opt_len) {
-		return -1;
-	}
-
-	/* get rr data */
-	*opt_code = ttl >> 16;
-	*opt_len = ttl & 0xFFFF;
-	memcpy(opt, data_context.ptr, rr_len);
-	data_context.ptr += rr_len;
-	*opt_maxlen = rr_len;
-
-	return 0;
-}
-
-int dns_add_CNAME(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
-{
-	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
-	return _dns_add_RAW(packet, type, DNS_T_CNAME, domain, ttl, cname, rr_len);
-}
-
-int dns_get_CNAME(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
-{
-	int len = cname_size;
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
-}
-
-int dns_add_A(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, unsigned char addr[DNS_RR_A_LEN])
-{
-	return _dns_add_RAW(packet, type, DNS_T_A, domain, ttl, addr, DNS_RR_A_LEN);
-}
-
-int dns_get_A(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned char addr[DNS_RR_A_LEN])
-{
-	int len = DNS_RR_A_LEN;
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, addr, &len);
-}
-
-int dns_add_PTR(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
-{
-	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
-	return _dns_add_RAW(packet, type, DNS_T_PTR, domain, ttl, cname, rr_len);
-}
-
-int dns_get_PTR(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
-{
-	int len = cname_size;
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
-}
-
-int dns_add_NS(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
-{
-	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
-	return _dns_add_RAW(packet, type, DNS_T_NS, domain, ttl, cname, rr_len);
-}
-
-int dns_get_NS(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
-{
-	int len = cname_size;
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
-}
-
-int dns_add_AAAA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, unsigned char addr[DNS_RR_AAAA_LEN])
-{
-	return _dns_add_RAW(packet, type, DNS_T_AAAA, domain, ttl, addr, DNS_RR_AAAA_LEN);
-}
-
-int dns_get_AAAA(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned char addr[DNS_RR_AAAA_LEN])
-{
-	int len = DNS_RR_AAAA_LEN;
-	return _dns_get_RAW(rrs, domain, maxsize, ttl, addr, &len);
-}
-
-int dns_add_SOA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, struct dns_soa *soa)
-{
-	/* SOA */
-	/*| mname        |
-	 *| rname        |
-	 *| serial       |
-	 *| refersh      |
-	 *| retry        |
-	 *| expire       |
-	 *| minimum      |
-	 */
-	unsigned char data[sizeof(*soa)];
-	unsigned char *ptr = data;
-	int len = 0;
-	safe_strncpy((char *)ptr, soa->mname, DNS_MAX_CNAME_LEN);
-	ptr += strnlen(soa->mname, DNS_MAX_CNAME_LEN - 1) + 1;
-	safe_strncpy((char *)ptr, soa->rname, DNS_MAX_CNAME_LEN);
-	ptr += strnlen(soa->rname, DNS_MAX_CNAME_LEN - 1) + 1;
-	memcpy(ptr, &soa->serial, sizeof(unsigned int));
-	ptr += 4;
-	memcpy(ptr, &soa->refresh, sizeof(unsigned int));
-	ptr += 4;
-	memcpy(ptr, &soa->retry, sizeof(unsigned int));
-	ptr += 4;
-	memcpy(ptr, &soa->expire, sizeof(unsigned int));
-	ptr += 4;
-	memcpy(ptr, &soa->minimum, sizeof(unsigned int));
-	ptr += 4;
-	len = ptr - data;
-
-	return _dns_add_RAW(packet, type, DNS_T_SOA, domain, ttl, data, len);
-}
-
-int dns_get_SOA(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, struct dns_soa *soa)
-{
-	unsigned char data[sizeof(*soa)];
-	unsigned char *ptr = data;
-	int len = sizeof(data);
-
-	/* SOA */
-	/*| mname        |
-	 *| rname        |
-	 *| serial       |
-	 *| refersh      |
-	 *| retry        |
-	 *| expire       |
-	 *| minimum      |
-	 */
-	if (_dns_get_RAW(rrs, domain, maxsize, ttl, data, &len) != 0) {
-		return -1;
-	}
-
-	safe_strncpy(soa->mname, (char *)ptr, DNS_MAX_CNAME_LEN - 1);
-	ptr += strnlen(soa->mname, DNS_MAX_CNAME_LEN - 1) + 1;
-	if (ptr - data >= len) {
-		return -1;
-	}
-	safe_strncpy(soa->rname, (char *)ptr, DNS_MAX_CNAME_LEN - 1);
-	ptr += strnlen(soa->rname, DNS_MAX_CNAME_LEN - 1) + 1;
-	if (ptr - data + 20 > len) {
-		return -1;
-	}
-	soa->serial = *((unsigned int *)ptr);
-	ptr += 4;
-	soa->refresh = *((unsigned int *)ptr);
-	ptr += 4;
-	soa->retry = *((unsigned int *)ptr);
-	ptr += 4;
-	soa->expire = *((unsigned int *)ptr);
-	ptr += 4;
-	soa->minimum = *((unsigned int *)ptr);
-	ptr += 4;
-
-	return 0;
-}
-
-int dns_set_OPT_payload_size(struct dns_packet *packet, int payload_size)
-{
-	if (payload_size < 512) {
-		payload_size = 512;
-	}
-
-	packet->payloadsize = payload_size;
-	return 0;
-}
-
-int dns_get_OPT_payload_size(struct dns_packet *packet)
-{
-	return packet->payloadsize;
-}
-
-int dns_add_OPT_ECS(struct dns_packet *packet, struct dns_opt_ecs *ecs)
-{
-	unsigned char opt_data[DNS_MAX_OPT_LEN];
-	struct dns_opt *opt = (struct dns_opt *)opt_data;
-	int len = 0;
-
-	opt->code = DNS_OPT_T_ECS;
-	opt->length = sizeof(*ecs);
-	memcpy(opt->data, ecs, sizeof(*ecs));
-
-	/* ecs size 4 + bit of address*/
-	len = sizeof(*opt) + 4;
-	len += (ecs->source_prefix / 8);
-	len += (ecs->source_prefix % 8 > 0) ? 1 : 0;
-
-	return _dns_add_RAW(packet, DNS_RRS_OPT, DNS_OPT_T_ECS, "", 0, opt_data, len);
-}
-
-int dns_get_OPT_ECS(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, struct dns_opt_ecs *ecs)
-{
-	unsigned char opt_data[DNS_MAX_OPT_LEN];
-	struct dns_opt *opt = (struct dns_opt *)opt_data;
-	int len = DNS_MAX_OPT_LEN;
-	int ttl = 0;
-
-	if (_dns_get_RAW(rrs, NULL, 0, &ttl, opt_data, &len) != 0) {
-		return -1;
-	}
-
-	if (len < sizeof(*opt)) {
-		return -1;
-	}
-
-	if (opt->code != DNS_OPT_T_ECS) {
-		return -1;
-	}
-
-	memcpy(ecs, opt->data, opt->length);
-
-	return 0;
-}
-
-int dns_add_OPT_TCP_KEEYALIVE(struct dns_packet *packet, unsigned short timeout)
-{
-	unsigned short timeout_net = htons(timeout);
-	int data_len = 0;
-
-	if (timeout > 0) {
-		data_len = sizeof(timeout);
-	}
-
-	return _dns_add_opt_RAW(packet, DNS_OPT_T_TCP_KEEPALIVE, &timeout_net, data_len);
-}
-
-int dns_get_OPT_TCP_KEEYALIVE(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, unsigned short *timeout)
-{
-	unsigned char opt_data[DNS_MAX_OPT_LEN];
-	struct dns_opt *opt = (struct dns_opt *)opt_data;
-	int len = DNS_MAX_OPT_LEN;
-	int ttl = 0;
-	unsigned char *data = NULL;
-
-	if (_dns_get_opt_RAW(rrs, NULL, 0, &ttl, opt, &len) != 0) {
-		return -1;
-	}
-
-	if (len < sizeof(*opt)) {
-		return -1;
-	}
-
-	if (opt->code != DNS_OPT_T_TCP_KEEPALIVE) {
-		return -1;
-	}
-
-	if (opt->length == 0) {
-		*timeout = 0;
-		return 0;
-	}
-
-	if (opt->length != sizeof(unsigned short)) {
-		return -1;
-	}
-
-	data = opt->data;
-
-	*timeout = _dns_read_short(&data);
-
-	return 0;
-}
-
-/*
- * Format:
- * |DNS_NAME\0(string)|qtype(short)|qclass(short)|
- */
-int dns_add_domain(struct dns_packet *packet, char *domain, int qtype, int qclass)
-{
-	int len = 0;
-	int maxlen = 0;
-	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
-	struct dns_data_context data_context;
-
-	if (data == NULL) {
-		return -1;
-	}
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = maxlen;
-
-	len = _dns_add_qr_head(&data_context, domain, qtype, qclass);
-	if (len < 0) {
-		return -1;
-	}
-
-	len = data_context.ptr - data_context.data;
-
-	return _dns_rr_add_end(packet, DNS_RRS_QD, DNS_T_CNAME, len);
-}
-
-int dns_get_domain(struct dns_rrs *rrs, char *domain, int maxsize, int *qtype, int *qclass)
-{
-	struct dns_data_context data_context;
-	unsigned char *data = rrs->data;
-
-	if (rrs->type != DNS_T_CNAME) {
-		return -1;
-	}
-
-	data_context.data = data;
-	data_context.ptr = data;
-	data_context.maxsize = rrs->len;
-
-	return _dns_get_qr_head(&data_context, domain, maxsize, qtype, qclass);
-}
-
-static inline int _dns_left_len(struct dns_context *context)
-{
-	return context->maxsize - (context->ptr - context->data);
-}
-
-static int _dns_decode_head(struct dns_context *context)
-{
-	unsigned int fields;
-	int len = 12;
-	struct dns_head *head = &context->packet->head;
-
-	if (_dns_left_len(context) < len) {
-		return -1;
-	}
-
-	/*
-	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                      ID                       |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|QR|   Opcode  |AA|TC|RD|RA|   Z    |   RCODE   |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                    QDCOUNT                    |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                    ANCOUNT                    |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                    NSCOUNT                    |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                    ARCOUNT                    |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	*/
-
-	head->id = _dns_read_short(&context->ptr);
-	fields = _dns_read_short(&context->ptr);
-	head->qr = (fields & QR_MASK) >> 15;
-	head->opcode = (fields & OPCODE_MASK) >> 11;
-	head->aa = (fields & AA_MASK) >> 10;
-	head->tc = (fields & TC_MASK) >> 9;
-	head->rd = (fields & RD_MASK) >> 8;
-	head->ra = (fields & RA_MASK) >> 7;
-	head->rcode = (fields & RCODE_MASK) >> 0;
-	head->qdcount = _dns_read_short(&context->ptr);
-	head->ancount = _dns_read_short(&context->ptr);
-	head->nscount = _dns_read_short(&context->ptr);
-	head->nrcount = _dns_read_short(&context->ptr);
-
-	return 0;
-}
-
-static int _dns_encode_head(struct dns_context *context)
-{
-	int len = 12;
-	struct dns_head *head = &context->packet->head;
-
-	if (_dns_left_len(context) < len) {
-		return -1;
-	}
-
-	_dns_write_short(&context->ptr, head->id);
-
-	int fields = 0;
-	fields |= (head->qr << 15) & QR_MASK;
-	fields |= (head->opcode << 11) & OPCODE_MASK;
-	fields |= (head->aa << 10) & AA_MASK;
-	fields |= (head->tc << 9) & TC_MASK;
-	fields |= (head->rd << 8) & RD_MASK;
-	fields |= (head->ra << 7) & RA_MASK;
-	fields |= (head->rcode << 0) & RCODE_MASK;
-	_dns_write_short(&context->ptr, fields);
-
-	_dns_write_short(&context->ptr, head->qdcount);
-	_dns_write_short(&context->ptr, head->ancount);
-	_dns_write_short(&context->ptr, head->nscount);
-	_dns_write_short(&context->ptr, head->nrcount);
-	return len;
-}
-
-static int _dns_encode_head_count(struct dns_context *context)
-{
-	int len = 12;
-	struct dns_head *head = &context->packet->head;
-	unsigned char *ptr = context->data;
-
-	ptr += 4;
-	_dns_write_short(&ptr, head->qdcount);
-	_dns_write_short(&ptr, head->ancount);
-	_dns_write_short(&ptr, head->nscount);
-	_dns_write_short(&ptr, head->nrcount);
-	return len;
-}
-
-static int _dns_decode_domain(struct dns_context *context, char *output, int size)
-{
-	int output_len = 0;
-	int copy_len = 0;
-	int len = 0;
-	unsigned char *ptr = context->ptr;
-	int is_compressed = 0;
-	int ptr_jump = 0;
-
-	/*[len]string[len]string...[0]0 */
-	while (1) {
-		if (ptr > context->data + context->maxsize || ptr < context->data || output_len >= size - 1 || ptr_jump > 4) {
-			return -1;
-		}
-
-		len = *ptr;
-		if (len == 0) {
-			*output = 0;
-			ptr++;
-			break;
-		}
-
-		/* compressed domain */
-		if (len >= 0xC0) {
-			if ((ptr + 2) > (context->data + context->maxsize)) {
-				return -1;
-			}
-			/*
-			0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
-			+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-			| 1  1|                OFFSET                   |
-			+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-			*/
-			/* read offset */
-			len = _dns_read_short(&ptr) & 0x3FFF;
-			if (is_compressed == 0) {
-				context->ptr = ptr;
-			}
-			ptr = context->data + len;
-			if (ptr > context->data + context->maxsize) {
-				tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data), context->ptr, context->data);
-				return -1;
-			}
-			is_compressed = 1;
-			ptr_jump++;
-			continue;
-		}
-
-		ptr_jump = 0;
-
-		/* change [len] to '.' */
-		if (output_len > 0) {
-			*output = '.';
-			output++;
-			output_len += 1;
-		}
-
-		if (ptr > context->data + context->maxsize) {
-			tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data), context->ptr, context->data);
-			return -1;
-		}
-
-		ptr++;
-		if (output_len < size - 1) {
-			/* copy sub string */
-			copy_len = (len < size - output_len) ? len : size - 1 - output_len;
-			if ((ptr + copy_len) > (context->data + context->maxsize)) {
-				tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data), context->ptr, context->data);
-				return -1;
-			}
-			memcpy(output, ptr, copy_len);
-		}
-
-		ptr += len;
-		output += len;
-		output_len += len;
-	}
-
-	if (is_compressed == 0) {
-		context->ptr = ptr;
-	}
-
-	return 0;
-}
-
-static int _dns_encode_domain(struct dns_context *context, char *domain)
-{
-	int num = 0;
-	int total_len = 0;
-	unsigned char *ptr_num = context->ptr++;
-
-	/*[len]string[len]string...[0]0 */
-	while (_dns_left_len(context) > 1 && *domain != 0) {
-		if (*domain == '.') {
-			*ptr_num = num;
-			num = 0;
-			ptr_num = context->ptr;
-			domain++;
-			context->ptr++;
-			continue;
-		}
-		*context->ptr = *domain;
-		num++;
-		context->ptr++;
-		domain++;
-		total_len++;
-	}
-
-	*ptr_num = num;
-	if (total_len > 0) {
-		/* if domain is '\0', [domain] is '\0' */
-		*(context->ptr) = 0;
-		context->ptr++;
-	}
-	return 0;
-}
-
-static int _dns_decode_qr_head(struct dns_context *context, char *domain, int domain_size, int *qtype, int *qclass)
-{
-	int ret = 0;
-	/*
-	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                                               |
-	/                                               /
-	/                      NAME                     /
-	|                                               |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                      TYPE                     |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                     CLASS                     |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	*/
-	ret = _dns_decode_domain(context, domain, domain_size);
-	if (ret < 0) {
-		tlog(TLOG_DEBUG, "decode domain failed.");
-		return -1;
-	}
-
-	if (_dns_left_len(context) < 4) {
-		tlog(TLOG_DEBUG, "left length is not enough, %s.", domain);
-		return -1;
-	}
-
-	*qtype = _dns_read_short(&context->ptr);
-	*qclass = _dns_read_short(&context->ptr);
-
-	return 0;
-}
-
-static int _dns_encode_qr_head(struct dns_context *context, char *domain, int qtype, int qclass)
-{
-	int ret = 0;
-	ret = _dns_encode_domain(context, domain);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < 4) {
-		return -1;
-	}
-
-	_dns_write_short(&context->ptr, qtype);
-	_dns_write_short(&context->ptr, qclass);
-
-	return 0;
-}
-
-static int _dns_decode_rr_head(struct dns_context *context, char *domain, int domain_size, int *qtype, int *qclass, int *ttl, int *rr_len)
-{
-	int len = 0;
-
-	len = _dns_decode_qr_head(context, domain, domain_size, qtype, qclass);
-	if (len < 0) {
-		tlog(TLOG_DEBUG, "decode qr head failed.");
-		return -1;
-	}
-
-	if (_dns_left_len(context) < 6) {
-		tlog(TLOG_DEBUG, "left length is not enough.");
-		return -1;
-	}
-
-	*ttl = _dns_read_int(&context->ptr);
-	*rr_len = _dns_read_short(&context->ptr);
-
-	return 0;
-}
-
-static int _dns_encode_rr_head(struct dns_context *context, char *domain, int qtype, int qclass, int ttl, int rr_len)
-{
-	int ret = 0;
-	ret = _dns_encode_qr_head(context, domain, qtype, qclass);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < 6) {
-		return -1;
-	}
-
-	_dns_write_int(&context->ptr, ttl);
-	_dns_write_short(&context->ptr, rr_len);
-
-	return 0;
-}
-
-static int _dns_encode_raw(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	int qtype = 0;
-	int qclass = 0;
-	int ttl = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	int rr_len;
-	struct dns_data_context data_context;
-	/*
-	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                                               |
-	/                                               /
-	/                      NAME                     /
-	|                                               |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                      TYPE                     |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                     CLASS                     |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                      TTL                      |
-	|                                               |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	|                   RDLENGTH                    |
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--|
-	/                     RDATA                     /
-	/                                               /
-	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
-	*/
-
-	data_context.data = rrs->data;
-	data_context.ptr = rrs->data;
-	data_context.maxsize = rrs->len;
-
-	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < rr_len) {
-		return -1;
-	}
-
-	memcpy(context->ptr, data_context.ptr, rr_len);
-	context->ptr += rr_len;
-	data_context.ptr += rr_len;
-
-	return 0;
-}
-
-static int _dns_decode_raw(struct dns_context *context, unsigned char *raw, int len)
-{
-	if (_dns_left_len(context) < len) {
-		return -1;
-	}
-
-	memcpy(raw, context->ptr, len);
-	context->ptr += len;
-	return 0;
-}
-
-static int _dns_decode_CNAME(struct dns_context *context, char *cname, int cname_size)
-{
-	int ret = 0;
-	ret = _dns_decode_domain(context, cname, cname_size);
-	if (ret < 0) {
-		return -1;
-	}
-
-	return 0;
-}
-
-static int _dns_encode_CNAME(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	int qtype = 0;
-	int qclass = 0;
-	int ttl = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	int rr_len;
-	struct dns_data_context data_context;
-
-	data_context.data = rrs->data;
-	data_context.ptr = rrs->data;
-	data_context.maxsize = rrs->len;
-
-	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	/* when code domain, len must plus 1, because of length at the begining */
-	rr_len++;
-	if (rr_len > rrs->len) {
-		return -1;
-	}
-
-	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_encode_domain(context, (char *)data_context.ptr);
-	if (ret < 0) {
-		return -1;
-	}
-
-	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
-
-	return 0;
-}
-
-static int _dns_decode_SOA(struct dns_context *context, struct dns_soa *soa)
-{
-	int ret = 0;
-	ret = _dns_decode_domain(context, soa->mname, DNS_MAX_CNAME_LEN - 1);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_decode_domain(context, soa->rname, DNS_MAX_CNAME_LEN - 1);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < 20) {
-		return -1;
-	}
-
-	soa->serial = _dns_read_int(&context->ptr);
-	soa->refresh = _dns_read_int(&context->ptr);
-	soa->retry = _dns_read_int(&context->ptr);
-	soa->expire = _dns_read_int(&context->ptr);
-	soa->minimum = _dns_read_int(&context->ptr);
-
-	return 0;
-}
-
-static int _dns_encode_SOA(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	int qtype = 0;
-	int qclass = 0;
-	int ttl = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	int rr_len;
-	struct dns_data_context data_context;
-
-	data_context.data = rrs->data;
-	data_context.ptr = rrs->data;
-	data_context.maxsize = rrs->len;
-
-	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	/* when code two domain, len must plus 2, because of length at the begining */
-	rr_len += 2;
-	if (rr_len > rrs->len) {
-		return -1;
-	}
-
-	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	/* mname */
-	ret = _dns_encode_domain(context, (char *)data_context.ptr);
-	if (ret < 0) {
-		return -1;
-	}
-
-	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
-
-	/* rname */
-	ret = _dns_encode_domain(context, (char *)data_context.ptr);
-	if (ret < 0) {
-		return -1;
-	}
-
-	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
-
-	if (_dns_left_len(context) < 20) {
-		return -1;
-	}
-
-	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
-	data_context.ptr += 4;
-	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
-	data_context.ptr += 4;
-	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
-	data_context.ptr += 4;
-	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
-	data_context.ptr += 4;
-	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
-	data_context.ptr += 4;
-
-	return 0;
-}
-
-static int _dns_decode_opt_ecs(struct dns_context *context, struct dns_opt_ecs *ecs)
-{
-	// TODO
-
-	int len = 0;
-	if (_dns_left_len(context) < 4) {
-		return -1;
-	}
-
-	ecs->family = _dns_read_short(&context->ptr);
-	ecs->source_prefix = _dns_read_char(&context->ptr);
-	ecs->scope_prefix = _dns_read_char(&context->ptr);
-	len = (ecs->source_prefix / 8);
-	len += (ecs->source_prefix % 8 > 0) ? 1 : 0;
-
-	if (_dns_left_len(context) < len) {
-		return -1;
-	}
-
-	memcpy(ecs->addr, context->ptr, len);
-	context->ptr += len;
-
-	tlog(TLOG_DEBUG, "ECS: family:%d, source_prefix:%d, scope_prefix:%d, len:%d", ecs->family, ecs->source_prefix, ecs->scope_prefix, len);
-	tlog(TLOG_DEBUG, "%d.%d.%d.%d", ecs->addr[0], ecs->addr[1], ecs->addr[2], ecs->addr[3]);
-
-	return 0;
-}
-
-static int _dns_encode_OPT(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	int opt_code = 0;
-	int qclass = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	struct dns_data_context data_context;
-	int rr_len = 0;
-	int ttl;
-	struct dns_opt *dns_opt = NULL;
-
-	data_context.data = rrs->data;
-	data_context.ptr = rrs->data;
-	data_context.maxsize = rrs->len;
-
-	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &opt_code, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (rr_len < sizeof(*dns_opt)) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < (rr_len)) {
-		return -1;
-	}
-
-	dns_opt = (struct dns_opt *)data_context.ptr;
-	_dns_write_short(&context->ptr, dns_opt->code);
-	_dns_write_short(&context->ptr, dns_opt->length);
-
-	if (_dns_left_len(context) < dns_opt->length) {
-		return -1;
-	}
-
-	memcpy(context->ptr, dns_opt->data, dns_opt->length);
-	context->ptr += dns_opt->length;
-
-	return 0;
-}
-
-static int _dns_get_opts_data_len(struct dns_packet *packet, struct dns_rrs *rrs, int count)
-{
-	int i = 0;
-	int len = 0;
-	int opt_code = 0;
-	int qclass = 0;
-	int ttl;
-	int ret;
-	char domain[DNS_MAX_CNAME_LEN];
-	struct dns_data_context data_context;
-	int rr_len = 0;
-
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		data_context.data = rrs->data;
-		data_context.ptr = rrs->data;
-		data_context.maxsize = rrs->len;
-
-		ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &opt_code, &qclass, &ttl, &rr_len);
-		if (ret < 0) {
-			return -1;
-		}
-
-		len += rr_len;
-	}
-
-	return len;
-}
-
-static int _dns_encode_opts(struct dns_packet *packet, struct dns_context *context, struct dns_rrs *rrs, int count)
-{
-	int i = 0;
-	int len = 0;
-	int ret = 0;
-	unsigned int rcode = 0;
-	int rr_len = 0;
-	int payloadsize = packet->payloadsize;
-
-	rr_len = _dns_get_opts_data_len(packet, rrs, count);
-	if (rr_len < 0) {
-		return -1;
-	}
-
-	if (payloadsize < DNS_DEFAULT_PACKET_SIZE) {
-		payloadsize = DNS_DEFAULT_PACKET_SIZE;
-	}
-
-	ret = _dns_encode_rr_head(context, "", DNS_T_OPT, payloadsize, rcode, rr_len);
-	if (ret < 0) {
-		return -1;
-	}
-
-	if (_dns_left_len(context) < rr_len) {
-		return -1;
-	}
-
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		len = _dns_encode_OPT(context, rrs);
-		if (len < 0) {
-			return -1;
-		}
-	}
-
-	return 0;
-}
-
-static int _dns_decode_opt(struct dns_context *context, dns_rr_type type, unsigned int ttl, int rr_len)
-{
-	unsigned short opt_code;
-	unsigned short opt_len;
-	unsigned short ercode = (ttl >> 16) & 0xFFFF;
-	unsigned short ever = (ttl)&0xFFFF;
-	unsigned char *start = context->ptr;
-	struct dns_packet *packet = context->packet;
-	int ret = 0;
-
-	UNUSED(ever);
-
-	/*
-		 Field Name   Field Type     Description
-	 ------------------------------------------------------
-	 NAME         domain name    empty (root domain)
-	 TYPE         u_int16_t      OPT
-	 CLASS        u_int16_t      sender's UDP payload size
-	 TTL          u_int32_t      extended RCODE and flags
-	 RDLEN        u_int16_t      describes RDATA
-	 RDATA        octet stream   {attribute,value} pairs
-
-					 +0 (MSB)                            +1 (LSB)
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  0: |                          OPTION-CODE                          |
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  2: |                         OPTION-LENGTH                         |
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-  4: |                                                               |
-	 /                          OPTION-DATA                          /
-	 /                                                               /
-	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-
-	TTL
-				 +0 (MSB)                            +1 (LSB)
-	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-   0: |         EXTENDED-RCODE        |            VERSION            |
-	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-   2: |                               Z                               |
-	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
-	*/
-
-	if (ercode != 0) {
-		tlog(TLOG_ERROR, "extend rcode invalid.");
-		return -1;
-	}
-
-	while (context->ptr - start < rr_len) {
-		if (_dns_left_len(context) < 4) {
-			return -1;
-		}
-		opt_code = _dns_read_short(&context->ptr);
-		opt_len = _dns_read_short(&context->ptr);
-
-		if (_dns_left_len(context) < opt_len) {
-			tlog(TLOG_ERROR, "read opt data failed, opt_code = %d, opt_le = %d", opt_code, opt_len);
-			return -1;
-		}
-
-		tlog(TLOG_DEBUG, "opt type %d", opt_code);
-		switch (opt_code) {
-		case DNS_OPT_T_ECS: {
-			struct dns_opt_ecs ecs;
-			ret = _dns_decode_opt_ecs(context, &ecs);
-			if (ret != 0) {
-				tlog(TLOG_ERROR, "decode ecs failed.");
-				return -1;
-			}
-
-			ret = dns_add_OPT_ECS(packet, &ecs);
-			if (ret != 0) {
-				tlog(TLOG_ERROR, "add ecs failed.");
-				return -1;
-			}
-		} break;
-		default:
-			context->ptr += opt_len;
-			tlog(TLOG_DEBUG, "DNS opt type = %d not supported", opt_code);
-			break;
-		}
-	}
-
-	return 0;
-}
-
-static int _dns_decode_qd(struct dns_context *context)
-{
-	struct dns_packet *packet = context->packet;
-	int len;
-	int qtype = 0;
-	int qclass = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-
-	len = _dns_decode_qr_head(context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass);
-	if (len < 0) {
-		return -1;
-	}
-
-	len = dns_add_domain(packet, domain, qtype, qclass);
-	if (len < 0) {
-		return -1;
-	}
-
-	return 0;
-}
-
-static int _dns_decode_an(struct dns_context *context, dns_rr_type type)
-{
-	int ret;
-	int qtype = 0;
-	int qclass = 0;
-	int ttl;
-	int rr_len = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	struct dns_packet *packet = context->packet;
-	unsigned char *start;
-
-	/* decode rr head */
-	ret = _dns_decode_rr_head(context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
-	if (ret < 0) {
-		tlog(TLOG_DEBUG, "decode head failed.");
-		return -1;
-	}
-	start = context->ptr;
-
-	/* decode answer */
-	switch (qtype) {
-	case DNS_T_A: {
-		unsigned char addr[DNS_RR_A_LEN];
-		ret = _dns_decode_raw(context, addr, sizeof(addr));
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode A failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_A(packet, type, domain, ttl, addr);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add A failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_CNAME: {
-		char cname[DNS_MAX_CNAME_LEN];
-		ret = _dns_decode_CNAME(context, cname, DNS_MAX_CNAME_LEN);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode CNAME failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_CNAME(packet, type, domain, ttl, cname);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add CNAME failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_SOA: {
-		struct dns_soa soa;
-		ret = _dns_decode_SOA(context, &soa);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode CNAME failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_SOA(packet, type, domain, ttl, &soa);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add CNAME failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_NS: {
-		char ns[DNS_MAX_CNAME_LEN];
-		ret = _dns_decode_CNAME(context, ns, DNS_MAX_CNAME_LEN);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode NS failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_NS(packet, type, domain, ttl, ns);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add NS failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_PTR: {
-		char name[DNS_MAX_CNAME_LEN];
-		ret = _dns_decode_CNAME(context, name, DNS_MAX_CNAME_LEN);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode PTR failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_PTR(packet, type, domain, ttl, name);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add PTR failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_AAAA: {
-		unsigned char addr[DNS_RR_AAAA_LEN];
-		ret = _dns_decode_raw(context, addr, sizeof(addr));
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode AAAA failed, %s", domain);
-			return -1;
-		}
-
-		ret = dns_add_AAAA(packet, type, domain, ttl, addr);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "add AAAA failed, %s", domain);
-			return -1;
-		}
-	} break;
-	case DNS_T_OPT: {
-		unsigned char *opt_start = context->ptr;
-		ret = _dns_decode_opt(context, type, ttl, rr_len);
-		if (ret < 0) {
-			tlog(TLOG_ERROR, "decode opt failed, %s", domain);
-			return -1;
-		}
-
-		if (context->ptr - opt_start != rr_len) {
-			tlog(TLOG_ERROR, "opt length mitchmatch, %s\n", domain);
-			return -1;
-		}
-
-		dns_set_OPT_payload_size(packet, qclass);
-	} break;
-	default:
-		if (_dns_left_len(context) < rr_len) {
-			tlog(TLOG_DEBUG, "length mitchmatch\n");
-			return -1;
-		}
-		context->ptr += rr_len;
-		tlog(TLOG_DEBUG, "DNS type = %d not supported", qtype);
-		break;
-	}
-
-	if (context->ptr - start != rr_len) {
-		tlog(TLOG_ERROR, "length mitchmatch , %s, %ld:%d", domain, (long)(context->ptr - start), rr_len);
-		return -1;
-	}
-
-	return 0;
-}
-
-static int _dns_encode_qd(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	int qtype = 0;
-	int qclass = 0;
-	char domain[DNS_MAX_CNAME_LEN];
-	struct dns_data_context data_context;
-
-	data_context.data = rrs->data;
-	data_context.ptr = rrs->data;
-	data_context.maxsize = rrs->len;
-
-	ret = _dns_get_qr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_encode_qr_head(context, domain, qtype, qclass);
-	if (ret < 0) {
-		return -1;
-	}
-
-	return 0;
-}
-
-static int _dns_encode_an(struct dns_context *context, struct dns_rrs *rrs)
-{
-	int ret;
-	switch (rrs->type) {
-	case DNS_T_A:
-	case DNS_T_AAAA: {
-		ret = _dns_encode_raw(context, rrs);
-		if (ret < 0) {
-			return -1;
-		}
-	} break;
-	case DNS_T_CNAME:
-	case DNS_T_PTR:
-		ret = _dns_encode_CNAME(context, rrs);
-		if (ret < 0) {
-			return -1;
-		}
-		break;
-	case DNS_T_SOA:
-		ret = _dns_encode_SOA(context, rrs);
-		if (ret < 0) {
-			return -1;
-		}
-		break;
-	default:
-		break;
-	}
-
-	return 0;
-}
-
-static int _dns_decode_body(struct dns_context *context)
-{
-	struct dns_packet *packet = context->packet;
-	struct dns_head *head = &packet->head;
-	int i = 0;
-	int ret = 0;
-	int count = 0;
-
-	count = head->qdcount;
-	head->qdcount = 0;
-	for (i = 0; i < count; i++) {
-		ret = _dns_decode_qd(context);
-		if (ret < 0) {
-			tlog(TLOG_DEBUG, "decode qd failed.");
-			return -1;
-		}
-	}
-
-	count = head->ancount;
-	head->ancount = 0;
-	for (i = 0; i < count; i++) {
-		ret = _dns_decode_an(context, DNS_RRS_AN);
-		if (ret < 0) {
-			tlog(TLOG_DEBUG, "decode an failed.");
-			return -1;
-		}
-	}
-
-	count = head->nscount;
-	head->nscount = 0;
-	for (i = 0; i < count; i++) {
-		ret = _dns_decode_an(context, DNS_RRS_NS);
-		if (ret < 0) {
-			tlog(TLOG_DEBUG, "decode ns failed.");
-			return -1;
-		}
-	}
-
-	count = head->nrcount;
-	head->nrcount = 0;
-	for (i = 0; i < count; i++) {
-		ret = _dns_decode_an(context, DNS_RRS_NR);
-		if (ret < 0) {
-			tlog(TLOG_DEBUG, "decode nr failed.");
-			return -1;
-		}
-	}
-
-	return 0;
-}
-
-static int _dns_encode_body(struct dns_context *context)
-{
-	struct dns_packet *packet = context->packet;
-	struct dns_head *head = &packet->head;
-	int i = 0;
-	int len = 0;
-	struct dns_rrs *rrs;
-	int count;
-
-	rrs = dns_get_rrs_start(packet, DNS_RRS_QD, &count);
-	head->qdcount = count;
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		len = _dns_encode_qd(context, rrs);
-		if (len < 0) {
-			return -1;
-		}
-	}
-
-	rrs = dns_get_rrs_start(packet, DNS_RRS_AN, &count);
-	head->ancount = count;
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		len = _dns_encode_an(context, rrs);
-		if (len < 0) {
-			return -1;
-		}
-	}
-
-	rrs = dns_get_rrs_start(packet, DNS_RRS_NS, &count);
-	head->nscount = count;
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		len = _dns_encode_an(context, rrs);
-		if (len < 0) {
-			return -1;
-		}
-	}
-
-	rrs = dns_get_rrs_start(packet, DNS_RRS_NR, &count);
-	head->nrcount = count;
-	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
-		len = _dns_encode_an(context, rrs);
-		if (len < 0) {
-			return -1;
-		}
-	}
-
-	rrs = dns_get_rrs_start(packet, DNS_RRS_OPT, &count);
-	if (count > 0 || packet->payloadsize > 0) {
-		len = _dns_encode_opts(packet, context, rrs, count);
-		if (len < 0) {
-			return -1;
-		}
-		head->nrcount++;
-	}
-
-	return 0;
-}
-
-int dns_packet_init(struct dns_packet *packet, int size, struct dns_head *head)
-{
-	struct dns_head *init_head = &packet->head;
-	if (size < sizeof(*packet)) {
-		return -1;
-	}
-
-	memset(packet, 0, size);
-	packet->size = size;
-	init_head->id = head->id;
-	init_head->qr = head->qr;
-	init_head->opcode = head->opcode;
-	init_head->aa = head->aa;
-	init_head->tc = head->tc;
-	init_head->rd = head->rd;
-	init_head->ra = head->ra;
-	init_head->rcode = head->rcode;
-	packet->questions = DNS_RR_END;
-	packet->answers = DNS_RR_END;
-	packet->nameservers = DNS_RR_END;
-	packet->additional = DNS_RR_END;
-	packet->optional = DNS_RR_END;
-	packet->optcount = 0;
-	packet->payloadsize = 0;
-
-	return 0;
-}
-
-int dns_decode(struct dns_packet *packet, int maxsize, unsigned char *data, int size)
-{
-	struct dns_head *head = &packet->head;
-	struct dns_context context;
-	int ret = 0;
-
-	memset(&context, 0, sizeof(context));
-	memset(packet, 0, sizeof(*packet));
-
-	context.data = data;
-	context.packet = packet;
-	context.ptr = data;
-	context.maxsize = size;
-
-	ret = dns_packet_init(packet, maxsize, head);
-	if (ret != 0) {
-		return -1;
-	}
-
-	ret = _dns_decode_head(&context);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_decode_body(&context);
-	if (ret < 0) {
-		tlog(TLOG_DEBUG, "decode body failed.\n");
-		return -1;
-	}
-
-	return 0;
-}
-
-int dns_encode(unsigned char *data, int size, struct dns_packet *packet)
-{
-	int ret = 0;
-	struct dns_context context;
-
-	memset(&context, 0, sizeof(context));
-	context.data = data;
-	context.packet = packet;
-	context.ptr = data;
-	context.maxsize = size;
-
-	ret = _dns_encode_head(&context);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_encode_body(&context);
-	if (ret < 0) {
-		return -1;
-	}
-
-	ret = _dns_encode_head_count(&context);
-	if (ret < 0) {
-		return -1;
-	}
-
-	return context.ptr - context.data;
-}
-
-#if 0
-static void dns_debug(void)
-{
-	unsigned char data[1024];
-	int len;
-	char buff[4096];
-
-	int fd = open("dns.bin", O_RDWR);
-	if (fd < 0) {
-		return;
-	}
-	len = read(fd, data, 1024);
-	close(fd);
-	if (len < 0) {
-		return;
-	}
-
-	struct dns_packet *packet = (struct dns_packet *)buff;
-	if (dns_decode(packet, 4096, data, len) != 0) {
-		tlog(TLOG_ERROR, "decode failed.\n");
-	}
-
-	memset(data, 0, sizeof(data));
-	len = dns_encode(data, 1024, packet);
-	if (len < 0) {
-		tlog(TLOG_ERROR, "encode failed.");
-	}
-
-	fd = open("dns-cmp.bin", O_CREAT | O_TRUNC | O_RDWR);
-	write(fd, data, len);
-	close(fd);
-}
-#endif
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#define _GNU_SOURCE
+#include "dns.h"
+#include "stringutil.h"
+#include "tlog.h"
+#include <arpa/inet.h>
+#include <fcntl.h>
+#include <stdio.h>
+#include <string.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <unistd.h>
+
+#define QR_MASK 0x8000
+#define OPCODE_MASK 0x7800
+#define AA_MASK 0x0400
+#define TC_MASK 0x0200
+#define RD_MASK 0x0100
+#define RA_MASK 0x0080
+#define RCODE_MASK 0x000F
+#define DNS_RR_END (0XFFFF)
+
+#define UNUSED(expr)                                                                                                   \
+	do {                                                                                                               \
+		(void)(expr);                                                                                                  \
+	} while (0)
+
+/* read short and move pointer */
+static short _dns_read_short(unsigned char **buffer)
+{
+	unsigned short value;
+
+	value = ntohs(*((unsigned short *)(*buffer)));
+	*buffer += 2;
+	return value;
+}
+
+/* write char and move pointer */
+static __attribute__((unused)) void _dns_write_char(unsigned char **buffer, unsigned char value)
+{
+	**buffer = value;
+	*buffer += 1;
+}
+
+/* read char and move pointer */
+static unsigned char _dns_read_char(unsigned char **buffer)
+{
+	unsigned char value = **buffer;
+	*buffer += 1;
+	return value;
+}
+
+/* write short and move pointer */
+static void _dns_write_short(unsigned char **buffer, unsigned short value)
+{
+	value = htons(value);
+	*((unsigned short *)(*buffer)) = value;
+	*buffer += 2;
+}
+
+/* write int and move pointer */
+static void _dns_write_int(unsigned char **buffer, unsigned int value)
+{
+	value = htonl(value);
+	*((unsigned int *)(*buffer)) = value;
+	*buffer += 4;
+}
+
+/* read int and move pointer */
+static unsigned int _dns_read_int(unsigned char **buffer)
+{
+	unsigned int value;
+
+	value = ntohl(*((unsigned int *)(*buffer)));
+	*buffer += 4;
+
+	return value;
+}
+
+/* iterator get rrs begin */
+struct dns_rrs *dns_get_rrs_start(struct dns_packet *packet, dns_rr_type type, int *count)
+{
+	unsigned short start;
+	struct dns_head *head = &packet->head;
+
+	/* get rrs count by rrs type */
+	switch (type) {
+	case DNS_RRS_QD:
+		*count = head->qdcount;
+		start = packet->questions;
+		break;
+	case DNS_RRS_AN:
+		*count = head->ancount;
+		start = packet->answers;
+		break;
+	case DNS_RRS_NS:
+		*count = head->nscount;
+		start = packet->nameservers;
+		break;
+	case DNS_RRS_NR:
+		*count = head->nrcount;
+		start = packet->additional;
+		break;
+	case DNS_RRS_OPT:
+		*count = packet->optcount;
+		start = packet->optional;
+		break;
+	default:
+		return NULL;
+		break;
+	}
+
+	/* if not resource record, reutrn null */
+	if (start == DNS_RR_END) {
+		return NULL;
+	}
+
+	/* return rrs data start address */
+	return (struct dns_rrs *)(packet->data + start);
+}
+
+/* iterator next rrs */
+struct dns_rrs *dns_get_rrs_next(struct dns_packet *packet, struct dns_rrs *rrs)
+{
+	if (rrs->next == DNS_RR_END) {
+		return NULL;
+	}
+
+	return (struct dns_rrs *)(packet->data + rrs->next);
+}
+
+/* iterator add rrs begin */
+static unsigned char *_dns_add_rrs_start(struct dns_packet *packet, int *maxlen)
+{
+	struct dns_rrs *rrs;
+	unsigned char *end = packet->data + packet->len;
+
+	rrs = (struct dns_rrs *)end;
+	*maxlen = packet->size - packet->len - sizeof(*packet) - sizeof(*rrs);
+	if (*maxlen <= 0) {
+		/* if size exceeds max packet size, return NULL */
+		return NULL;
+	}
+	return rrs->data;
+}
+
+/* iterator add rrs end */
+static int _dns_rr_add_end(struct dns_packet *packet, int type, dns_type_t rtype, int len)
+{
+	struct dns_rrs *rrs;
+	struct dns_rrs *rrs_next;
+	struct dns_head *head = &packet->head;
+	unsigned char *end = packet->data + packet->len;
+	unsigned short *count;
+	unsigned short *start;
+
+	rrs = (struct dns_rrs *)end;
+	if (packet->len + len > packet->size - sizeof(*packet) - sizeof(*rrs)) {
+		return -1;
+	}
+
+	switch (type) {
+	case DNS_RRS_QD:
+		count = &head->qdcount;
+		start = &packet->questions;
+		break;
+	case DNS_RRS_AN:
+		count = &head->ancount;
+		start = &packet->answers;
+		break;
+	case DNS_RRS_NS:
+		count = &head->nscount;
+		start = &packet->nameservers;
+		break;
+	case DNS_RRS_NR:
+		count = &head->nrcount;
+		start = &packet->additional;
+		break;
+	case DNS_RRS_OPT:
+		count = &packet->optcount;
+		start = &packet->optional;
+		break;
+	default:
+		return -1;
+		break;
+	}
+
+	/* add data to end of dns_packet, and set previouse rrs point to this rrs */
+	if (*start != DNS_RR_END) {
+		rrs_next = (struct dns_rrs *)(packet->data + *start);
+		while (rrs_next->next != DNS_RR_END) {
+			rrs_next = (struct dns_rrs *)(packet->data + rrs_next->next);
+		}
+		rrs_next->next = packet->len;
+	} else {
+		*start = packet->len;
+	}
+
+	/* update rrs head info */
+	rrs->len = len;
+	rrs->type = rtype;
+	rrs->next = DNS_RR_END;
+
+	/* update total data length */
+	*count += 1;
+	packet->len += len + sizeof(*rrs);
+	return 0;
+}
+
+static inline int _dns_data_left_len(struct dns_data_context *data_context)
+{
+	/* check whether data length out of bound */
+	return data_context->maxsize - (data_context->ptr - data_context->data);
+}
+
+static int _dns_add_qr_head(struct dns_data_context *data_context, char *domain, int qtype, int qclass)
+{
+	/* question head */
+	/* |domain         |
+	 * |qtype | qclass |
+	 */
+	while (1) {
+		if (_dns_data_left_len(data_context) < 4) {
+			return -1;
+		}
+		*data_context->ptr = *domain;
+		if (*domain == '\0') {
+			data_context->ptr++;
+			break;
+		}
+		data_context->ptr++;
+		domain++;
+	}
+
+	if (_dns_data_left_len(data_context) < 4) {
+		return -1;
+	}
+
+	*((unsigned short *)(data_context->ptr)) = qtype;
+	data_context->ptr += 2;
+
+	*((unsigned short *)(data_context->ptr)) = qclass;
+	data_context->ptr += 2;
+
+	return 0;
+}
+
+static int _dns_get_qr_head(struct dns_data_context *data_context, char *domain, int maxsize, int *qtype, int *qclass)
+{
+	int i;
+	int is_read_all = 0;
+	/* question head */
+	/* |domain         |
+	 * |qtype | qclass |
+	 */
+	for (i = 0; i < maxsize - 1; i++) {
+		if (_dns_data_left_len(data_context) < 4) {
+			return -1;
+		}
+		*domain = *data_context->ptr;
+		if (*data_context->ptr == '\0') {
+			domain++;
+			data_context->ptr++;
+			i++;
+			is_read_all = 1;
+			break;
+		}
+		*domain = *data_context->ptr;
+		domain++;
+		data_context->ptr++;
+	}
+
+	*domain = '\0';
+	if (is_read_all == 0) {
+		return -1;
+	}
+
+	if (_dns_data_left_len(data_context) < 4) {
+		return -1;
+	}
+
+	*qtype = *((unsigned short *)(data_context->ptr));
+	data_context->ptr += 2;
+
+	*qclass = *((unsigned short *)(data_context->ptr));
+	data_context->ptr += 2;
+
+	return 0;
+}
+
+static int _dns_add_rr_head(struct dns_data_context *data_context, char *domain, int qtype, int qclass, int ttl,
+							int rr_len)
+{
+	int len = 0;
+
+	/* resource record head */
+	/* |domain          |
+	 * |qtype  | qclass |
+	 * |       ttl      |
+	 * | rrlen | rrdata |
+	 */
+	len = _dns_add_qr_head(data_context, domain, qtype, qclass);
+	if (len < 0) {
+		return -1;
+	}
+
+	if (_dns_data_left_len(data_context) < 6) {
+		return -1;
+	}
+
+	*((unsigned int *)(data_context->ptr)) = ttl;
+	data_context->ptr += 4;
+
+	*((unsigned short *)(data_context->ptr)) = rr_len;
+	data_context->ptr += 2;
+
+	return 0;
+}
+
+static int _dns_get_rr_head(struct dns_data_context *data_context, char *domain, int maxsize, int *qtype, int *qclass,
+							int *ttl, int *rr_len)
+{
+	int len = 0;
+
+	/* resource record head */
+	/* |domain          |
+	 * |qtype  | qclass |
+	 * |       ttl      |
+	 * | rrlen | rrdata |
+	 */
+	len = _dns_get_qr_head(data_context, domain, maxsize, qtype, qclass);
+
+	if (_dns_data_left_len(data_context) < 6) {
+		return -1;
+	}
+
+	*ttl = *((unsigned int *)(data_context->ptr));
+	data_context->ptr += 4;
+
+	*rr_len = *((unsigned short *)(data_context->ptr));
+	data_context->ptr += 2;
+
+	return len;
+}
+
+static int _dns_add_RAW(struct dns_packet *packet, dns_rr_type rrtype, dns_type_t rtype, char *domain, int ttl,
+						void *raw, int raw_len)
+{
+	int maxlen = 0;
+	int len = 0;
+	struct dns_data_context data_context;
+
+	/* resource record */
+	/* |domain          |
+	 * |qtype  | qclass |
+	 * |       ttl      |
+	 * | rrlen | rrdata |
+	 */
+	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
+	if (data == NULL) {
+		return -1;
+	}
+
+	if (raw_len >= maxlen) {
+		return -1;
+	}
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = maxlen;
+
+	/* add rr head */
+	len = _dns_add_rr_head(&data_context, domain, rtype, DNS_C_IN, ttl, raw_len);
+	if (len < 0) {
+		return -1;
+	}
+
+	/* add rr data */
+	memcpy(data_context.ptr, raw, raw_len);
+	data_context.ptr += raw_len;
+	len = data_context.ptr - data_context.data;
+
+	return _dns_rr_add_end(packet, rrtype, rtype, len);
+}
+
+static int _dns_get_RAW(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, void *raw, int *raw_len)
+{
+	int qtype = 0;
+	int qclass = 0;
+	int rr_len = 0;
+	int ret = 0;
+	struct dns_data_context data_context;
+
+	/* resource record head */
+	/* |domain          |
+	 * |qtype  | qclass |
+	 * |       ttl      |
+	 * | rrlen | rrdata |
+	 */
+	unsigned char *data = rrs->data;
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = rrs->len;
+
+	/* get rr head */
+	ret = _dns_get_rr_head(&data_context, domain, maxsize, &qtype, &qclass, ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (qtype != rrs->type || rr_len > *raw_len) {
+		return -1;
+	}
+
+	/* get rr data */
+	memcpy(raw, data_context.ptr, rr_len);
+	data_context.ptr += rr_len;
+	*raw_len = rr_len;
+
+	return 0;
+}
+
+static int _dns_add_opt_RAW(struct dns_packet *packet, dns_opt_code_t opt_rrtype, void *raw, int raw_len)
+{
+	unsigned char opt_data[DNS_MAX_OPT_LEN];
+	struct dns_opt *opt = (struct dns_opt *)opt_data;
+	int len = 0;
+
+	opt->code = DNS_OPT_T_TCP_KEEPALIVE;
+	opt->length = sizeof(unsigned short);
+
+	memcpy(opt->data, raw, raw_len);
+	len += raw_len;
+	len += sizeof(*opt);
+
+	return _dns_add_RAW(packet, DNS_RRS_OPT, DNS_OPT_T_TCP_KEEPALIVE, "", 0, opt_data, len);
+}
+
+static int _dns_get_opt_RAW(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, struct dns_opt *dns_opt,
+							int *dns_optlen)
+{
+	*dns_optlen = DNS_MAX_OPT_LEN;
+
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, dns_opt, dns_optlen);
+}
+
+static int __attribute__((unused)) _dns_add_OPT(struct dns_packet *packet, dns_rr_type type, unsigned short opt_code,
+												unsigned short opt_len, struct dns_opt *opt)
+{
+	// TODO
+
+	int maxlen = 0;
+	int len = 0;
+	struct dns_data_context data_context;
+	int total_len = sizeof(*opt) + opt->length;
+	int ttl = 0;
+
+	/*
+	+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  0: |                          OPTION-CODE                          |
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  2: |                         OPTION-LENGTH                         |
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  4: |                                                               |
+	 /                          OPTION-DATA                          /
+	 /                                                               /
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+	*/
+	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
+	if (data == NULL) {
+		return -1;
+	}
+
+	if (total_len > maxlen) {
+		return -1;
+	}
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = maxlen;
+
+	ttl = (opt_code << 16) | opt_len;
+
+	/* add rr head */
+	len = _dns_add_rr_head(&data_context, "", type, DNS_C_IN, ttl, total_len);
+	if (len < 0) {
+		return -1;
+	}
+
+	/* add rr data */
+	memcpy(data_context.ptr, opt, total_len);
+	data_context.ptr += total_len;
+	len = data_context.ptr - data_context.data;
+
+	return _dns_rr_add_end(packet, type, DNS_T_OPT, len);
+}
+
+static int __attribute__((unused)) _dns_get_OPT(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len,
+												struct dns_opt *opt, int *opt_maxlen)
+{
+	// TODO
+
+	int qtype = 0;
+	int qclass = 0;
+	int rr_len = 0;
+	int ret = 0;
+	struct dns_data_context data_context;
+	char domain[DNS_MAX_CNAME_LEN];
+	int maxsize = DNS_MAX_CNAME_LEN;
+	int ttl = 0;
+	unsigned char *data = rrs->data;
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = rrs->len;
+
+	/* get rr head */
+	ret = _dns_get_rr_head(&data_context, domain, maxsize, &qtype, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (qtype != rrs->type || rr_len > *opt_len) {
+		return -1;
+	}
+
+	/* get rr data */
+	*opt_code = ttl >> 16;
+	*opt_len = ttl & 0xFFFF;
+	memcpy(opt, data_context.ptr, rr_len);
+	data_context.ptr += rr_len;
+	*opt_maxlen = rr_len;
+
+	return 0;
+}
+
+int dns_add_CNAME(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
+{
+	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
+	return _dns_add_RAW(packet, type, DNS_T_CNAME, domain, ttl, cname, rr_len);
+}
+
+int dns_get_CNAME(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
+{
+	int len = cname_size;
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
+}
+
+int dns_add_A(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, unsigned char addr[DNS_RR_A_LEN])
+{
+	return _dns_add_RAW(packet, type, DNS_T_A, domain, ttl, addr, DNS_RR_A_LEN);
+}
+
+int dns_get_A(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned char addr[DNS_RR_A_LEN])
+{
+	int len = DNS_RR_A_LEN;
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, addr, &len);
+}
+
+int dns_add_PTR(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
+{
+	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
+	return _dns_add_RAW(packet, type, DNS_T_PTR, domain, ttl, cname, rr_len);
+}
+
+int dns_get_PTR(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
+{
+	int len = cname_size;
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
+}
+
+int dns_add_NS(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname)
+{
+	int rr_len = strnlen(cname, DNS_MAX_CNAME_LEN) + 1;
+	return _dns_add_RAW(packet, type, DNS_T_NS, domain, ttl, cname, rr_len);
+}
+
+int dns_get_NS(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size)
+{
+	int len = cname_size;
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, cname, &len);
+}
+
+int dns_add_AAAA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl,
+				 unsigned char addr[DNS_RR_AAAA_LEN])
+{
+	return _dns_add_RAW(packet, type, DNS_T_AAAA, domain, ttl, addr, DNS_RR_AAAA_LEN);
+}
+
+int dns_get_AAAA(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned char addr[DNS_RR_AAAA_LEN])
+{
+	int len = DNS_RR_AAAA_LEN;
+	return _dns_get_RAW(rrs, domain, maxsize, ttl, addr, &len);
+}
+
+int dns_add_SOA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, struct dns_soa *soa)
+{
+	/* SOA */
+	/*| mname        |
+	 *| rname        |
+	 *| serial       |
+	 *| refersh      |
+	 *| retry        |
+	 *| expire       |
+	 *| minimum      |
+	 */
+	unsigned char data[sizeof(*soa)];
+	unsigned char *ptr = data;
+	int len = 0;
+	safe_strncpy((char *)ptr, soa->mname, DNS_MAX_CNAME_LEN);
+	ptr += strnlen(soa->mname, DNS_MAX_CNAME_LEN - 1) + 1;
+	safe_strncpy((char *)ptr, soa->rname, DNS_MAX_CNAME_LEN);
+	ptr += strnlen(soa->rname, DNS_MAX_CNAME_LEN - 1) + 1;
+	memcpy(ptr, &soa->serial, sizeof(unsigned int));
+	ptr += 4;
+	memcpy(ptr, &soa->refresh, sizeof(unsigned int));
+	ptr += 4;
+	memcpy(ptr, &soa->retry, sizeof(unsigned int));
+	ptr += 4;
+	memcpy(ptr, &soa->expire, sizeof(unsigned int));
+	ptr += 4;
+	memcpy(ptr, &soa->minimum, sizeof(unsigned int));
+	ptr += 4;
+	len = ptr - data;
+
+	return _dns_add_RAW(packet, type, DNS_T_SOA, domain, ttl, data, len);
+}
+
+int dns_get_SOA(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, struct dns_soa *soa)
+{
+	unsigned char data[sizeof(*soa)];
+	unsigned char *ptr = data;
+	int len = sizeof(data);
+
+	/* SOA */
+	/*| mname        |
+	 *| rname        |
+	 *| serial       |
+	 *| refersh      |
+	 *| retry        |
+	 *| expire       |
+	 *| minimum      |
+	 */
+	if (_dns_get_RAW(rrs, domain, maxsize, ttl, data, &len) != 0) {
+		return -1;
+	}
+
+	safe_strncpy(soa->mname, (char *)ptr, DNS_MAX_CNAME_LEN - 1);
+	ptr += strnlen(soa->mname, DNS_MAX_CNAME_LEN - 1) + 1;
+	if (ptr - data >= len) {
+		return -1;
+	}
+	safe_strncpy(soa->rname, (char *)ptr, DNS_MAX_CNAME_LEN - 1);
+	ptr += strnlen(soa->rname, DNS_MAX_CNAME_LEN - 1) + 1;
+	if (ptr - data + 20 > len) {
+		return -1;
+	}
+	soa->serial = *((unsigned int *)ptr);
+	ptr += 4;
+	soa->refresh = *((unsigned int *)ptr);
+	ptr += 4;
+	soa->retry = *((unsigned int *)ptr);
+	ptr += 4;
+	soa->expire = *((unsigned int *)ptr);
+	ptr += 4;
+	soa->minimum = *((unsigned int *)ptr);
+	ptr += 4;
+
+	return 0;
+}
+
+int dns_set_OPT_payload_size(struct dns_packet *packet, int payload_size)
+{
+	if (payload_size < 512) {
+		payload_size = 512;
+	}
+
+	packet->payloadsize = payload_size;
+	return 0;
+}
+
+int dns_get_OPT_payload_size(struct dns_packet *packet)
+{
+	return packet->payloadsize;
+}
+
+int dns_add_OPT_ECS(struct dns_packet *packet, struct dns_opt_ecs *ecs)
+{
+	unsigned char opt_data[DNS_MAX_OPT_LEN];
+	struct dns_opt *opt = (struct dns_opt *)opt_data;
+	int len = 0;
+
+	opt->code = DNS_OPT_T_ECS;
+	opt->length = sizeof(*ecs);
+	memcpy(opt->data, ecs, sizeof(*ecs));
+
+	/* ecs size 4 + bit of address*/
+	len = sizeof(*opt) + 4;
+	len += (ecs->source_prefix / 8);
+	len += (ecs->source_prefix % 8 > 0) ? 1 : 0;
+
+	return _dns_add_RAW(packet, DNS_RRS_OPT, DNS_OPT_T_ECS, "", 0, opt_data, len);
+}
+
+int dns_get_OPT_ECS(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, struct dns_opt_ecs *ecs)
+{
+	unsigned char opt_data[DNS_MAX_OPT_LEN];
+	struct dns_opt *opt = (struct dns_opt *)opt_data;
+	int len = DNS_MAX_OPT_LEN;
+	int ttl = 0;
+
+	if (_dns_get_RAW(rrs, NULL, 0, &ttl, opt_data, &len) != 0) {
+		return -1;
+	}
+
+	if (len < sizeof(*opt)) {
+		return -1;
+	}
+
+	if (opt->code != DNS_OPT_T_ECS) {
+		return -1;
+	}
+
+	memcpy(ecs, opt->data, opt->length);
+
+	return 0;
+}
+
+int dns_add_OPT_TCP_KEEYALIVE(struct dns_packet *packet, unsigned short timeout)
+{
+	unsigned short timeout_net = htons(timeout);
+	int data_len = 0;
+
+	if (timeout > 0) {
+		data_len = sizeof(timeout);
+	}
+
+	return _dns_add_opt_RAW(packet, DNS_OPT_T_TCP_KEEPALIVE, &timeout_net, data_len);
+}
+
+int dns_get_OPT_TCP_KEEYALIVE(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len,
+							  unsigned short *timeout)
+{
+	unsigned char opt_data[DNS_MAX_OPT_LEN];
+	struct dns_opt *opt = (struct dns_opt *)opt_data;
+	int len = DNS_MAX_OPT_LEN;
+	int ttl = 0;
+	unsigned char *data = NULL;
+
+	if (_dns_get_opt_RAW(rrs, NULL, 0, &ttl, opt, &len) != 0) {
+		return -1;
+	}
+
+	if (len < sizeof(*opt)) {
+		return -1;
+	}
+
+	if (opt->code != DNS_OPT_T_TCP_KEEPALIVE) {
+		return -1;
+	}
+
+	if (opt->length == 0) {
+		*timeout = 0;
+		return 0;
+	}
+
+	if (opt->length != sizeof(unsigned short)) {
+		return -1;
+	}
+
+	data = opt->data;
+
+	*timeout = _dns_read_short(&data);
+
+	return 0;
+}
+
+/*
+ * Format:
+ * |DNS_NAME\0(string)|qtype(short)|qclass(short)|
+ */
+int dns_add_domain(struct dns_packet *packet, char *domain, int qtype, int qclass)
+{
+	int len = 0;
+	int maxlen = 0;
+	unsigned char *data = _dns_add_rrs_start(packet, &maxlen);
+	struct dns_data_context data_context;
+
+	if (data == NULL) {
+		return -1;
+	}
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = maxlen;
+
+	len = _dns_add_qr_head(&data_context, domain, qtype, qclass);
+	if (len < 0) {
+		return -1;
+	}
+
+	len = data_context.ptr - data_context.data;
+
+	return _dns_rr_add_end(packet, DNS_RRS_QD, DNS_T_CNAME, len);
+}
+
+int dns_get_domain(struct dns_rrs *rrs, char *domain, int maxsize, int *qtype, int *qclass)
+{
+	struct dns_data_context data_context;
+	unsigned char *data = rrs->data;
+
+	if (rrs->type != DNS_T_CNAME) {
+		return -1;
+	}
+
+	data_context.data = data;
+	data_context.ptr = data;
+	data_context.maxsize = rrs->len;
+
+	return _dns_get_qr_head(&data_context, domain, maxsize, qtype, qclass);
+}
+
+static inline int _dns_left_len(struct dns_context *context)
+{
+	return context->maxsize - (context->ptr - context->data);
+}
+
+static int _dns_decode_head(struct dns_context *context)
+{
+	unsigned int fields;
+	int len = 12;
+	struct dns_head *head = &context->packet->head;
+
+	if (_dns_left_len(context) < len) {
+		return -1;
+	}
+
+	/*
+	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                      ID                       |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|QR|   Opcode  |AA|TC|RD|RA|   Z    |   RCODE   |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                    QDCOUNT                    |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                    ANCOUNT                    |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                    NSCOUNT                    |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                    ARCOUNT                    |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	*/
+
+	head->id = _dns_read_short(&context->ptr);
+	fields = _dns_read_short(&context->ptr);
+	head->qr = (fields & QR_MASK) >> 15;
+	head->opcode = (fields & OPCODE_MASK) >> 11;
+	head->aa = (fields & AA_MASK) >> 10;
+	head->tc = (fields & TC_MASK) >> 9;
+	head->rd = (fields & RD_MASK) >> 8;
+	head->ra = (fields & RA_MASK) >> 7;
+	head->rcode = (fields & RCODE_MASK) >> 0;
+	head->qdcount = _dns_read_short(&context->ptr);
+	head->ancount = _dns_read_short(&context->ptr);
+	head->nscount = _dns_read_short(&context->ptr);
+	head->nrcount = _dns_read_short(&context->ptr);
+
+	return 0;
+}
+
+static int _dns_encode_head(struct dns_context *context)
+{
+	int len = 12;
+	struct dns_head *head = &context->packet->head;
+
+	if (_dns_left_len(context) < len) {
+		return -1;
+	}
+
+	_dns_write_short(&context->ptr, head->id);
+
+	int fields = 0;
+	fields |= (head->qr << 15) & QR_MASK;
+	fields |= (head->opcode << 11) & OPCODE_MASK;
+	fields |= (head->aa << 10) & AA_MASK;
+	fields |= (head->tc << 9) & TC_MASK;
+	fields |= (head->rd << 8) & RD_MASK;
+	fields |= (head->ra << 7) & RA_MASK;
+	fields |= (head->rcode << 0) & RCODE_MASK;
+	_dns_write_short(&context->ptr, fields);
+
+	_dns_write_short(&context->ptr, head->qdcount);
+	_dns_write_short(&context->ptr, head->ancount);
+	_dns_write_short(&context->ptr, head->nscount);
+	_dns_write_short(&context->ptr, head->nrcount);
+	return len;
+}
+
+static int _dns_encode_head_count(struct dns_context *context)
+{
+	int len = 12;
+	struct dns_head *head = &context->packet->head;
+	unsigned char *ptr = context->data;
+
+	ptr += 4;
+	_dns_write_short(&ptr, head->qdcount);
+	_dns_write_short(&ptr, head->ancount);
+	_dns_write_short(&ptr, head->nscount);
+	_dns_write_short(&ptr, head->nrcount);
+	return len;
+}
+
+static int _dns_decode_domain(struct dns_context *context, char *output, int size)
+{
+	int output_len = 0;
+	int copy_len = 0;
+	int len = 0;
+	unsigned char *ptr = context->ptr;
+	int is_compressed = 0;
+	int ptr_jump = 0;
+
+	/*[len]string[len]string...[0]0 */
+	while (1) {
+		if (ptr > context->data + context->maxsize || ptr < context->data || output_len >= size - 1 || ptr_jump > 4) {
+			return -1;
+		}
+
+		len = *ptr;
+		if (len == 0) {
+			*output = 0;
+			ptr++;
+			break;
+		}
+
+		/* compressed domain */
+		if (len >= 0xC0) {
+			if ((ptr + 2) > (context->data + context->maxsize)) {
+				return -1;
+			}
+			/*
+			0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
+			+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+			| 1  1|                OFFSET                   |
+			+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+			*/
+			/* read offset */
+			len = _dns_read_short(&ptr) & 0x3FFF;
+			if (is_compressed == 0) {
+				context->ptr = ptr;
+			}
+			ptr = context->data + len;
+			if (ptr > context->data + context->maxsize) {
+				tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data),
+					 context->ptr, context->data);
+				return -1;
+			}
+			is_compressed = 1;
+			ptr_jump++;
+			continue;
+		}
+
+		ptr_jump = 0;
+
+		/* change [len] to '.' */
+		if (output_len > 0) {
+			*output = '.';
+			output++;
+			output_len += 1;
+		}
+
+		if (ptr > context->data + context->maxsize) {
+			tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data),
+				 context->ptr, context->data);
+			return -1;
+		}
+
+		ptr++;
+		if (output_len < size - 1) {
+			/* copy sub string */
+			copy_len = (len < size - output_len) ? len : size - 1 - output_len;
+			if ((ptr + copy_len) > (context->data + context->maxsize)) {
+				tlog(TLOG_DEBUG, "length is not enough %u:%ld, %p, %p", context->maxsize, (long)(ptr - context->data),
+					 context->ptr, context->data);
+				return -1;
+			}
+			memcpy(output, ptr, copy_len);
+		}
+
+		ptr += len;
+		output += len;
+		output_len += len;
+	}
+
+	if (is_compressed == 0) {
+		context->ptr = ptr;
+	}
+
+	return 0;
+}
+
+static int _dns_encode_domain(struct dns_context *context, char *domain)
+{
+	int num = 0;
+	int total_len = 0;
+	unsigned char *ptr_num = context->ptr++;
+
+	/*[len]string[len]string...[0]0 */
+	while (_dns_left_len(context) > 1 && *domain != 0) {
+		if (*domain == '.') {
+			*ptr_num = num;
+			num = 0;
+			ptr_num = context->ptr;
+			domain++;
+			context->ptr++;
+			continue;
+		}
+		*context->ptr = *domain;
+		num++;
+		context->ptr++;
+		domain++;
+		total_len++;
+	}
+
+	*ptr_num = num;
+	if (total_len > 0) {
+		/* if domain is '\0', [domain] is '\0' */
+		*(context->ptr) = 0;
+		context->ptr++;
+	}
+	return 0;
+}
+
+static int _dns_decode_qr_head(struct dns_context *context, char *domain, int domain_size, int *qtype, int *qclass)
+{
+	int ret = 0;
+	/*
+	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                                               |
+	/                                               /
+	/                      NAME                     /
+	|                                               |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                      TYPE                     |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                     CLASS                     |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	*/
+	ret = _dns_decode_domain(context, domain, domain_size);
+	if (ret < 0) {
+		tlog(TLOG_DEBUG, "decode domain failed.");
+		return -1;
+	}
+
+	if (_dns_left_len(context) < 4) {
+		tlog(TLOG_DEBUG, "left length is not enough, %s.", domain);
+		return -1;
+	}
+
+	*qtype = _dns_read_short(&context->ptr);
+	*qclass = _dns_read_short(&context->ptr);
+
+	return 0;
+}
+
+static int _dns_encode_qr_head(struct dns_context *context, char *domain, int qtype, int qclass)
+{
+	int ret = 0;
+	ret = _dns_encode_domain(context, domain);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < 4) {
+		return -1;
+	}
+
+	_dns_write_short(&context->ptr, qtype);
+	_dns_write_short(&context->ptr, qclass);
+
+	return 0;
+}
+
+static int _dns_decode_rr_head(struct dns_context *context, char *domain, int domain_size, int *qtype, int *qclass,
+							   int *ttl, int *rr_len)
+{
+	int len = 0;
+
+	len = _dns_decode_qr_head(context, domain, domain_size, qtype, qclass);
+	if (len < 0) {
+		tlog(TLOG_DEBUG, "decode qr head failed.");
+		return -1;
+	}
+
+	if (_dns_left_len(context) < 6) {
+		tlog(TLOG_DEBUG, "left length is not enough.");
+		return -1;
+	}
+
+	*ttl = _dns_read_int(&context->ptr);
+	*rr_len = _dns_read_short(&context->ptr);
+
+	return 0;
+}
+
+static int _dns_encode_rr_head(struct dns_context *context, char *domain, int qtype, int qclass, int ttl, int rr_len)
+{
+	int ret = 0;
+	ret = _dns_encode_qr_head(context, domain, qtype, qclass);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < 6) {
+		return -1;
+	}
+
+	_dns_write_int(&context->ptr, ttl);
+	_dns_write_short(&context->ptr, rr_len);
+
+	return 0;
+}
+
+static int _dns_encode_raw(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	int qtype = 0;
+	int qclass = 0;
+	int ttl = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	int rr_len;
+	struct dns_data_context data_context;
+	/*
+	0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                                               |
+	/                                               /
+	/                      NAME                     /
+	|                                               |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                      TYPE                     |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                     CLASS                     |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                      TTL                      |
+	|                                               |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	|                   RDLENGTH                    |
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--|
+	/                     RDATA                     /
+	/                                               /
+	+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+	*/
+
+	data_context.data = rrs->data;
+	data_context.ptr = rrs->data;
+	data_context.maxsize = rrs->len;
+
+	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < rr_len) {
+		return -1;
+	}
+
+	memcpy(context->ptr, data_context.ptr, rr_len);
+	context->ptr += rr_len;
+	data_context.ptr += rr_len;
+
+	return 0;
+}
+
+static int _dns_decode_raw(struct dns_context *context, unsigned char *raw, int len)
+{
+	if (_dns_left_len(context) < len) {
+		return -1;
+	}
+
+	memcpy(raw, context->ptr, len);
+	context->ptr += len;
+	return 0;
+}
+
+static int _dns_decode_CNAME(struct dns_context *context, char *cname, int cname_size)
+{
+	int ret = 0;
+	ret = _dns_decode_domain(context, cname, cname_size);
+	if (ret < 0) {
+		return -1;
+	}
+
+	return 0;
+}
+
+static int _dns_encode_CNAME(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	int qtype = 0;
+	int qclass = 0;
+	int ttl = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	int rr_len;
+	struct dns_data_context data_context;
+
+	data_context.data = rrs->data;
+	data_context.ptr = rrs->data;
+	data_context.maxsize = rrs->len;
+
+	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	/* when code domain, len must plus 1, because of length at the begining */
+	rr_len++;
+	if (rr_len > rrs->len) {
+		return -1;
+	}
+
+	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_encode_domain(context, (char *)data_context.ptr);
+	if (ret < 0) {
+		return -1;
+	}
+
+	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
+
+	return 0;
+}
+
+static int _dns_decode_SOA(struct dns_context *context, struct dns_soa *soa)
+{
+	int ret = 0;
+	ret = _dns_decode_domain(context, soa->mname, DNS_MAX_CNAME_LEN - 1);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_decode_domain(context, soa->rname, DNS_MAX_CNAME_LEN - 1);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < 20) {
+		return -1;
+	}
+
+	soa->serial = _dns_read_int(&context->ptr);
+	soa->refresh = _dns_read_int(&context->ptr);
+	soa->retry = _dns_read_int(&context->ptr);
+	soa->expire = _dns_read_int(&context->ptr);
+	soa->minimum = _dns_read_int(&context->ptr);
+
+	return 0;
+}
+
+static int _dns_encode_SOA(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	int qtype = 0;
+	int qclass = 0;
+	int ttl = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	int rr_len;
+	struct dns_data_context data_context;
+
+	data_context.data = rrs->data;
+	data_context.ptr = rrs->data;
+	data_context.maxsize = rrs->len;
+
+	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	/* when code two domain, len must plus 2, because of length at the begining */
+	rr_len += 2;
+	if (rr_len > rrs->len) {
+		return -1;
+	}
+
+	ret = _dns_encode_rr_head(context, domain, qtype, qclass, ttl, rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	/* mname */
+	ret = _dns_encode_domain(context, (char *)data_context.ptr);
+	if (ret < 0) {
+		return -1;
+	}
+
+	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
+
+	/* rname */
+	ret = _dns_encode_domain(context, (char *)data_context.ptr);
+	if (ret < 0) {
+		return -1;
+	}
+
+	data_context.ptr += strnlen((char *)(data_context.ptr), DNS_MAX_CNAME_LEN) + 1;
+
+	if (_dns_left_len(context) < 20) {
+		return -1;
+	}
+
+	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
+	data_context.ptr += 4;
+	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
+	data_context.ptr += 4;
+	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
+	data_context.ptr += 4;
+	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
+	data_context.ptr += 4;
+	_dns_write_int(&context->ptr, *(unsigned int *)data_context.ptr);
+	data_context.ptr += 4;
+
+	return 0;
+}
+
+static int _dns_decode_opt_ecs(struct dns_context *context, struct dns_opt_ecs *ecs)
+{
+	// TODO
+
+	int len = 0;
+	if (_dns_left_len(context) < 4) {
+		return -1;
+	}
+
+	ecs->family = _dns_read_short(&context->ptr);
+	ecs->source_prefix = _dns_read_char(&context->ptr);
+	ecs->scope_prefix = _dns_read_char(&context->ptr);
+	len = (ecs->source_prefix / 8);
+	len += (ecs->source_prefix % 8 > 0) ? 1 : 0;
+
+	if (_dns_left_len(context) < len) {
+		return -1;
+	}
+
+	memcpy(ecs->addr, context->ptr, len);
+	context->ptr += len;
+
+	tlog(TLOG_DEBUG, "ECS: family:%d, source_prefix:%d, scope_prefix:%d, len:%d", ecs->family, ecs->source_prefix,
+		 ecs->scope_prefix, len);
+	tlog(TLOG_DEBUG, "%d.%d.%d.%d", ecs->addr[0], ecs->addr[1], ecs->addr[2], ecs->addr[3]);
+
+	return 0;
+}
+
+static int _dns_encode_OPT(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	int opt_code = 0;
+	int qclass = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	struct dns_data_context data_context;
+	int rr_len = 0;
+	int ttl;
+	struct dns_opt *dns_opt = NULL;
+
+	data_context.data = rrs->data;
+	data_context.ptr = rrs->data;
+	data_context.maxsize = rrs->len;
+
+	ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &opt_code, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (rr_len < sizeof(*dns_opt)) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < (rr_len)) {
+		return -1;
+	}
+
+	dns_opt = (struct dns_opt *)data_context.ptr;
+	_dns_write_short(&context->ptr, dns_opt->code);
+	_dns_write_short(&context->ptr, dns_opt->length);
+
+	if (_dns_left_len(context) < dns_opt->length) {
+		return -1;
+	}
+
+	memcpy(context->ptr, dns_opt->data, dns_opt->length);
+	context->ptr += dns_opt->length;
+
+	return 0;
+}
+
+static int _dns_get_opts_data_len(struct dns_packet *packet, struct dns_rrs *rrs, int count)
+{
+	int i = 0;
+	int len = 0;
+	int opt_code = 0;
+	int qclass = 0;
+	int ttl;
+	int ret;
+	char domain[DNS_MAX_CNAME_LEN];
+	struct dns_data_context data_context;
+	int rr_len = 0;
+
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		data_context.data = rrs->data;
+		data_context.ptr = rrs->data;
+		data_context.maxsize = rrs->len;
+
+		ret = _dns_get_rr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &opt_code, &qclass, &ttl, &rr_len);
+		if (ret < 0) {
+			return -1;
+		}
+
+		len += rr_len;
+	}
+
+	return len;
+}
+
+static int _dns_encode_opts(struct dns_packet *packet, struct dns_context *context, struct dns_rrs *rrs, int count)
+{
+	int i = 0;
+	int len = 0;
+	int ret = 0;
+	unsigned int rcode = 0;
+	int rr_len = 0;
+	int payloadsize = packet->payloadsize;
+
+	rr_len = _dns_get_opts_data_len(packet, rrs, count);
+	if (rr_len < 0) {
+		return -1;
+	}
+
+	if (payloadsize < DNS_DEFAULT_PACKET_SIZE) {
+		payloadsize = DNS_DEFAULT_PACKET_SIZE;
+	}
+
+	ret = _dns_encode_rr_head(context, "", DNS_T_OPT, payloadsize, rcode, rr_len);
+	if (ret < 0) {
+		return -1;
+	}
+
+	if (_dns_left_len(context) < rr_len) {
+		return -1;
+	}
+
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		len = _dns_encode_OPT(context, rrs);
+		if (len < 0) {
+			return -1;
+		}
+	}
+
+	return 0;
+}
+
+static int _dns_decode_opt(struct dns_context *context, dns_rr_type type, unsigned int ttl, int rr_len)
+{
+	unsigned short opt_code;
+	unsigned short opt_len;
+	unsigned short ercode = (ttl >> 16) & 0xFFFF;
+	unsigned short ever = (ttl)&0xFFFF;
+	unsigned char *start = context->ptr;
+	struct dns_packet *packet = context->packet;
+	int ret = 0;
+
+	UNUSED(ever);
+
+	/*
+		 Field Name   Field Type     Description
+	 ------------------------------------------------------
+	 NAME         domain name    empty (root domain)
+	 TYPE         u_int16_t      OPT
+	 CLASS        u_int16_t      sender's UDP payload size
+	 TTL          u_int32_t      extended RCODE and flags
+	 RDLEN        u_int16_t      describes RDATA
+	 RDATA        octet stream   {attribute,value} pairs
+
+					 +0 (MSB)                            +1 (LSB)
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  0: |                          OPTION-CODE                          |
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  2: |                         OPTION-LENGTH                         |
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+  4: |                                                               |
+	 /                          OPTION-DATA                          /
+	 /                                                               /
+	 +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+
+	TTL
+				 +0 (MSB)                            +1 (LSB)
+	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+   0: |         EXTENDED-RCODE        |            VERSION            |
+	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+   2: |                               Z                               |
+	  +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+	*/
+
+	if (ercode != 0) {
+		tlog(TLOG_ERROR, "extend rcode invalid.");
+		return -1;
+	}
+
+	while (context->ptr - start < rr_len) {
+		if (_dns_left_len(context) < 4) {
+			return -1;
+		}
+		opt_code = _dns_read_short(&context->ptr);
+		opt_len = _dns_read_short(&context->ptr);
+
+		if (_dns_left_len(context) < opt_len) {
+			tlog(TLOG_ERROR, "read opt data failed, opt_code = %d, opt_le = %d", opt_code, opt_len);
+			return -1;
+		}
+
+		tlog(TLOG_DEBUG, "opt type %d", opt_code);
+		switch (opt_code) {
+		case DNS_OPT_T_ECS: {
+			struct dns_opt_ecs ecs;
+			ret = _dns_decode_opt_ecs(context, &ecs);
+			if (ret != 0) {
+				tlog(TLOG_ERROR, "decode ecs failed.");
+				return -1;
+			}
+
+			ret = dns_add_OPT_ECS(packet, &ecs);
+			if (ret != 0) {
+				tlog(TLOG_ERROR, "add ecs failed.");
+				return -1;
+			}
+		} break;
+		default:
+			context->ptr += opt_len;
+			tlog(TLOG_DEBUG, "DNS opt type = %d not supported", opt_code);
+			break;
+		}
+	}
+
+	return 0;
+}
+
+static int _dns_decode_qd(struct dns_context *context)
+{
+	struct dns_packet *packet = context->packet;
+	int len;
+	int qtype = 0;
+	int qclass = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+
+	len = _dns_decode_qr_head(context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass);
+	if (len < 0) {
+		return -1;
+	}
+
+	len = dns_add_domain(packet, domain, qtype, qclass);
+	if (len < 0) {
+		return -1;
+	}
+
+	return 0;
+}
+
+static int _dns_decode_an(struct dns_context *context, dns_rr_type type)
+{
+	int ret;
+	int qtype = 0;
+	int qclass = 0;
+	int ttl;
+	int rr_len = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	struct dns_packet *packet = context->packet;
+	unsigned char *start;
+
+	/* decode rr head */
+	ret = _dns_decode_rr_head(context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass, &ttl, &rr_len);
+	if (ret < 0) {
+		tlog(TLOG_DEBUG, "decode head failed.");
+		return -1;
+	}
+	start = context->ptr;
+
+	/* decode answer */
+	switch (qtype) {
+	case DNS_T_A: {
+		unsigned char addr[DNS_RR_A_LEN];
+		ret = _dns_decode_raw(context, addr, sizeof(addr));
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode A failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_A(packet, type, domain, ttl, addr);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add A failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_CNAME: {
+		char cname[DNS_MAX_CNAME_LEN];
+		ret = _dns_decode_CNAME(context, cname, DNS_MAX_CNAME_LEN);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode CNAME failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_CNAME(packet, type, domain, ttl, cname);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add CNAME failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_SOA: {
+		struct dns_soa soa;
+		ret = _dns_decode_SOA(context, &soa);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode CNAME failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_SOA(packet, type, domain, ttl, &soa);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add CNAME failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_NS: {
+		char ns[DNS_MAX_CNAME_LEN];
+		ret = _dns_decode_CNAME(context, ns, DNS_MAX_CNAME_LEN);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode NS failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_NS(packet, type, domain, ttl, ns);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add NS failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_PTR: {
+		char name[DNS_MAX_CNAME_LEN];
+		ret = _dns_decode_CNAME(context, name, DNS_MAX_CNAME_LEN);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode PTR failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_PTR(packet, type, domain, ttl, name);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add PTR failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_AAAA: {
+		unsigned char addr[DNS_RR_AAAA_LEN];
+		ret = _dns_decode_raw(context, addr, sizeof(addr));
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode AAAA failed, %s", domain);
+			return -1;
+		}
+
+		ret = dns_add_AAAA(packet, type, domain, ttl, addr);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "add AAAA failed, %s", domain);
+			return -1;
+		}
+	} break;
+	case DNS_T_OPT: {
+		unsigned char *opt_start = context->ptr;
+		ret = _dns_decode_opt(context, type, ttl, rr_len);
+		if (ret < 0) {
+			tlog(TLOG_ERROR, "decode opt failed, %s", domain);
+			return -1;
+		}
+
+		if (context->ptr - opt_start != rr_len) {
+			tlog(TLOG_ERROR, "opt length mitchmatch, %s\n", domain);
+			return -1;
+		}
+
+		dns_set_OPT_payload_size(packet, qclass);
+	} break;
+	default:
+		if (_dns_left_len(context) < rr_len) {
+			tlog(TLOG_DEBUG, "length mitchmatch\n");
+			return -1;
+		}
+		context->ptr += rr_len;
+		tlog(TLOG_DEBUG, "DNS type = %d not supported", qtype);
+		break;
+	}
+
+	if (context->ptr - start != rr_len) {
+		tlog(TLOG_ERROR, "length mitchmatch , %s, %ld:%d", domain, (long)(context->ptr - start), rr_len);
+		return -1;
+	}
+
+	return 0;
+}
+
+static int _dns_encode_qd(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	int qtype = 0;
+	int qclass = 0;
+	char domain[DNS_MAX_CNAME_LEN];
+	struct dns_data_context data_context;
+
+	data_context.data = rrs->data;
+	data_context.ptr = rrs->data;
+	data_context.maxsize = rrs->len;
+
+	ret = _dns_get_qr_head(&data_context, domain, DNS_MAX_CNAME_LEN, &qtype, &qclass);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_encode_qr_head(context, domain, qtype, qclass);
+	if (ret < 0) {
+		return -1;
+	}
+
+	return 0;
+}
+
+static int _dns_encode_an(struct dns_context *context, struct dns_rrs *rrs)
+{
+	int ret;
+	switch (rrs->type) {
+	case DNS_T_A:
+	case DNS_T_AAAA: {
+		ret = _dns_encode_raw(context, rrs);
+		if (ret < 0) {
+			return -1;
+		}
+	} break;
+	case DNS_T_CNAME:
+	case DNS_T_PTR:
+		ret = _dns_encode_CNAME(context, rrs);
+		if (ret < 0) {
+			return -1;
+		}
+		break;
+	case DNS_T_SOA:
+		ret = _dns_encode_SOA(context, rrs);
+		if (ret < 0) {
+			return -1;
+		}
+		break;
+	default:
+		break;
+	}
+
+	return 0;
+}
+
+static int _dns_decode_body(struct dns_context *context)
+{
+	struct dns_packet *packet = context->packet;
+	struct dns_head *head = &packet->head;
+	int i = 0;
+	int ret = 0;
+	int count = 0;
+
+	count = head->qdcount;
+	head->qdcount = 0;
+	for (i = 0; i < count; i++) {
+		ret = _dns_decode_qd(context);
+		if (ret < 0) {
+			tlog(TLOG_DEBUG, "decode qd failed.");
+			return -1;
+		}
+	}
+
+	count = head->ancount;
+	head->ancount = 0;
+	for (i = 0; i < count; i++) {
+		ret = _dns_decode_an(context, DNS_RRS_AN);
+		if (ret < 0) {
+			tlog(TLOG_DEBUG, "decode an failed.");
+			return -1;
+		}
+	}
+
+	count = head->nscount;
+	head->nscount = 0;
+	for (i = 0; i < count; i++) {
+		ret = _dns_decode_an(context, DNS_RRS_NS);
+		if (ret < 0) {
+			tlog(TLOG_DEBUG, "decode ns failed.");
+			return -1;
+		}
+	}
+
+	count = head->nrcount;
+	head->nrcount = 0;
+	for (i = 0; i < count; i++) {
+		ret = _dns_decode_an(context, DNS_RRS_NR);
+		if (ret < 0) {
+			tlog(TLOG_DEBUG, "decode nr failed.");
+			return -1;
+		}
+	}
+
+	return 0;
+}
+
+static int _dns_encode_body(struct dns_context *context)
+{
+	struct dns_packet *packet = context->packet;
+	struct dns_head *head = &packet->head;
+	int i = 0;
+	int len = 0;
+	struct dns_rrs *rrs;
+	int count;
+
+	rrs = dns_get_rrs_start(packet, DNS_RRS_QD, &count);
+	head->qdcount = count;
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		len = _dns_encode_qd(context, rrs);
+		if (len < 0) {
+			return -1;
+		}
+	}
+
+	rrs = dns_get_rrs_start(packet, DNS_RRS_AN, &count);
+	head->ancount = count;
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		len = _dns_encode_an(context, rrs);
+		if (len < 0) {
+			return -1;
+		}
+	}
+
+	rrs = dns_get_rrs_start(packet, DNS_RRS_NS, &count);
+	head->nscount = count;
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		len = _dns_encode_an(context, rrs);
+		if (len < 0) {
+			return -1;
+		}
+	}
+
+	rrs = dns_get_rrs_start(packet, DNS_RRS_NR, &count);
+	head->nrcount = count;
+	for (i = 0; i < count && rrs; i++, rrs = dns_get_rrs_next(packet, rrs)) {
+		len = _dns_encode_an(context, rrs);
+		if (len < 0) {
+			return -1;
+		}
+	}
+
+	rrs = dns_get_rrs_start(packet, DNS_RRS_OPT, &count);
+	if (count > 0 || packet->payloadsize > 0) {
+		len = _dns_encode_opts(packet, context, rrs, count);
+		if (len < 0) {
+			return -1;
+		}
+		head->nrcount++;
+	}
+
+	return 0;
+}
+
+int dns_packet_init(struct dns_packet *packet, int size, struct dns_head *head)
+{
+	struct dns_head *init_head = &packet->head;
+	if (size < sizeof(*packet)) {
+		return -1;
+	}
+
+	memset(packet, 0, size);
+	packet->size = size;
+	init_head->id = head->id;
+	init_head->qr = head->qr;
+	init_head->opcode = head->opcode;
+	init_head->aa = head->aa;
+	init_head->tc = head->tc;
+	init_head->rd = head->rd;
+	init_head->ra = head->ra;
+	init_head->rcode = head->rcode;
+	packet->questions = DNS_RR_END;
+	packet->answers = DNS_RR_END;
+	packet->nameservers = DNS_RR_END;
+	packet->additional = DNS_RR_END;
+	packet->optional = DNS_RR_END;
+	packet->optcount = 0;
+	packet->payloadsize = 0;
+
+	return 0;
+}
+
+int dns_decode(struct dns_packet *packet, int maxsize, unsigned char *data, int size)
+{
+	struct dns_head *head = &packet->head;
+	struct dns_context context;
+	int ret = 0;
+
+	memset(&context, 0, sizeof(context));
+	memset(packet, 0, sizeof(*packet));
+
+	context.data = data;
+	context.packet = packet;
+	context.ptr = data;
+	context.maxsize = size;
+
+	ret = dns_packet_init(packet, maxsize, head);
+	if (ret != 0) {
+		return -1;
+	}
+
+	ret = _dns_decode_head(&context);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_decode_body(&context);
+	if (ret < 0) {
+		tlog(TLOG_DEBUG, "decode body failed.\n");
+		return -1;
+	}
+
+	return 0;
+}
+
+int dns_encode(unsigned char *data, int size, struct dns_packet *packet)
+{
+	int ret = 0;
+	struct dns_context context;
+
+	memset(&context, 0, sizeof(context));
+	context.data = data;
+	context.packet = packet;
+	context.ptr = data;
+	context.maxsize = size;
+
+	ret = _dns_encode_head(&context);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_encode_body(&context);
+	if (ret < 0) {
+		return -1;
+	}
+
+	ret = _dns_encode_head_count(&context);
+	if (ret < 0) {
+		return -1;
+	}
+
+	return context.ptr - context.data;
+}
+
+#if 0
+static void dns_debug(void)
+{
+	unsigned char data[1024];
+	int len;
+	char buff[4096];
+
+	int fd = open("dns.bin", O_RDWR);
+	if (fd < 0) {
+		return;
+	}
+	len = read(fd, data, 1024);
+	close(fd);
+	if (len < 0) {
+		return;
+	}
+
+	struct dns_packet *packet = (struct dns_packet *)buff;
+	if (dns_decode(packet, 4096, data, len) != 0) {
+		tlog(TLOG_ERROR, "decode failed.\n");
+	}
+
+	memset(data, 0, sizeof(data));
+	len = dns_encode(data, 1024, packet);
+	if (len < 0) {
+		tlog(TLOG_ERROR, "encode failed.");
+	}
+
+	fd = open("dns-cmp.bin", O_CREAT | O_TRUNC | O_RDWR);
+	write(fd, data, len);
+	close(fd);
+}
+#endif
diff --git a/release/src/router/smartdns/src/dns.h b/release/src/router/smartdns/src/dns.h
index 9b59dd4468..366050b5f0 100644
--- a/release/src/router/smartdns/src/dns.h
+++ b/release/src/router/smartdns/src/dns.h
@@ -44,7 +44,10 @@ typedef enum dns_rr_type {
 	DNS_RRS_END,
 } dns_rr_type;
 
-typedef enum dns_class { DNS_C_IN = 1, DNS_C_ANY = 255 } dns_class_t;
+typedef enum dns_class {
+	DNS_C_IN = 1, // DNS C IN
+	DNS_C_ANY = 255
+} dns_class_t;
 
 typedef enum dns_type {
 	DNS_T_A = 1,
@@ -63,10 +66,10 @@ typedef enum dns_type {
 	DNS_T_ALL = 255
 } dns_type_t;
 
-typedef enum dns_opt_code { 
-	DNS_OPT_T_ECS = 8, 
+typedef enum dns_opt_code {
+	DNS_OPT_T_ECS = 8, // OPT ECS
 	DNS_OPT_T_TCP_KEEPALIVE = 11,
-	DNS_OPT_T_ALL = 255 
+	DNS_OPT_T_ALL = 255
 } dns_opt_code_t;
 
 typedef enum dns_opcode {
@@ -196,7 +199,8 @@ int dns_get_A(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned
 int dns_add_PTR(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, char *cname);
 int dns_get_PTR(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, char *cname, int cname_size);
 
-int dns_add_AAAA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, unsigned char addr[DNS_RR_AAAA_LEN]);
+int dns_add_AAAA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl,
+				 unsigned char addr[DNS_RR_AAAA_LEN]);
 int dns_get_AAAA(struct dns_rrs *rrs, char *domain, int maxsize, int *ttl, unsigned char addr[DNS_RR_AAAA_LEN]);
 
 int dns_add_SOA(struct dns_packet *packet, dns_rr_type type, char *domain, int ttl, struct dns_soa *soa);
@@ -212,7 +216,8 @@ int dns_add_OPT_ECS(struct dns_packet *packet, struct dns_opt_ecs *ecs);
 int dns_get_OPT_ECS(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, struct dns_opt_ecs *ecs);
 
 int dns_add_OPT_TCP_KEEYALIVE(struct dns_packet *packet, unsigned short timeout);
-int dns_get_OPT_TCP_KEEYALIVE(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len, unsigned short *timeout);
+int dns_get_OPT_TCP_KEEYALIVE(struct dns_rrs *rrs, unsigned short *opt_code, unsigned short *opt_len,
+							  unsigned short *timeout);
 /*
  * Packet operation
  */
diff --git a/release/src/router/smartdns/src/dns_cache.c b/release/src/router/smartdns/src/dns_cache.c
index 679d1bd605..c495623980 100644
--- a/release/src/router/smartdns/src/dns_cache.c
+++ b/release/src/router/smartdns/src/dns_cache.c
@@ -1,386 +1,452 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "dns_cache.h"
-#include "stringutil.h"
-#include "tlog.h"
-#include <pthread.h>
-
-#define DNS_CACHE_MAX_HITNUM 5000
-#define DNS_CACHE_HITNUM_STEP 2
-#define DNS_CACHE_HITNUM_STEP_MAX 6
-
-struct dns_cache_head {
-	DECLARE_HASHTABLE(cache_hash, 10);
-	struct list_head cache_list;
-	atomic_t num;
-	int size;
-	pthread_mutex_t lock;
-};
-
-static struct dns_cache_head dns_cache_head;
-
-int dns_cache_init(int size)
-{
-	INIT_LIST_HEAD(&dns_cache_head.cache_list);
-	hash_init(dns_cache_head.cache_hash);
-	atomic_set(&dns_cache_head.num, 0);
-	dns_cache_head.size = size;
-
-	pthread_mutex_init(&dns_cache_head.lock, NULL);
-
-	return 0;
-}
-
-static __attribute__((unused)) struct dns_cache *_dns_cache_last(void)
-{
-	return list_last_entry(&dns_cache_head.cache_list, struct dns_cache, list);
-}
-
-static struct dns_cache *_dns_cache_first(void)
-{
-	return list_first_entry_or_null(&dns_cache_head.cache_list, struct dns_cache, list);
-}
-
-static void _dns_cache_delete(struct dns_cache *dns_cache)
-{
-	hash_del(&dns_cache->node);
-	list_del_init(&dns_cache->list);
-	atomic_dec(&dns_cache_head.num);
-	free(dns_cache);
-}
-
-void dns_cache_get(struct dns_cache *dns_cache)
-{
-	if (atomic_inc_return(&dns_cache->ref) == 1) {
-		tlog(TLOG_ERROR, "BUG: dns_cache is invalid.");
-		return;
-	}
-}
-
-void dns_cache_release(struct dns_cache *dns_cache)
-{
-	if (dns_cache == NULL) {
-		return;
-	}
-	if (!atomic_dec_and_test(&dns_cache->ref)) {
-		return;
-	}
-
-	_dns_cache_delete(dns_cache);
-}
-
-static void _dns_cache_remove(struct dns_cache *dns_cache)
-{
-	hash_del(&dns_cache->node);
-	list_del_init(&dns_cache->list);
-	dns_cache_release(dns_cache);
-}
-
-int dns_cache_replace(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr, int addr_len, int speed)
-{
-	struct dns_cache *dns_cache = NULL;
-
-	if (dns_cache_head.size <= 0) {
-		return 0;
-	}
-
-	/* lookup existing cache */
-	dns_cache = dns_cache_lookup(domain, qtype);
-	if (dns_cache == NULL) {
-		return 0;
-	}
-
-	if (ttl < DNS_CACHE_TTL_MIN) {
-		ttl = DNS_CACHE_TTL_MIN;
-	}
-
-	/* update cache data */
-	pthread_mutex_lock(&dns_cache_head.lock);
-	dns_cache->ttl = ttl;
-	dns_cache->qtype = qtype;
-	dns_cache->ttl = ttl;
-	dns_cache->del_pending = 0;
-	dns_cache->speed = speed;
-	time(&dns_cache->insert_time);
-	if (qtype == DNS_T_A) {
-		if (addr_len != DNS_RR_A_LEN) {
-			goto errout_unlock;
-		}
-		memcpy(dns_cache->addr, addr, DNS_RR_A_LEN);
-	} else if (qtype == DNS_T_AAAA) {
-		if (addr_len != DNS_RR_AAAA_LEN) {
-			goto errout_unlock;
-		}
-		memcpy(dns_cache->addr, addr, DNS_RR_AAAA_LEN);
-	} else {
-		goto errout_unlock;
-	}
-
-	if (cname) {
-		safe_strncpy(dns_cache->cname, cname, DNS_MAX_CNAME_LEN);
-		dns_cache->cname_ttl = cname_ttl;
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	dns_cache_release(dns_cache);
-	return 0;
-errout_unlock:
-	pthread_mutex_unlock(&dns_cache_head.lock);
-// errout:
-	if (dns_cache) {
-		dns_cache_release(dns_cache);
-	}
-	return -1;
-}
-
-int dns_cache_insert(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr, int addr_len, int speed)
-{
-	uint32_t key = 0;
-	struct dns_cache *dns_cache = NULL;
-
-	if (dns_cache_head.size <= 0) {
-		return 0;
-	}
-
-	/* if cache already exists, free */
-	dns_cache = dns_cache_lookup(domain, qtype);
-	if (dns_cache) {
-		dns_cache_delete(dns_cache);
-		dns_cache_release(dns_cache);
-		dns_cache = NULL;
-	}
-
-	dns_cache = malloc(sizeof(*dns_cache));
-	if (dns_cache == NULL) {
-		goto errout;
-	}
-
-	if (ttl < DNS_CACHE_TTL_MIN) {
-		ttl = DNS_CACHE_TTL_MIN;
-	}
-
-	key = hash_string(domain);
-	key = jhash(&qtype, sizeof(qtype), key);
-	safe_strncpy(dns_cache->domain, domain, DNS_MAX_CNAME_LEN);
-	dns_cache->cname[0] = 0;
-	dns_cache->qtype = qtype;
-	dns_cache->ttl = ttl;
-	atomic_set(&dns_cache->hitnum, 3);
-	dns_cache->hitnum_update_add = DNS_CACHE_HITNUM_STEP;
-	dns_cache->del_pending = 0;
-	dns_cache->speed = speed;
-	atomic_set(&dns_cache->ref, 1);
-	time(&dns_cache->insert_time);
-	if (qtype == DNS_T_A) {
-		if (addr_len != DNS_RR_A_LEN) {
-			goto errout;
-		}
-		memcpy(dns_cache->addr, addr, DNS_RR_A_LEN);
-	} else if (qtype == DNS_T_AAAA) {
-		if (addr_len != DNS_RR_AAAA_LEN) {
-			goto errout;
-		}
-		memcpy(dns_cache->addr, addr, DNS_RR_AAAA_LEN);
-	} else {
-		goto errout;
-	}
-
-	if (cname) {
-		safe_strncpy(dns_cache->cname, cname, DNS_MAX_CNAME_LEN);
-		dns_cache->cname_ttl = cname_ttl;
-	}
-
-	pthread_mutex_lock(&dns_cache_head.lock);
-	hash_add(dns_cache_head.cache_hash, &dns_cache->node, key);
-	list_add_tail(&dns_cache->list, &dns_cache_head.cache_list);
-	INIT_LIST_HEAD(&dns_cache->check_list);
-
-	/* Release extra cache, remove oldest cache record */
-	if (atomic_inc_return(&dns_cache_head.num) > dns_cache_head.size) {
-		struct dns_cache *del_cache;
-		del_cache = _dns_cache_first();
-		if (del_cache) {
-			_dns_cache_remove(del_cache);
-		}
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	return 0;
-errout:
-	if (dns_cache) {
-		free(dns_cache);
-	}
-
-	return -1;
-}
-
-struct dns_cache *dns_cache_lookup(char *domain, dns_type_t qtype)
-{
-	uint32_t key = 0;
-	struct dns_cache *dns_cache = NULL;
-	struct dns_cache *dns_cache_ret = NULL;
-	time_t now;
-
-	if (dns_cache_head.size <= 0) {
-		return NULL;
-	}
-
-	key = hash_string(domain);
-	key = jhash(&qtype, sizeof(qtype), key);
-
-	time(&now);
-	/* find cache */
-	pthread_mutex_lock(&dns_cache_head.lock);
-	hash_for_each_possible(dns_cache_head.cache_hash, dns_cache, node, key)
-	{
-		if (dns_cache->qtype != qtype) {
-			continue;
-		}
-
-		if (strncmp(domain, dns_cache->domain, DNS_MAX_CNAME_LEN) != 0) {
-			continue;
-		}
-
-		dns_cache_ret = dns_cache;
-		break;
-	}
-
-	if (dns_cache_ret) {
-		/* Return NULL if the cache times out */
-		if (now - dns_cache_ret->insert_time > dns_cache_ret->ttl) {
-			_dns_cache_remove(dns_cache_ret);
-			dns_cache_ret = NULL;
-		} else {
-			dns_cache_get(dns_cache_ret);
-		}
-	}
-
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	return dns_cache_ret;
-}
-
-int dns_cache_get_ttl(struct dns_cache *dns_cache)
-{
-	time_t now;
-	int ttl = 0;
-	time(&now);
-
-	ttl = dns_cache->insert_time + dns_cache->ttl - now;
-	if (ttl < 0) {
-		return 0;
-	}
-
-	return ttl;
-}
-
-void dns_cache_delete(struct dns_cache *dns_cache)
-{
-	pthread_mutex_lock(&dns_cache_head.lock);
-	_dns_cache_remove(dns_cache);
-	pthread_mutex_unlock(&dns_cache_head.lock);
-}
-
-int dns_cache_hitnum_dec_get(struct dns_cache *dns_cache)
-{
-	int hitnum = 0;
-	pthread_mutex_lock(&dns_cache_head.lock);
-	hitnum = atomic_dec_return(&dns_cache->hitnum);
-	if (dns_cache->hitnum_update_add > DNS_CACHE_HITNUM_STEP) {
-		dns_cache->hitnum_update_add--;
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	return hitnum;
-}
-
-void dns_cache_update(struct dns_cache *dns_cache)
-{
-	pthread_mutex_lock(&dns_cache_head.lock);
-	if (!list_empty(&dns_cache->list)) {
-		list_del_init(&dns_cache->list);
-		list_add_tail(&dns_cache->list, &dns_cache_head.cache_list);
-		atomic_add(dns_cache->hitnum_update_add, &dns_cache->hitnum);
-		if (atomic_read(&dns_cache->hitnum) > DNS_CACHE_MAX_HITNUM) {
-			atomic_set(&dns_cache->hitnum, DNS_CACHE_MAX_HITNUM);
-		}
-
-		if (dns_cache->hitnum_update_add < DNS_CACHE_HITNUM_STEP_MAX) {
-			dns_cache->hitnum_update_add++;
-		}
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-}
-
-void dns_cache_invalidate(dns_cache_preinvalid_callback callback, int ttl_pre)
-{
-	struct dns_cache *dns_cache = NULL;
-	struct dns_cache *tmp;
-	time_t now;
-	int ttl = 0;
-	LIST_HEAD(checklist);
-
-	if (dns_cache_head.size <= 0) {
-		return;
-	}
-
-	time(&now);
-	pthread_mutex_lock(&dns_cache_head.lock);
-	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.cache_list, list)
-	{
-		ttl = dns_cache->insert_time + dns_cache->ttl - now;
-		if (ttl > 0 && ttl < ttl_pre) {
-			/* If the TTL time is in the pre-timeout range, call callback function */
-			if (callback && dns_cache->del_pending == 0) {
-				list_add_tail(&dns_cache->check_list, &checklist);
-				dns_cache_get(dns_cache);
-				dns_cache->del_pending = 1;
-				continue;
-			}
-		}
-
-		if (ttl < 0) {
-			_dns_cache_remove(dns_cache);
-		}
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	list_for_each_entry_safe(dns_cache, tmp, &checklist, check_list)
-	{
-		/* run callback */
-		if (callback) {
-			callback(dns_cache);
-		}
-		dns_cache_release(dns_cache);
-	}
-}
-
-void dns_cache_destroy(void)
-{
-	struct dns_cache *dns_cache = NULL;
-	struct dns_cache *tmp;
-	pthread_mutex_lock(&dns_cache_head.lock);
-	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.cache_list, list)
-	{
-		_dns_cache_delete(dns_cache);
-	}
-	pthread_mutex_unlock(&dns_cache_head.lock);
-
-	pthread_mutex_destroy(&dns_cache_head.lock);
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "dns_cache.h"
+#include "stringutil.h"
+#include "tlog.h"
+#include <pthread.h>
+
+#define DNS_CACHE_MAX_HITNUM 5000
+#define DNS_CACHE_HITNUM_STEP 2
+#define DNS_CACHE_HITNUM_STEP_MAX 6
+
+struct dns_cache_head {
+	DECLARE_HASHTABLE(cache_hash, 10);
+	struct list_head cache_list;
+	struct list_head inactive_list;
+	atomic_t num;
+	int size;
+	int enable_inactive;
+	int inactive_list_expired;
+	pthread_mutex_t lock;
+};
+
+static struct dns_cache_head dns_cache_head;
+
+int dns_cache_init(int size, int enable_inactive, int inactive_list_expired)
+{
+	INIT_LIST_HEAD(&dns_cache_head.cache_list);
+	INIT_LIST_HEAD(&dns_cache_head.inactive_list);
+	hash_init(dns_cache_head.cache_hash);
+	atomic_set(&dns_cache_head.num, 0);
+	dns_cache_head.size = size;
+	dns_cache_head.enable_inactive = enable_inactive;
+	dns_cache_head.inactive_list_expired = inactive_list_expired;
+
+	pthread_mutex_init(&dns_cache_head.lock, NULL);
+
+	return 0;
+}
+
+static __attribute__((unused)) struct dns_cache *_dns_cache_last(void)
+{
+	struct dns_cache *dns_cache = NULL;
+
+	dns_cache = list_last_entry(&dns_cache_head.inactive_list, struct dns_cache, list);
+	if (dns_cache) {
+		return dns_cache;
+	}
+
+	return list_last_entry(&dns_cache_head.cache_list, struct dns_cache, list);
+}
+
+static struct dns_cache *_dns_cache_first(void)
+{
+	struct dns_cache *dns_cache = NULL;
+
+	dns_cache = list_first_entry_or_null(&dns_cache_head.inactive_list, struct dns_cache, list);
+	if (dns_cache) {
+		return dns_cache;
+	}
+
+	return list_first_entry_or_null(&dns_cache_head.cache_list, struct dns_cache, list);
+}
+
+static void _dns_cache_delete(struct dns_cache *dns_cache)
+{
+	hash_del(&dns_cache->node);
+	list_del_init(&dns_cache->list);
+	atomic_dec(&dns_cache_head.num);
+	free(dns_cache);
+}
+
+void dns_cache_get(struct dns_cache *dns_cache)
+{
+	if (atomic_inc_return(&dns_cache->ref) == 1) {
+		tlog(TLOG_ERROR, "BUG: dns_cache is invalid.");
+		return;
+	}
+}
+
+void dns_cache_release(struct dns_cache *dns_cache)
+{
+	if (dns_cache == NULL) {
+		return;
+	}
+	if (!atomic_dec_and_test(&dns_cache->ref)) {
+		return;
+	}
+
+	_dns_cache_delete(dns_cache);
+}
+
+static void _dns_cache_remove(struct dns_cache *dns_cache)
+{
+	hash_del(&dns_cache->node);
+	list_del_init(&dns_cache->list);
+	dns_cache_release(dns_cache);
+}
+
+static void _dns_cache_move_inactive(struct dns_cache *dns_cache)
+{
+	list_del_init(&dns_cache->list);
+	list_add_tail(&dns_cache->list, &dns_cache_head.inactive_list);
+}
+
+int dns_cache_replace(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr,
+					  int addr_len, int speed)
+{
+	struct dns_cache *dns_cache = NULL;
+
+	if (dns_cache_head.size <= 0) {
+		return 0;
+	}
+
+	/* lookup existing cache */
+	dns_cache = dns_cache_lookup(domain, qtype);
+	if (dns_cache == NULL) {
+		return 0;
+	}
+
+	if (ttl < DNS_CACHE_TTL_MIN) {
+		ttl = DNS_CACHE_TTL_MIN;
+	}
+
+	/* update cache data */
+	pthread_mutex_lock(&dns_cache_head.lock);
+	dns_cache->ttl = ttl;
+	dns_cache->qtype = qtype;
+	dns_cache->ttl = ttl;
+	dns_cache->del_pending = 0;
+	dns_cache->speed = speed;
+	time(&dns_cache->insert_time);
+	if (qtype == DNS_T_A) {
+		if (addr_len != DNS_RR_A_LEN) {
+			goto errout_unlock;
+		}
+		memcpy(dns_cache->addr, addr, DNS_RR_A_LEN);
+	} else if (qtype == DNS_T_AAAA) {
+		if (addr_len != DNS_RR_AAAA_LEN) {
+			goto errout_unlock;
+		}
+		memcpy(dns_cache->addr, addr, DNS_RR_AAAA_LEN);
+	} else {
+		goto errout_unlock;
+	}
+
+	if (cname) {
+		safe_strncpy(dns_cache->cname, cname, DNS_MAX_CNAME_LEN);
+		dns_cache->cname_ttl = cname_ttl;
+	}
+
+	list_del_init(&dns_cache->list);
+	list_add_tail(&dns_cache->list, &dns_cache_head.cache_list);
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	dns_cache_release(dns_cache);
+	return 0;
+errout_unlock:
+	pthread_mutex_unlock(&dns_cache_head.lock);
+	// errout:
+	if (dns_cache) {
+		dns_cache_release(dns_cache);
+	}
+	return -1;
+}
+
+int dns_cache_insert(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr,
+					 int addr_len, int speed)
+{
+	uint32_t key = 0;
+	struct dns_cache *dns_cache = NULL;
+
+	if (dns_cache_head.size <= 0) {
+		return 0;
+	}
+
+	/* if cache already exists, free */
+	dns_cache = dns_cache_lookup(domain, qtype);
+	if (dns_cache) {
+		dns_cache_delete(dns_cache);
+		dns_cache_release(dns_cache);
+		dns_cache = NULL;
+	}
+
+	dns_cache = malloc(sizeof(*dns_cache));
+	if (dns_cache == NULL) {
+		goto errout;
+	}
+
+	if (ttl < DNS_CACHE_TTL_MIN) {
+		ttl = DNS_CACHE_TTL_MIN;
+	}
+
+	key = hash_string(domain);
+	key = jhash(&qtype, sizeof(qtype), key);
+	safe_strncpy(dns_cache->domain, domain, DNS_MAX_CNAME_LEN);
+	dns_cache->cname[0] = 0;
+	dns_cache->qtype = qtype;
+	dns_cache->ttl = ttl;
+	atomic_set(&dns_cache->hitnum, 3);
+	dns_cache->hitnum_update_add = DNS_CACHE_HITNUM_STEP;
+	dns_cache->del_pending = 0;
+	dns_cache->speed = speed;
+	atomic_set(&dns_cache->ref, 1);
+	time(&dns_cache->insert_time);
+	if (qtype == DNS_T_A) {
+		if (addr_len != DNS_RR_A_LEN) {
+			goto errout;
+		}
+		memcpy(dns_cache->addr, addr, DNS_RR_A_LEN);
+	} else if (qtype == DNS_T_AAAA) {
+		if (addr_len != DNS_RR_AAAA_LEN) {
+			goto errout;
+		}
+		memcpy(dns_cache->addr, addr, DNS_RR_AAAA_LEN);
+	} else {
+		goto errout;
+	}
+
+	if (cname) {
+		safe_strncpy(dns_cache->cname, cname, DNS_MAX_CNAME_LEN);
+		dns_cache->cname_ttl = cname_ttl;
+	}
+
+	pthread_mutex_lock(&dns_cache_head.lock);
+	hash_add(dns_cache_head.cache_hash, &dns_cache->node, key);
+	list_add_tail(&dns_cache->list, &dns_cache_head.cache_list);
+	INIT_LIST_HEAD(&dns_cache->check_list);
+
+	/* Release extra cache, remove oldest cache record */
+	if (atomic_inc_return(&dns_cache_head.num) > dns_cache_head.size) {
+		struct dns_cache *del_cache;
+		del_cache = _dns_cache_first();
+		if (del_cache) {
+			_dns_cache_remove(del_cache);
+		}
+	}
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	return 0;
+errout:
+	if (dns_cache) {
+		free(dns_cache);
+	}
+
+	return -1;
+}
+
+struct dns_cache *dns_cache_lookup(char *domain, dns_type_t qtype)
+{
+	uint32_t key = 0;
+	struct dns_cache *dns_cache = NULL;
+	struct dns_cache *dns_cache_ret = NULL;
+	time_t now;
+
+	if (dns_cache_head.size <= 0) {
+		return NULL;
+	}
+
+	key = hash_string(domain);
+	key = jhash(&qtype, sizeof(qtype), key);
+
+	time(&now);
+	/* find cache */
+	pthread_mutex_lock(&dns_cache_head.lock);
+	hash_for_each_possible(dns_cache_head.cache_hash, dns_cache, node, key)
+	{
+		if (dns_cache->qtype != qtype) {
+			continue;
+		}
+
+		if (strncmp(domain, dns_cache->domain, DNS_MAX_CNAME_LEN) != 0) {
+			continue;
+		}
+
+		dns_cache_ret = dns_cache;
+		break;
+	}
+
+	if (dns_cache_ret) {
+		/* Return NULL if the cache times out */
+		if (dns_cache_head.enable_inactive == 0 && (now - dns_cache_ret->insert_time > dns_cache_ret->ttl)) {
+			_dns_cache_remove(dns_cache_ret);
+			dns_cache_ret = NULL;
+		} else {
+			dns_cache_get(dns_cache_ret);
+		}
+	}
+
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	return dns_cache_ret;
+}
+
+int dns_cache_get_ttl(struct dns_cache *dns_cache)
+{
+	time_t now;
+	int ttl = 0;
+	time(&now);
+
+	ttl = dns_cache->insert_time + dns_cache->ttl - now;
+	if (ttl < 0) {
+		return 0;
+	}
+
+	return ttl;
+}
+
+void dns_cache_delete(struct dns_cache *dns_cache)
+{
+	pthread_mutex_lock(&dns_cache_head.lock);
+	_dns_cache_remove(dns_cache);
+	pthread_mutex_unlock(&dns_cache_head.lock);
+}
+
+int dns_cache_hitnum_dec_get(struct dns_cache *dns_cache)
+{
+	int hitnum = 0;
+	pthread_mutex_lock(&dns_cache_head.lock);
+	hitnum = atomic_dec_return(&dns_cache->hitnum);
+	if (dns_cache->hitnum_update_add > DNS_CACHE_HITNUM_STEP) {
+		dns_cache->hitnum_update_add--;
+	}
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	return hitnum;
+}
+
+void dns_cache_update(struct dns_cache *dns_cache)
+{
+	pthread_mutex_lock(&dns_cache_head.lock);
+	if (!list_empty(&dns_cache->list)) {
+		list_del_init(&dns_cache->list);
+		list_add_tail(&dns_cache->list, &dns_cache_head.cache_list);
+		atomic_add(dns_cache->hitnum_update_add, &dns_cache->hitnum);
+		if (atomic_read(&dns_cache->hitnum) > DNS_CACHE_MAX_HITNUM) {
+			atomic_set(&dns_cache->hitnum, DNS_CACHE_MAX_HITNUM);
+		}
+
+		if (dns_cache->hitnum_update_add < DNS_CACHE_HITNUM_STEP_MAX) {
+			dns_cache->hitnum_update_add++;
+		}
+	}
+	pthread_mutex_unlock(&dns_cache_head.lock);
+}
+
+void _dns_cache_remove_expired_ttl(time_t *now)
+{
+	struct dns_cache *dns_cache = NULL;
+	struct dns_cache *tmp;
+	int ttl = 0;
+
+	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.inactive_list, list)
+	{
+		ttl = dns_cache->insert_time + dns_cache->ttl - *now;
+		if (ttl > 0) {
+			continue;
+		}
+
+		if (dns_cache_head.inactive_list_expired + ttl > 0) {
+			continue;
+		}
+
+		_dns_cache_remove(dns_cache);
+	}
+}
+
+void dns_cache_invalidate(dns_cache_preinvalid_callback callback, int ttl_pre)
+{
+	struct dns_cache *dns_cache = NULL;
+	struct dns_cache *tmp;
+	time_t now;
+	int ttl = 0;
+	LIST_HEAD(checklist);
+
+	if (dns_cache_head.size <= 0) {
+		return;
+	}
+
+	time(&now);
+	pthread_mutex_lock(&dns_cache_head.lock);
+	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.cache_list, list)
+	{
+		ttl = dns_cache->insert_time + dns_cache->ttl - now;
+		if (ttl > 0 && ttl < ttl_pre) {
+			/* If the TTL time is in the pre-timeout range, call callback function */
+			if (callback && dns_cache->del_pending == 0) {
+				list_add_tail(&dns_cache->check_list, &checklist);
+				dns_cache_get(dns_cache);
+				dns_cache->del_pending = 1;
+				continue;
+			}
+		}
+
+		if (ttl < 0) {
+			if (dns_cache_head.enable_inactive) {
+				_dns_cache_move_inactive(dns_cache);
+			} else {
+				_dns_cache_remove(dns_cache);
+			}
+		}
+	}
+
+	if (dns_cache_head.enable_inactive && dns_cache_head.inactive_list_expired != 0) {
+		_dns_cache_remove_expired_ttl(&now);
+	}
+
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	list_for_each_entry_safe(dns_cache, tmp, &checklist, check_list)
+	{
+		/* run callback */
+		if (callback) {
+			callback(dns_cache);
+		}
+		dns_cache_release(dns_cache);
+	}
+}
+
+void dns_cache_destroy(void)
+{
+	struct dns_cache *dns_cache = NULL;
+	struct dns_cache *tmp;
+	pthread_mutex_lock(&dns_cache_head.lock);
+	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.inactive_list, list)
+	{
+		_dns_cache_delete(dns_cache);
+	}
+
+	list_for_each_entry_safe(dns_cache, tmp, &dns_cache_head.cache_list, list)
+	{
+		_dns_cache_delete(dns_cache);
+	}
+	pthread_mutex_unlock(&dns_cache_head.lock);
+
+	pthread_mutex_destroy(&dns_cache_head.lock);
+}
diff --git a/release/src/router/smartdns/src/dns_cache.h b/release/src/router/smartdns/src/dns_cache.h
index cb1195533f..691b8bfd79 100644
--- a/release/src/router/smartdns/src/dns_cache.h
+++ b/release/src/router/smartdns/src/dns_cache.h
@@ -1,87 +1,89 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef _SMARTDNS_CACHE_H
-#define _SMARTDNS_CACHE_H
-
-#include "atomic.h"
-#include "dns.h"
-#include "hash.h"
-#include "hashtable.h"
-#include "list.h"
-#include <stdlib.h>
-#include <time.h>
-
-#ifdef __cpluscplus
-extern "C" {
-#endif
-
-#define DNS_CACHE_TTL_MIN 30
-
-struct dns_cache {
-	struct hlist_node node;
-	struct list_head list;
-	struct list_head check_list;
-	atomic_t ref;
-	char domain[DNS_MAX_CNAME_LEN];
-	char cname[DNS_MAX_CNAME_LEN];
-	unsigned int cname_ttl;
-	unsigned int ttl;
-	int speed;
-	atomic_t hitnum;
-	int hitnum_update_add;
-	int del_pending;
-	time_t insert_time;
-	dns_type_t qtype;
-	union {
-		unsigned char ipv4_addr[DNS_RR_A_LEN];
-		unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
-		unsigned char addr[0];
-	};
-};
-
-int dns_cache_init(int size);
-
-int dns_cache_replace(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr, int addr_len, int speed);
-
-int dns_cache_insert(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr, int addr_len, int speed);
-
-struct dns_cache *dns_cache_lookup(char *domain, dns_type_t qtype);
-
-void dns_cache_delete(struct dns_cache *dns_cache);
-
-void dns_cache_get(struct dns_cache *dns_cache);
-
-void dns_cache_release(struct dns_cache *dns_cache);
-
-int dns_cache_hitnum_dec_get(struct dns_cache *dns_cache);
-
-void dns_cache_update(struct dns_cache *dns_cache);
-
-typedef void dns_cache_preinvalid_callback(struct dns_cache *dns_cache);
-
-void dns_cache_invalidate(dns_cache_preinvalid_callback callback, int ttl_pre);
-
-int dns_cache_get_ttl(struct dns_cache *dns_cache);
-
-void dns_cache_destroy(void);
-
-#ifdef __cpluscplus
-}
-#endif
-#endif // !_SMARTDNS_CACHE_H
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef _SMARTDNS_CACHE_H
+#define _SMARTDNS_CACHE_H
+
+#include "atomic.h"
+#include "dns.h"
+#include "hash.h"
+#include "hashtable.h"
+#include "list.h"
+#include <stdlib.h>
+#include <time.h>
+
+#ifdef __cpluscplus
+extern "C" {
+#endif
+
+#define DNS_CACHE_TTL_MIN 30
+
+struct dns_cache {
+	struct hlist_node node;
+	struct list_head list;
+	struct list_head check_list;
+	atomic_t ref;
+	char domain[DNS_MAX_CNAME_LEN];
+	char cname[DNS_MAX_CNAME_LEN];
+	unsigned int cname_ttl;
+	unsigned int ttl;
+	int speed;
+	atomic_t hitnum;
+	int hitnum_update_add;
+	int del_pending;
+	time_t insert_time;
+	dns_type_t qtype;
+	union {
+		unsigned char ipv4_addr[DNS_RR_A_LEN];
+		unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
+		unsigned char addr[0];
+	};
+};
+
+int dns_cache_init(int size, int enable_inactive, int inactive_list_expired);
+
+int dns_cache_replace(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr,
+					  int addr_len, int speed);
+
+int dns_cache_insert(char *domain, char *cname, int cname_ttl, int ttl, dns_type_t qtype, unsigned char *addr,
+					 int addr_len, int speed);
+
+struct dns_cache *dns_cache_lookup(char *domain, dns_type_t qtype);
+
+void dns_cache_delete(struct dns_cache *dns_cache);
+
+void dns_cache_get(struct dns_cache *dns_cache);
+
+void dns_cache_release(struct dns_cache *dns_cache);
+
+int dns_cache_hitnum_dec_get(struct dns_cache *dns_cache);
+
+void dns_cache_update(struct dns_cache *dns_cache);
+
+typedef void dns_cache_preinvalid_callback(struct dns_cache *dns_cache);
+
+void dns_cache_invalidate(dns_cache_preinvalid_callback callback, int ttl_pre);
+
+int dns_cache_get_ttl(struct dns_cache *dns_cache);
+
+void dns_cache_destroy(void);
+
+#ifdef __cpluscplus
+}
+#endif
+#endif // !_SMARTDNS_CACHE_H
diff --git a/release/src/router/smartdns/src/dns_client.c b/release/src/router/smartdns/src/dns_client.c
index eccb8e87b9..18b6d43d1a 100644
--- a/release/src/router/smartdns/src/dns_client.c
+++ b/release/src/router/smartdns/src/dns_client.c
@@ -29,8 +29,8 @@
 #include "tlog.h"
 #include "util.h"
 #include <arpa/inet.h>
-#include <errno.h>
 #include <ctype.h>
+#include <errno.h>
 #include <fcntl.h>
 #include <linux/filter.h>
 #include <netdb.h>
@@ -46,7 +46,6 @@
 #include <stdlib.h>
 #include <string.h>
 #include <sys/epoll.h>
-#include <string.h>
 #include <sys/socket.h>
 #include <sys/stat.h>
 #include <sys/types.h>
@@ -59,11 +58,11 @@
 #define DNS_TCP_IDLE_TIMEOUT (60 * 10)
 #define DNS_TCP_CONNECT_TIMEOUT (5)
 #define DNS_QUERY_TIMEOUT (500)
-#define DNS_QUERY_RETRY (3)
+#define DNS_QUERY_RETRY (6)
+#define DNS_PENDING_SERVER_RETRY 40
 #define SOCKET_PRIORITY (6)
 #define SOCKET_IP_TOS (IPTOS_LOWDELAY | IPTOS_RELIABILITY)
 
-
 /* ECS info */
 struct dns_client_ecs {
 	int enable;
@@ -108,6 +107,7 @@ struct dns_server_info {
 	SSL *ssl;
 	SSL_CTX *ssl_ctx;
 	SSL_SESSION *ssl_session;
+	char skip_check_cert;
 	dns_server_status status;
 
 	struct dns_server_buff send_buff;
@@ -136,6 +136,7 @@ struct dns_server_pending_group {
 
 struct dns_server_pending {
 	struct list_head list;
+	atomic_t refcnt;
 
 	char host[DNS_HOSTNAME_LEN];
 	char ipv4[DNS_HOSTNAME_LEN];
@@ -148,6 +149,7 @@ struct dns_server_pending {
 	unsigned int query_v6;
 	/* server type */
 	dns_server_type_t type;
+	int retry_cnt;
 
 	int port;
 
@@ -246,12 +248,11 @@ static LIST_HEAD(pending_servers);
 static pthread_mutex_t pending_server_mutex = PTHREAD_MUTEX_INITIALIZER;
 static int dns_client_has_bootstrap_dns = 0;
 
-const char *_dns_server_get_type_string(dns_server_type_t type) 
+const char *_dns_server_get_type_string(dns_server_type_t type)
 {
 	const char *type_str = "";
 
-	switch (type)
-	{
+	switch (type) {
 	case DNS_SERVER_UDP:
 		type_str = "udp";
 		break;
@@ -321,8 +322,9 @@ static int _dns_client_server_exist(const char *server_ip, int port, dns_server_
 	return -1;
 }
 
-static void _dns_client_server_update_ttl(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result, struct sockaddr *addr,
-										  socklen_t addr_len, int seqno, int ttl, struct timeval *tv, void *userptr)
+static void _dns_client_server_update_ttl(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result,
+										  struct sockaddr *addr, socklen_t addr_len, int seqno, int ttl,
+										  struct timeval *tv, void *userptr)
 {
 	struct dns_server_info *server_info = userptr;
 	if (result != PING_RESULT_RESPONSE || server_info == NULL) {
@@ -478,7 +480,8 @@ static int _dns_client_add_to_pending_group(char *group_name, char *server_ip, i
 }
 
 /* add server to group */
-static int _dns_client_add_to_group_pending(char *group_name, char *server_ip, int port, dns_server_type_t server_type, int ispending)
+static int _dns_client_add_to_group_pending(char *group_name, char *server_ip, int port, dns_server_type_t server_type,
+											int ispending)
 {
 	struct dns_server_info *server_info = NULL;
 
@@ -712,8 +715,42 @@ static char *_dns_client_server_get_spki(struct dns_server_info *server_info, in
 	return spki;
 }
 
+static int _dns_client_set_trusted_cert(SSL_CTX *ssl_ctx)
+{
+	char *cafile = NULL;
+	char *capath = NULL;
+	int cert_path_set = 0;
+
+	if (dns_conf_ca_file[0]) {
+		cafile = dns_conf_ca_file;
+	}
+
+	if (dns_conf_ca_path[0]) {
+		capath = dns_conf_ca_path;
+	}
+
+	if (cafile == NULL && capath == NULL) {
+		if (SSL_CTX_set_default_verify_paths(ssl_ctx)) {
+			cafile = "/etc/ssl/certs/ca-certificates.crt";
+			capath = "/etc/ssl/certs";
+		} else {
+			cert_path_set = 1;
+		}
+	}
+
+	if (cert_path_set == 0) {
+		if (!SSL_CTX_load_verify_locations(ssl_ctx, cafile, capath)) {
+			tlog(TLOG_WARN, "load certificate from %s:%s failed.", cafile, capath);
+			return -1;
+		}
+	}
+
+	return 0;
+}
+
 /* add dns server information */
-static int _dns_client_server_add(char *server_ip, char *server_host, int port, dns_server_type_t server_type, struct client_dns_server_flags *flags)
+static int _dns_client_server_add(char *server_ip, char *server_host, int port, dns_server_type_t server_type,
+								  struct client_dns_server_flags *flags)
 {
 	struct dns_server_info *server_info = NULL;
 	struct addrinfo *gai = NULL;
@@ -721,6 +758,7 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 	int ttl = 0;
 	char port_s[8];
 	int sock_type;
+	char skip_check_cert = 0;
 
 	switch (server_type) {
 	case DNS_SERVER_UDP: {
@@ -745,11 +783,13 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 			}
 		}
 		sock_type = SOCK_STREAM;
+		skip_check_cert = flag_https->skip_check_cert;
 	} break;
 	case DNS_SERVER_TLS: {
 		struct client_dns_server_flag_tls *flag_tls = &flags->tls;
 		spki_data_len = flag_tls->spi_len;
 		sock_type = SOCK_STREAM;
+		skip_check_cert = flag_tls->skip_check_cert;
 	} break;
 	case DNS_SERVER_TCP:
 		sock_type = SOCK_STREAM;
@@ -795,6 +835,7 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 	server_info->status = DNS_SERVER_STATUS_INIT;
 	server_info->ttl = ttl;
 	server_info->ttl_range = 0;
+	server_info->skip_check_cert = skip_check_cert;
 	memcpy(&server_info->flags, flags, sizeof(server_info->flags));
 
 	/* exclude this server from default group */
@@ -812,6 +853,11 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 #else
 		server_info->ssl_ctx = SSL_CTX_new(SSLv23_client_method());
 #endif
+		if (_dns_client_set_trusted_cert(server_info->ssl_ctx) != 0) {
+			tlog(TLOG_WARN, "disable check certificate for %s.", server_info->ip);
+			server_info->skip_check_cert = 1;
+		}
+
 		if (server_info->ssl_ctx == NULL) {
 			tlog(TLOG_ERROR, "init ssl failed.");
 			goto errout;
@@ -820,7 +866,8 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 
 	/* safe address info */
 	if (gai->ai_addrlen > sizeof(server_info->in6)) {
-		tlog(TLOG_ERROR, "addr len invalid, %d, %zd, %d", gai->ai_addrlen, sizeof(server_info->addr), server_info->ai_family);
+		tlog(TLOG_ERROR, "addr len invalid, %d, %zd, %d", gai->ai_addrlen, sizeof(server_info->addr),
+			 server_info->ai_family);
 		goto errout;
 	}
 	memcpy(&server_info->addr, gai->ai_addr, gai->ai_addrlen);
@@ -828,7 +875,8 @@ static int _dns_client_server_add(char *server_ip, char *server_host, int port,
 	/* start ping task */
 	if (server_type == DNS_SERVER_UDP) {
 		if (ttl <= 0 && (server_info->flags.result_flag & DNSSERVER_FLAG_CHECK_TTL)) {
-			server_info->ping_host = fast_ping_start(PING_TYPE_DNS, server_ip, 0, 60000, 1000, _dns_client_server_update_ttl, server_info);
+			server_info->ping_host =
+				fast_ping_start(PING_TYPE_DNS, server_ip, 0, 60000, 1000, _dns_client_server_update_ttl, server_info);
 			if (server_info->ping_host == NULL) {
 				tlog(TLOG_ERROR, "start ping failed.");
 				goto errout;
@@ -879,7 +927,6 @@ static void _dns_client_close_socket(struct dns_server_info *server_info)
 
 	if (server_info->ssl) {
 		/* Shutdown ssl */
-		SSL_shutdown(server_info->ssl);
 		SSL_free(server_info->ssl);
 		server_info->ssl = NULL;
 	}
@@ -961,7 +1008,51 @@ static int _dns_client_server_remove(char *server_ip, int port, dns_server_type_
 	return -1;
 }
 
-static int _dns_client_server_pending(char *server_ip, int port, dns_server_type_t server_type, struct client_dns_server_flags *flags)
+void _dns_client_server_pending_get(struct dns_server_pending *pending)
+{
+	if (atomic_inc_return(&pending->refcnt) <= 0) {
+		tlog(TLOG_ERROR, "BUG: pending ref is invalid");
+		abort();
+	}
+}
+
+void _dns_client_server_pending_release_lck(struct dns_server_pending *pending)
+{
+	int refcnt = atomic_dec_return(&pending->refcnt);
+
+	if (refcnt) {
+		if (refcnt < 0) {
+			tlog(TLOG_ERROR, "BUG: pending refcnt is %d", refcnt);
+			abort();
+		}
+		return;
+	}
+
+	list_del_init(&pending->list);
+	free(pending);
+}
+
+void _dns_client_server_pending_release(struct dns_server_pending *pending)
+{
+	int refcnt = atomic_dec_return(&pending->refcnt);
+
+	if (refcnt) {
+		if (refcnt < 0) {
+			tlog(TLOG_ERROR, "BUG: pending refcnt is %d", refcnt);
+			abort();
+		}
+		return;
+	}
+
+	pthread_mutex_lock(&pending_server_mutex);
+	list_del_init(&pending->list);
+	pthread_mutex_unlock(&pending_server_mutex);
+
+	free(pending);
+}
+
+static int _dns_client_server_pending(char *server_ip, int port, dns_server_type_t server_type,
+									  struct client_dns_server_flags *flags)
 {
 	struct dns_server_pending *pending = NULL;
 
@@ -981,6 +1072,7 @@ static int _dns_client_server_pending(char *server_ip, int port, dns_server_type
 	pending->ipv6[0] = 0;
 	pending->has_v4 = 0;
 	pending->has_v6 = 0;
+	_dns_client_server_pending_get(pending);
 	INIT_LIST_HEAD(&pending->group_list);
 	memcpy(&pending->flags, flags, sizeof(struct client_dns_server_flags));
 
@@ -996,8 +1088,8 @@ static int _dns_client_server_pending(char *server_ip, int port, dns_server_type
 	return -1;
 }
 
-static int _dns_client_add_server_pending(char *server_ip, char *server_host, int port, dns_server_type_t server_type, struct client_dns_server_flags *flags,
-										  int ispending)
+static int _dns_client_add_server_pending(char *server_ip, char *server_host, int port, dns_server_type_t server_type,
+										  struct client_dns_server_flags *flags, int ispending)
 {
 	int ret;
 
@@ -1027,7 +1119,8 @@ static int _dns_client_add_server_pending(char *server_ip, char *server_host, in
 	return -1;
 }
 
-int dns_client_add_server(char *server_ip, int port, dns_server_type_t server_type, struct client_dns_server_flags *flags)
+int dns_client_add_server(char *server_ip, int port, dns_server_type_t server_type,
+						  struct client_dns_server_flags *flags)
 {
 	return _dns_client_add_server_pending(server_ip, NULL, port, server_type, flags, 1);
 }
@@ -1243,7 +1336,8 @@ static int _dns_replied_check_add(struct dns_query_struct *dns_query, struct soc
 	return 0;
 }
 
-static int _dns_client_recv(struct dns_server_info *server_info, unsigned char *inpacket, int inpacket_len, struct sockaddr *from, socklen_t from_len)
+static int _dns_client_recv(struct dns_server_info *server_info, unsigned char *inpacket, int inpacket_len,
+							struct sockaddr *from, socklen_t from_len)
 {
 	int len;
 	int i;
@@ -1265,8 +1359,8 @@ static int _dns_client_recv(struct dns_server_info *server_info, unsigned char *
 	len = dns_decode(packet, DNS_PACKSIZE, inpacket, inpacket_len);
 	if (len != 0) {
 		char host_name[DNS_MAX_CNAME_LEN];
-		tlog(TLOG_WARN, "decode failed, packet len = %d, tc = %d, id = %d, from = %s\n", inpacket_len, packet->head.tc, packet->head.id,
-			 gethost_by_addr(host_name, sizeof(host_name), from));
+		tlog(TLOG_WARN, "decode failed, packet len = %d, tc = %d, id = %d, from = %s\n", inpacket_len, packet->head.tc,
+			 packet->head.id, gethost_by_addr(host_name, sizeof(host_name), from));
 		return -1;
 	}
 
@@ -1276,9 +1370,12 @@ static int _dns_client_recv(struct dns_server_info *server_info, unsigned char *
 		return -1;
 	}
 
-	tlog(TLOG_DEBUG, "qdcount = %d, ancount = %d, nscount = %d, nrcount = %d, len = %d, id = %d, tc = %d, rd = %d, ra = %d, rcode = %d, payloadsize = %d\n",
-		 packet->head.qdcount, packet->head.ancount, packet->head.nscount, packet->head.nrcount, inpacket_len, packet->head.id, packet->head.tc,
-		 packet->head.rd, packet->head.ra, packet->head.rcode, dns_get_OPT_payload_size(packet));
+	tlog(TLOG_DEBUG,
+		 "qdcount = %d, ancount = %d, nscount = %d, nrcount = %d, len = %d, id = %d, tc = %d, rd = %d, ra = %d, rcode "
+		 "= %d, payloadsize = %d\n",
+		 packet->head.qdcount, packet->head.ancount, packet->head.nscount, packet->head.nrcount, inpacket_len,
+		 packet->head.id, packet->head.tc, packet->head.rd, packet->head.ra, packet->head.rcode,
+		 dns_get_OPT_payload_size(packet));
 
 	/* get question */
 	rrs = dns_get_rrs_start(packet, DNS_RRS_QD, &rr_count);
@@ -1317,7 +1414,8 @@ static int _dns_client_recv(struct dns_server_info *server_info, unsigned char *
 
 	/* notify caller dns query result */
 	if (query->callback) {
-		ret = query->callback(query->domain, DNS_QUERY_RESULT, server_info->flags.result_flag, packet, inpacket, inpacket_len, query->user_ptr);
+		ret = query->callback(query->domain, DNS_QUERY_RESULT, server_info->flags.result_flag, packet, inpacket,
+							  inpacket_len, query->user_ptr);
 		if (request_num == 0 || ret) {
 			/* if all server replied, or done, stop query, release resource */
 			_dns_client_query_remove(query);
@@ -1474,11 +1572,11 @@ static int _DNS_client_create_socket_tls(struct dns_server_info *server_info, ch
 
 	// ? this cause ssl crash ?
 	// setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &yes, sizeof(yes));
+	// setsockopt(fd, IPPROTO_TCP, TCP_THIN_DUPACK, &yes, sizeof(yes));
+	// setsockopt(fd, IPPROTO_TCP, TCP_THIN_LINEAR_TIMEOUTS, &yes, sizeof(yes));
 	// set_sock_keepalive(fd, 15, 3, 4);
 	setsockopt(fd, SOL_SOCKET, SO_PRIORITY, &priority, sizeof(priority));
 	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
-	setsockopt(fd, IPPROTO_TCP, TCP_THIN_DUPACK, &yes, sizeof(yes));
-	setsockopt(fd, IPPROTO_TCP, TCP_THIN_LINEAR_TIMEOUTS, &yes, sizeof(yes));
 
 	if (connect(fd, (struct sockaddr *)&server_info->addr, server_info->ai_addrlen) != 0) {
 		if (errno != EINPROGRESS) {
@@ -1602,7 +1700,8 @@ static int _dns_client_process_udp(struct dns_server_info *server_info, struct e
 		}
 	}
 
-	tlog(TLOG_DEBUG, "recv udp packet from %s, len: %d, ttl: %d", gethost_by_addr(from_host, sizeof(from_host), (struct sockaddr *)&from), len, ttl);
+	tlog(TLOG_DEBUG, "recv udp packet from %s, len: %d, ttl: %d",
+		 gethost_by_addr(from_host, sizeof(from_host), (struct sockaddr *)&from), len, ttl);
 
 	/* update recv time */
 	time(&server_info->last_recv);
@@ -1747,7 +1846,8 @@ static int _dns_client_socket_recv(struct dns_server_info *server_info)
 	if (server_info->type == DNS_SERVER_UDP) {
 		return -1;
 	} else if (server_info->type == DNS_SERVER_TCP) {
-		return recv(server_info->fd, server_info->recv_buff.data + server_info->recv_buff.len, DNS_TCP_BUFFER - server_info->recv_buff.len, 0);
+		return recv(server_info->fd, server_info->recv_buff.data + server_info->recv_buff.len,
+					DNS_TCP_BUFFER - server_info->recv_buff.len, 0);
 	} else if (server_info->type == DNS_SERVER_TLS || server_info->type == DNS_SERVER_HTTPS) {
 		return _dns_client_socket_ssl_recv(server_info->ssl, server_info->recv_buff.data + server_info->recv_buff.len,
 										   DNS_TCP_BUFFER - server_info->recv_buff.len);
@@ -1762,29 +1862,31 @@ static int _dns_client_process_tcp_buff(struct dns_server_info *server_info)
 	int dns_packet_len = 0;
 	struct http_head *http_head = NULL;
 	unsigned char *inpacket_data = NULL;
+	int ret = -1;
 
 	while (1) {
 		if (server_info->type == DNS_SERVER_HTTPS) {
 			http_head = http_head_init(4096);
 			if (http_head == NULL) {
-				goto errout;
+				goto out;
 			}
 
 			len = http_head_parse(http_head, (char *)server_info->recv_buff.data, server_info->recv_buff.len);
 			if (len < 0) {
-				tlog(TLOG_DEBUG, "remote server not supported.");
 				if (len == -1) {
-					break;
+					ret = 0;
+					goto out;
 				}
-				goto errout;
+
+				tlog(TLOG_DEBUG, "remote server not supported.");
+				goto out;
 			}
 
 			if (http_head_get_httpcode(http_head) != 200) {
-				tlog(TLOG_WARN, "http server query from %s:%d failed, server return http code : %d, %s", 
-					server_info->ip, server_info->port,
-					http_head_get_httpcode(http_head),
-					http_head_get_httpcode_msg(http_head));
-				goto errout;
+				tlog(TLOG_WARN, "http server query from %s:%d failed, server return http code : %d, %s",
+					 server_info->ip, server_info->port, http_head_get_httpcode(http_head),
+					 http_head_get_httpcode_msg(http_head));
+				goto out;
 			}
 
 			dns_packet_len = http_head_get_data_len(http_head);
@@ -1797,12 +1899,13 @@ static int _dns_client_process_tcp_buff(struct dns_server_info *server_info)
 			len = ntohs(*((unsigned short *)(inpacket_data)));
 			if (len <= 0 || len >= DNS_IN_PACKSIZE) {
 				/* data len is invalid */
-				goto errout;
+				goto out;
 			}
 
 			if (len > server_info->recv_buff.len - 2) {
 				/* len is not expceded, wait and recv */
-				break;
+				ret = 0;
+				goto out;
 			}
 
 			inpacket_data = server_info->recv_buff.data + 2;
@@ -1812,8 +1915,9 @@ static int _dns_client_process_tcp_buff(struct dns_server_info *server_info)
 
 		tlog(TLOG_DEBUG, "recv tcp packet from %s, len = %d", server_info->ip, len);
 		/* process result */
-		if (_dns_client_recv(server_info, inpacket_data, dns_packet_len, &server_info->addr, server_info->ai_addrlen) != 0) {
-			goto errout;
+		if (_dns_client_recv(server_info, inpacket_data, dns_packet_len, &server_info->addr, server_info->ai_addrlen) !=
+			0) {
+			goto out;
 		}
 
 		if (http_head) {
@@ -1822,21 +1926,26 @@ static int _dns_client_process_tcp_buff(struct dns_server_info *server_info)
 		}
 
 		server_info->recv_buff.len -= len;
+		if (server_info->recv_buff.len < 0) {
+			tlog(TLOG_ERROR, "Internal error.");
+			abort();
+		}
 
 		/* move to next result */
 		if (server_info->recv_buff.len > 0) {
 			memmove(server_info->recv_buff.data, server_info->recv_buff.data + len, server_info->recv_buff.len);
 		} else {
-			break;
+			ret = 0;
+			goto out;
 		}
 	}
 
-	return 0;
-errout:
+	ret = 0;
+out:
 	if (http_head) {
 		http_head_destroy(http_head);
 	}
-	return -1;
+	return ret;
 }
 
 static int _dns_client_process_tcp(struct dns_server_info *server_info, struct epoll_event *event, unsigned long now)
@@ -1880,7 +1989,7 @@ static int _dns_client_process_tcp(struct dns_server_info *server_info, struct e
 
 		time(&server_info->last_recv);
 		server_info->recv_buff.len += len;
-		if (server_info->recv_buff.len < 2) {
+		if (server_info->recv_buff.len <= 2) {
 			/* wait and recv */
 			return 0;
 		}
@@ -1917,6 +2026,9 @@ static int _dns_client_process_tcp(struct dns_server_info *server_info, struct e
 			server_info->send_buff.len -= len;
 			if (server_info->send_buff.len > 0) {
 				memmove(server_info->send_buff.data, server_info->send_buff.data + len, server_info->send_buff.len);
+			} else if (server_info->send_buff.len < 0) {
+				tlog(TLOG_ERROR, "Internal Error");
+				abort();
 			}
 			pthread_mutex_unlock(&client.server_list_lock);
 		}
@@ -1930,7 +2042,7 @@ static int _dns_client_process_tcp(struct dns_server_info *server_info, struct e
 		event.events = EPOLLIN;
 		event.data.ptr = server_info;
 		if (epoll_ctl(client.epoll_fd, EPOLL_CTL_MOD, server_info->fd, &event) != 0) {
-			tlog(TLOG_ERROR, "epoll ctl failed.");
+			tlog(TLOG_ERROR, "epoll ctl failed, %s", strerror(errno));
 			goto errout;
 		}
 	}
@@ -1980,13 +2092,15 @@ static int _dns_client_tls_matchName(const char *host, const char *pattern, int
 	if (i == size && host[j] == '\0') {
 		match = 0;
 	}
-	
+
 	return match;
 }
 
 static int _dns_client_tls_verify(struct dns_server_info *server_info)
 {
 	X509 *cert = NULL;
+	X509_PUBKEY *pubkey = NULL;
+	X509_NAME *cert_name = NULL;
 	char peer_CN[256];
 	char cert_fingerprint[256];
 	int i = 0;
@@ -2007,20 +2121,45 @@ static int _dns_client_tls_verify(struct dns_server_info *server_info)
 		return -1;
 	}
 
-	X509_NAME_get_text_by_NID(X509_get_subject_name(cert), NID_commonName, peer_CN, 256);
+	if (server_info->skip_check_cert == 0) {
+		long res = SSL_get_verify_result(server_info->ssl);
+		if (res != X509_V_OK) {
+			tlog(TLOG_WARN, "peer server certificate verify failed.");
+			goto errout;
+		}
+	}
+
+	cert_name = X509_get_subject_name(cert);
+	if (cert_name == NULL) {
+		tlog(TLOG_ERROR, "get subject name failed.");
+		goto errout;
+	}
+
+	if (X509_NAME_get_text_by_NID(cert_name, NID_commonName, peer_CN, 256) == -1) {
+		tlog(TLOG_ERROR, "cannot found x509 name");
+		goto errout;
+	}
+
 	tlog(TLOG_DEBUG, "peer CN: %s", peer_CN);
 
 	/* check tls host */
 	tls_host_verify = _dns_client_server_get_tls_host_verify(server_info);
 	if (tls_host_verify) {
-		if (_dns_client_tls_matchName(peer_CN, tls_host_verify, strnlen(tls_host_verify, DNS_MAX_CNAME_LEN)) != 0) {
-			tlog(TLOG_INFO, "server %s CN is invalid, peer CN: %s, expect CN: %s", server_info->ip, peer_CN, tls_host_verify);
+		if (_dns_client_tls_matchName(tls_host_verify, peer_CN, strnlen(peer_CN, DNS_MAX_CNAME_LEN)) != 0) {
+			tlog(TLOG_INFO, "server %s CN is invalid, peer CN: %s, expect CN: %s", server_info->ip, peer_CN,
+				 tls_host_verify);
 			goto errout;
 		}
 	}
 
+	pubkey = X509_get_X509_PUBKEY(cert);
+	if (pubkey == NULL) {
+		tlog(TLOG_ERROR, "get pub key failed.");
+		goto errout;
+	}
+
 	/* get spki pin */
-	key_len = i2d_X509_PUBKEY(X509_get_X509_PUBKEY(cert), NULL);
+	key_len = i2d_X509_PUBKEY(pubkey, NULL);
 	if (key_len <= 0) {
 		tlog(TLOG_ERROR, "get x509 public key failed.");
 		goto errout;
@@ -2033,7 +2172,7 @@ static int _dns_client_tls_verify(struct dns_server_info *server_info)
 		goto errout;
 	}
 
-	i2d_X509_PUBKEY(X509_get_X509_PUBKEY(cert), &key_data_tmp);
+	i2d_X509_PUBKEY(pubkey, &key_data_tmp);
 
 	/* Get the SHA256 value of SPKI */
 	key_sha256 = SSL_SHA256(key_data, key_len, NULL);
@@ -2056,7 +2195,7 @@ static int _dns_client_tls_verify(struct dns_server_info *server_info)
 	tlog(TLOG_DEBUG, "cert SPKI pin(%s): %s", "sha256", cert_fingerprint);
 
 	spki = _dns_client_server_get_spki(server_info, &spki_len);
-	if (spki) {
+	if (spki && spki_len > 0 && spki_len <= SHA256_DIGEST_LENGTH) {
 		/* check SPKI */
 		if (memcmp(spki, key_sha256, spki_len) != 0) {
 			tlog(TLOG_INFO, "server %s cert spki is invalid", server_info->ip);
@@ -2111,7 +2250,7 @@ static int _dns_client_process_tls(struct dns_server_info *server_info, struct e
 
 			fd_event.data.ptr = server_info;
 			if (epoll_ctl(client.epoll_fd, EPOLL_CTL_MOD, server_info->fd, &fd_event) != 0) {
-				tlog(TLOG_ERROR, "epoll ctl failed.");
+				tlog(TLOG_ERROR, "epoll ctl failed, %s", strerror(errno));
 				goto errout;
 			}
 
@@ -2147,7 +2286,7 @@ static int _dns_client_process_tls(struct dns_server_info *server_info, struct e
 		fd_event.events = EPOLLIN | EPOLLOUT;
 		fd_event.data.ptr = server_info;
 		if (epoll_ctl(client.epoll_fd, EPOLL_CTL_MOD, server_info->fd, &fd_event) != 0) {
-			tlog(TLOG_ERROR, "epoll ctl failed.");
+			tlog(TLOG_ERROR, "epoll ctl failed, %s", strerror(errno));
 			goto errout;
 		}
 	}
@@ -2290,11 +2429,11 @@ static int _dns_client_send_tls(struct dns_server_info *server_info, void *packe
 
 	send_len = _dns_client_socket_ssl_send(server_info->ssl, inpacket, len);
 	if (send_len < 0) {
-		if (errno == EAGAIN || errno == EPIPE || server_info->ssl == NULL ) {
+		if (errno == EAGAIN || errno == EPIPE || server_info->ssl == NULL) {
 			/* save data to buffer, and retry when EPOLLOUT is available */
 			return _dns_client_send_data_to_buffer(server_info, inpacket, len);
 		} else if (server_info->ssl && errno != ENOMEM) {
-			SSL_shutdown(server_info->ssl);
+			SSL_set_shutdown(server_info->ssl, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
 		}
 		return -1;
 	} else if (send_len < len) {
@@ -2340,11 +2479,11 @@ static int _dns_client_send_https(struct dns_server_info *server_info, void *pac
 
 	send_len = _dns_client_socket_ssl_send(server_info->ssl, inpacket, http_len);
 	if (send_len < 0) {
-		if (errno == EAGAIN || errno == EPIPE || server_info->ssl == NULL ) {
+		if (errno == EAGAIN || errno == EPIPE || server_info->ssl == NULL) {
 			/* save data to buffer, and retry when EPOLLOUT is available */
 			return _dns_client_send_data_to_buffer(server_info, inpacket, http_len);
 		} else if (server_info->ssl && errno != ENOMEM) {
-			SSL_shutdown(server_info->ssl);
+			SSL_set_shutdown(server_info->ssl, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
 		}
 		return -1;
 	} else if (send_len < http_len) {
@@ -2407,9 +2546,11 @@ static int _dns_client_send_packet(struct dns_query_struct *query, void *packet,
 
 		if (ret != 0) {
 			if (send_err != ENOMEM) {
-				tlog(TLOG_ERROR, "send query to %s failed, %s, type: %d", server_info->ip, strerror(send_err), server_info->type);
+				tlog(TLOG_ERROR, "send query to %s failed, %s, type: %d", server_info->ip, strerror(send_err),
+					 server_info->type);
 			} else {
-				tlog(TLOG_DEBUG, "send query to %s failed, %s, type: %d", server_info->ip, strerror(send_err), server_info->type);
+				tlog(TLOG_DEBUG, "send query to %s failed, %s, type: %d", server_info->ip, strerror(send_err),
+					 server_info->type);
 			}
 			atomic_dec(&query->dns_request_sent);
 			continue;
@@ -2586,29 +2727,32 @@ static void _dns_client_check_servers(void)
 	pthread_mutex_unlock(&client.server_list_lock);
 }
 
-static int _dns_client_pending_server_resolve(char *domain, dns_rtcode_t rtcode, dns_type_t addr_type, char *ip, unsigned int ping_time, void *user_ptr)
+static int _dns_client_pending_server_resolve(char *domain, dns_rtcode_t rtcode, dns_type_t addr_type, char *ip,
+											  unsigned int ping_time, void *user_ptr)
 {
 	struct dns_server_pending *pending = user_ptr;
+	int ret = 0;
 
 	if (addr_type == DNS_T_A) {
-		pending->has_v4 = 1;
 		pending->ping_time_v4 = -1;
 		if (rtcode == DNS_RC_NOERROR) {
+			pending->has_v4 = 1;
 			pending->ping_time_v4 = ping_time;
 			safe_strncpy(pending->ipv4, ip, DNS_HOSTNAME_LEN);
 		}
 	} else if (addr_type == DNS_T_AAAA) {
-		pending->has_v6 = 1;
 		pending->ping_time_v6 = -1;
 		if (rtcode == DNS_RC_NOERROR) {
+			pending->has_v6 = 1;
 			pending->ping_time_v6 = ping_time;
 			safe_strncpy(pending->ipv6, ip, DNS_HOSTNAME_LEN);
 		}
 	} else {
-		return -1;
+		ret = -1;
 	}
 
-	return 0;
+	_dns_client_server_pending_release(pending);
+	return ret;
 }
 
 static int _dns_client_add_pendings(struct dns_server_pending *pending, char *ip)
@@ -2641,37 +2785,61 @@ static void _dns_client_add_pending_servers(void)
 	if (++dely < 3) {
 		return;
 	}
+	dely = 0;
 
 	pthread_mutex_lock(&pending_server_mutex);
 	list_for_each_entry_safe(pending, tmp, &pending_servers, list)
 	{
 		/* send dns type A, AAAA query to bootstrap DNS server */
+		int add_success = 0;
+		char *dnsserver_ip = NULL;
+
 		if (pending->query_v4 == 0) {
 			pending->query_v4 = 1;
-			dns_server_query(pending->host, DNS_T_A, _dns_client_pending_server_resolve, pending);
+			_dns_client_server_pending_get(pending);
+			if (dns_server_query(pending->host, DNS_T_A, _dns_client_pending_server_resolve, pending) != 0) {
+				_dns_client_server_pending_release_lck(pending);
+			}
 		}
 
 		if (pending->query_v6 == 0) {
 			pending->query_v6 = 1;
-			dns_server_query(pending->host, DNS_T_AAAA, _dns_client_pending_server_resolve, pending);
+			_dns_client_server_pending_get(pending);
+			if (dns_server_query(pending->host, DNS_T_AAAA, _dns_client_pending_server_resolve, pending) != 0) {
+				_dns_client_server_pending_release_lck(pending);
+			}
 		}
 
 		/* if both A, AAAA has query result, select fastest IP address */
 		if (pending->has_v4 && pending->has_v6) {
-			char *ip = NULL;
+
 			if (pending->ping_time_v4 <= pending->ping_time_v6 && pending->ipv4[0]) {
-				ip = pending->ipv4;
+				dnsserver_ip = pending->ipv4;
 			} else {
-				ip = pending->ipv6;
+				dnsserver_ip = pending->ipv6;
 			}
+		} else if (pending->has_v4) {
+			dnsserver_ip = pending->ipv4;
+		} else if (pending->has_v6) {
+			dnsserver_ip = pending->ipv6;
+		}
 
-			if (ip[0]) {
-				if (_dns_client_add_pendings(pending, ip) != 0) {
-					tlog(TLOG_WARN, "add pending DNS server %s failed.", pending->host);
-				}
+		if (dnsserver_ip && dnsserver_ip[0]) {
+			if (_dns_client_add_pendings(pending, dnsserver_ip) == 0) {
+				add_success = 1;
+			}
+		}
+
+		pending->retry_cnt++;
+		if (pending->retry_cnt >= DNS_PENDING_SERVER_RETRY || add_success) {
+			if (add_success == 0) {
+				tlog(TLOG_WARN, "add pending DNS server %s failed.", pending->host);
 			}
-			list_del_init(&pending->list);
-			free(pending);
+			_dns_client_server_pending_release_lck(pending);
+		} else {
+			tlog(TLOG_DEBUG, "add pending DNS server %s failed, retry %d...", pending->host, pending->retry_cnt);
+			pending->query_v4 = 0;
+			pending->query_v6 = 0;
 		}
 
 		/* if has no bootstrap DNS, just call getaddrinfo to get address */
@@ -2682,8 +2850,8 @@ static void _dns_client_add_pending_servers(void)
 				exit(1);
 				return;
 			}
-			list_del_init(&pending->list);
-			free(pending);
+
+			_dns_client_server_pending_release_lck(pending);
 		}
 	}
 	pthread_mutex_unlock(&pending_server_mutex);
diff --git a/release/src/router/smartdns/src/dns_client.h b/release/src/router/smartdns/src/dns_client.h
index 5610399046..c04a5d82a7 100644
--- a/release/src/router/smartdns/src/dns_client.h
+++ b/release/src/router/smartdns/src/dns_client.h
@@ -52,8 +52,9 @@ int dns_client_init(void);
 int dns_client_set_ecs(char *ip, int subnet);
 
 /* query result notify function */
-typedef int (*dns_client_callback)(char *domain, dns_result_type rtype, unsigned int result_flag, struct dns_packet *packet, unsigned char *inpacket,
-								   int inpacket_len, void *user_ptr);
+typedef int (*dns_client_callback)(char *domain, dns_result_type rtype, unsigned int result_flag,
+								   struct dns_packet *packet, unsigned char *inpacket, int inpacket_len,
+								   void *user_ptr);
 
 /* query domain */
 int dns_client_query(char *domain, int qtype, dns_client_callback callback, void *user_ptr, const char *group_name);
@@ -69,6 +70,7 @@ struct client_dns_server_flag_tls {
 	int spi_len;
 	char hostname[DNS_MAX_CNAME_LEN];
 	char tls_host_verify[DNS_MAX_CNAME_LEN];
+	char skip_check_cert;
 };
 
 struct client_dns_server_flag_https {
@@ -78,6 +80,7 @@ struct client_dns_server_flag_https {
 	char httphost[DNS_MAX_CNAME_LEN];
 	char path[DNS_MAX_CNAME_LEN];
 	char tls_host_verify[DNS_MAX_CNAME_LEN];
+	char skip_check_cert;
 };
 
 struct client_dns_server_flags {
@@ -95,7 +98,8 @@ struct client_dns_server_flags {
 int dns_client_spki_decode(const char *spki, unsigned char *spki_data_out);
 
 /* add remote dns server */
-int dns_client_add_server(char *server_ip, int port, dns_server_type_t server_type, struct client_dns_server_flags *flags);
+int dns_client_add_server(char *server_ip, int port, dns_server_type_t server_type,
+						  struct client_dns_server_flags *flags);
 
 /* remove remote dns server */
 int dns_client_remove_server(char *server_ip, int port, dns_server_type_t server_type);
diff --git a/release/src/router/smartdns/src/dns_conf.c b/release/src/router/smartdns/src/dns_conf.c
index cdf90cf642..6812753301 100644
--- a/release/src/router/smartdns/src/dns_conf.c
+++ b/release/src/router/smartdns/src/dns_conf.c
@@ -1,1362 +1,1510 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "dns_conf.h"
-#include "list.h"
-#include "rbtree.h"
-#include "tlog.h"
-#include "util.h"
-#include <getopt.h>
-#include <libgen.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <syslog.h>
-#include <unistd.h>
-
-#define DEFAULT_DNS_CACHE_SIZE 512
-
-/* ipset */
-struct dns_ipset_table {
-	DECLARE_HASHTABLE(ipset, 8);
-};
-static struct dns_ipset_table dns_ipset_table;
-
-/* dns groups */
-struct dns_group_table dns_group_table;
-
-/* server ip/port  */
-struct dns_bind_ip dns_conf_bind_ip[DNS_MAX_BIND_IP];
-int dns_conf_bind_ip_num = 0;
-int dns_conf_tcp_idle_time = 120;
-
-/* cache */
-int dns_conf_cachesize = DEFAULT_DNS_CACHE_SIZE;
-int dns_conf_prefetch = 0;
-
-/* upstream servers */
-struct dns_servers dns_conf_servers[DNS_MAX_SERVERS];
-char dns_conf_server_name[DNS_MAX_SERVER_NAME_LEN];
-int dns_conf_server_num;
-
-struct dns_domain_check_order dns_conf_check_order = {
-	.order = {DOMAIN_CHECK_ICMP, DOMAIN_CHECK_TCP},
-	.tcp_port = 80,
-};
-
-/* logging */
-int dns_conf_log_level = TLOG_ERROR;
-char dns_conf_log_file[DNS_MAX_PATH];
-size_t dns_conf_log_size = 1024 * 1024;
-int dns_conf_log_num = 8;
-
-/* auditing */
-int dns_conf_audit_enable = 0;
-int dns_conf_audit_log_SOA;
-char dns_conf_audit_file[DNS_MAX_PATH];
-size_t dns_conf_audit_size = 1024 * 1024;
-int dns_conf_audit_num = 2;
-
-/* address rules */
-art_tree dns_conf_domain_rule;
-struct dns_conf_address_rule dns_conf_address_rule;
-
-/* dual-stack selection */
-int dns_conf_dualstack_ip_selection;
-int dns_conf_dualstack_ip_selection_threshold = 30;
-
-/* TTL */
-int dns_conf_rr_ttl;
-int dns_conf_rr_ttl_min;
-int dns_conf_rr_ttl_max;
-int dns_conf_force_AAAA_SOA;
-
-int dns_conf_ipset_timeout_enable;
-
-/* ECS */
-struct dns_edns_client_subnet dns_conf_ipv4_ecs;
-struct dns_edns_client_subnet dns_conf_ipv6_ecs;
-
-char dns_conf_sni_proxy_ip[DNS_MAX_IPLEN];
-
-/* create and get dns server group */
-static struct dns_server_groups *_dns_conf_get_group(const char *group_name)
-{
-	uint32_t key = 0;
-	struct dns_server_groups *group = NULL;
-
-	key = hash_string(group_name);
-	hash_for_each_possible(dns_group_table.group, group, node, key)
-	{
-		if (strncmp(group->group_name, group_name, DNS_MAX_IPLEN) == 0) {
-			return group;
-		}
-	}
-
-	group = malloc(sizeof(*group));
-	if (group == NULL) {
-		goto errout;
-	}
-
-	memset(group, 0, sizeof(*group));
-	safe_strncpy(group->group_name, group_name, DNS_GROUP_NAME_LEN);
-	hash_add(dns_group_table.group, &group->node, key);
-
-	return group;
-errout:
-	if (group) {
-		free(group);
-	}
-
-	return NULL;
-}
-
-static int _dns_conf_get_group_set(const char *group_name, struct dns_servers *server)
-{
-	struct dns_server_groups *group = NULL;
-	int i = 0;
-
-	group = _dns_conf_get_group(group_name);
-	if (group == NULL) {
-		return -1;
-	}
-
-	for (i = 0; i < group->server_num; i++) {
-		if (group->servers[i] == server) {
-			return 0;
-		}
-	}
-
-	if (group->server_num >= DNS_MAX_SERVERS) {
-		return -1;
-	}
-
-	group->servers[group->server_num] = server;
-	group->server_num++;
-
-	return 0;
-}
-
-static const char *_dns_conf_get_group_name(const char *group_name)
-{
-	struct dns_server_groups *group = NULL;
-
-	group = _dns_conf_get_group(group_name);
-	if (group == NULL) {
-		return NULL;
-	}
-
-	return group->group_name;
-}
-
-static void _config_group_table_destroy(void)
-{
-	struct dns_server_groups *group = NULL;
-	struct hlist_node *tmp = NULL;
-	int i;
-
-	hash_for_each_safe(dns_group_table.group, i, tmp, group, node)
-	{
-		hlist_del_init(&group->node);
-		free(group);
-	}
-}
-
-static int _config_server(int argc, char *argv[], dns_server_type_t type, int default_port)
-{
-	int index = dns_conf_server_num;
-	struct dns_servers *server;
-	int port = -1;
-	char *ip = NULL;
-	int opt = 0;
-	unsigned int result_flag = 0;
-	unsigned int server_flag = 0;
-	unsigned char *spki = NULL;
-
-	int ttl = 0;
-	/* clang-format off */
-	static struct option long_options[] = {
-		{"blacklist-ip", no_argument, NULL, 'b'}, /* filtering with blacklist-ip */
-		{"whitelist-ip", no_argument, NULL, 'w'}, /* filtering with whitelist-ip */
-#ifdef FEATURE_CHECK_EDNS
-		/* experimental feature */
-		{"check-edns", no_argument, NULL, 'e'},   /* check edns */
-#endif 
-		{"spki-pin", required_argument, NULL, 'p'}, /* check SPKI pin */
-		{"host-name", required_argument, NULL, 'h'}, /* host name */
-		{"http-host", required_argument, NULL, 'H'}, /* http host */
-		{"tls-host-verify", required_argument, NULL, 'V' }, /* verify tls hostname */
-		{"group", required_argument, NULL, 'g'}, /* add to group */
-		{"exclude-default-group", no_argument, NULL, 'E'}, /* ecluse this from default group */
-		{NULL, no_argument, NULL, 0}
-	};
-	/* clang-format on */
-	if (argc <= 1) {
-		tlog(TLOG_ERROR, "invalid parameter.");
-		return -1;
-	}
-
-	if (index >= DNS_MAX_SERVERS) {
-		tlog(TLOG_WARN, "exceeds max server number, %s", ip);
-		return 0;
-	}
-
-	server = &dns_conf_servers[index];
-	server->spki[0] = '\0';
-	server->path[0] = '\0';
-	server->hostname[0] = '\0';
-	server->httphost[0] = '\0';
-	server->tls_host_verify[0] = '\0';
-
-	ip = argv[1];
-
-	if (type == DNS_SERVER_HTTPS) {
-		if (parse_uri(ip, NULL, server->server, &port, server->path) != 0) {
-			return -1;
-		}
-		safe_strncpy(server->hostname, server->server, sizeof(server->hostname));
-		safe_strncpy(server->httphost, server->server, sizeof(server->httphost));
-		if (server->path[0] == 0) {
-			safe_strncpy(server->path, "/", sizeof(server->path));
-		}
-	} else {
-		/* parse ip, port from ip */
-		if (parse_ip(ip, server->server, &port) != 0) {
-			return -1;
-		}
-	}
-
-	/* if port is not defined, set port to default 53 */
-	if (port == PORT_NOT_DEFINED) {
-		port = default_port;
-	}
-
-	/* process extra options */
-	optind = 1;
-	while (1) {
-		opt = getopt_long_only(argc, argv, "", long_options, NULL);
-		if (opt == -1) {
-			break;
-		}
-
-		switch (opt) {
-		case 'b': {
-			result_flag |= DNSSERVER_FLAG_BLACKLIST_IP;
-			break;
-		}
-		case 'w': {
-			result_flag |= DNSSERVER_FLAG_WHITELIST_IP;
-			break;
-		}
-		case 'e': {
-			result_flag |= DNSSERVER_FLAG_CHECK_EDNS;
-			break;
-		}
-		case 'h': {
-			safe_strncpy(server->hostname, optarg, DNS_MAX_CNAME_LEN);
-			break;
-		}
-		case 'H': {
-			safe_strncpy(server->httphost, optarg, DNS_MAX_CNAME_LEN);
-			break;
-		}
-		case 'E': {
-			server_flag |= SERVER_FLAG_EXCLUDE_DEFAULT;
-			break;
-		}
-		case 'g': {
-			if (_dns_conf_get_group_set(optarg, server) != 0) {
-				tlog(TLOG_ERROR, "add group failed.");
-				goto errout;
-			}
-			break;
-		}
-		case 'p': {
-			safe_strncpy(server->spki, optarg, DNS_MAX_SPKI_LEN);
-			break;
-		}
-		case 'V': {
-			safe_strncpy(server->tls_host_verify, optarg, DNS_MAX_CNAME_LEN);
-			break;
-		}
-		default:
-			break;
-		}
-	}
-
-	/* add new server */
-	server->type = type;
-	server->port = port;
-	server->result_flag = result_flag;
-	server->server_flag = server_flag;
-	server->ttl = ttl;
-	dns_conf_server_num++;
-	tlog(TLOG_DEBUG, "add server %s, flag: %X, ttl: %d", ip, result_flag, ttl);
-
-	return 0;
-
-errout:
-	if (spki) {
-		free(spki);
-	}
-
-	return -1;
-}
-
-static int _config_domain_iter_free(void *data, const unsigned char *key, uint32_t key_len, void *value)
-{
-	struct dns_domain_rule *domain_rule = value;
-	int i = 0;
-
-	if (domain_rule == NULL) {
-		return 0;
-	}
-
-	for (i = 0; i < DOMAIN_RULE_MAX; i++) {
-		if (domain_rule->rules[i] == NULL) {
-			continue;
-		}
-
-		free(domain_rule->rules[i]);
-	}
-
-	free(domain_rule);
-	return 0;
-}
-
-static void _config_domain_destroy(void)
-{
-	art_iter(&dns_conf_domain_rule, _config_domain_iter_free, NULL);
-	art_tree_destroy(&dns_conf_domain_rule);
-}
-
-static void _config_address_destroy(radix_node_t *node, void *cbctx)
-{
-	if (node == NULL) {
-		return;
-	}
-
-	if (node->data == NULL) {
-		return;
-	}
-
-	free(node->data);
-	node->data = NULL;
-}
-
-static int _config_domain_rule_add(char *domain, enum domain_rule type, void *rule)
-{
-	struct dns_domain_rule *domain_rule = NULL;
-	struct dns_domain_rule *old_domain_rule = NULL;
-	struct dns_domain_rule *add_domain_rule = NULL;
-
-	char domain_key[DNS_MAX_CONF_CNAME_LEN];
-	int len = 0;
-
-	/* Reverse string, for suffix match */
-	len = strlen(domain);
-	if (len >= sizeof(domain_key)) {
-		tlog(TLOG_ERROR, "domain name %s too long", domain);
-		goto errout;
-	}
-	reverse_string(domain_key, domain, len, 1);
-	domain_key[len] = '.';
-	len++;
-	domain_key[len] = 0;
-
-	if (type >= DOMAIN_RULE_MAX) {
-		goto errout;
-	}
-
-	/* Get existing or create domain rule */
-	domain_rule = art_search(&dns_conf_domain_rule, (unsigned char *)domain_key, len);
-	if (domain_rule == NULL) {
-		add_domain_rule = malloc(sizeof(*add_domain_rule));
-		if (add_domain_rule == NULL) {
-			goto errout;
-		}
-		memset(add_domain_rule, 0, sizeof(*add_domain_rule));
-		domain_rule = add_domain_rule;
-	}
-
-	/* add new rule to domain */
-	if (domain_rule->rules[type]) {
-		free(domain_rule->rules[type]);
-		domain_rule->rules[type] = NULL;
-	}
-
-	domain_rule->rules[type] = rule;
-
-	/* update domain rule */
-	if (add_domain_rule) {
-		old_domain_rule = art_insert(&dns_conf_domain_rule, (unsigned char *)domain_key, len, add_domain_rule);
-		if (old_domain_rule) {
-			free(old_domain_rule);
-		}
-	}
-
-	return 0;
-errout:
-	if (add_domain_rule) {
-		free(add_domain_rule);
-	}
-
-	tlog(TLOG_ERROR, "add doamin %s rule failed", domain);
-	return -1;
-}
-
-static int _config_domain_rule_flag_set(char *domain, unsigned int flag)
-{
-	struct dns_domain_rule *domain_rule = NULL;
-	struct dns_domain_rule *old_domain_rule = NULL;
-	struct dns_domain_rule *add_domain_rule = NULL;
-	struct dns_rule_flags *rule_flags = NULL;
-
-	char domain_key[DNS_MAX_CONF_CNAME_LEN];
-	int len = 0;
-
-	len = strlen(domain);
-	if (len >= sizeof(domain_key)) {
-		tlog(TLOG_ERROR, "domain %s too long", domain);
-		return -1;
-	}
-	reverse_string(domain_key, domain, len, 1);
-	domain_key[len] = '.';
-	len++;
-	domain_key[len] = 0;
-
-	/* Get existing or create domain rule */
-	domain_rule = art_search(&dns_conf_domain_rule, (unsigned char *)domain_key, len);
-	if (domain_rule == NULL) {
-		add_domain_rule = malloc(sizeof(*add_domain_rule));
-		if (add_domain_rule == NULL) {
-			goto errout;
-		}
-		memset(add_domain_rule, 0, sizeof(*add_domain_rule));
-		domain_rule = add_domain_rule;
-	}
-
-	/* add new rule to domain */
-	if (domain_rule->rules[DOMAIN_RULE_FLAGS] == NULL) {
-		rule_flags = malloc(sizeof(*rule_flags));
-		rule_flags->flags = 0;
-		domain_rule->rules[DOMAIN_RULE_FLAGS] = rule_flags;
-	}
-
-	rule_flags = domain_rule->rules[DOMAIN_RULE_FLAGS];
-	rule_flags->flags |= flag;
-
-	/* update domain rule */
-	if (add_domain_rule) {
-		old_domain_rule = art_insert(&dns_conf_domain_rule, (unsigned char *)domain_key, len, add_domain_rule);
-		if (old_domain_rule) {
-			free(old_domain_rule);
-		}
-	}
-
-	return 0;
-errout:
-	if (add_domain_rule) {
-		free(add_domain_rule);
-	}
-
-	tlog(TLOG_ERROR, "add doamin %s rule failed", domain);
-	return 0;
-}
-
-static void _config_ipset_table_destroy(void)
-{
-	struct dns_ipset_name *ipset_name = NULL;
-	struct hlist_node *tmp = NULL;
-	int i;
-
-	hash_for_each_safe(dns_ipset_table.ipset, i, tmp, ipset_name, node)
-	{
-		hlist_del_init(&ipset_name->node);
-		free(ipset_name);
-	}
-}
-
-static const char *_dns_conf_get_ipset(const char *ipsetname)
-{
-	uint32_t key = 0;
-	struct dns_ipset_name *ipset_name = NULL;
-
-	key = hash_string(ipsetname);
-	hash_for_each_possible(dns_ipset_table.ipset, ipset_name, node, key)
-	{
-		if (strncmp(ipset_name->ipsetname, ipsetname, DNS_MAX_IPSET_NAMELEN) == 0) {
-			return ipset_name->ipsetname;
-		}
-	}
-
-	ipset_name = malloc(sizeof(*ipset_name));
-	if (ipset_name == NULL) {
-		goto errout;
-	}
-
-	key = hash_string(ipsetname);
-	safe_strncpy(ipset_name->ipsetname, ipsetname, DNS_MAX_IPSET_NAMELEN);
-	hash_add(dns_ipset_table.ipset, &ipset_name->node, key);
-
-	return ipset_name->ipsetname;
-errout:
-	if (ipset_name) {
-		free(ipset_name);
-	}
-
-	return NULL;
-}
-
-static int _config_ipset(void *data, int argc, char *argv[])
-{
-	struct dns_ipset_rule *ipset_rule = NULL;
-	char domain[DNS_MAX_CONF_CNAME_LEN];
-	char ipsetname[DNS_MAX_IPSET_NAMELEN];
-	const char *ipset = NULL;
-	char *begin = NULL;
-	char *end = NULL;
-	int len = 0;
-	char *value = argv[1];
-
-	if (argc <= 1) {
-		goto errout;
-	}
-
-	/* first field */
-	begin = strstr(value, "/");
-	if (begin == NULL) {
-		goto errout;
-	}
-
-	/* second field */
-	begin++;
-	end = strstr(begin, "/");
-	if (end == NULL) {
-		goto errout;
-	}
-
-	/* remove prefix . */
-	while (*begin == '.') {
-		begin++;
-	}
-
-	/* Get domain */
-	len = end - begin;
-	if (len >= sizeof(domain)) {
-		tlog(TLOG_ERROR, "domain name %s too long", value);
-		goto errout;
-	}
-
-	memcpy(domain, begin, len);
-	domain[len] = '\0';
-
-	len = strlen(end + 1);
-	if (len <= 0) {
-		goto errout;
-	}
-
-	/* Process domain option */
-	if (strncmp(end + 1, "-", sizeof("-")) != 0) {
-		/* new ipset domain */
-		safe_strncpy(ipsetname, end + 1, DNS_MAX_IPSET_NAMELEN);
-		ipset = _dns_conf_get_ipset(ipsetname);
-		if (ipset == NULL) {
-			goto errout;
-		}
-
-		ipset_rule = malloc(sizeof(*ipset_rule));
-		if (ipset_rule == NULL) {
-			goto errout;
-		}
-
-		ipset_rule->ipsetname = ipset;
-	} else {
-		/* ignore this domain */
-		if (_config_domain_rule_flag_set(domain, DOMAIN_FLAG_IPSET_IGNORE) != 0) {
-			goto errout;
-		}
-
-		return 0;
-	}
-
-	if (_config_domain_rule_add(domain, DOMAIN_RULE_IPSET, ipset_rule) != 0) {
-		goto errout;
-	}
-
-	return 0;
-errout:
-	if (ipset_rule) {
-		free(ipset_rule);
-	}
-
-	tlog(TLOG_ERROR, "add ipset %s failed", value);
-	return 0;
-}
-
-static int _config_address(void *data, int argc, char *argv[])
-{
-	struct dns_address_IPV4 *address_ipv4 = NULL;
-	struct dns_address_IPV6 *address_ipv6 = NULL;
-	void *address = NULL;
-	char *value = argv[1];
-	char ip[MAX_IP_LEN];
-	char domain[DNS_MAX_CONF_CNAME_LEN];
-	char *begin = NULL;
-	char *end = NULL;
-	int len = 0;
-	int port;
-	struct sockaddr_storage addr;
-	socklen_t addr_len = sizeof(addr);
-	enum domain_rule type = 0;
-	unsigned int flag = 0;
-
-	if (argc <= 1) {
-		goto errout;
-	}
-
-	/* first field */
-	begin = strstr(value, "/");
-	if (begin == NULL) {
-		goto errout;
-	}
-
-	/* second field */
-	begin++;
-	end = strstr(begin, "/");
-	if (end == NULL) {
-		goto errout;
-	}
-
-	/* remove prefix . */
-	while (*begin == '.') {
-		begin++;
-	}
-
-	/* get domain */
-	len = end - begin;
-
-	if (len >= sizeof(domain)) {
-		tlog(TLOG_ERROR, "domain name %s too long", value);
-		goto errout;
-	}
-
-	memcpy(domain, begin, len);
-	domain[len] = 0;
-
-	if (*(end + 1) == '#') {
-		if (strncmp(end + 1, "#4", sizeof("#4")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_IPV4_SOA;
-		} else if (strncmp(end + 1, "#6", sizeof("#6")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_IPV6_SOA;
-		} else if (strncmp(end + 1, "#", sizeof("#")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_SOA;
-		} else {
-			goto errout;
-		}
-
-		/* add SOA rule */
-		if (_config_domain_rule_flag_set(domain, flag) != 0) {
-			goto errout;
-		}
-
-		return 0;
-	} else if (*(end + 1) == '-') {
-		if (strncmp(end + 1, "-4", sizeof("-4")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_IPV4_IGN;
-		} else if (strncmp(end + 1, "-6", sizeof("-6")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_IPV6_IGN;
-		} else if (strncmp(end + 1, "-", sizeof("-")) == 0) {
-			flag = DOMAIN_FLAG_ADDR_IGN;
-		} else {
-			goto errout;
-		}
-
-		/* ignore rule */
-		if (_config_domain_rule_flag_set(domain, flag) != 0) {
-			goto errout;
-		}
-
-		return 0;
-	} else {
-		/* set address to domain */
-		if (parse_ip(end + 1, ip, &port) != 0) {
-			goto errout;
-		}
-
-		if (getaddr_by_host(ip, (struct sockaddr *)&addr, &addr_len) != 0) {
-			goto errout;
-		}
-
-		switch (addr.ss_family) {
-		case AF_INET: {
-			struct sockaddr_in *addr_in;
-			address_ipv4 = malloc(sizeof(*address_ipv4));
-			if (address_ipv4 == NULL) {
-				goto errout;
-			}
-
-			addr_in = (struct sockaddr_in *)&addr;
-			memcpy(address_ipv4->ipv4_addr, &addr_in->sin_addr.s_addr, 4);
-			type = DOMAIN_RULE_ADDRESS_IPV4;
-			address = address_ipv4;
-		} break;
-		case AF_INET6: {
-			struct sockaddr_in6 *addr_in6;
-			addr_in6 = (struct sockaddr_in6 *)&addr;
-			if (IN6_IS_ADDR_V4MAPPED(&addr_in6->sin6_addr)) {
-				address_ipv4 = malloc(sizeof(*address_ipv4));
-				if (address_ipv4 == NULL) {
-					goto errout;
-				}
-				memcpy(address_ipv4->ipv4_addr, addr_in6->sin6_addr.s6_addr + 12, 4);
-				type = DOMAIN_RULE_ADDRESS_IPV4;
-				address = address_ipv4;
-			} else {
-				address_ipv6 = malloc(sizeof(*address_ipv6));
-				if (address_ipv6 == NULL) {
-					goto errout;
-				}
-				memcpy(address_ipv6->ipv6_addr, addr_in6->sin6_addr.s6_addr, 16);
-				type = DOMAIN_RULE_ADDRESS_IPV6;
-				address = address_ipv6;
-			}
-		} break;
-		default:
-			goto errout;
-		}
-	}
-
-	/* add domain to ART-tree */
-	if (_config_domain_rule_add(domain, type, address) != 0) {
-		goto errout;
-	}
-
-	return 0;
-errout:
-	if (address) {
-		free(address);
-	}
-
-	tlog(TLOG_ERROR, "add address %s failed", value);
-	return 0;
-}
-
-static int _config_speed_check_mode(void *data, int argc, char *argv[])
-{
-	char mode[DNS_MAX_OPT_LEN];
-	char *field;
-	char *ptr;
-	int order = 0;
-	int port = 80;
-	int i = 0;
-
-	if (argc <= 1) {
-		return -1;
-	}
-
-	safe_strncpy(mode, argv[1], sizeof(mode));
-	ptr = mode;
-	do {
-		field = ptr;
-		ptr = strstr(mode, ",");
-		if (field == NULL || order >= DOMAIN_CHECK_NUM) {
-			return 0;
-		}
-
-		if (ptr) {
-			*ptr = 0;
-		}
-
-		if (strncmp(field, "ping", sizeof("ping")) == 0) {
-			dns_conf_check_order.order[order] = DOMAIN_CHECK_ICMP;
-		} else if (strstr(field, "tcp") == field) {
-			char *port_str = strstr(field, ":");
-			if (port_str) {
-				port = atoi(port_str + 1);
-				if (port <= 0 || port >= 65535) {
-					port = 80;
-				}
-			}
-
-			dns_conf_check_order.order[order] = DOMAIN_CHECK_TCP;
-			dns_conf_check_order.tcp_port = port;
-		} else if (strncmp(field, "none", sizeof("none")) == 0) {
-			dns_conf_check_order.order[order] = DOMAIN_CHECK_NONE;
-			for (i = order + 1; i < DOMAIN_CHECK_NUM; i++) {
-				dns_conf_check_order.order[i] = DOMAIN_CHECK_NONE;
-			}
-
-			return 0;
-		}
-		order++;
-		if (ptr) {
-			ptr++;
-		}
-
-	} while (1);
-
-	return 0;
-}
-
-static int _config_bind_ip(int argc, char *argv[], DNS_BIND_TYPE type)
-{
-	int index = dns_conf_bind_ip_num;
-	struct dns_bind_ip *bind_ip;
-	char *ip = NULL;
-	int opt = 0;
-	char group_name[DNS_GROUP_NAME_LEN];
-	const char *group = NULL;
-	unsigned int server_flag = 0;
-
-	/* clang-format off */
-	static struct option long_options[] = {
-		{"group", required_argument, NULL, 'g'}, /* add to group */
-		{"no-rule-addr", no_argument, NULL, 'A'},   
-		{"no-rule-nameserver", no_argument, NULL, 'N'},   
-		{"no-rule-ipset", no_argument, NULL, 'I'},   
-		{"no-rule-sni-proxy", no_argument, NULL, 'P'},   
-		{"no-rule-soa", no_argument, NULL, 'O'},
-		{"no-speed-check", no_argument, NULL, 'S'},  
-		{"no-cache", no_argument, NULL, 'C'},  
-		{"no-dualstack-selection", no_argument, NULL, 'D'},
-		{NULL, no_argument, NULL, 0}
-	};
-	/* clang-format on */
-	if (argc <= 1) {
-		tlog(TLOG_ERROR, "invalid parameter.");
-		goto errout;
-	}
-
-	if (index >= DNS_MAX_SERVERS) {
-		tlog(TLOG_WARN, "exceeds max server number, %s", ip);
-		return 0;
-	}
-
-	bind_ip = &dns_conf_bind_ip[index];
-	bind_ip->type = type;
-	bind_ip->flags = 0;
-	ip = argv[1];
-	safe_strncpy(bind_ip->ip, ip, DNS_MAX_IPLEN);
-
-	/* process extra options */
-	optind = 1;
-	while (1) {
-		opt = getopt_long_only(argc, argv, "", long_options, NULL);
-		if (opt == -1) {
-			break;
-		}
-
-		switch (opt) {
-		case 'g': {
-			safe_strncpy(group_name, optarg, DNS_GROUP_NAME_LEN);
-			group = _dns_conf_get_group_name(group_name);
-			break;
-		}
-		case 'A': {
-			server_flag |= BIND_FLAG_NO_RULE_ADDR;
-			break;
-		}
-		case 'N': {
-			server_flag |= BIND_FLAG_NO_RULE_NAMESERVER;
-			break;
-		}
-		case 'I': {
-			server_flag |= BIND_FLAG_NO_RULE_IPSET;
-			break;
-		}
-		case 'P': {
-			server_flag |= BIND_FLAG_NO_RULE_SNIPROXY;
-			break;
-		}
-		case 'S': {
-			server_flag |= BIND_FLAG_NO_SPEED_CHECK;
-			break;
-		}
-		case 'C': {
-			server_flag |= BIND_FLAG_NO_CACHE;
-			break;
-		}
-		case 'O': {
-			server_flag |= BIND_FLAG_NO_RULE_SOA;
-			break;
-		}
-		case 'D': {
-			server_flag |= BIND_FLAG_NO_DUALSTACK_SELECTION;
-			break;
-		}
-		default:
-			break;
-		}
-	}
-
-	/* add new server */
-	bind_ip->flags = server_flag;
-	bind_ip->group = group;
-	dns_conf_bind_ip_num++;
-	tlog(TLOG_DEBUG, "bind ip %s, type:%d, flag: %X", ip, type, server_flag);
-
-	return 0;
-
-errout:
-	return -1;
-}
-
-static int _config_bind_ip_udp(void *data, int argc, char *argv[])
-{
-	return _config_bind_ip(argc, argv, DNS_BIND_TYPE_UDP);
-}
-
-static int _config_bind_ip_tcp(void *data, int argc, char *argv[])
-{
-	return _config_bind_ip(argc, argv, DNS_BIND_TYPE_TCP);
-}
-
-static int _config_server_udp(void *data, int argc, char *argv[])
-{
-	return _config_server(argc, argv, DNS_SERVER_UDP, DEFAULT_DNS_PORT);
-}
-
-static int _config_server_tcp(void *data, int argc, char *argv[])
-{
-	return _config_server(argc, argv, DNS_SERVER_TCP, DEFAULT_DNS_PORT);
-}
-
-static int _config_server_tls(void *data, int argc, char *argv[])
-{
-	return _config_server(argc, argv, DNS_SERVER_TLS, DEFAULT_DNS_TLS_PORT);
-}
-
-static int _config_server_https(void *data, int argc, char *argv[])
-{
-	int ret = 0;
-	ret = _config_server(argc, argv, DNS_SERVER_HTTPS, DEFAULT_DNS_HTTPS_PORT);
-
-	return ret;
-}
-
-static int _config_nameserver(void *data, int argc, char *argv[])
-{
-	struct dns_nameserver_rule *nameserver_rule = NULL;
-	char domain[DNS_MAX_CONF_CNAME_LEN];
-	char group_name[DNS_GROUP_NAME_LEN];
-	const char *group = NULL;
-	char *begin = NULL;
-	char *end = NULL;
-	int len = 0;
-	char *value = argv[1];
-
-	if (argc <= 1) {
-		goto errout;
-	}
-
-	/* first field */
-	begin = strstr(value, "/");
-	if (begin == NULL) {
-		goto errout;
-	}
-
-	/* second field */
-	begin++;
-	end = strstr(begin, "/");
-	if (end == NULL) {
-		goto errout;
-	}
-
-	/* remove prefix . */
-	while (*begin == '.') {
-		begin++;
-	}
-
-	len = end - begin;
-
-	if (len >= sizeof(domain)) {
-		tlog(TLOG_ERROR, "domain name %s too long", value);
-		goto errout;
-	}
-
-	memcpy(domain, begin, len);
-	domain[len] = '\0';
-
-	len = strlen(end + 1);
-	if (len <= 0) {
-		goto errout;
-	}
-
-	if (strncmp(end + 1, "-", sizeof("-")) != 0) {
-		safe_strncpy(group_name, end + 1, DNS_GROUP_NAME_LEN);
-		group = _dns_conf_get_group_name(group_name);
-		if (group == NULL) {
-			goto errout;
-		}
-
-		nameserver_rule = malloc(sizeof(*nameserver_rule));
-		if (nameserver_rule == NULL) {
-			goto errout;
-		}
-
-		nameserver_rule->group_name = group;
-	} else {
-		/* ignore this domain */
-		if (_config_domain_rule_flag_set(domain, DOMAIN_FLAG_NAMESERVER_IGNORE) != 0) {
-			goto errout;
-		}
-
-		return 0;
-	}
-
-	if (_config_domain_rule_add(domain, DOMAIN_RULE_NAMESERVER, nameserver_rule) != 0) {
-		goto errout;
-	}
-
-	return 0;
-errout:
-	if (nameserver_rule) {
-		free(nameserver_rule);
-	}
-
-	tlog(TLOG_ERROR, "add nameserver %s failed", value);
-	return 0;
-}
-
-static radix_node_t *_create_addr_node(char *addr)
-{
-	radix_node_t *node;
-	void *p;
-	prefix_t prefix;
-	const char *errmsg = NULL;
-	radix_tree_t *tree = NULL;
-
-	p = prefix_pton(addr, -1, &prefix, &errmsg);
-	if (p == NULL) {
-		return NULL;
-	}
-
-	switch (prefix.family) {
-	case AF_INET:
-		tree = dns_conf_address_rule.ipv4;
-		break;
-	case AF_INET6:
-		tree = dns_conf_address_rule.ipv6;
-		break;
-	}
-
-	node = radix_lookup(tree, &prefix);
-	return node;
-}
-
-static int _config_iplist_rule(char *subnet, enum address_rule rule)
-{
-	radix_node_t *node = NULL;
-	struct dns_ip_address_rule *ip_rule = NULL;
-
-	node = _create_addr_node(subnet);
-	if (node == NULL) {
-		return -1;
-	}
-
-	if (node->data == NULL) {
-		ip_rule = malloc(sizeof(*ip_rule));
-		if (ip_rule == NULL) {
-			return -1;
-		}
-
-		node->data = ip_rule;
-		memset(ip_rule, 0, sizeof(*ip_rule));
-	}
-
-	ip_rule = node->data;
-
-	switch (rule) {
-	case ADDRESS_RULE_BLACKLIST:
-		ip_rule->blacklist = 1;
-		break;
-	case ADDRESS_RULE_WHITELIST:
-		ip_rule->whitelist = 1;
-		break;
-	case ADDRESS_RULE_BOGUS:
-		ip_rule->bogus = 1;
-		break;
-	case ADDRESS_RULE_IP_IGNORE:
-		ip_rule->ip_ignore = 1;
-		break;
-	default:
-		return -1;
-	}
-
-	return 0;
-}
-
-static int _config_blacklist_ip(void *data, int argc, char *argv[])
-{
-	if (argc <= 1) {
-		return -1;
-	}
-
-	return _config_iplist_rule(argv[1], ADDRESS_RULE_BLACKLIST);
-}
-
-static int _conf_bogus_nxdomain(void *data, int argc, char *argv[])
-{
-	if (argc <= 1) {
-		return -1;
-	}
-
-	return _config_iplist_rule(argv[1], ADDRESS_RULE_BOGUS);
-}
-
-static int _conf_ip_ignore(void *data, int argc, char *argv[])
-{
-	if (argc <= 1) {
-		return -1;
-	}
-
-	return _config_iplist_rule(argv[1], ADDRESS_RULE_IP_IGNORE);
-}
-
-static int _conf_whitelist_ip(void *data, int argc, char *argv[])
-{
-	if (argc <= 1) {
-		return -1;
-	}
-
-	return _config_iplist_rule(argv[1], ADDRESS_RULE_WHITELIST);
-}
-
-static int _conf_edns_client_subnet(void *data, int argc, char *argv[])
-{
-	char *slash = NULL;
-	char *value = NULL;
-	int subnet = 0;
-	struct dns_edns_client_subnet *ecs = NULL;
-	struct sockaddr_storage addr;
-	socklen_t addr_len = sizeof(addr);
-
-	if (argc <= 1 || data == NULL) {
-		return -1;
-	}
-
-	value = argv[1];
-
-	slash = strstr(value, "/");
-	if (slash) {
-		*slash = 0;
-		slash++;
-		subnet = atoi(slash);
-		if (subnet < 0 || subnet > 128) {
-			return -1;
-		}
-	}
-
-	if (getaddr_by_host(value, (struct sockaddr *)&addr, &addr_len) != 0) {
-		goto errout;
-	}
-
-	switch (addr.ss_family) {
-	case AF_INET:
-		ecs = &dns_conf_ipv4_ecs;
-		break;
-	case AF_INET6:
-		ecs = &dns_conf_ipv6_ecs;
-		break;
-	default:
-		goto errout;
-	}
-
-	safe_strncpy(ecs->ip, value, DNS_MAX_IPLEN);
-	ecs->subnet = subnet;
-	ecs->enable = 1;
-
-	return 0;
-
-errout:
-	return -1;
-}
-
-static int _config_log_level(void *data, int argc, char *argv[])
-{
-	/* read log level and set */
-	char *value = argv[1];
-
-	if (strncmp("debug", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_DEBUG;
-	} else if (strncmp("info", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_INFO;
-	} else if (strncmp("notice", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_NOTICE;
-	} else if (strncmp("warn", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_WARN;
-	} else if (strncmp("error", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_ERROR;
-	} else if (strncmp("fatal", value, MAX_LINE_LEN) == 0) {
-		dns_conf_log_level = TLOG_FATAL;
-	} else {
-		return -1;
-	}
-
-	return 0;
-}
-
-static struct config_item _config_item[] = {
-	CONF_STRING("server-name", (char *)dns_conf_server_name, DNS_MAX_SERVER_NAME_LEN),
-	CONF_CUSTOM("bind", _config_bind_ip_udp, NULL),
-	CONF_CUSTOM("bind-tcp", _config_bind_ip_tcp, NULL),
-	CONF_CUSTOM("server", _config_server_udp, NULL),
-	CONF_CUSTOM("server-tcp", _config_server_tcp, NULL),
-	CONF_CUSTOM("server-tls", _config_server_tls, NULL),
-	CONF_CUSTOM("server-https", _config_server_https, NULL),
-	CONF_CUSTOM("nameserver", _config_nameserver, NULL),
-	CONF_CUSTOM("address", _config_address, NULL),
-	CONF_YESNO("ipset-timeout", &dns_conf_ipset_timeout_enable),
-	CONF_CUSTOM("ipset", _config_ipset, NULL),
-	CONF_CUSTOM("speed-check-mode", _config_speed_check_mode, NULL),
-	CONF_INT("tcp-idle-time", &dns_conf_tcp_idle_time, 0, 3600),
-	CONF_INT("cache-size", &dns_conf_cachesize, 0, CONF_INT_MAX),
-	CONF_YESNO("prefetch-domain", &dns_conf_prefetch),
-	CONF_YESNO("dualstack-ip-selection", &dns_conf_dualstack_ip_selection),
-	CONF_INT("dualstack-ip-selection-threshold", &dns_conf_dualstack_ip_selection_threshold, 0, 1000),
-	CONF_CUSTOM("log-level", _config_log_level, NULL),
-	CONF_STRING("log-file", (char *)dns_conf_log_file, DNS_MAX_PATH),
-	CONF_SIZE("log-size", &dns_conf_log_size, 0, 1024 * 1024 * 1024),
-	CONF_INT("log-num", &dns_conf_log_num, 0, 1024),
-	CONF_YESNO("audit-enable", &dns_conf_audit_enable),
-	CONF_YESNO("audit-SOA", &dns_conf_audit_log_SOA),
-	CONF_STRING("audit-file", (char *)&dns_conf_audit_file, DNS_MAX_PATH),
-	CONF_SIZE("audit-size", &dns_conf_audit_size, 0, 1024 * 1024 * 1024),
-	CONF_INT("audit-num", &dns_conf_audit_num, 0, 1024),
-	CONF_INT("rr-ttl", &dns_conf_rr_ttl, 0, CONF_INT_MAX),
-	CONF_INT("rr-ttl-min", &dns_conf_rr_ttl_min, 0, CONF_INT_MAX),
-	CONF_INT("rr-ttl-max", &dns_conf_rr_ttl_max, 0, CONF_INT_MAX),
-	CONF_YESNO("force-AAAA-SOA", &dns_conf_force_AAAA_SOA),
-	CONF_CUSTOM("blacklist-ip", _config_blacklist_ip, NULL),
-	CONF_CUSTOM("whitelist-ip", _conf_whitelist_ip, NULL),
-	CONF_CUSTOM("bogus-nxdomain", _conf_bogus_nxdomain, NULL),
-	CONF_CUSTOM("ignore-ip", _conf_ip_ignore, NULL),
-	CONF_CUSTOM("edns-client-subnet", _conf_edns_client_subnet, NULL),
-	CONF_CUSTOM("conf-file", config_addtional_file, NULL),
-	CONF_END(),
-};
-
-static int _conf_printf(const char *file, int lineno, int ret)
-{
-	if (ret == CONF_RET_ERR) {
-		tlog(TLOG_ERROR, "process config file '%s' failed at line %d.", file, lineno);
-		syslog(LOG_NOTICE, "process config file '%s' failed at line %d.", file, lineno);
-		return -1;
-	} else if (ret == CONF_RET_WARN) {
-		tlog(TLOG_WARN, "process config file '%s' failed at line %d.", file, lineno);
-		syslog(LOG_NOTICE, "process config file '%s' failed at line %d.", file, lineno);
-		return -1;
-	}
-
-	return 0;
-}
-
-int config_addtional_file(void *data, int argc, char *argv[])
-{
-	char *conf_file = argv[1];
-	char file_path[DNS_MAX_PATH];
-	char file_path_dir[DNS_MAX_PATH];
-
-	if (conf_file[0] != '/') {
-		safe_strncpy(file_path_dir, conf_get_conf_file(), DNS_MAX_PATH);
-		dirname(file_path_dir);
-		if (snprintf(file_path, DNS_MAX_PATH, "%s/%s", file_path_dir, conf_file) < 0) {
-			return -1;
-		}
-	} else {
-		safe_strncpy(file_path, conf_file, DNS_MAX_PATH);
-	}
-
-	if (access(file_path, R_OK) != 0) {
-		tlog(TLOG_WARN, "conf file %s is not readable.", file_path);
-		syslog(LOG_NOTICE, "conf file %s is not readable.", file_path);
-		return 0;
-	}
-
-	return load_conf(file_path, _config_item, _conf_printf);
-}
-
-static int _dns_server_load_conf_init(void)
-{
-	dns_conf_address_rule.ipv4 = New_Radix();
-	dns_conf_address_rule.ipv6 = New_Radix();
-	if (dns_conf_address_rule.ipv4 == NULL || dns_conf_address_rule.ipv6 == NULL) {
-		tlog(TLOG_WARN, "init radix tree failed.");
-		return -1;
-	}
-
-	art_tree_init(&dns_conf_domain_rule);
-
-	hash_init(dns_ipset_table.ipset);
-	hash_init(dns_group_table.group);
-
-	return 0;
-}
-
-void dns_server_load_exit(void)
-{
-	_config_domain_destroy();
-	Destroy_Radix(dns_conf_address_rule.ipv4, _config_address_destroy, NULL);
-	Destroy_Radix(dns_conf_address_rule.ipv6, _config_address_destroy, NULL);
-	_config_ipset_table_destroy();
-	_config_group_table_destroy();
-}
-
-static int _dns_conf_speed_check_mode_verify(void)
-{
-	int i, j;
-	int has_cap = has_network_raw_cap();
-	int print_log = 0;
-	if (has_cap == 1) {
-		return 0;
-	}
-
-	for (i = 0; i < DOMAIN_CHECK_NUM; i++) {
-		if (dns_conf_check_order.order[i] == DOMAIN_CHECK_ICMP) {
-			for (j = i + 1; j < DOMAIN_CHECK_NUM; j++) {
-				dns_conf_check_order.order[j - 1] = dns_conf_check_order.order[j];
-			}
-			dns_conf_check_order.order[j - 1] = DOMAIN_CHECK_NONE;
-			print_log = 1;
-		}
-	}
-
-	if (print_log) {
-		tlog(TLOG_WARN, "speed check by ping is disabled because smartdns does not have network raw privileges");
-	}
-
-	return 0;
-}
-
-static int _dns_conf_load_post(void)
-{
-	_dns_conf_speed_check_mode_verify();
-	return 0;
-}
-
-int dns_server_load_conf(const char *file)
-{
-	int ret = 0;
-	_dns_server_load_conf_init();
-	openlog("smartdns", LOG_CONS | LOG_NDELAY, LOG_LOCAL1);
-	ret = load_conf(file, _config_item, _conf_printf);
-	closelog();
-	_dns_conf_load_post();
-	return ret;
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "dns_conf.h"
+#include "list.h"
+#include "rbtree.h"
+#include "tlog.h"
+#include "util.h"
+#include <getopt.h>
+#include <libgen.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <syslog.h>
+#include <unistd.h>
+
+#define DEFAULT_DNS_CACHE_SIZE 512
+
+/* ipset */
+struct dns_ipset_table {
+	DECLARE_HASHTABLE(ipset, 8);
+};
+static struct dns_ipset_table dns_ipset_table;
+
+/* dns groups */
+struct dns_group_table dns_group_table;
+
+/* server ip/port  */
+struct dns_bind_ip dns_conf_bind_ip[DNS_MAX_BIND_IP];
+int dns_conf_bind_ip_num = 0;
+int dns_conf_tcp_idle_time = 120;
+
+/* cache */
+int dns_conf_cachesize = DEFAULT_DNS_CACHE_SIZE;
+int dns_conf_prefetch = 0;
+int dns_conf_serve_expired = 0;
+int dns_conf_serve_expired_ttl = 0;
+
+/* upstream servers */
+struct dns_servers dns_conf_servers[DNS_MAX_SERVERS];
+char dns_conf_server_name[DNS_MAX_SERVER_NAME_LEN];
+int dns_conf_server_num;
+
+struct dns_domain_check_order dns_conf_check_order = {
+	.order = {DOMAIN_CHECK_ICMP, DOMAIN_CHECK_TCP},
+	.tcp_port = 80,
+};
+int dns_has_cap_ping = 0;
+
+/* logging */
+int dns_conf_log_level = TLOG_ERROR;
+char dns_conf_log_file[DNS_MAX_PATH];
+size_t dns_conf_log_size = 1024 * 1024;
+int dns_conf_log_num = 8;
+
+/* CA file */
+char dns_conf_ca_file[DNS_MAX_PATH];
+char dns_conf_ca_path[DNS_MAX_PATH];
+
+/* auditing */
+int dns_conf_audit_enable = 0;
+int dns_conf_audit_log_SOA;
+char dns_conf_audit_file[DNS_MAX_PATH];
+size_t dns_conf_audit_size = 1024 * 1024;
+int dns_conf_audit_num = 2;
+
+/* address rules */
+art_tree dns_conf_domain_rule;
+struct dns_conf_address_rule dns_conf_address_rule;
+
+/* dual-stack selection */
+int dns_conf_dualstack_ip_selection;
+int dns_conf_dualstack_ip_selection_threshold = 30;
+
+/* TTL */
+int dns_conf_rr_ttl;
+int dns_conf_rr_ttl_min;
+int dns_conf_rr_ttl_max;
+int dns_conf_force_AAAA_SOA;
+
+int dns_conf_ipset_timeout_enable;
+
+/* ECS */
+struct dns_edns_client_subnet dns_conf_ipv4_ecs;
+struct dns_edns_client_subnet dns_conf_ipv6_ecs;
+
+char dns_conf_sni_proxy_ip[DNS_MAX_IPLEN];
+
+static int _get_domain(char *value, char *domain, int max_dmain_size, char **ptr_after_domain)
+{
+	char *begin = NULL;
+	char *end = NULL;
+	int len = 0;
+
+	/* first field */
+	begin = strstr(value, "/");
+	if (begin == NULL) {
+		goto errout;
+	}
+
+	/* second field */
+	begin++;
+	end = strstr(begin, "/");
+	if (end == NULL) {
+		goto errout;
+	}
+
+	/* remove prefix . */
+	while (*begin == '.') {
+		begin++;
+	}
+
+	/* Get domain */
+	len = end - begin;
+	if (len >= max_dmain_size) {
+		tlog(TLOG_ERROR, "domain name %s too long", value);
+		goto errout;
+	}
+
+	memcpy(domain, begin, len);
+	domain[len] = '\0';
+
+	if (ptr_after_domain) {
+		*ptr_after_domain = end + 1;
+	}
+
+	return 0;
+errout:
+	return -1;
+}
+
+/* create and get dns server group */
+static struct dns_server_groups *_dns_conf_get_group(const char *group_name)
+{
+	uint32_t key = 0;
+	struct dns_server_groups *group = NULL;
+
+	key = hash_string(group_name);
+	hash_for_each_possible(dns_group_table.group, group, node, key)
+	{
+		if (strncmp(group->group_name, group_name, DNS_MAX_IPLEN) == 0) {
+			return group;
+		}
+	}
+
+	group = malloc(sizeof(*group));
+	if (group == NULL) {
+		goto errout;
+	}
+
+	memset(group, 0, sizeof(*group));
+	safe_strncpy(group->group_name, group_name, DNS_GROUP_NAME_LEN);
+	hash_add(dns_group_table.group, &group->node, key);
+
+	return group;
+errout:
+	if (group) {
+		free(group);
+	}
+
+	return NULL;
+}
+
+static int _dns_conf_get_group_set(const char *group_name, struct dns_servers *server)
+{
+	struct dns_server_groups *group = NULL;
+	int i = 0;
+
+	group = _dns_conf_get_group(group_name);
+	if (group == NULL) {
+		return -1;
+	}
+
+	for (i = 0; i < group->server_num; i++) {
+		if (group->servers[i] == server) {
+			return 0;
+		}
+	}
+
+	if (group->server_num >= DNS_MAX_SERVERS) {
+		return -1;
+	}
+
+	group->servers[group->server_num] = server;
+	group->server_num++;
+
+	return 0;
+}
+
+static const char *_dns_conf_get_group_name(const char *group_name)
+{
+	struct dns_server_groups *group = NULL;
+
+	group = _dns_conf_get_group(group_name);
+	if (group == NULL) {
+		return NULL;
+	}
+
+	return group->group_name;
+}
+
+static void _config_group_table_destroy(void)
+{
+	struct dns_server_groups *group = NULL;
+	struct hlist_node *tmp = NULL;
+	int i;
+
+	hash_for_each_safe(dns_group_table.group, i, tmp, group, node)
+	{
+		hlist_del_init(&group->node);
+		free(group);
+	}
+}
+
+static int _config_server(int argc, char *argv[], dns_server_type_t type, int default_port)
+{
+	int index = dns_conf_server_num;
+	struct dns_servers *server;
+	int port = -1;
+	char *ip = NULL;
+	int opt = 0;
+	unsigned int result_flag = 0;
+	unsigned int server_flag = 0;
+	unsigned char *spki = NULL;
+
+	int ttl = 0;
+	/* clang-format off */
+	static struct option long_options[] = {
+		{"blacklist-ip", no_argument, NULL, 'b'}, /* filtering with blacklist-ip */
+		{"whitelist-ip", no_argument, NULL, 'w'}, /* filtering with whitelist-ip */
+#ifdef FEATURE_CHECK_EDNS
+		/* experimental feature */
+		{"check-edns", no_argument, NULL, 'e'},   /* check edns */
+#endif 
+		{"spki-pin", required_argument, NULL, 'p'}, /* check SPKI pin */
+		{"host-name", required_argument, NULL, 'h'}, /* host name */
+		{"http-host", required_argument, NULL, 'H'}, /* http host */
+		{"no-check-certificate", no_argument, NULL, 'N'}, /* do not check certificate */
+		{"tls-host-verify", required_argument, NULL, 'V' }, /* verify tls hostname */
+		{"group", required_argument, NULL, 'g'}, /* add to group */
+		{"exclude-default-group", no_argument, NULL, 'E'}, /* ecluse this from default group */
+		{NULL, no_argument, NULL, 0}
+	};
+	/* clang-format on */
+	if (argc <= 1) {
+		tlog(TLOG_ERROR, "invalid parameter.");
+		return -1;
+	}
+
+	if (index >= DNS_MAX_SERVERS) {
+		tlog(TLOG_WARN, "exceeds max server number, %s", ip);
+		return 0;
+	}
+
+	server = &dns_conf_servers[index];
+	server->spki[0] = '\0';
+	server->path[0] = '\0';
+	server->hostname[0] = '\0';
+	server->httphost[0] = '\0';
+	server->tls_host_verify[0] = '\0';
+
+	ip = argv[1];
+
+	if (type == DNS_SERVER_HTTPS) {
+		if (parse_uri(ip, NULL, server->server, &port, server->path) != 0) {
+			return -1;
+		}
+		safe_strncpy(server->hostname, server->server, sizeof(server->hostname));
+		safe_strncpy(server->httphost, server->server, sizeof(server->httphost));
+		if (server->path[0] == 0) {
+			safe_strncpy(server->path, "/", sizeof(server->path));
+		}
+	} else {
+		/* parse ip, port from ip */
+		if (parse_ip(ip, server->server, &port) != 0) {
+			return -1;
+		}
+	}
+
+	/* if port is not defined, set port to default 53 */
+	if (port == PORT_NOT_DEFINED) {
+		port = default_port;
+	}
+
+	/* process extra options */
+	optind = 1;
+	while (1) {
+		opt = getopt_long_only(argc, argv, "", long_options, NULL);
+		if (opt == -1) {
+			break;
+		}
+
+		switch (opt) {
+		case 'b': {
+			result_flag |= DNSSERVER_FLAG_BLACKLIST_IP;
+			break;
+		}
+		case 'w': {
+			result_flag |= DNSSERVER_FLAG_WHITELIST_IP;
+			break;
+		}
+		case 'e': {
+			result_flag |= DNSSERVER_FLAG_CHECK_EDNS;
+			break;
+		}
+		case 'h': {
+			safe_strncpy(server->hostname, optarg, DNS_MAX_CNAME_LEN);
+			break;
+		}
+		case 'H': {
+			safe_strncpy(server->httphost, optarg, DNS_MAX_CNAME_LEN);
+			break;
+		}
+		case 'E': {
+			server_flag |= SERVER_FLAG_EXCLUDE_DEFAULT;
+			break;
+		}
+		case 'g': {
+			if (_dns_conf_get_group_set(optarg, server) != 0) {
+				tlog(TLOG_ERROR, "add group failed.");
+				goto errout;
+			}
+			break;
+		}
+		case 'p': {
+			safe_strncpy(server->spki, optarg, DNS_MAX_SPKI_LEN);
+			break;
+		}
+		case 'V': {
+			safe_strncpy(server->tls_host_verify, optarg, DNS_MAX_CNAME_LEN);
+			break;
+		}
+		case 'N': {
+			server->skip_check_cert = 1;
+			break;
+		}
+		default:
+			break;
+		}
+	}
+
+	/* add new server */
+	server->type = type;
+	server->port = port;
+	server->result_flag = result_flag;
+	server->server_flag = server_flag;
+	server->ttl = ttl;
+	dns_conf_server_num++;
+	tlog(TLOG_DEBUG, "add server %s, flag: %X, ttl: %d", ip, result_flag, ttl);
+
+	return 0;
+
+errout:
+	if (spki) {
+		free(spki);
+	}
+
+	return -1;
+}
+
+static int _config_domain_iter_free(void *data, const unsigned char *key, uint32_t key_len, void *value)
+{
+	struct dns_domain_rule *domain_rule = value;
+	int i = 0;
+
+	if (domain_rule == NULL) {
+		return 0;
+	}
+
+	for (i = 0; i < DOMAIN_RULE_MAX; i++) {
+		if (domain_rule->rules[i] == NULL) {
+			continue;
+		}
+
+		free(domain_rule->rules[i]);
+	}
+
+	free(domain_rule);
+	return 0;
+}
+
+static void _config_domain_destroy(void)
+{
+	art_iter(&dns_conf_domain_rule, _config_domain_iter_free, NULL);
+	art_tree_destroy(&dns_conf_domain_rule);
+}
+
+static void _config_address_destroy(radix_node_t *node, void *cbctx)
+{
+	if (node == NULL) {
+		return;
+	}
+
+	if (node->data == NULL) {
+		return;
+	}
+
+	free(node->data);
+	node->data = NULL;
+}
+
+static int _config_domain_rule_add(char *domain, enum domain_rule type, void *rule)
+{
+	struct dns_domain_rule *domain_rule = NULL;
+	struct dns_domain_rule *old_domain_rule = NULL;
+	struct dns_domain_rule *add_domain_rule = NULL;
+
+	char domain_key[DNS_MAX_CONF_CNAME_LEN];
+	int len = 0;
+
+	/* Reverse string, for suffix match */
+	len = strlen(domain);
+	if (len >= sizeof(domain_key)) {
+		tlog(TLOG_ERROR, "domain name %s too long", domain);
+		goto errout;
+	}
+	reverse_string(domain_key, domain, len, 1);
+	domain_key[len] = '.';
+	len++;
+	domain_key[len] = 0;
+
+	if (type >= DOMAIN_RULE_MAX) {
+		goto errout;
+	}
+
+	/* Get existing or create domain rule */
+	domain_rule = art_search(&dns_conf_domain_rule, (unsigned char *)domain_key, len);
+	if (domain_rule == NULL) {
+		add_domain_rule = malloc(sizeof(*add_domain_rule));
+		if (add_domain_rule == NULL) {
+			goto errout;
+		}
+		memset(add_domain_rule, 0, sizeof(*add_domain_rule));
+		domain_rule = add_domain_rule;
+	}
+
+	/* add new rule to domain */
+	if (domain_rule->rules[type]) {
+		free(domain_rule->rules[type]);
+		domain_rule->rules[type] = NULL;
+	}
+
+	domain_rule->rules[type] = rule;
+
+	/* update domain rule */
+	if (add_domain_rule) {
+		old_domain_rule = art_insert(&dns_conf_domain_rule, (unsigned char *)domain_key, len, add_domain_rule);
+		if (old_domain_rule) {
+			free(old_domain_rule);
+		}
+	}
+
+	return 0;
+errout:
+	if (add_domain_rule) {
+		free(add_domain_rule);
+	}
+
+	tlog(TLOG_ERROR, "add doamin %s rule failed", domain);
+	return -1;
+}
+
+static int _config_domain_rule_flag_set(char *domain, unsigned int flag)
+{
+	struct dns_domain_rule *domain_rule = NULL;
+	struct dns_domain_rule *old_domain_rule = NULL;
+	struct dns_domain_rule *add_domain_rule = NULL;
+	struct dns_rule_flags *rule_flags = NULL;
+
+	char domain_key[DNS_MAX_CONF_CNAME_LEN];
+	int len = 0;
+
+	len = strlen(domain);
+	if (len >= sizeof(domain_key)) {
+		tlog(TLOG_ERROR, "domain %s too long", domain);
+		return -1;
+	}
+	reverse_string(domain_key, domain, len, 1);
+	domain_key[len] = '.';
+	len++;
+	domain_key[len] = 0;
+
+	/* Get existing or create domain rule */
+	domain_rule = art_search(&dns_conf_domain_rule, (unsigned char *)domain_key, len);
+	if (domain_rule == NULL) {
+		add_domain_rule = malloc(sizeof(*add_domain_rule));
+		if (add_domain_rule == NULL) {
+			goto errout;
+		}
+		memset(add_domain_rule, 0, sizeof(*add_domain_rule));
+		domain_rule = add_domain_rule;
+	}
+
+	/* add new rule to domain */
+	if (domain_rule->rules[DOMAIN_RULE_FLAGS] == NULL) {
+		rule_flags = malloc(sizeof(*rule_flags));
+		rule_flags->flags = 0;
+		domain_rule->rules[DOMAIN_RULE_FLAGS] = rule_flags;
+	}
+
+	rule_flags = domain_rule->rules[DOMAIN_RULE_FLAGS];
+	rule_flags->flags |= flag;
+
+	/* update domain rule */
+	if (add_domain_rule) {
+		old_domain_rule = art_insert(&dns_conf_domain_rule, (unsigned char *)domain_key, len, add_domain_rule);
+		if (old_domain_rule) {
+			free(old_domain_rule);
+		}
+	}
+
+	return 0;
+errout:
+	if (add_domain_rule) {
+		free(add_domain_rule);
+	}
+
+	tlog(TLOG_ERROR, "add doamin %s rule failed", domain);
+	return 0;
+}
+
+static void _config_ipset_table_destroy(void)
+{
+	struct dns_ipset_name *ipset_name = NULL;
+	struct hlist_node *tmp = NULL;
+	int i;
+
+	hash_for_each_safe(dns_ipset_table.ipset, i, tmp, ipset_name, node)
+	{
+		hlist_del_init(&ipset_name->node);
+		free(ipset_name);
+	}
+}
+
+static const char *_dns_conf_get_ipset(const char *ipsetname)
+{
+	uint32_t key = 0;
+	struct dns_ipset_name *ipset_name = NULL;
+
+	key = hash_string(ipsetname);
+	hash_for_each_possible(dns_ipset_table.ipset, ipset_name, node, key)
+	{
+		if (strncmp(ipset_name->ipsetname, ipsetname, DNS_MAX_IPSET_NAMELEN) == 0) {
+			return ipset_name->ipsetname;
+		}
+	}
+
+	ipset_name = malloc(sizeof(*ipset_name));
+	if (ipset_name == NULL) {
+		goto errout;
+	}
+
+	key = hash_string(ipsetname);
+	safe_strncpy(ipset_name->ipsetname, ipsetname, DNS_MAX_IPSET_NAMELEN);
+	hash_add(dns_ipset_table.ipset, &ipset_name->node, key);
+
+	return ipset_name->ipsetname;
+errout:
+	if (ipset_name) {
+		free(ipset_name);
+	}
+
+	return NULL;
+}
+
+static int _conf_domain_rule_ipset(char *domain, const char *ipsetname)
+{
+	struct dns_ipset_rule *ipset_rule = NULL;
+	const char *ipset = NULL;
+
+	/* Process domain option */
+	if (strncmp(ipsetname, "-", sizeof("-")) != 0) {
+		/* new ipset domain */
+		ipset = _dns_conf_get_ipset(ipsetname);
+		if (ipset == NULL) {
+			goto errout;
+		}
+
+		ipset_rule = malloc(sizeof(*ipset_rule));
+		if (ipset_rule == NULL) {
+			goto errout;
+		}
+
+		ipset_rule->ipsetname = ipset;
+	} else {
+		/* ignore this domain */
+		if (_config_domain_rule_flag_set(domain, DOMAIN_FLAG_IPSET_IGNORE) != 0) {
+			goto errout;
+		}
+
+		return 0;
+	}
+
+	if (_config_domain_rule_add(domain, DOMAIN_RULE_IPSET, ipset_rule) != 0) {
+		goto errout;
+	}
+
+	return 0;
+errout:
+	if (ipset_rule) {
+		free(ipset_rule);
+	}
+
+	tlog(TLOG_ERROR, "add ipset %s failed", ipsetname);
+	return 0;
+}
+
+static int _config_ipset(void *data, int argc, char *argv[])
+{
+	char domain[DNS_MAX_CONF_CNAME_LEN];
+	char *value = argv[1];
+
+	if (argc <= 1) {
+		goto errout;
+	}
+
+	if (_get_domain(value, domain, DNS_MAX_CONF_CNAME_LEN, &value) != 0) {
+		goto errout;
+	}
+
+	return _conf_domain_rule_ipset(domain, value);
+errout:
+	tlog(TLOG_ERROR, "add ipset %s failed", value);
+	return 0;
+}
+
+static int _conf_domain_rule_address(char *domain, const char *domain_address)
+{
+	struct dns_address_IPV4 *address_ipv4 = NULL;
+	struct dns_address_IPV6 *address_ipv6 = NULL;
+	void *address = NULL;
+	char ip[MAX_IP_LEN];
+	int port;
+	struct sockaddr_storage addr;
+	socklen_t addr_len = sizeof(addr);
+	enum domain_rule type = 0;
+	unsigned int flag = 0;
+
+	if (*(domain_address) == '#') {
+		if (strncmp(domain_address, "#4", sizeof("#4")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_IPV4_SOA;
+		} else if (strncmp(domain_address, "#6", sizeof("#6")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_IPV6_SOA;
+		} else if (strncmp(domain_address, "#", sizeof("#")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_SOA;
+		} else {
+			goto errout;
+		}
+
+		/* add SOA rule */
+		if (_config_domain_rule_flag_set(domain, flag) != 0) {
+			goto errout;
+		}
+
+		return 0;
+	} else if (*(domain_address) == '-') {
+		if (strncmp(domain_address, "-4", sizeof("-4")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_IPV4_IGN;
+		} else if (strncmp(domain_address, "-6", sizeof("-6")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_IPV6_IGN;
+		} else if (strncmp(domain_address, "-", sizeof("-")) == 0) {
+			flag = DOMAIN_FLAG_ADDR_IGN;
+		} else {
+			goto errout;
+		}
+
+		/* ignore rule */
+		if (_config_domain_rule_flag_set(domain, flag) != 0) {
+			goto errout;
+		}
+
+		return 0;
+	} else {
+		/* set address to domain */
+		if (parse_ip(domain_address, ip, &port) != 0) {
+			goto errout;
+		}
+
+		if (getaddr_by_host(ip, (struct sockaddr *)&addr, &addr_len) != 0) {
+			goto errout;
+		}
+
+		switch (addr.ss_family) {
+		case AF_INET: {
+			struct sockaddr_in *addr_in;
+			address_ipv4 = malloc(sizeof(*address_ipv4));
+			if (address_ipv4 == NULL) {
+				goto errout;
+			}
+
+			addr_in = (struct sockaddr_in *)&addr;
+			memcpy(address_ipv4->ipv4_addr, &addr_in->sin_addr.s_addr, 4);
+			type = DOMAIN_RULE_ADDRESS_IPV4;
+			address = address_ipv4;
+		} break;
+		case AF_INET6: {
+			struct sockaddr_in6 *addr_in6;
+			addr_in6 = (struct sockaddr_in6 *)&addr;
+			if (IN6_IS_ADDR_V4MAPPED(&addr_in6->sin6_addr)) {
+				address_ipv4 = malloc(sizeof(*address_ipv4));
+				if (address_ipv4 == NULL) {
+					goto errout;
+				}
+				memcpy(address_ipv4->ipv4_addr, addr_in6->sin6_addr.s6_addr + 12, 4);
+				type = DOMAIN_RULE_ADDRESS_IPV4;
+				address = address_ipv4;
+			} else {
+				address_ipv6 = malloc(sizeof(*address_ipv6));
+				if (address_ipv6 == NULL) {
+					goto errout;
+				}
+				memcpy(address_ipv6->ipv6_addr, addr_in6->sin6_addr.s6_addr, 16);
+				type = DOMAIN_RULE_ADDRESS_IPV6;
+				address = address_ipv6;
+			}
+		} break;
+		default:
+			goto errout;
+		}
+	}
+
+	/* add domain to ART-tree */
+	if (_config_domain_rule_add(domain, type, address) != 0) {
+		goto errout;
+	}
+
+	return 0;
+errout:
+	if (address) {
+		free(address);
+	}
+
+	tlog(TLOG_ERROR, "add address %s, %s  failed", domain, domain_address);
+	return 0;
+}
+
+static int _config_address(void *data, int argc, char *argv[])
+{
+	char *value = argv[1];
+	char domain[DNS_MAX_CONF_CNAME_LEN];
+
+	if (argc <= 1) {
+		goto errout;
+	}
+
+	if (_get_domain(value, domain, DNS_MAX_CONF_CNAME_LEN, &value) != 0) {
+		goto errout;
+	}
+
+	return _conf_domain_rule_address(domain, value);
+errout:
+	tlog(TLOG_ERROR, "add address %s failed", value);
+	return 0;
+}
+
+static int _config_speed_check_mode_parser(struct dns_domain_check_order *check_order, const char *mode)
+{
+	char tmpbuff[DNS_MAX_OPT_LEN];
+	char *field;
+	char *ptr;
+	int order = 0;
+	int port = 80;
+	int i = 0;
+
+	safe_strncpy(tmpbuff, mode, DNS_MAX_OPT_LEN);
+	memset(check_order, 0, sizeof(*check_order));
+
+	ptr = tmpbuff;
+	do {
+		field = ptr;
+		ptr = strstr(ptr, ",");
+		if (field == NULL || order >= DOMAIN_CHECK_NUM) {
+			return 0;
+		}
+
+		if (ptr) {
+			*ptr = 0;
+		}
+
+		if (strncmp(field, "ping", sizeof("ping")) == 0) {
+			if (dns_has_cap_ping == 0) {
+				if (ptr) {
+					ptr++;
+				}
+				continue;
+			}
+			check_order->order[order] = DOMAIN_CHECK_ICMP;
+		} else if (strstr(field, "tcp") == field) {
+			char *port_str = strstr(field, ":");
+			if (port_str) {
+				port = atoi(port_str + 1);
+				if (port <= 0 || port >= 65535) {
+					port = 80;
+				}
+			}
+
+			check_order->order[order] = DOMAIN_CHECK_TCP;
+			check_order->tcp_port = port;
+		} else if (strncmp(field, "none", sizeof("none")) == 0) {
+			check_order->order[order] = DOMAIN_CHECK_NONE;
+			for (i = order + 1; i < DOMAIN_CHECK_NUM; i++) {
+				check_order->order[i] = DOMAIN_CHECK_NONE;
+			}
+
+			return 0;
+		}
+		order++;
+		if (ptr) {
+			ptr++;
+		}
+
+	} while (ptr);
+
+	return 0;
+}
+
+static int _config_speed_check_mode(void *data, int argc, char *argv[])
+{
+	char mode[DNS_MAX_OPT_LEN];
+
+	if (argc <= 1) {
+		return -1;
+	}
+
+	safe_strncpy(mode, argv[1], sizeof(mode));
+	return _config_speed_check_mode_parser(&dns_conf_check_order, mode);
+}
+
+static int _config_bind_ip(int argc, char *argv[], DNS_BIND_TYPE type)
+{
+	int index = dns_conf_bind_ip_num;
+	struct dns_bind_ip *bind_ip;
+	char *ip = NULL;
+	int opt = 0;
+	char group_name[DNS_GROUP_NAME_LEN];
+	const char *group = NULL;
+	unsigned int server_flag = 0;
+
+	/* clang-format off */
+	static struct option long_options[] = {
+		{"group", required_argument, NULL, 'g'}, /* add to group */
+		{"no-rule-addr", no_argument, NULL, 'A'},   
+		{"no-rule-nameserver", no_argument, NULL, 'N'},   
+		{"no-rule-ipset", no_argument, NULL, 'I'},   
+		{"no-rule-sni-proxy", no_argument, NULL, 'P'},   
+		{"no-rule-soa", no_argument, NULL, 'O'},
+		{"no-speed-check", no_argument, NULL, 'S'},  
+		{"no-cache", no_argument, NULL, 'C'},  
+		{"no-dualstack-selection", no_argument, NULL, 'D'},
+		{"force-aaaa-soa", no_argument, NULL, 'F'},
+		{NULL, no_argument, NULL, 0}
+	};
+	/* clang-format on */
+	if (argc <= 1) {
+		tlog(TLOG_ERROR, "invalid parameter.");
+		goto errout;
+	}
+
+	if (index >= DNS_MAX_SERVERS) {
+		tlog(TLOG_WARN, "exceeds max server number, %s", ip);
+		return 0;
+	}
+
+	bind_ip = &dns_conf_bind_ip[index];
+	bind_ip->type = type;
+	bind_ip->flags = 0;
+	ip = argv[1];
+	safe_strncpy(bind_ip->ip, ip, DNS_MAX_IPLEN);
+
+	/* process extra options */
+	optind = 1;
+	while (1) {
+		opt = getopt_long_only(argc, argv, "", long_options, NULL);
+		if (opt == -1) {
+			break;
+		}
+
+		switch (opt) {
+		case 'g': {
+			safe_strncpy(group_name, optarg, DNS_GROUP_NAME_LEN);
+			group = _dns_conf_get_group_name(group_name);
+			break;
+		}
+		case 'A': {
+			server_flag |= BIND_FLAG_NO_RULE_ADDR;
+			break;
+		}
+		case 'N': {
+			server_flag |= BIND_FLAG_NO_RULE_NAMESERVER;
+			break;
+		}
+		case 'I': {
+			server_flag |= BIND_FLAG_NO_RULE_IPSET;
+			break;
+		}
+		case 'P': {
+			server_flag |= BIND_FLAG_NO_RULE_SNIPROXY;
+			break;
+		}
+		case 'S': {
+			server_flag |= BIND_FLAG_NO_SPEED_CHECK;
+			break;
+		}
+		case 'C': {
+			server_flag |= BIND_FLAG_NO_CACHE;
+			break;
+		}
+		case 'O': {
+			server_flag |= BIND_FLAG_NO_RULE_SOA;
+			break;
+		}
+		case 'D': {
+			server_flag |= BIND_FLAG_NO_DUALSTACK_SELECTION;
+			break;
+		}
+		case 'F': {
+			server_flag |= BIND_FLAG_FORCE_AAAA_SOA;
+			break;
+		}
+		default:
+			break;
+		}
+	}
+
+	/* add new server */
+	bind_ip->flags = server_flag;
+	bind_ip->group = group;
+	dns_conf_bind_ip_num++;
+	tlog(TLOG_DEBUG, "bind ip %s, type:%d, flag: %X", ip, type, server_flag);
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _config_bind_ip_udp(void *data, int argc, char *argv[])
+{
+	return _config_bind_ip(argc, argv, DNS_BIND_TYPE_UDP);
+}
+
+static int _config_bind_ip_tcp(void *data, int argc, char *argv[])
+{
+	return _config_bind_ip(argc, argv, DNS_BIND_TYPE_TCP);
+}
+
+static int _config_server_udp(void *data, int argc, char *argv[])
+{
+	return _config_server(argc, argv, DNS_SERVER_UDP, DEFAULT_DNS_PORT);
+}
+
+static int _config_server_tcp(void *data, int argc, char *argv[])
+{
+	return _config_server(argc, argv, DNS_SERVER_TCP, DEFAULT_DNS_PORT);
+}
+
+static int _config_server_tls(void *data, int argc, char *argv[])
+{
+	return _config_server(argc, argv, DNS_SERVER_TLS, DEFAULT_DNS_TLS_PORT);
+}
+
+static int _config_server_https(void *data, int argc, char *argv[])
+{
+	int ret = 0;
+	ret = _config_server(argc, argv, DNS_SERVER_HTTPS, DEFAULT_DNS_HTTPS_PORT);
+
+	return ret;
+}
+
+static int _conf_domain_rule_nameserver(char *domain, const char *group_name)
+{
+	struct dns_nameserver_rule *nameserver_rule = NULL;
+	const char *group = NULL;
+
+	if (strncmp(group_name, "-", sizeof("-")) != 0) {
+		group = _dns_conf_get_group_name(group_name);
+		if (group == NULL) {
+			goto errout;
+		}
+
+		nameserver_rule = malloc(sizeof(*nameserver_rule));
+		if (nameserver_rule == NULL) {
+			goto errout;
+		}
+
+		nameserver_rule->group_name = group;
+	} else {
+		/* ignore this domain */
+		if (_config_domain_rule_flag_set(domain, DOMAIN_FLAG_NAMESERVER_IGNORE) != 0) {
+			goto errout;
+		}
+
+		return 0;
+	}
+
+	if (_config_domain_rule_add(domain, DOMAIN_RULE_NAMESERVER, nameserver_rule) != 0) {
+		goto errout;
+	}
+
+	return 0;
+errout:
+	if (nameserver_rule) {
+		free(nameserver_rule);
+	}
+
+	tlog(TLOG_ERROR, "add nameserver %s, %s failed", domain, group_name);
+	return 0;
+}
+
+static int _config_nameserver(void *data, int argc, char *argv[])
+{
+	char domain[DNS_MAX_CONF_CNAME_LEN];
+	char *value = argv[1];
+
+	if (argc <= 1) {
+		goto errout;
+	}
+
+	if (_get_domain(value, domain, DNS_MAX_CONF_CNAME_LEN, &value) != 0) {
+		goto errout;
+	}
+
+	return _conf_domain_rule_nameserver(domain, value);
+errout:
+	tlog(TLOG_ERROR, "add nameserver %s failed", value);
+	return 0;
+}
+
+static radix_node_t *_create_addr_node(char *addr)
+{
+	radix_node_t *node;
+	void *p;
+	prefix_t prefix;
+	const char *errmsg = NULL;
+	radix_tree_t *tree = NULL;
+
+	p = prefix_pton(addr, -1, &prefix, &errmsg);
+	if (p == NULL) {
+		return NULL;
+	}
+
+	switch (prefix.family) {
+	case AF_INET:
+		tree = dns_conf_address_rule.ipv4;
+		break;
+	case AF_INET6:
+		tree = dns_conf_address_rule.ipv6;
+		break;
+	}
+
+	node = radix_lookup(tree, &prefix);
+	return node;
+}
+
+static int _config_iplist_rule(char *subnet, enum address_rule rule)
+{
+	radix_node_t *node = NULL;
+	struct dns_ip_address_rule *ip_rule = NULL;
+
+	node = _create_addr_node(subnet);
+	if (node == NULL) {
+		return -1;
+	}
+
+	if (node->data == NULL) {
+		ip_rule = malloc(sizeof(*ip_rule));
+		if (ip_rule == NULL) {
+			return -1;
+		}
+
+		node->data = ip_rule;
+		memset(ip_rule, 0, sizeof(*ip_rule));
+	}
+
+	ip_rule = node->data;
+
+	switch (rule) {
+	case ADDRESS_RULE_BLACKLIST:
+		ip_rule->blacklist = 1;
+		break;
+	case ADDRESS_RULE_WHITELIST:
+		ip_rule->whitelist = 1;
+		break;
+	case ADDRESS_RULE_BOGUS:
+		ip_rule->bogus = 1;
+		break;
+	case ADDRESS_RULE_IP_IGNORE:
+		ip_rule->ip_ignore = 1;
+		break;
+	default:
+		return -1;
+	}
+
+	return 0;
+}
+
+static int _config_blacklist_ip(void *data, int argc, char *argv[])
+{
+	if (argc <= 1) {
+		return -1;
+	}
+
+	return _config_iplist_rule(argv[1], ADDRESS_RULE_BLACKLIST);
+}
+
+static int _conf_bogus_nxdomain(void *data, int argc, char *argv[])
+{
+	if (argc <= 1) {
+		return -1;
+	}
+
+	return _config_iplist_rule(argv[1], ADDRESS_RULE_BOGUS);
+}
+
+static int _conf_ip_ignore(void *data, int argc, char *argv[])
+{
+	if (argc <= 1) {
+		return -1;
+	}
+
+	return _config_iplist_rule(argv[1], ADDRESS_RULE_IP_IGNORE);
+}
+
+static int _conf_whitelist_ip(void *data, int argc, char *argv[])
+{
+	if (argc <= 1) {
+		return -1;
+	}
+
+	return _config_iplist_rule(argv[1], ADDRESS_RULE_WHITELIST);
+}
+
+static int _conf_edns_client_subnet(void *data, int argc, char *argv[])
+{
+	char *slash = NULL;
+	char *value = NULL;
+	int subnet = 0;
+	struct dns_edns_client_subnet *ecs = NULL;
+	struct sockaddr_storage addr;
+	socklen_t addr_len = sizeof(addr);
+
+	if (argc <= 1 || data == NULL) {
+		return -1;
+	}
+
+	value = argv[1];
+
+	slash = strstr(value, "/");
+	if (slash) {
+		*slash = 0;
+		slash++;
+		subnet = atoi(slash);
+		if (subnet < 0 || subnet > 128) {
+			return -1;
+		}
+	}
+
+	if (getaddr_by_host(value, (struct sockaddr *)&addr, &addr_len) != 0) {
+		goto errout;
+	}
+
+	switch (addr.ss_family) {
+	case AF_INET:
+		ecs = &dns_conf_ipv4_ecs;
+		break;
+	case AF_INET6:
+		ecs = &dns_conf_ipv6_ecs;
+		break;
+	default:
+		goto errout;
+	}
+
+	safe_strncpy(ecs->ip, value, DNS_MAX_IPLEN);
+	ecs->subnet = subnet;
+	ecs->enable = 1;
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _conf_domain_rule_speed_check(char *domain, const char *mode)
+{
+	struct dns_domain_check_order *check_order;
+
+	check_order = malloc(sizeof(*check_order));
+	if (check_order == NULL) {
+		goto errout;
+	}
+
+	if (_config_speed_check_mode_parser(check_order, mode) != 0) {
+		goto errout;
+	}
+
+	if (_config_domain_rule_add(domain, DOMAIN_RULE_CHECKSPEED, check_order) != 0) {
+		goto errout;
+	}
+
+	return 0;
+errout:
+	if (check_order) {
+		free(check_order);
+	}
+	return 0;
+}
+
+static int _conf_domain_rules(void *data, int argc, char *argv[])
+{
+	int opt = 0;
+	char domain[DNS_MAX_CONF_CNAME_LEN];
+	char *value = argv[1];
+
+	/* clang-format off */
+	static struct option long_options[] = {
+		{"speed-check-mode", required_argument, NULL, 'c'},
+		{"address", required_argument, NULL, 'a'},
+		{"ipset", required_argument, NULL, 'p'},
+		{"nameserver", required_argument, NULL, 'n'},
+		{NULL, no_argument, NULL, 0}
+	};
+	/* clang-format on */
+
+	if (argc <= 1) {
+		tlog(TLOG_ERROR, "invalid parameter.");
+		goto errout;
+	}
+
+	if (_get_domain(value, domain, DNS_MAX_CONF_CNAME_LEN, &value) != 0) {
+		goto errout;
+	}
+
+	/* process extra options */
+	optind = 1;
+	while (1) {
+		opt = getopt_long_only(argc, argv, "", long_options, NULL);
+		if (opt == -1) {
+			break;
+		}
+
+		switch (opt) {
+		case 'c': {
+			const char *check_mode = optarg;
+			if (check_mode == NULL) {
+				goto errout;
+			}
+
+			if (_conf_domain_rule_speed_check(domain, check_mode) != 0) {
+				tlog(TLOG_ERROR, "add check-speed-rule rule failed.");
+				goto errout;
+			}
+
+			break;
+		}
+		case 'a': {
+			const char *address = optarg;
+			if (address == NULL) {
+				goto errout;
+			}
+
+			if (_conf_domain_rule_address(domain, address) != 0) {
+				tlog(TLOG_ERROR, "add address rule failed.");
+				goto errout;
+			}
+
+			break;
+		}
+		case 'p': {
+			const char *ipsetname = optarg;
+			if (ipsetname == NULL) {
+				goto errout;
+			}
+
+			if (_conf_domain_rule_ipset(domain, ipsetname) != 0) {
+				tlog(TLOG_ERROR, "add ipset rule failed.");
+				goto errout;
+			}
+
+			break;
+		}
+		case 'n': {
+			const char *nameserver_group = optarg;
+			if (nameserver_group == NULL) {
+				goto errout;
+			}
+
+			if (_conf_domain_rule_nameserver(domain, nameserver_group) != 0) {
+				tlog(TLOG_ERROR, "add nameserver rule failed.");
+				goto errout;
+			}
+
+			break;
+		}
+		default:
+			break;
+		}
+	}
+
+	return 0;
+errout:
+	return -1;
+}
+
+static int _config_log_level(void *data, int argc, char *argv[])
+{
+	/* read log level and set */
+	char *value = argv[1];
+
+	if (strncmp("debug", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_DEBUG;
+	} else if (strncmp("info", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_INFO;
+	} else if (strncmp("notice", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_NOTICE;
+	} else if (strncmp("warn", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_WARN;
+	} else if (strncmp("error", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_ERROR;
+	} else if (strncmp("fatal", value, MAX_LINE_LEN) == 0) {
+		dns_conf_log_level = TLOG_FATAL;
+	} else {
+		return -1;
+	}
+
+	return 0;
+}
+
+static struct config_item _config_item[] = {
+	CONF_STRING("server-name", (char *)dns_conf_server_name, DNS_MAX_SERVER_NAME_LEN),
+	CONF_CUSTOM("bind", _config_bind_ip_udp, NULL),
+	CONF_CUSTOM("bind-tcp", _config_bind_ip_tcp, NULL),
+	CONF_CUSTOM("server", _config_server_udp, NULL),
+	CONF_CUSTOM("server-tcp", _config_server_tcp, NULL),
+	CONF_CUSTOM("server-tls", _config_server_tls, NULL),
+	CONF_CUSTOM("server-https", _config_server_https, NULL),
+	CONF_CUSTOM("nameserver", _config_nameserver, NULL),
+	CONF_CUSTOM("address", _config_address, NULL),
+	CONF_YESNO("ipset-timeout", &dns_conf_ipset_timeout_enable),
+	CONF_CUSTOM("ipset", _config_ipset, NULL),
+	CONF_CUSTOM("speed-check-mode", _config_speed_check_mode, NULL),
+	CONF_INT("tcp-idle-time", &dns_conf_tcp_idle_time, 0, 3600),
+	CONF_INT("cache-size", &dns_conf_cachesize, 0, CONF_INT_MAX),
+	CONF_YESNO("prefetch-domain", &dns_conf_prefetch),
+	CONF_YESNO("serve-expired", &dns_conf_serve_expired),
+	CONF_INT("serve-expired-ttl", &dns_conf_serve_expired_ttl, 0, CONF_INT_MAX),
+	CONF_YESNO("dualstack-ip-selection", &dns_conf_dualstack_ip_selection),
+	CONF_INT("dualstack-ip-selection-threshold", &dns_conf_dualstack_ip_selection_threshold, 0, 1000),
+	CONF_CUSTOM("log-level", _config_log_level, NULL),
+	CONF_STRING("log-file", (char *)dns_conf_log_file, DNS_MAX_PATH),
+	CONF_SIZE("log-size", &dns_conf_log_size, 0, 1024 * 1024 * 1024),
+	CONF_INT("log-num", &dns_conf_log_num, 0, 1024),
+	CONF_YESNO("audit-enable", &dns_conf_audit_enable),
+	CONF_YESNO("audit-SOA", &dns_conf_audit_log_SOA),
+	CONF_STRING("audit-file", (char *)&dns_conf_audit_file, DNS_MAX_PATH),
+	CONF_SIZE("audit-size", &dns_conf_audit_size, 0, 1024 * 1024 * 1024),
+	CONF_INT("audit-num", &dns_conf_audit_num, 0, 1024),
+	CONF_INT("rr-ttl", &dns_conf_rr_ttl, 0, CONF_INT_MAX),
+	CONF_INT("rr-ttl-min", &dns_conf_rr_ttl_min, 0, CONF_INT_MAX),
+	CONF_INT("rr-ttl-max", &dns_conf_rr_ttl_max, 0, CONF_INT_MAX),
+	CONF_YESNO("force-AAAA-SOA", &dns_conf_force_AAAA_SOA),
+	CONF_CUSTOM("blacklist-ip", _config_blacklist_ip, NULL),
+	CONF_CUSTOM("whitelist-ip", _conf_whitelist_ip, NULL),
+	CONF_CUSTOM("bogus-nxdomain", _conf_bogus_nxdomain, NULL),
+	CONF_CUSTOM("ignore-ip", _conf_ip_ignore, NULL),
+	CONF_CUSTOM("edns-client-subnet", _conf_edns_client_subnet, NULL),
+	CONF_CUSTOM("domain-rules", _conf_domain_rules, NULL),
+	CONF_STRING("ca-file", (char *)&dns_conf_ca_file, DNS_MAX_PATH),
+	CONF_STRING("ca-path", (char *)&dns_conf_ca_path, DNS_MAX_PATH),
+	CONF_CUSTOM("conf-file", config_addtional_file, NULL),
+	CONF_END(),
+};
+
+static int _conf_printf(const char *file, int lineno, int ret)
+{
+	if (ret == CONF_RET_ERR) {
+		tlog(TLOG_ERROR, "process config file '%s' failed at line %d.", file, lineno);
+		syslog(LOG_NOTICE, "process config file '%s' failed at line %d.", file, lineno);
+		return -1;
+	} else if (ret == CONF_RET_WARN) {
+		tlog(TLOG_WARN, "process config file '%s' failed at line %d.", file, lineno);
+		syslog(LOG_NOTICE, "process config file '%s' failed at line %d.", file, lineno);
+		return -1;
+	}
+
+	return 0;
+}
+
+int config_addtional_file(void *data, int argc, char *argv[])
+{
+	char *conf_file = argv[1];
+	char file_path[DNS_MAX_PATH];
+	char file_path_dir[DNS_MAX_PATH];
+
+	if (conf_file[0] != '/') {
+		safe_strncpy(file_path_dir, conf_get_conf_file(), DNS_MAX_PATH);
+		dirname(file_path_dir);
+		if (snprintf(file_path, DNS_MAX_PATH, "%s/%s", file_path_dir, conf_file) < 0) {
+			return -1;
+		}
+	} else {
+		safe_strncpy(file_path, conf_file, DNS_MAX_PATH);
+	}
+
+	if (access(file_path, R_OK) != 0) {
+		tlog(TLOG_WARN, "conf file %s is not readable.", file_path);
+		syslog(LOG_NOTICE, "conf file %s is not readable.", file_path);
+		return 0;
+	}
+
+	return load_conf(file_path, _config_item, _conf_printf);
+}
+
+static int _dns_server_load_conf_init(void)
+{
+	dns_conf_address_rule.ipv4 = New_Radix();
+	dns_conf_address_rule.ipv6 = New_Radix();
+	if (dns_conf_address_rule.ipv4 == NULL || dns_conf_address_rule.ipv6 == NULL) {
+		tlog(TLOG_WARN, "init radix tree failed.");
+		return -1;
+	}
+
+	art_tree_init(&dns_conf_domain_rule);
+
+	hash_init(dns_ipset_table.ipset);
+	hash_init(dns_group_table.group);
+
+	return 0;
+}
+
+void dns_server_load_exit(void)
+{
+	_config_domain_destroy();
+	Destroy_Radix(dns_conf_address_rule.ipv4, _config_address_destroy, NULL);
+	Destroy_Radix(dns_conf_address_rule.ipv6, _config_address_destroy, NULL);
+	_config_ipset_table_destroy();
+	_config_group_table_destroy();
+}
+
+static int _dns_conf_speed_check_mode_verify(void)
+{
+	int i, j;
+	int print_log = 0;
+
+	if (dns_has_cap_ping == 1) {
+		return 0;
+	}
+
+	for (i = 0; i < DOMAIN_CHECK_NUM; i++) {
+		if (dns_conf_check_order.order[i] == DOMAIN_CHECK_ICMP) {
+			for (j = i + 1; j < DOMAIN_CHECK_NUM; j++) {
+				dns_conf_check_order.order[j - 1] = dns_conf_check_order.order[j];
+			}
+			dns_conf_check_order.order[j - 1] = DOMAIN_CHECK_NONE;
+			print_log = 1;
+		}
+	}
+
+	if (print_log) {
+		tlog(TLOG_WARN, "speed check by ping is disabled because smartdns does not have network raw privileges");
+	}
+
+	return 0;
+}
+
+static int _dns_conf_load_pre(void)
+{
+	if (_dns_server_load_conf_init() != 0) {
+		goto errout;
+	}
+
+	dns_has_cap_ping = has_network_raw_cap();
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _dns_conf_load_post(void)
+{
+	_dns_conf_speed_check_mode_verify();
+
+	return 0;
+}
+
+int dns_server_load_conf(const char *file)
+{
+	int ret = 0;
+	_dns_conf_load_pre();
+	openlog("smartdns", LOG_CONS | LOG_NDELAY, LOG_LOCAL1);
+	ret = load_conf(file, _config_item, _conf_printf);
+	closelog();
+	_dns_conf_load_post();
+	return ret;
+}
diff --git a/release/src/router/smartdns/src/dns_conf.h b/release/src/router/smartdns/src/dns_conf.h
index c02e3cb373..9658111689 100644
--- a/release/src/router/smartdns/src/dns_conf.h
+++ b/release/src/router/smartdns/src/dns_conf.h
@@ -1,247 +1,255 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef _DNS_CONF
-#define _DNS_CONF
-
-#include "art.h"
-#include "conf.h"
-#include "dns.h"
-#include "dns_client.h"
-#include "hash.h"
-#include "hashtable.h"
-#include "list.h"
-#include "radix.h"
-
-#ifdef __cpluscplus
-extern "C" {
-#endif
-
-#define DNS_MAX_BIND_IP 16
-#define DNS_MAX_SERVERS 64
-#define DNS_MAX_SERVER_NAME_LEN 128
-#define DNS_MAX_IPSET_NAMELEN 32
-#define DNS_GROUP_NAME_LEN 32
-#define DNS_NAX_GROUP_NUMBER 16
-#define DNS_MAX_IPLEN 64
-#define DNS_MAX_SPKI_LEN 64
-#define DNS_MAX_URL_LEN 256
-#define DNS_MAX_PATH 1024
-#define DEFAULT_DNS_PORT 53
-#define DEFAULT_DNS_TLS_PORT 853
-#define DEFAULT_DNS_HTTPS_PORT 443
-#define DNS_MAX_CONF_CNAME_LEN 256
-#define SMARTDNS_CONF_FILE "/etc/smartdns/smartdns.conf"
-#define SMARTDNS_LOG_FILE "/var/log/smartdns.log"
-#define SMARTDNS_AUDIT_FILE "/var/log/smartdns-audit.log"
-
-enum domain_rule {
-	DOMAIN_RULE_FLAGS = 0,
-	DOMAIN_RULE_ADDRESS_IPV4,
-	DOMAIN_RULE_ADDRESS_IPV6,
-	DOMAIN_RULE_IPSET,
-	DOMAIN_RULE_NAMESERVER,
-	DOMAIN_RULE_MAX,
-};
-
-typedef enum {
-	DNS_BIND_TYPE_UDP,
-	DNS_BIND_TYPE_TCP,
-	DNS_BIND_TYPE_TLS,
-} DNS_BIND_TYPE;
-
-#define DOMAIN_CHECK_NONE 0
-#define DOMAIN_CHECK_ICMP 1
-#define DOMAIN_CHECK_TCP 2
-#define DOMAIN_CHECK_NUM 2
-
-#define DOMAIN_FLAG_ADDR_SOA (1 << 0)
-#define DOMAIN_FLAG_ADDR_IPV4_SOA (1 << 1)
-#define DOMAIN_FLAG_ADDR_IPV6_SOA (1 << 2)
-#define DOMAIN_FLAG_ADDR_IGN (1 << 3)
-#define DOMAIN_FLAG_ADDR_IPV4_IGN (1 << 4)
-#define DOMAIN_FLAG_ADDR_IPV6_IGN (1 << 5)
-#define DOMAIN_FLAG_IPSET_IGNORE (1 << 6)
-#define DOMAIN_FLAG_NAMESERVER_IGNORE (1 << 7)
-
-#define SERVER_FLAG_EXCLUDE_DEFAULT (1 << 0)
-
-#define BIND_FLAG_NO_RULE_ADDR (1 << 0)
-#define BIND_FLAG_NO_RULE_NAMESERVER (1 << 1)
-#define BIND_FLAG_NO_RULE_IPSET (1 << 2)
-#define BIND_FLAG_NO_RULE_SNIPROXY (1 << 3)
-#define BIND_FLAG_NO_RULE_SOA (1 << 4)
-#define BIND_FLAG_NO_SPEED_CHECK (1 << 5)
-#define BIND_FLAG_NO_CACHE (1 << 6)
-#define BIND_FLAG_NO_DUALSTACK_SELECTION (1 << 7)
-
-struct dns_rule_flags {
-	unsigned int flags;
-};
-
-struct dns_address_IPV4 {
-	unsigned char ipv4_addr[DNS_RR_A_LEN];
-};
-
-struct dns_address_IPV6 {
-	unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
-};
-
-struct dns_ipset_name {
-	struct hlist_node node;
-	char ipsetname[DNS_MAX_IPSET_NAMELEN];
-};
-
-struct dns_ipset_rule {
-	const char *ipsetname;
-};
-
-struct dns_domain_rule {
-	void *rules[DOMAIN_RULE_MAX];
-};
-
-struct dns_nameserver_rule {
-	const char *group_name;
-};
-
-struct dns_server_groups {
-	struct hlist_node node;
-	char group_name[DNS_GROUP_NAME_LEN];
-	int server_num;
-	struct dns_servers *servers[DNS_MAX_SERVERS];
-};
-
-struct dns_domain_check_order {
-	char order[DOMAIN_CHECK_NUM];
-	unsigned short tcp_port;
-};
-
-struct dns_group_table {
-	DECLARE_HASHTABLE(group, 8);
-};
-extern struct dns_group_table dns_group_table;
-
-struct dns_servers {
-	char server[DNS_MAX_IPLEN];
-	unsigned short port;
-	unsigned int result_flag;
-	unsigned int server_flag;
-	int ttl;
-	dns_server_type_t type;
-	char spki[DNS_MAX_SPKI_LEN];
-	char hostname[DNS_MAX_CNAME_LEN];
-	char httphost[DNS_MAX_CNAME_LEN];
-	char tls_host_verify[DNS_MAX_CNAME_LEN];
-	char path[DNS_MAX_URL_LEN];
-};
-
-/* ip address lists of domain */
-struct dns_bogus_ip_address {
-	struct hlist_node node;
-	dns_type_t addr_type;
-	union {
-		unsigned char ipv4_addr[DNS_RR_A_LEN];
-		unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
-		unsigned char addr[0];
-	};
-};
-
-enum address_rule {
-	ADDRESS_RULE_BLACKLIST = 1,
-	ADDRESS_RULE_WHITELIST = 2,
-	ADDRESS_RULE_BOGUS = 3,
-	ADDRESS_RULE_IP_IGNORE = 4,
-};
-
-struct dns_ip_address_rule {
-	unsigned int blacklist : 1;
-	unsigned int whitelist : 1;
-	unsigned int bogus : 1;
-	unsigned int ip_ignore : 1;
-};
-
-struct dns_edns_client_subnet {
-	int enable;
-	char ip[DNS_MAX_IPLEN];
-	int subnet;
-};
-
-struct dns_conf_address_rule {
-	radix_tree_t *ipv4;
-	radix_tree_t *ipv6;
-};
-
-struct dns_bind_ip {
-	DNS_BIND_TYPE type;
-	uint32_t flags;
-	char ip[DNS_MAX_IPLEN];
-	const char *group;
-};
-
-extern struct dns_bind_ip dns_conf_bind_ip[DNS_MAX_BIND_IP];
-extern int dns_conf_bind_ip_num;
-
-extern int dns_conf_tcp_idle_time;
-extern int dns_conf_cachesize;
-extern int dns_conf_prefetch;
-extern struct dns_servers dns_conf_servers[DNS_MAX_SERVERS];
-extern int dns_conf_server_num;
-
-extern int dns_conf_log_level;
-extern char dns_conf_log_file[DNS_MAX_PATH];
-extern size_t dns_conf_log_size;
-extern int dns_conf_log_num;
-
-extern struct dns_domain_check_order dns_conf_check_order;
-
-extern struct dns_server_groups dns_conf_server_groups[DNS_NAX_GROUP_NUMBER];
-extern int dns_conf_server_group_num;
-
-extern int dns_conf_audit_enable;
-extern int dns_conf_audit_log_SOA;
-extern char dns_conf_audit_file[DNS_MAX_PATH];
-extern size_t dns_conf_audit_size;
-extern int dns_conf_audit_num;
-
-extern char dns_conf_server_name[DNS_MAX_SERVER_NAME_LEN];
-extern art_tree dns_conf_domain_rule;
-extern struct dns_conf_address_rule dns_conf_address_rule;
-
-extern int dns_conf_dualstack_ip_selection;
-extern int dns_conf_dualstack_ip_selection_threshold;
-
-extern int dns_conf_rr_ttl;
-extern int dns_conf_rr_ttl_min;
-extern int dns_conf_rr_ttl_max;
-extern int dns_conf_force_AAAA_SOA;
-extern int dns_conf_ipset_timeout_enable;
-
-extern struct dns_edns_client_subnet dns_conf_ipv4_ecs;
-extern struct dns_edns_client_subnet dns_conf_ipv6_ecs;
-
-extern char dns_conf_sni_proxy_ip[DNS_MAX_IPLEN];
-
-void dns_server_load_exit(void);
-
-int dns_server_load_conf(const char *file);
-
-extern int config_addtional_file(void *data, int argc, char *argv[]);
-#ifdef __cpluscplus
-}
-#endif
-#endif // !_DNS_CONF
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef _DNS_CONF
+#define _DNS_CONF
+
+#include "art.h"
+#include "conf.h"
+#include "dns.h"
+#include "dns_client.h"
+#include "hash.h"
+#include "hashtable.h"
+#include "list.h"
+#include "radix.h"
+
+#ifdef __cpluscplus
+extern "C" {
+#endif
+
+#define DNS_MAX_BIND_IP 16
+#define DNS_MAX_SERVERS 64
+#define DNS_MAX_SERVER_NAME_LEN 128
+#define DNS_MAX_IPSET_NAMELEN 32
+#define DNS_GROUP_NAME_LEN 32
+#define DNS_NAX_GROUP_NUMBER 16
+#define DNS_MAX_IPLEN 64
+#define DNS_MAX_SPKI_LEN 64
+#define DNS_MAX_URL_LEN 256
+#define DNS_MAX_PATH 1024
+#define DEFAULT_DNS_PORT 53
+#define DEFAULT_DNS_TLS_PORT 853
+#define DEFAULT_DNS_HTTPS_PORT 443
+#define DNS_MAX_CONF_CNAME_LEN 256
+#define SMARTDNS_CONF_FILE "/etc/smartdns/smartdns.conf"
+#define SMARTDNS_LOG_FILE "/var/log/smartdns.log"
+#define SMARTDNS_AUDIT_FILE "/var/log/smartdns-audit.log"
+
+enum domain_rule {
+	DOMAIN_RULE_FLAGS = 0,
+	DOMAIN_RULE_ADDRESS_IPV4,
+	DOMAIN_RULE_ADDRESS_IPV6,
+	DOMAIN_RULE_IPSET,
+	DOMAIN_RULE_NAMESERVER,
+	DOMAIN_RULE_CHECKSPEED,
+	DOMAIN_RULE_MAX,
+};
+
+typedef enum {
+	DNS_BIND_TYPE_UDP,
+	DNS_BIND_TYPE_TCP,
+	DNS_BIND_TYPE_TLS,
+} DNS_BIND_TYPE;
+
+#define DOMAIN_CHECK_NONE 0
+#define DOMAIN_CHECK_ICMP 1
+#define DOMAIN_CHECK_TCP 2
+#define DOMAIN_CHECK_NUM 2
+
+#define DOMAIN_FLAG_ADDR_SOA (1 << 0)
+#define DOMAIN_FLAG_ADDR_IPV4_SOA (1 << 1)
+#define DOMAIN_FLAG_ADDR_IPV6_SOA (1 << 2)
+#define DOMAIN_FLAG_ADDR_IGN (1 << 3)
+#define DOMAIN_FLAG_ADDR_IPV4_IGN (1 << 4)
+#define DOMAIN_FLAG_ADDR_IPV6_IGN (1 << 5)
+#define DOMAIN_FLAG_IPSET_IGNORE (1 << 6)
+#define DOMAIN_FLAG_NAMESERVER_IGNORE (1 << 7)
+
+#define SERVER_FLAG_EXCLUDE_DEFAULT (1 << 0)
+
+#define BIND_FLAG_NO_RULE_ADDR (1 << 0)
+#define BIND_FLAG_NO_RULE_NAMESERVER (1 << 1)
+#define BIND_FLAG_NO_RULE_IPSET (1 << 2)
+#define BIND_FLAG_NO_RULE_SNIPROXY (1 << 3)
+#define BIND_FLAG_NO_RULE_SOA (1 << 4)
+#define BIND_FLAG_NO_SPEED_CHECK (1 << 5)
+#define BIND_FLAG_NO_CACHE (1 << 6)
+#define BIND_FLAG_NO_DUALSTACK_SELECTION (1 << 7)
+#define BIND_FLAG_FORCE_AAAA_SOA (1 << 8) 
+
+struct dns_rule_flags {
+	unsigned int flags;
+};
+
+struct dns_address_IPV4 {
+	unsigned char ipv4_addr[DNS_RR_A_LEN];
+};
+
+struct dns_address_IPV6 {
+	unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
+};
+
+struct dns_ipset_name {
+	struct hlist_node node;
+	char ipsetname[DNS_MAX_IPSET_NAMELEN];
+};
+
+struct dns_ipset_rule {
+	const char *ipsetname;
+};
+
+struct dns_domain_rule {
+	void *rules[DOMAIN_RULE_MAX];
+};
+
+struct dns_nameserver_rule {
+	const char *group_name;
+};
+
+struct dns_server_groups {
+	struct hlist_node node;
+	char group_name[DNS_GROUP_NAME_LEN];
+	int server_num;
+	struct dns_servers *servers[DNS_MAX_SERVERS];
+};
+
+struct dns_domain_check_order {
+	char order[DOMAIN_CHECK_NUM];
+	unsigned short tcp_port;
+};
+
+struct dns_group_table {
+	DECLARE_HASHTABLE(group, 8);
+};
+extern struct dns_group_table dns_group_table;
+
+struct dns_servers {
+	char server[DNS_MAX_IPLEN];
+	unsigned short port;
+	unsigned int result_flag;
+	unsigned int server_flag;
+	int ttl;
+	dns_server_type_t type;
+	char skip_check_cert;
+	char spki[DNS_MAX_SPKI_LEN];
+	char hostname[DNS_MAX_CNAME_LEN];
+	char httphost[DNS_MAX_CNAME_LEN];
+	char tls_host_verify[DNS_MAX_CNAME_LEN];
+	char path[DNS_MAX_URL_LEN];
+};
+
+/* ip address lists of domain */
+struct dns_bogus_ip_address {
+	struct hlist_node node;
+	dns_type_t addr_type;
+	union {
+		unsigned char ipv4_addr[DNS_RR_A_LEN];
+		unsigned char ipv6_addr[DNS_RR_AAAA_LEN];
+		unsigned char addr[0];
+	};
+};
+
+enum address_rule {
+	ADDRESS_RULE_BLACKLIST = 1,
+	ADDRESS_RULE_WHITELIST = 2,
+	ADDRESS_RULE_BOGUS = 3,
+	ADDRESS_RULE_IP_IGNORE = 4,
+};
+
+struct dns_ip_address_rule {
+	unsigned int blacklist : 1;
+	unsigned int whitelist : 1;
+	unsigned int bogus : 1;
+	unsigned int ip_ignore : 1;
+};
+
+struct dns_edns_client_subnet {
+	int enable;
+	char ip[DNS_MAX_IPLEN];
+	int subnet;
+};
+
+struct dns_conf_address_rule {
+	radix_tree_t *ipv4;
+	radix_tree_t *ipv6;
+};
+
+struct dns_bind_ip {
+	DNS_BIND_TYPE type;
+	uint32_t flags;
+	char ip[DNS_MAX_IPLEN];
+	const char *group;
+};
+
+extern struct dns_bind_ip dns_conf_bind_ip[DNS_MAX_BIND_IP];
+extern int dns_conf_bind_ip_num;
+
+extern int dns_conf_tcp_idle_time;
+extern int dns_conf_cachesize;
+extern int dns_conf_prefetch;
+extern int dns_conf_serve_expired;
+extern int dns_conf_serve_expired_ttl;
+extern struct dns_servers dns_conf_servers[DNS_MAX_SERVERS];
+extern int dns_conf_server_num;
+
+extern int dns_conf_log_level;
+extern char dns_conf_log_file[DNS_MAX_PATH];
+extern size_t dns_conf_log_size;
+extern int dns_conf_log_num;
+
+extern char dns_conf_ca_file[DNS_MAX_PATH];
+extern char dns_conf_ca_path[DNS_MAX_PATH];
+
+extern struct dns_domain_check_order dns_conf_check_order;
+
+extern struct dns_server_groups dns_conf_server_groups[DNS_NAX_GROUP_NUMBER];
+extern int dns_conf_server_group_num;
+
+extern int dns_conf_audit_enable;
+extern int dns_conf_audit_log_SOA;
+extern char dns_conf_audit_file[DNS_MAX_PATH];
+extern size_t dns_conf_audit_size;
+extern int dns_conf_audit_num;
+
+extern char dns_conf_server_name[DNS_MAX_SERVER_NAME_LEN];
+extern art_tree dns_conf_domain_rule;
+extern struct dns_conf_address_rule dns_conf_address_rule;
+
+extern int dns_conf_dualstack_ip_selection;
+extern int dns_conf_dualstack_ip_selection_threshold;
+
+extern int dns_conf_rr_ttl;
+extern int dns_conf_rr_ttl_min;
+extern int dns_conf_rr_ttl_max;
+extern int dns_conf_force_AAAA_SOA;
+extern int dns_conf_ipset_timeout_enable;
+
+extern struct dns_edns_client_subnet dns_conf_ipv4_ecs;
+extern struct dns_edns_client_subnet dns_conf_ipv6_ecs;
+
+extern char dns_conf_sni_proxy_ip[DNS_MAX_IPLEN];
+
+void dns_server_load_exit(void);
+
+int dns_server_load_conf(const char *file);
+
+extern int config_addtional_file(void *data, int argc, char *argv[]);
+#ifdef __cpluscplus
+}
+#endif
+#endif // !_DNS_CONF
diff --git a/release/src/router/smartdns/src/dns_server.c b/release/src/router/smartdns/src/dns_server.c
index 8dba5cc1ce..04abb3366e 100644
--- a/release/src/router/smartdns/src/dns_server.c
+++ b/release/src/router/smartdns/src/dns_server.c
@@ -183,6 +183,7 @@ struct dns_request {
 	int has_soa;
 
 	atomic_t notified;
+	atomic_t do_callback;
 	atomic_t adblock;
 	atomic_t soa_num;
 
@@ -205,6 +206,8 @@ static struct dns_server server;
 
 static tlog_log *dns_audit;
 
+static int _dns_server_prefetch_request(char *domain, dns_type_t qtype);
+
 static int _dns_server_forward_request(unsigned char *inpacket, int inpacket_len)
 {
 	tlog(TLOG_DEBUG, "forward request.\n");
@@ -259,8 +262,10 @@ static int _dns_server_is_return_soa(struct dns_request *request)
 		return 0;
 	}
 
-	if (dns_conf_force_AAAA_SOA == 1 && request->qtype == DNS_T_AAAA) {
-		return 1;
+	if (request->qtype == DNS_T_AAAA) {
+		if (_dns_server_has_bind_flag(request, BIND_FLAG_FORCE_AAAA_SOA) == 0 || dns_conf_force_AAAA_SOA == 1) {
+			return 1;
+		}
 	}
 
 	rule_flag = request->domain_rule.rules[DOMAIN_RULE_FLAGS];
@@ -294,12 +299,15 @@ static void _dns_server_audit_log(struct dns_request *request)
 	}
 
 	if (request->qtype == DNS_T_AAAA && request->has_ipv6) {
-		snprintf(req_result, sizeof(req_result), "%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->ipv6_addr[0],
-				 request->ipv6_addr[1], request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4], request->ipv6_addr[5], request->ipv6_addr[6],
-				 request->ipv6_addr[7], request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10], request->ipv6_addr[11], request->ipv6_addr[12],
+		snprintf(req_result, sizeof(req_result),
+				 "%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->ipv6_addr[0],
+				 request->ipv6_addr[1], request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4],
+				 request->ipv6_addr[5], request->ipv6_addr[6], request->ipv6_addr[7], request->ipv6_addr[8],
+				 request->ipv6_addr[9], request->ipv6_addr[10], request->ipv6_addr[11], request->ipv6_addr[12],
 				 request->ipv6_addr[13], request->ipv6_addr[14], request->ipv6_addr[15]);
 	} else if (request->qtype == DNS_T_A && request->has_ipv4) {
-		snprintf(req_result, sizeof(req_result), "%d.%d.%d.%d", request->ipv4_addr[0], request->ipv4_addr[1], request->ipv4_addr[2], request->ipv4_addr[3]);
+		snprintf(req_result, sizeof(req_result), "%d.%d.%d.%d", request->ipv4_addr[0], request->ipv4_addr[1],
+				 request->ipv4_addr[2], request->ipv4_addr[3]);
 	} else if (request->has_soa) {
 		if (!dns_conf_audit_log_SOA) {
 			return;
@@ -312,9 +320,11 @@ static void _dns_server_audit_log(struct dns_request *request)
 	gethost_by_addr(req_host, sizeof(req_host), &request->addr);
 	tlog_localtime(&tm);
 
-	snprintf(req_time, sizeof(req_time), "[%.4d-%.2d-%.2d %.2d:%.2d:%.2d,%.3d]", tm.year, tm.mon, tm.mday, tm.hour, tm.min, tm.sec, tm.usec / 1000);
+	snprintf(req_time, sizeof(req_time), "[%.4d-%.2d-%.2d %.2d:%.2d:%.2d,%.3d]", tm.year, tm.mon, tm.mday, tm.hour,
+			 tm.min, tm.sec, tm.usec / 1000);
 
-	tlog_printf(dns_audit, "%s %s query %s, type %d, result %s\n", req_time, req_host, request->domain, request->qtype, req_result);
+	tlog_printf(dns_audit, "%s %s query %s, type %d, result %s\n", req_time, req_host, request->domain, request->qtype,
+				req_result);
 }
 
 static int _dns_add_rrs(struct dns_packet *packet, struct dns_request *request)
@@ -432,7 +442,8 @@ static int _dns_server_reply_tcp_to_buffer(struct dns_server_conn_tcp_client *tc
 	return 0;
 }
 
-static int _dns_server_reply_tcp(struct dns_request *request, struct dns_server_conn_tcp_client *tcpclient, void *packet, unsigned short len)
+static int _dns_server_reply_tcp(struct dns_request *request, struct dns_server_conn_tcp_client *tcpclient,
+								 void *packet, unsigned short len)
 {
 	int send_len = 0;
 	unsigned char inpacket_data[DNS_IN_PACKSIZE];
@@ -460,10 +471,12 @@ static int _dns_server_reply_tcp(struct dns_request *request, struct dns_server_
 	return 0;
 }
 
-static int _dns_server_reply_udp(struct dns_request *request, struct dns_server_conn_udp *udpserver, unsigned char *inpacket, int inpacket_len)
+static int _dns_server_reply_udp(struct dns_request *request, struct dns_server_conn_udp *udpserver,
+								 unsigned char *inpacket, int inpacket_len)
 {
 	int send_len = 0;
-	send_len = sendto(udpserver->head.fd, inpacket, inpacket_len, 0, (struct sockaddr *)&request->addr, request->addr_len);
+	send_len =
+		sendto(udpserver->head.fd, inpacket, inpacket_len, 0, (struct sockaddr *)&request->addr, request->addr_len);
 	if (send_len != inpacket_len) {
 		tlog(TLOG_ERROR, "send failed.");
 		return -1;
@@ -548,6 +561,19 @@ static int _dns_reply(struct dns_request *request)
 	return _dns_reply_inpacket(request, inpacket, encode_len);
 }
 
+static int _dns_result_callback_nxdomain(struct dns_request *request)
+{
+	char ip[DNS_MAX_CNAME_LEN];
+	unsigned int ping_time = -1;
+
+	ip[0] = 0;
+	if (request->result_callback == NULL) {
+		return 0;
+	}
+
+	return request->result_callback(request->domain, DNS_RC_NXDOMAIN, request->qtype, ip, ping_time, request->user_ptr);
+}
+
 static int _dns_result_callback(struct dns_request *request)
 {
 	char ip[DNS_MAX_CNAME_LEN];
@@ -557,34 +583,42 @@ static int _dns_result_callback(struct dns_request *request)
 		return 0;
 	}
 
+	if (atomic_inc_return(&request->do_callback) != 1) {
+		return 0;
+	}
+
 	ip[0] = 0;
 	if (request->qtype == DNS_T_A) {
 		if (request->has_ipv4 == 0) {
 			goto out;
 		}
 
-		sprintf(ip, "%d.%d.%d.%d", request->ipv4_addr[0], request->ipv4_addr[1], request->ipv4_addr[2], request->ipv4_addr[3]);
+		sprintf(ip, "%d.%d.%d.%d", request->ipv4_addr[0], request->ipv4_addr[1], request->ipv4_addr[2],
+				request->ipv4_addr[3]);
 		ping_time = request->ping_ttl_v4;
-		return request->result_callback(request->domain, request->rcode, request->qtype, ip, ping_time, request->user_ptr);
+		return request->result_callback(request->domain, request->rcode, request->qtype, ip, ping_time,
+										request->user_ptr);
 	} else if (request->qtype == DNS_T_AAAA) {
 		if (request->has_ipv6 == 0) {
 			goto out;
 		}
 
-		sprintf(ip, "%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->ipv6_addr[0], request->ipv6_addr[1],
-				request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4], request->ipv6_addr[5], request->ipv6_addr[6], request->ipv6_addr[7],
-				request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10], request->ipv6_addr[11], request->ipv6_addr[12], request->ipv6_addr[13],
-				request->ipv6_addr[14], request->ipv6_addr[15]);
+		sprintf(ip, "%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->ipv6_addr[0],
+				request->ipv6_addr[1], request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4],
+				request->ipv6_addr[5], request->ipv6_addr[6], request->ipv6_addr[7], request->ipv6_addr[8],
+				request->ipv6_addr[9], request->ipv6_addr[10], request->ipv6_addr[11], request->ipv6_addr[12],
+				request->ipv6_addr[13], request->ipv6_addr[14], request->ipv6_addr[15]);
 		ping_time = request->ping_ttl_v6;
-		return request->result_callback(request->domain, request->rcode, request->qtype, ip, ping_time, request->user_ptr);
+		return request->result_callback(request->domain, request->rcode, request->qtype, ip, ping_time,
+										request->user_ptr);
 	}
 
-	request->result_callback(request->domain, DNS_RC_NXDOMAIN, request->qtype, ip, ping_time, request->user_ptr);
+	_dns_result_callback_nxdomain(request);
 
 	return 0;
 out:
 
-	request->result_callback(request->domain, DNS_RC_NXDOMAIN, request->qtype, ip, ping_time, request->user_ptr);
+	_dns_result_callback_nxdomain(request);
 	return 0;
 }
 
@@ -672,8 +706,8 @@ static int _dns_server_request_complete_A(struct dns_request *request)
 		return 0;
 	}
 
-	tlog(TLOG_INFO, "result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode, request->ipv4_addr[0], request->ipv4_addr[1],
-		 request->ipv4_addr[2], request->ipv4_addr[3]);
+	tlog(TLOG_INFO, "result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode, request->ipv4_addr[0],
+		 request->ipv4_addr[1], request->ipv4_addr[2], request->ipv4_addr[3]);
 
 	request->has_soa = 0;
 	if (request->has_ping_result == 0 && request->ttl_v4 > DNS_SERVER_TMOUT_TTL) {
@@ -686,10 +720,12 @@ static int _dns_server_request_complete_A(struct dns_request *request)
 
 	/* if doing prefetch, update cache only */
 	if (request->prefetch) {
-		dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN, request->ping_ttl_v4);
+		dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN,
+						  request->ping_ttl_v4);
 	} else {
 		/* insert result to cache */
-		dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN, request->ping_ttl_v4);
+		dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN,
+						 request->ping_ttl_v4);
 	}
 
 	return 0;
@@ -706,10 +742,13 @@ static int _dns_server_request_complete_AAAA(struct dns_request *request)
 	}
 
 	if (request->has_ipv6) {
-		tlog(TLOG_INFO, "result: %s, rcode: %d,  %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->domain, request->rcode,
-			 request->ipv6_addr[0], request->ipv6_addr[1], request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4], request->ipv6_addr[5],
-			 request->ipv6_addr[6], request->ipv6_addr[7], request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10], request->ipv6_addr[11],
-			 request->ipv6_addr[12], request->ipv6_addr[13], request->ipv6_addr[14], request->ipv6_addr[15]);
+		tlog(TLOG_INFO,
+			 "result: %s, rcode: %d,  %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x",
+			 request->domain, request->rcode, request->ipv6_addr[0], request->ipv6_addr[1], request->ipv6_addr[2],
+			 request->ipv6_addr[3], request->ipv6_addr[4], request->ipv6_addr[5], request->ipv6_addr[6],
+			 request->ipv6_addr[7], request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10],
+			 request->ipv6_addr[11], request->ipv6_addr[12], request->ipv6_addr[13], request->ipv6_addr[14],
+			 request->ipv6_addr[15]);
 
 		if (request->has_ping_result == 0 && request->ttl_v6 > DNS_SERVER_TMOUT_TTL) {
 			request->ttl_v6 = DNS_SERVER_TMOUT_TTL;
@@ -718,10 +757,12 @@ static int _dns_server_request_complete_AAAA(struct dns_request *request)
 		/* if doing prefetch, update cache only */
 		if (_dns_server_has_bind_flag(request, BIND_FLAG_NO_CACHE) != 0) {
 			if (request->prefetch) {
-				dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v6, DNS_T_AAAA, request->ipv6_addr, DNS_RR_AAAA_LEN, request->ping_ttl_v6);
+				dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v6, DNS_T_AAAA, request->ipv6_addr,
+								  DNS_RR_AAAA_LEN, request->ping_ttl_v6);
 			} else {
 				/* insert result to cache */
-				dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v6, DNS_T_AAAA, request->ipv6_addr, DNS_RR_AAAA_LEN, request->ping_ttl_v6);
+				dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v6, DNS_T_AAAA, request->ipv6_addr,
+								 DNS_RR_AAAA_LEN, request->ping_ttl_v6);
 			}
 		}
 
@@ -729,17 +770,20 @@ static int _dns_server_request_complete_AAAA(struct dns_request *request)
 	}
 
 	if (request->has_ipv4 && (request->ping_ttl_v4 > 0)) {
-		tlog(TLOG_INFO, "result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode, request->ipv4_addr[0], request->ipv4_addr[1],
-			 request->ipv4_addr[2], request->ipv4_addr[3]);
+		tlog(TLOG_INFO, "result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode, request->ipv4_addr[0],
+			 request->ipv4_addr[1], request->ipv4_addr[2], request->ipv4_addr[3]);
 
 		/* if ipv4 is fasting than ipv6, add ipv4 to cache, and return SOA for AAAA request */
-		if ((request->ping_ttl_v4 + (dns_conf_dualstack_ip_selection_threshold * 10)) < request->ping_ttl_v6 || request->ping_ttl_v6 < 0) {
+		if ((request->ping_ttl_v4 + (dns_conf_dualstack_ip_selection_threshold * 10)) < request->ping_ttl_v6 ||
+			request->ping_ttl_v6 < 0) {
 			tlog(TLOG_DEBUG, "Force IPV4 perfered.");
 			if (_dns_server_has_bind_flag(request, BIND_FLAG_NO_CACHE) != 0) {
 				if (request->prefetch) {
-					dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN, request->ping_ttl_v4);
+					dns_cache_replace(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr,
+									  DNS_RR_A_LEN, request->ping_ttl_v4);
 				} else {
-					dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr, DNS_RR_A_LEN, request->ping_ttl_v4);
+					dns_cache_insert(request->domain, cname, cname_ttl, request->ttl_v4, DNS_T_A, request->ipv4_addr,
+									 DNS_RR_A_LEN, request->ping_ttl_v4);
 				}
 			}
 
@@ -868,16 +912,19 @@ static void _dns_server_select_possible_ipaddress(struct dns_request *request)
 	case DNS_T_A: {
 		memcpy(request->ipv4_addr, selected_addr_map->ipv4_addr, DNS_RR_A_LEN);
 		request->ttl_v4 = DNS_SERVER_TMOUT_TTL;
-		tlog(TLOG_DEBUG, "possible result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode, request->ipv4_addr[0], request->ipv4_addr[1],
-			 request->ipv4_addr[2], request->ipv4_addr[3]);
+		tlog(TLOG_DEBUG, "possible result: %s, rcode: %d,  %d.%d.%d.%d\n", request->domain, request->rcode,
+			 request->ipv4_addr[0], request->ipv4_addr[1], request->ipv4_addr[2], request->ipv4_addr[3]);
 	} break;
 	case DNS_T_AAAA: {
 		memcpy(request->ipv6_addr, selected_addr_map->ipv6_addr, DNS_RR_AAAA_LEN);
 		request->ttl_v6 = DNS_SERVER_TMOUT_TTL;
-		tlog(TLOG_DEBUG, "possible result: %s, rcode: %d,  %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", request->domain,
-			 request->rcode, request->ipv6_addr[0], request->ipv6_addr[1], request->ipv6_addr[2], request->ipv6_addr[3], request->ipv6_addr[4],
-			 request->ipv6_addr[5], request->ipv6_addr[6], request->ipv6_addr[7], request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10],
-			 request->ipv6_addr[11], request->ipv6_addr[12], request->ipv6_addr[13], request->ipv6_addr[14], request->ipv6_addr[15]);
+		tlog(TLOG_DEBUG,
+			 "possible result: %s, rcode: %d,  %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x",
+			 request->domain, request->rcode, request->ipv6_addr[0], request->ipv6_addr[1], request->ipv6_addr[2],
+			 request->ipv6_addr[3], request->ipv6_addr[4], request->ipv6_addr[5], request->ipv6_addr[6],
+			 request->ipv6_addr[7], request->ipv6_addr[8], request->ipv6_addr[9], request->ipv6_addr[10],
+			 request->ipv6_addr[11], request->ipv6_addr[12], request->ipv6_addr[13], request->ipv6_addr[14],
+			 request->ipv6_addr[15]);
 	} break;
 	default:
 		break;
@@ -956,6 +1003,8 @@ static struct dns_request *_dns_server_new_request(void)
 	atomic_set(&request->adblock, 0);
 	atomic_set(&request->soa_num, 0);
 	atomic_set(&request->refcnt, 0);
+	atomic_set(&request->notified, 0);
+	atomic_set(&request->do_callback, 0);
 	request->ping_ttl_v4 = -1;
 	request->ping_ttl_v6 = -1;
 	request->prefetch = 0;
@@ -973,8 +1022,9 @@ static struct dns_request *_dns_server_new_request(void)
 	return NULL;
 }
 
-static void _dns_server_ping_result(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result, struct sockaddr *addr, socklen_t addr_len,
-									int seqno, int ttl, struct timeval *tv, void *userptr)
+static void _dns_server_ping_result(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result,
+									struct sockaddr *addr, socklen_t addr_len, int seqno, int ttl, struct timeval *tv,
+									void *userptr)
 {
 	struct dns_request *request = userptr;
 	int may_complete = 0;
@@ -1156,7 +1206,8 @@ static int _dns_server_get_conf_ttl(int ttl)
 	return ttl;
 }
 
-static int _dns_server_ip_rule_check(struct dns_request *request, unsigned char *addr, int addr_len, dns_type_t addr_type, int result_flag)
+static int _dns_server_ip_rule_check(struct dns_request *request, unsigned char *addr, int addr_len,
+									 dns_type_t addr_type, int result_flag)
 {
 	prefix_t prefix;
 	radix_node_t *node = NULL;
@@ -1241,7 +1292,8 @@ static int _dns_server_is_adblock_ipv6(unsigned char addr[16])
 	return -1;
 }
 
-static int _dns_server_process_answer_A(struct dns_rrs *rrs, struct dns_request *request, char *domain, unsigned int result_flag, int ping_timeout)
+static int _dns_server_process_answer_A(struct dns_rrs *rrs, struct dns_request *request, char *domain,
+										unsigned int result_flag, int ping_timeout)
 {
 	int ttl;
 	int ip_check_result = 0;
@@ -1314,7 +1366,8 @@ static int _dns_server_process_answer_A(struct dns_rrs *rrs, struct dns_request
 	return 0;
 }
 
-static int _dns_server_process_answer_AAAA(struct dns_rrs *rrs, struct dns_request *request, char *domain, unsigned int result_flag, int ping_timeout)
+static int _dns_server_process_answer_AAAA(struct dns_rrs *rrs, struct dns_request *request, char *domain,
+										   unsigned int result_flag, int ping_timeout)
 {
 	unsigned char addr[16];
 	char name[DNS_MAX_CNAME_LEN] = {0};
@@ -1329,8 +1382,9 @@ static int _dns_server_process_answer_AAAA(struct dns_rrs *rrs, struct dns_reque
 	_dns_server_request_get(request);
 	dns_get_AAAA(rrs, name, DNS_MAX_CNAME_LEN, &ttl, addr);
 
-	tlog(TLOG_DEBUG, "domain: %s TTL: %d IP: %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", name, ttl, addr[0], addr[1], addr[2],
-		 addr[3], addr[4], addr[5], addr[6], addr[7], addr[8], addr[9], addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]);
+	tlog(TLOG_DEBUG, "domain: %s TTL: %d IP: %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x",
+		 name, ttl, addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6], addr[7], addr[8], addr[9], addr[10],
+		 addr[11], addr[12], addr[13], addr[14], addr[15]);
 
 	ip_check_result = _dns_server_ip_rule_check(request, addr, 16, DNS_T_AAAA, result_flag);
 	if (ip_check_result == 0) {
@@ -1374,8 +1428,9 @@ static int _dns_server_process_answer_AAAA(struct dns_rrs *rrs, struct dns_reque
 		return -1;
 	}
 
-	sprintf(ip, "[%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x]", addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6],
-			addr[7], addr[8], addr[9], addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]);
+	sprintf(ip, "[%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x]", addr[0], addr[1], addr[2],
+			addr[3], addr[4], addr[5], addr[6], addr[7], addr[8], addr[9], addr[10], addr[11], addr[12], addr[13],
+			addr[14], addr[15]);
 
 	/* start ping */
 	if (_dns_server_check_speed(request, ip, 0, ping_timeout) != 0) {
@@ -1385,7 +1440,8 @@ static int _dns_server_process_answer_AAAA(struct dns_rrs *rrs, struct dns_reque
 	return 0;
 }
 
-static int _dns_server_process_answer(struct dns_request *request, char *domain, struct dns_packet *packet, unsigned int result_flag)
+static int _dns_server_process_answer(struct dns_request *request, char *domain, struct dns_packet *packet,
+									  unsigned int result_flag)
 {
 	int ttl;
 	char name[DNS_MAX_CNAME_LEN] = {0};
@@ -1452,9 +1508,11 @@ static int _dns_server_process_answer(struct dns_request *request, char *domain,
 				request->has_soa = 1;
 				request->rcode = packet->head.rcode;
 				dns_get_SOA(rrs, name, 128, &ttl, &request->soa);
-				tlog(TLOG_DEBUG, "domain: %s, qtype: %d, SOA: mname: %s, rname: %s, serial: %d, refresh: %d, retry: %d, expire: %d, minimum: %d", domain,
-					 request->qtype, request->soa.mname, request->soa.rname, request->soa.serial, request->soa.refresh, request->soa.retry, request->soa.expire,
-					 request->soa.minimum);
+				tlog(TLOG_DEBUG,
+					 "domain: %s, qtype: %d, SOA: mname: %s, rname: %s, serial: %d, refresh: %d, retry: %d, expire: "
+					 "%d, minimum: %d",
+					 domain, request->qtype, request->soa.mname, request->soa.rname, request->soa.serial,
+					 request->soa.refresh, request->soa.retry, request->soa.expire, request->soa.minimum);
 				if (atomic_inc_return(&request->soa_num) >= (dns_server_num() / 2)) {
 					_dns_server_request_complete(request);
 				}
@@ -1483,7 +1541,8 @@ static int dns_server_update_reply_packet_id(struct dns_request *request, unsign
 	return 0;
 }
 
-static int _dns_server_passthrough_rule_check(struct dns_request *request, char *domain, struct dns_packet *packet, unsigned int result_flag)
+static int _dns_server_passthrough_rule_check(struct dns_request *request, char *domain, struct dns_packet *packet,
+											  unsigned int result_flag)
 {
 	int ttl;
 	char name[DNS_MAX_CNAME_LEN] = {0};
@@ -1542,8 +1601,10 @@ static int _dns_server_passthrough_rule_check(struct dns_request *request, char
 				_dns_server_request_get(request);
 				dns_get_AAAA(rrs, name, DNS_MAX_CNAME_LEN, &ttl, addr);
 
-				tlog(TLOG_DEBUG, "domain: %s TTL: %d IP: %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x", name, ttl, addr[0], addr[1],
-					 addr[2], addr[3], addr[4], addr[5], addr[6], addr[7], addr[8], addr[9], addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]);
+				tlog(TLOG_DEBUG,
+					 "domain: %s TTL: %d IP: %.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x",
+					 name, ttl, addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6], addr[7], addr[8],
+					 addr[9], addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]);
 
 				ip_check_result = _dns_server_ip_rule_check(request, addr, 16, DNS_T_AAAA, result_flag);
 				if (ip_check_result == 0) {
@@ -1566,7 +1627,8 @@ static int _dns_server_passthrough_rule_check(struct dns_request *request, char
 	return -1;
 }
 
-static int _dns_server_reply_passthrouth(struct dns_request *request, struct dns_packet *packet, unsigned char *inpacket, int inpacket_len)
+static int _dns_server_reply_passthrouth(struct dns_request *request, struct dns_packet *packet,
+										 unsigned char *inpacket, int inpacket_len)
 {
 	int ret = 0;
 
@@ -1574,6 +1636,10 @@ static int _dns_server_reply_passthrouth(struct dns_request *request, struct dns
 		return 0;
 	}
 
+	if (request->conn == NULL) {
+		return 0;
+	}
+
 	/* When passthrough, modify the id to be the id of the client request. */
 	dns_server_update_reply_packet_id(request, inpacket, inpacket_len);
 	ret = _dns_reply_inpacket(request, inpacket, inpacket_len);
@@ -1581,8 +1647,9 @@ static int _dns_server_reply_passthrouth(struct dns_request *request, struct dns
 	return ret;
 }
 
-static int dns_server_resolve_callback(char *domain, dns_result_type rtype, unsigned int result_flag, struct dns_packet *packet, unsigned char *inpacket,
-									   int inpacket_len, void *user_ptr)
+static int dns_server_resolve_callback(char *domain, dns_result_type rtype, unsigned int result_flag,
+									   struct dns_packet *packet, unsigned char *inpacket, int inpacket_len,
+									   void *user_ptr)
 {
 	struct dns_request *request = user_ptr;
 	int ip_num = 0;
@@ -1617,6 +1684,7 @@ static int dns_server_resolve_callback(char *domain, dns_result_type rtype, unsi
 
 		/* Not need to wait check result if only has one ip address */
 		if (ip_num == 1 && request_wait == 1) {
+			request->has_ping_result = 1;
 			_dns_server_request_complete(request);
 			_dns_server_request_remove(request);
 		}
@@ -1653,23 +1721,28 @@ static int _dns_server_process_ptr(struct dns_request *request)
 			struct sockaddr_in *addr_in;
 			addr_in = (struct sockaddr_in *)ifa->ifa_addr;
 			addr = (unsigned char *)&(addr_in->sin_addr.s_addr);
-			snprintf(reverse_addr, sizeof(reverse_addr), "%d.%d.%d.%d.in-addr.arpa", addr[3], addr[2], addr[1], addr[0]);
+			snprintf(reverse_addr, sizeof(reverse_addr), "%d.%d.%d.%d.in-addr.arpa", addr[3], addr[2], addr[1],
+					 addr[0]);
 		} break;
 		case AF_INET6: {
 			struct sockaddr_in6 *addr_in6;
 			addr_in6 = (struct sockaddr_in6 *)ifa->ifa_addr;
 			if (IN6_IS_ADDR_V4MAPPED(&addr_in6->sin6_addr)) {
 				addr = addr_in6->sin6_addr.s6_addr + 12;
-				snprintf(reverse_addr, sizeof(reverse_addr), "%d.%d.%d.%d.in-addr.arpa", addr[3], addr[2], addr[1], addr[0]);
+				snprintf(reverse_addr, sizeof(reverse_addr), "%d.%d.%d.%d.in-addr.arpa", addr[3], addr[2], addr[1],
+						 addr[0]);
 			} else {
 				addr = addr_in6->sin6_addr.s6_addr;
 				snprintf(reverse_addr, sizeof(reverse_addr),
-						 "%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.ip6.arpa", addr[15] & 0xF,
-						 (addr[15] >> 4) & 0xF, addr[14] & 0xF, (addr[14] >> 4) & 0xF, addr[13] & 0xF, (addr[13] >> 4) & 0xF, addr[12] & 0xF,
-						 (addr[12] >> 4) & 0xF, addr[11] & 0xF, (addr[11] >> 4) & 0xF, addr[10] & 0xF, (addr[10] >> 4) & 0xF, addr[9] & 0xF,
-						 (addr[9] >> 4) & 0xF, addr[8] & 0xF, (addr[8] >> 4) & 0xF, addr[7] & 0xF, (addr[7] >> 4) & 0xF, addr[6] & 0xF, (addr[6] >> 4) & 0xF,
-						 addr[5] & 0xF, (addr[5] >> 4) & 0xF, addr[4] & 0xF, (addr[4] >> 4) & 0xF, addr[3] & 0xF, (addr[3] >> 4) & 0xF, addr[2] & 0xF,
-						 (addr[2] >> 4) & 0xF, addr[1] & 0xF, (addr[1] >> 4) & 0xF, addr[0] & 0xF, (addr[0] >> 4) & 0xF);
+						 "%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x."
+						 "%x.ip6.arpa",
+						 addr[15] & 0xF, (addr[15] >> 4) & 0xF, addr[14] & 0xF, (addr[14] >> 4) & 0xF, addr[13] & 0xF,
+						 (addr[13] >> 4) & 0xF, addr[12] & 0xF, (addr[12] >> 4) & 0xF, addr[11] & 0xF,
+						 (addr[11] >> 4) & 0xF, addr[10] & 0xF, (addr[10] >> 4) & 0xF, addr[9] & 0xF,
+						 (addr[9] >> 4) & 0xF, addr[8] & 0xF, (addr[8] >> 4) & 0xF, addr[7] & 0xF, (addr[7] >> 4) & 0xF,
+						 addr[6] & 0xF, (addr[6] >> 4) & 0xF, addr[5] & 0xF, (addr[5] >> 4) & 0xF, addr[4] & 0xF,
+						 (addr[4] >> 4) & 0xF, addr[3] & 0xF, (addr[3] >> 4) & 0xF, addr[2] & 0xF, (addr[2] >> 4) & 0xF,
+						 addr[1] & 0xF, (addr[1] >> 4) & 0xF, addr[0] & 0xF, (addr[0] >> 4) & 0xF);
 			}
 		} break;
 		default:
@@ -1688,6 +1761,11 @@ static int _dns_server_process_ptr(struct dns_request *request)
 		found = 1;
 	}
 
+	/* Determine if the smartdns service is in effect. */
+	if (found == 0 && strncmp(request->domain, "smartdns", sizeof("smartdns")) == 0) {
+		found = 1;
+	}
+
 	if (found == 0) {
 		goto errout;
 	}
@@ -1705,7 +1783,8 @@ static int _dns_server_process_ptr(struct dns_request *request)
 	return -1;
 }
 
-static void _dns_server_log_rule(const char *domain, enum domain_rule rule_type, unsigned char *rule_key, int rule_key_len)
+static void _dns_server_log_rule(const char *domain, enum domain_rule rule_type, unsigned char *rule_key,
+								 int rule_key_len)
 {
 	char rule_name[DNS_MAX_CNAME_LEN];
 
@@ -1720,8 +1799,7 @@ static void _dns_server_log_rule(const char *domain, enum domain_rule rule_type,
 
 static void _dns_server_update_rule_by_flags(struct dns_request *request)
 {
-	struct dns_rule_flags *rule_flag =
-		(struct dns_rule_flags *)request->domain_rule.rules[0];
+	struct dns_rule_flags *rule_flag = (struct dns_rule_flags *)request->domain_rule.rules[0];
 	unsigned int flags = 0;
 
 	if (rule_flag == NULL) {
@@ -1797,7 +1875,8 @@ void _dns_server_get_domain_rule(struct dns_request *request)
 	domain_key[domain_len] = 0;
 
 	/* find domain rule */
-	art_substring_walk(&dns_conf_domain_rule, (unsigned char *)domain_key, domain_len, _dns_server_get_rules, &walk_args);
+	art_substring_walk(&dns_conf_domain_rule, (unsigned char *)domain_key, domain_len, _dns_server_get_rules,
+					   &walk_args);
 	if (likely(dns_conf_log_level > TLOG_DEBUG)) {
 		return;
 	}
@@ -1930,6 +2009,19 @@ static int _dns_server_process_address(struct dns_request *request)
 	return -1;
 }
 
+static void _dns_server_prolcess_speed_check_rule(struct dns_request *request)
+{
+	struct dns_domain_check_order *check_order = NULL;
+
+	/* get domain rule flag */
+	check_order = request->domain_rule.rules[DOMAIN_RULE_CHECKSPEED];
+	if (check_order == NULL) {
+		return;
+	}
+
+	request->check_order_list = check_order;
+}
+
 static int _dns_server_process_cache(struct dns_request *request)
 {
 	struct dns_cache *dns_cache = NULL;
@@ -1941,6 +2033,15 @@ static int _dns_server_process_cache(struct dns_request *request)
 
 	dns_cache = dns_cache_lookup(request->domain, request->qtype);
 	if (dns_cache == NULL) {
+		if (request->dualstack_selection && request->qtype == DNS_T_AAAA) {
+			dns_cache_A = dns_cache_lookup(request->domain, DNS_T_A);
+			if (dns_cache_A) {
+				tlog(TLOG_DEBUG, "No IPV6 Found, Force IPV4 perfered.");
+				dns_cache_release(dns_cache_A);
+				dns_cache_release(dns_cache);
+				return _dns_server_reply_SOA(DNS_RC_NOERROR, request);
+			}
+		}
 		goto errout;
 	}
 
@@ -1951,7 +2052,8 @@ static int _dns_server_process_cache(struct dns_request *request)
 	if (request->dualstack_selection && request->qtype == DNS_T_AAAA) {
 		dns_cache_A = dns_cache_lookup(request->domain, DNS_T_A);
 		if (dns_cache_A && (dns_cache_A->speed > 0)) {
-			if ((dns_cache_A->speed + (dns_conf_dualstack_ip_selection_threshold * 10)) < dns_cache->speed || dns_cache->speed < 0) {
+			if ((dns_cache_A->speed + (dns_conf_dualstack_ip_selection_threshold * 10)) < dns_cache->speed ||
+				dns_cache->speed < 0) {
 				tlog(TLOG_DEBUG, "Force IPV4 perfered.");
 				dns_cache_release(dns_cache_A);
 				dns_cache_release(dns_cache);
@@ -1991,7 +2093,11 @@ static int _dns_server_process_cache(struct dns_request *request)
 		_dns_reply(request);
 	}
 
-	dns_cache_update(dns_cache);
+	if (dns_cache_get_ttl(dns_cache) == 0) {
+		_dns_server_prefetch_request(request->domain, request->qtype);
+	} else {
+		dns_cache_update(dns_cache);
+	}
 	dns_cache_release(dns_cache);
 
 	if (dns_cache_A) {
@@ -2027,7 +2133,8 @@ static void _dns_server_request_set_enable_prefetch(struct dns_request *request)
 	request->prefetch = 1;
 }
 
-static int _dns_server_request_set_client_addr(struct dns_request *request, struct sockaddr_storage *from, socklen_t from_len)
+static int _dns_server_request_set_client_addr(struct dns_request *request, struct sockaddr_storage *from,
+											   socklen_t from_len)
 {
 	switch (from->ss_family) {
 	case AF_INET:
@@ -2104,6 +2211,17 @@ static const char *_dns_server_get_request_groupname(struct dns_request *request
 	return NULL;
 }
 
+static void _dns_server_check_set_passthrough(struct dns_request *request)
+{
+	if (request->check_order_list->order[0] == DOMAIN_CHECK_NONE) {
+		request->passthrough = 1;
+	}
+
+	if (_dns_server_has_bind_flag(request, BIND_FLAG_NO_SPEED_CHECK) == 0) {
+		request->passthrough = 1;
+	}
+}
+
 static int _dns_server_do_query(struct dns_request *request, const char *domain, int qtype)
 {
 	int ret = -1;
@@ -2138,6 +2256,12 @@ static int _dns_server_do_query(struct dns_request *request, const char *domain,
 		goto clean_exit;
 	}
 
+	/* process speed check rule */
+	_dns_server_prolcess_speed_check_rule(request);
+
+	/* check and set passthrough */
+	_dns_server_check_set_passthrough(request);
+
 	/* process cache */
 	if (request->prefetch == 0) {
 		if (_dns_server_process_cache(request) == 0) {
@@ -2181,19 +2305,9 @@ static int _dns_server_do_query(struct dns_request *request, const char *domain,
 	return ret;
 }
 
-static void _dns_server_check_set_passthrough(struct dns_request *request, struct dns_server_conn_head *conn)
-{
-	if (request->check_order_list->order[0] == DOMAIN_CHECK_NONE) {
-		request->passthrough = 1;
-	}
-
-	if (_dns_server_has_bind_flag(request, BIND_FLAG_NO_SPEED_CHECK) == 0) {
-		request->passthrough = 1;
-	}
-}
-
-static int _dns_server_recv(struct dns_server_conn_head *conn, unsigned char *inpacket, int inpacket_len, struct sockaddr_storage *local, socklen_t local_len,
-							struct sockaddr_storage *from, socklen_t from_len)
+static int _dns_server_recv(struct dns_server_conn_head *conn, unsigned char *inpacket, int inpacket_len,
+							struct sockaddr_storage *local, socklen_t local_len, struct sockaddr_storage *from,
+							socklen_t from_len)
 {
 	int decode_len;
 	int ret = -1;
@@ -2209,16 +2323,19 @@ static int _dns_server_recv(struct dns_server_conn_head *conn, unsigned char *in
 	int qtype = DNS_T_ALL;
 
 	/* decode packet */
-	tlog(TLOG_DEBUG, "recv query packet from %s, len = %d", gethost_by_addr(name, sizeof(name), (struct sockaddr *)from), inpacket_len);
+	tlog(TLOG_DEBUG, "recv query packet from %s, len = %d",
+		 gethost_by_addr(name, sizeof(name), (struct sockaddr *)from), inpacket_len);
 	decode_len = dns_decode(packet, DNS_PACKSIZE, inpacket, inpacket_len);
 	if (decode_len < 0) {
 		tlog(TLOG_DEBUG, "decode failed.\n");
 		goto errout;
 	}
 
-	tlog(TLOG_DEBUG, "request qdcount = %d, ancount = %d, nscount = %d, nrcount = %d, len = %d, id = %d, tc = %d, rd = %d, ra = %d, rcode = %d\n",
-		 packet->head.qdcount, packet->head.ancount, packet->head.nscount, packet->head.nrcount, inpacket_len, packet->head.id, packet->head.tc,
-		 packet->head.rd, packet->head.ra, packet->head.rcode);
+	tlog(TLOG_DEBUG,
+		 "request qdcount = %d, ancount = %d, nscount = %d, nrcount = %d, len = %d, id = %d, tc = %d, rd = %d, ra = "
+		 "%d, rcode = %d\n",
+		 packet->head.qdcount, packet->head.ancount, packet->head.nscount, packet->head.nrcount, inpacket_len,
+		 packet->head.id, packet->head.tc, packet->head.rd, packet->head.ra, packet->head.rcode);
 
 	if (packet->head.qr != DNS_QR_QUERY) {
 		goto errout;
@@ -2249,7 +2366,6 @@ static int _dns_server_recv(struct dns_server_conn_head *conn, unsigned char *in
 
 	memcpy(&request->localaddr, local, local_len);
 	_dns_server_request_set_client(request, conn);
-	_dns_server_check_set_passthrough(request, conn);
 	_dns_server_request_set_client_addr(request, from, from_len);
 	_dns_server_request_set_id(request, packet->head.id);
 	_dns_server_set_dualstack_selection(request);
@@ -2315,7 +2431,7 @@ int dns_server_query(char *domain, int qtype, dns_result_callback callback, void
 		goto errout;
 	}
 
-	_dns_server_request_release_complete(request, 0);
+	_dns_server_request_release_complete(request, 1);
 	return ret;
 errout:
 	if (request) {
@@ -2390,7 +2506,8 @@ static int _dns_server_client_close(struct dns_server_conn_head *conn)
 	return 0;
 }
 
-static int _dns_server_tcp_accept(struct dns_server_conn_tcp_server *tcpserver, struct epoll_event *event, unsigned long now)
+static int _dns_server_tcp_accept(struct dns_server_conn_tcp_server *tcpserver, struct epoll_event *event,
+								  unsigned long now)
 {
 	struct sockaddr_storage addr;
 	struct dns_server_conn_tcp_client *tcpclient = NULL;
@@ -2454,7 +2571,8 @@ static int _dns_server_tcp_recv(struct dns_server_conn_tcp_client *tcpclient)
 			return 0;
 		}
 
-		len = recv(tcpclient->head.fd, tcpclient->recvbuff.buf + tcpclient->recvbuff.size, sizeof(tcpclient->recvbuff.buf) - tcpclient->recvbuff.size, 0);
+		len = recv(tcpclient->head.fd, tcpclient->recvbuff.buf + tcpclient->recvbuff.size,
+				   sizeof(tcpclient->recvbuff.buf) - tcpclient->recvbuff.size, 0);
 		if (len < 0) {
 			if (errno == EAGAIN) {
 				return RECV_ERROR_AGAIN;
@@ -2496,7 +2614,7 @@ static int _dns_server_tcp_process_one_request(struct dns_server_conn_tcp_client
 			return RECV_ERROR_FAIL;
 		}
 
-		if (request_len > (total_len - proceed_len)) {
+		if (request_len > (total_len - proceed_len - sizeof(unsigned short))) {
 			ret = RECV_ERROR_AGAIN;
 			break;
 		}
@@ -2504,8 +2622,8 @@ static int _dns_server_tcp_process_one_request(struct dns_server_conn_tcp_client
 		request_data = (unsigned char *)(tcpclient->recvbuff.buf + proceed_len + sizeof(unsigned short));
 
 		/* process one record */
-		if (_dns_server_recv(&tcpclient->head, request_data, request_len, &tcpclient->localaddr, tcpclient->localaddr_len, &tcpclient->addr,
-							 tcpclient->addr_len) != 0) {
+		if (_dns_server_recv(&tcpclient->head, request_data, request_len, &tcpclient->localaddr,
+							 tcpclient->localaddr_len, &tcpclient->addr, tcpclient->addr_len) != 0) {
 			tlog(TLOG_ERROR, "process tcp request failed.");
 			return RECV_ERROR_FAIL;
 		}
@@ -2588,7 +2706,8 @@ static int _dns_server_tcp_send(struct dns_server_conn_tcp_client *tcpclient)
 	return 0;
 }
 
-static int _dns_server_process_tcp(struct dns_server_conn_tcp_client *dnsserver, struct epoll_event *event, unsigned long now)
+static int _dns_server_process_tcp(struct dns_server_conn_tcp_client *dnsserver, struct epoll_event *event,
+								   unsigned long now)
 {
 	int ret = 0;
 
@@ -2662,16 +2781,18 @@ static void _dns_server_second_ping_check(struct dns_request *request)
 		switch (addr_map->addr_type) {
 		case DNS_T_A: {
 			_dns_server_request_get(request);
-			sprintf(ip, "%d.%d.%d.%d", addr_map->ipv4_addr[0], addr_map->ipv4_addr[1], addr_map->ipv4_addr[2], addr_map->ipv4_addr[3]);
+			sprintf(ip, "%d.%d.%d.%d", addr_map->ipv4_addr[0], addr_map->ipv4_addr[1], addr_map->ipv4_addr[2],
+					addr_map->ipv4_addr[3]);
 			if (_dns_server_check_speed(request, ip, 1, DNS_PING_SECOND_TIMEOUT) != 0) {
 				_dns_server_request_release(request);
 			}
 		} break;
 		case DNS_T_AAAA: {
 			_dns_server_request_get(request);
-			sprintf(ip, "[%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x]", addr_map->ipv6_addr[0], addr_map->ipv6_addr[1],
-					addr_map->ipv6_addr[2], addr_map->ipv6_addr[3], addr_map->ipv6_addr[4], addr_map->ipv6_addr[5], addr_map->ipv6_addr[6],
-					addr_map->ipv6_addr[7], addr_map->ipv6_addr[8], addr_map->ipv6_addr[9], addr_map->ipv6_addr[10], addr_map->ipv6_addr[11],
+			sprintf(ip, "[%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x:%.2x%.2x]",
+					addr_map->ipv6_addr[0], addr_map->ipv6_addr[1], addr_map->ipv6_addr[2], addr_map->ipv6_addr[3],
+					addr_map->ipv6_addr[4], addr_map->ipv6_addr[5], addr_map->ipv6_addr[6], addr_map->ipv6_addr[7],
+					addr_map->ipv6_addr[8], addr_map->ipv6_addr[9], addr_map->ipv6_addr[10], addr_map->ipv6_addr[11],
 					addr_map->ipv6_addr[12], addr_map->ipv6_addr[13], addr_map->ipv6_addr[14], addr_map->ipv6_addr[15]);
 
 			if (_dns_server_check_speed(request, ip, 1, DNS_PING_SECOND_TIMEOUT) != 0) {
@@ -2696,7 +2817,8 @@ static void _dns_server_prefetch_domain(struct dns_cache *dns_cache)
 	}
 
 	/* start prefetch domain */
-	tlog(TLOG_DEBUG, "prefetch by cache %s, qtype %d, ttl %d, hitnum %d", dns_cache->domain, dns_cache->qtype, dns_cache->ttl, hitnum);
+	tlog(TLOG_DEBUG, "prefetch by cache %s, qtype %d, ttl %d, hitnum %d", dns_cache->domain, dns_cache->qtype,
+		 dns_cache->ttl, hitnum);
 	if (_dns_server_prefetch_request(dns_cache->domain, dns_cache->qtype) != 0) {
 		tlog(TLOG_ERROR, "prefetch domain %s, qtype %d, failed.", dns_cache->domain, dns_cache->qtype);
 	}
@@ -2928,7 +3050,8 @@ static int _dns_create_socket(const char *host_ip, int type)
 
 	fd = socket(gai->ai_family, gai->ai_socktype, gai->ai_protocol);
 	if (fd < 0) {
-		tlog(TLOG_ERROR, "create socket failed, family = %d, type = %d, proto = %d, %s\n", gai->ai_family, gai->ai_socktype, gai->ai_protocol, strerror(errno));
+		tlog(TLOG_ERROR, "create socket failed, family = %d, type = %d, proto = %d, %s\n", gai->ai_family,
+			 gai->ai_socktype, gai->ai_protocol, strerror(errno));
 		goto errout;
 	}
 
@@ -3113,7 +3236,7 @@ int dns_server_init(void)
 		return -1;
 	}
 
-	if (dns_cache_init(dns_conf_cachesize) != 0) {
+	if (dns_cache_init(dns_conf_cachesize, dns_conf_serve_expired, dns_conf_serve_expired_ttl) != 0) {
 		tlog(TLOG_ERROR, "init cache failed.");
 		return -1;
 	}
diff --git a/release/src/router/smartdns/src/dns_server.h b/release/src/router/smartdns/src/dns_server.h
index e19f18a603..358bd601f9 100644
--- a/release/src/router/smartdns/src/dns_server.h
+++ b/release/src/router/smartdns/src/dns_server.h
@@ -36,7 +36,8 @@ void dns_server_stop(void);
 void dns_server_exit(void);
 
 /* query result notify function */
-typedef int (*dns_result_callback)(char *domain, dns_rtcode_t rtcode, dns_type_t addr_type, char *ip, unsigned int ping_time, void *user_ptr);
+typedef int (*dns_result_callback)(char *domain, dns_rtcode_t rtcode, dns_type_t addr_type, char *ip,
+								   unsigned int ping_time, void *user_ptr);
 
 /* query domain */
 int dns_server_query(char *domain, int qtype, dns_result_callback callback, void *user_ptr);
diff --git a/release/src/router/smartdns/src/fast_ping.c b/release/src/router/smartdns/src/fast_ping.c
index 85f5206dde..54352bc91e 100644
--- a/release/src/router/smartdns/src/fast_ping.c
+++ b/release/src/router/smartdns/src/fast_ping.c
@@ -1,1684 +1,1710 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "fast_ping.h"
-#include "atomic.h"
-#include "hashtable.h"
-#include "tlog.h"
-#include "util.h"
-#include <arpa/inet.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <linux/filter.h>
-#include <netdb.h>
-#include <netinet/icmp6.h>
-#include <netinet/ip.h>
-#include <netinet/ip6.h>
-#include <netinet/ip_icmp.h>
-#include <netinet/tcp.h>
-#include <pthread.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/epoll.h>
-#include <sys/socket.h>
-#include <sys/types.h>
-#include <unistd.h>
-
-#define PING_MAX_EVENTS 128
-#define PING_MAX_HOSTLEN 128
-#define ICMP_PACKET_SIZE (1024 * 64)
-#define ICMP_INPACKET_SIZE 1024
-#define IPV4_ADDR_LEN 4
-#define IPV6_ADDR_LEN 16
-#define SOCKET_PRIORITY (6)
-
-#ifndef ICMP_FILTER
-#define ICMP_FILTER 1
-struct icmp_filter {
-	uint32_t data;
-};
-#endif
-
-struct ping_dns_head {
-	unsigned short id;
-	unsigned short flag;
-	unsigned short qdcount;
-	unsigned short ancount;
-	unsigned short aucount;
-	unsigned short adcount;
-} __attribute__((packed));
-
-typedef enum FAST_PING_TYPE {
-	FAST_PING_ICMP = 1,
-	FAST_PING_ICMP6 = 2,
-	FAST_PING_TCP,
-	FAST_PING_UDP,
-	FAST_PING_UDP6,
-	FAST_PING_END,
-} FAST_PING_TYPE;
-
-struct fast_ping_packet_msg {
-	struct timeval tv;
-	unsigned int sid;
-	unsigned int seq;
-	unsigned int cookie;
-};
-
-struct fast_ping_packet {
-	union {
-		struct icmp icmp;
-		struct icmp6_hdr icmp6;
-	};
-	unsigned int ttl;
-	struct fast_ping_packet_msg msg;
-};
-
-struct ping_host_struct {
-	atomic_t ref;
-	atomic_t notified;
-	struct hlist_node addr_node;
-	struct list_head action_list;
-	FAST_PING_TYPE type;
-
-	void *userptr;
-	fast_ping_result ping_callback;
-	char host[PING_MAX_HOSTLEN];
-
-	int fd;
-	unsigned int seq;
-	int ttl;
-	struct timeval last;
-	int interval;
-	int timeout;
-	int count;
-	int send;
-	int run;
-	unsigned int cookie;
-	unsigned int sid;
-	unsigned short port;
-	unsigned short ss_family;
-	union {
-		struct sockaddr addr;
-		struct sockaddr_in6 in6;
-		struct sockaddr_in in;
-	};
-	socklen_t addr_len;
-	struct fast_ping_packet packet;
-};
-
-struct fast_ping_struct {
-	int run;
-	pthread_t tid;
-	pthread_mutex_t lock;
-	unsigned short ident;
-
-	int epoll_fd;
-	int fd_icmp;
-	struct ping_host_struct icmp_host;
-	int fd_icmp6;
-	struct ping_host_struct icmp6_host;
-	int fd_udp;
-	struct ping_host_struct udp_host;
-	int fd_udp6;
-	struct ping_host_struct udp6_host;
-
-	pthread_mutex_t map_lock;
-	DECLARE_HASHTABLE(addrmap, 6);
-};
-
-static struct fast_ping_struct ping;
-static atomic_t ping_sid = ATOMIC_INIT(0);
-static int bool_print_log = 1;
-
-static uint16_t _fast_ping_checksum(uint16_t *header, size_t len)
-{
-	uint32_t sum = 0;
-	int i;
-
-	for (i = 0; i < len / sizeof(uint16_t); i++) {
-		sum += ntohs(header[i]);
-	}
-
-	return htons(~((sum >> 16) + (sum & 0xffff)));
-}
-
-static void _fast_ping_install_filter_v6(int sock)
-{
-	struct icmp6_filter icmp6_filter;
-	ICMP6_FILTER_SETBLOCKALL(&icmp6_filter);
-	ICMP6_FILTER_SETPASS(ICMP6_ECHO_REPLY, &icmp6_filter);
-	setsockopt(sock, IPPROTO_ICMPV6, ICMP6_FILTER, &icmp6_filter, sizeof(struct icmp6_filter));
-
-	static int once;
-	static struct sock_filter insns[] = {
-		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 4),                       /* Load icmp echo ident */
-		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xAAAA, 0, 1),           /* Ours? */
-		BPF_STMT(BPF_RET | BPF_K, ~0U),                              /* Yes, it passes. */
-		BPF_STMT(BPF_LD | BPF_B | BPF_ABS, 0),                       /* Load icmp type */
-		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ICMP6_ECHO_REPLY, 1, 0), /* Echo? */
-		BPF_STMT(BPF_RET | BPF_K, ~0U),                              /* No. It passes. This must not happen. */
-		BPF_STMT(BPF_RET | BPF_K, 0),                                /* Echo with wrong ident. Reject. */
-	};
-	static struct sock_fprog filter = {sizeof insns / sizeof(insns[0]), insns};
-
-	if (once) {
-		return;
-	}
-	once = 1;
-
-	/* Patch bpflet for current identifier. */
-	insns[1] = (struct sock_filter)BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, htons(ping.ident), 0, 1);
-
-	if (setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter))) {
-		perror("WARNING: failed to install socket filter\n");
-	}
-}
-
-static void _fast_ping_install_filter_v4(int sock)
-{
-	static int once;
-	static struct sock_filter insns[] = {
-		BPF_STMT(BPF_LDX | BPF_B | BPF_MSH, 0),                    /* Skip IP header. F..g BSD... Look into ping6. */
-		BPF_STMT(BPF_LD | BPF_H | BPF_IND, 4),                     /* Load icmp echo ident */
-		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xAAAA, 0, 1),         /* Ours? */
-		BPF_STMT(BPF_RET | BPF_K, ~0U),                            /* Yes, it passes. */
-		BPF_STMT(BPF_LD | BPF_B | BPF_IND, 0),                     /* Load icmp type */
-		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ICMP_ECHOREPLY, 1, 0), /* Echo? */
-		BPF_STMT(BPF_RET | BPF_K, 0xFFFFFFF),                      /* No. It passes. */
-		BPF_STMT(BPF_RET | BPF_K, 0)                               /* Echo with wrong ident. Reject. */
-	};
-
-	static struct sock_fprog filter = {sizeof insns / sizeof(insns[0]), insns};
-
-	if (once) {
-		return;
-	}
-	once = 1;
-
-	/* Patch bpflet for current identifier. */
-	insns[2] = (struct sock_filter)BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, htons(ping.ident), 0, 1);
-
-	if (setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter))) {
-		perror("WARNING: failed to install socket filter\n");
-	}
-}
-
-static int _fast_ping_sockaddr_ip_cmp(struct sockaddr *first_addr, socklen_t first_addr_len, struct sockaddr *second_addr, socklen_t second_addr_len)
-{
-	if (first_addr_len != second_addr_len) {
-		return -1;
-	}
-
-	if (first_addr->sa_family != second_addr->sa_family) {
-		return -1;
-	}
-
-	switch (first_addr->sa_family) {
-	case AF_INET: {
-		struct sockaddr_in *first_addr_in = (struct sockaddr_in *)first_addr;
-		struct sockaddr_in *second_addr_in = (struct sockaddr_in *)second_addr;
-		if (memcmp(&first_addr_in->sin_addr.s_addr, &second_addr_in->sin_addr.s_addr, IPV4_ADDR_LEN) != 0) {
-			return -1;
-		}
-	} break;
-	case AF_INET6: {
-		struct sockaddr_in6 *first_addr_in6 = (struct sockaddr_in6 *)first_addr;
-		struct sockaddr_in6 *second_addr_in6 = (struct sockaddr_in6 *)second_addr;
-		if (memcmp(&first_addr_in6->sin6_addr.s6_addr, &second_addr_in6->sin6_addr.s6_addr, IPV4_ADDR_LEN) != 0) {
-			return -1;
-		}
-	} break;
-	default:
-		return -1;
-	}
-
-	return 0;
-}
-
-static uint32_t _fast_ping_hash_key(unsigned int sid, struct sockaddr *addr)
-{
-	uint32_t key = 0;
-	void *sin_addr = NULL;
-	unsigned int sin_addr_len = 0;
-
-	switch (addr->sa_family) {
-	case AF_INET: {
-		struct sockaddr_in *addr_in;
-		addr_in = (struct sockaddr_in *)addr;
-		sin_addr = &addr_in->sin_addr.s_addr;
-		sin_addr_len = IPV4_ADDR_LEN;
-	} break;
-	case AF_INET6: {
-		struct sockaddr_in6 *addr_in6;
-		addr_in6 = (struct sockaddr_in6 *)addr;
-		if (IN6_IS_ADDR_V4MAPPED(&addr_in6->sin6_addr)) {
-			sin_addr = addr_in6->sin6_addr.s6_addr + 12;
-			sin_addr_len = IPV4_ADDR_LEN;
-		} else {
-			sin_addr = addr_in6->sin6_addr.s6_addr;
-			sin_addr_len = IPV6_ADDR_LEN;
-		}
-	} break;
-	default:
-		goto errout;
-		break;
-	}
-	if (sin_addr == NULL) {
-		return -1;
-	}
-
-	key = jhash(sin_addr, sin_addr_len, 0);
-	key = jhash(&sid, sizeof(sid), key);
-
-	return key;
-errout:
-	return -1;
-}
-
-static struct addrinfo *_fast_ping_getaddr(const char *host, const char *port, int type, int protocol)
-{
-	struct addrinfo hints;
-	struct addrinfo *result = NULL;
-	int errcode = 0;
-
-	memset(&hints, 0, sizeof(hints));
-	hints.ai_family = AF_UNSPEC;
-	hints.ai_socktype = type;
-	hints.ai_protocol = protocol;
-	errcode = getaddrinfo(host, port, &hints, &result);
-	if (errcode != 0) {
-		tlog(TLOG_ERROR, "get addr info failed. host:%s, port: %s, error %s\n", host, port, gai_strerror(errcode));
-		goto errout;
-	}
-
-	return result;
-errout:
-	if (result) {
-		freeaddrinfo(result);
-	}
-	return NULL;
-}
-
-static int _fast_ping_getdomain(const char *host)
-{
-	struct addrinfo hints;
-	struct addrinfo *result = NULL;
-	int domain = -1;
-
-	memset(&hints, 0, sizeof(hints));
-	hints.ai_family = AF_UNSPEC;
-	hints.ai_socktype = SOCK_STREAM;
-	hints.ai_protocol = 0;
-	if (getaddrinfo(host, NULL, &hints, &result) != 0) {
-		tlog(TLOG_ERROR, "get addr info failed. %s\n", strerror(errno));
-		goto errout;
-	}
-
-	domain = result->ai_family;
-
-	freeaddrinfo(result);
-
-	return domain;
-errout:
-	if (result) {
-		freeaddrinfo(result);
-	}
-	return -1;
-}
-
-static void _fast_ping_host_get(struct ping_host_struct *ping_host)
-{
-	if (atomic_inc_return(&ping_host->ref) <= 0) {
-		tlog(TLOG_ERROR, "BUG: ping host ref is invalid, host: %s", ping_host->host);
-		abort();
-	}
-}
-
-static void _fast_ping_close_host_sock(struct ping_host_struct *ping_host)
-{
-	if (ping_host->fd < 0) {
-		return;
-	}
-	struct epoll_event *event;
-	event = (struct epoll_event *)1;
-	epoll_ctl(ping.epoll_fd, EPOLL_CTL_DEL, ping_host->fd, event);
-	close(ping_host->fd);
-	ping_host->fd = -1;
-}
-
-static void _fast_ping_host_put(struct ping_host_struct *ping_host)
-{
-	if (!atomic_dec_and_test(&ping_host->ref)) {
-		return;
-	}
-
-	_fast_ping_close_host_sock(ping_host);
-
-	pthread_mutex_lock(&ping.map_lock);
-	hash_del(&ping_host->addr_node);
-	pthread_mutex_unlock(&ping.map_lock);
-
-	if (atomic_inc_return(&ping_host->notified) == 1) {
-		struct timeval tv;
-		tv.tv_sec = 0;
-		tv.tv_usec = 0;
-
-		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_END, &ping_host->addr, ping_host->addr_len, ping_host->seq, ping_host->ttl, &tv,
-								 ping_host->userptr);
-	}
-
-	tlog(TLOG_DEBUG, "ping end, id %d", ping_host->sid);
-	// memset(ping_host, 0, sizeof(*ping_host));
-	ping_host->type = FAST_PING_END;
-	free(ping_host);
-}
-
-static void _fast_ping_host_remove(struct ping_host_struct *ping_host)
-{
-	_fast_ping_close_host_sock(ping_host);
-
-	pthread_mutex_lock(&ping.map_lock);
-	if (!hash_hashed(&ping_host->addr_node)) {
-		pthread_mutex_unlock(&ping.map_lock);
-		return;
-	}
-	hash_del(&ping_host->addr_node);
-
-	pthread_mutex_unlock(&ping.map_lock);
-
-	if (atomic_inc_return(&ping_host->notified) == 1) {
-		struct timeval tv;
-		tv.tv_sec = 0;
-		tv.tv_usec = 0;
-
-		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_END, &ping_host->addr, ping_host->addr_len, ping_host->seq, ping_host->ttl, &tv,
-								 ping_host->userptr);
-	}
-
-	_fast_ping_host_put(ping_host);
-}
-
-static int _fast_ping_sendping_v6(struct ping_host_struct *ping_host)
-{
-	struct fast_ping_packet *packet = &ping_host->packet;
-	struct icmp6_hdr *icmp6 = &packet->icmp6;
-	int len = 0;
-
-	ping_host->seq++;
-	memset(icmp6, 0, sizeof(*icmp6));
-	icmp6->icmp6_type = ICMP6_ECHO_REQUEST;
-	icmp6->icmp6_code = 0;
-	icmp6->icmp6_cksum = 0;
-	icmp6->icmp6_id = ping.ident;
-	icmp6->icmp6_seq = htons(ping_host->seq);
-
-	gettimeofday(&packet->msg.tv, NULL);
-	gettimeofday(&ping_host->last, NULL);
-	packet->msg.sid = ping_host->sid;
-	packet->msg.cookie = ping_host->cookie;
-	packet->msg.seq = ping_host->seq;
-	icmp6->icmp6_cksum = _fast_ping_checksum((void *)packet, sizeof(struct fast_ping_packet));
-
-	len = sendto(ping.fd_icmp6, &ping_host->packet, sizeof(struct fast_ping_packet), 0, (struct sockaddr *)&ping_host->addr, ping_host->addr_len);
-	if (len < 0 || len != sizeof(struct fast_ping_packet)) {
-		int err = errno;
-		if (errno == ENETUNREACH || errno == EINVAL) {
-			goto errout;
-		}
-
-		if (errno == EACCES) {
-			if (bool_print_log == 0) {
-				goto errout;
-			}
-			bool_print_log = 0;
-		}
-
-		char ping_host_name[PING_MAX_HOSTLEN];
-		tlog(TLOG_ERROR, "sendto %s, id %d, %s", gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr), ping_host->sid,
-			 strerror(err));
-		goto errout;
-	}
-
-	return 0;
-
-errout:
-	return -1;
-}
-
-static int _fast_ping_sendping_v4(struct ping_host_struct *ping_host)
-{
-	struct fast_ping_packet *packet = &ping_host->packet;
-	struct icmp *icmp = &packet->icmp;
-	int len;
-
-	ping_host->seq++;
-	memset(icmp, 0, sizeof(*icmp));
-	icmp->icmp_type = ICMP_ECHO;
-	icmp->icmp_code = 0;
-	icmp->icmp_cksum = 0;
-	icmp->icmp_id = ping.ident;
-	icmp->icmp_seq = htons(ping_host->seq);
-
-	gettimeofday(&packet->msg.tv, NULL);
-	gettimeofday(&ping_host->last, NULL);
-	packet->msg.sid = ping_host->sid;
-	packet->msg.seq = ping_host->seq;
-	packet->msg.cookie = ping_host->cookie;
-	icmp->icmp_cksum = _fast_ping_checksum((void *)packet, sizeof(struct fast_ping_packet));
-
-	len = sendto(ping.fd_icmp, packet, sizeof(struct fast_ping_packet), 0, (struct sockaddr *)&ping_host->addr, ping_host->addr_len);
-	if (len < 0 || len != sizeof(struct fast_ping_packet)) {
-		int err = errno;
-		if (errno == ENETUNREACH || errno == EINVAL) {
-			goto errout;
-		}
-		char ping_host_name[PING_MAX_HOSTLEN];
-		tlog(TLOG_ERROR, "sendto %s, id %d, %s", gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr), ping_host->sid,
-			 strerror(err));
-		goto errout;
-	}
-
-	return 0;
-
-errout:
-	return -1;
-}
-
-static int _fast_ping_sendping_udp(struct ping_host_struct *ping_host)
-{
-	struct ping_dns_head dns_head;
-	int len;
-	int flag = 0;
-	int fd = 0;
-
-	flag |= (0 << 15) & 0x8000;
-	flag |= (2 << 11) & 0x7800;
-	flag |= (0 << 10) & 0x0400;
-	flag |= (0 << 9) & 0x0200;
-	flag |= (0 << 8) & 0x0100;
-	flag |= (0 << 7) & 0x0080;
-	flag |= (0 << 0) & 0x000F;
-
-	if (ping_host->type == FAST_PING_UDP) {
-		fd = ping.fd_udp;
-	} else if (ping_host->type == FAST_PING_UDP6) {
-		fd = ping.fd_udp6;
-	} else {
-		return -1;
-	}
-
-	ping_host->seq++;
-	memset(&dns_head, 0, sizeof(dns_head));
-	dns_head.id = htons(ping_host->sid);
-	dns_head.flag = flag;
-	gettimeofday(&ping_host->last, NULL);
-	len = sendto(fd, &dns_head, sizeof(dns_head), 0, (struct sockaddr *)&ping_host->addr, ping_host->addr_len);
-	if (len < 0 || len != sizeof(dns_head)) {
-		int err = errno;
-		if (errno == ENETUNREACH || errno == EINVAL) {
-			goto errout;
-		}
-		char ping_host_name[PING_MAX_HOSTLEN];
-		tlog(TLOG_ERROR, "sendto %s, id %d, %s", gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr), ping_host->sid,
-			 strerror(err));
-		goto errout;
-	}
-
-	return 0;
-
-errout:
-	return -1;
-}
-
-static int _fast_ping_sendping_tcp(struct ping_host_struct *ping_host)
-{
-	struct epoll_event event;
-	int flags;
-	int fd = -1;
-	int yes = 1;
-	const int priority = SOCKET_PRIORITY;
-	const int ip_tos = IP_TOS;
-
-	_fast_ping_close_host_sock(ping_host);
-
-	fd = socket(ping_host->ss_family, SOCK_STREAM, 0);
-	if (fd < 0) {
-		goto errout;
-	}
-
-	flags = fcntl(fd, F_GETFL, 0);
-	fcntl(fd, F_SETFL, flags | O_NONBLOCK);
-	setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &yes, sizeof(yes));
-	setsockopt(fd, SOL_SOCKET, SO_PRIORITY, &priority, sizeof(priority));
-	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
-
-	ping_host->seq++;
-	if (connect(fd, (struct sockaddr *)&ping_host->addr, ping_host->addr_len) != 0) {
-		if (errno != EINPROGRESS) {
-			char ping_host_name[PING_MAX_HOSTLEN];
-			if (errno == ENETUNREACH || errno == EINVAL) {
-				goto errout;
-			}
-
-			if (errno == EACCES) {
-				if (bool_print_log == 0) {
-					goto errout;
-				}
-				bool_print_log = 0;
-			}
-
-			tlog(TLOG_ERROR, "connect %s, id %d, %s", gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr),
-				 ping_host->sid, strerror(errno));
-			goto errout;
-		}
-	}
-
-	gettimeofday(&ping_host->last, NULL);
-	ping_host->fd = fd;
-	memset(&event, 0, sizeof(event));
-	event.events = EPOLLIN | EPOLLOUT | EPOLLERR;
-	event.data.ptr = ping_host;
-	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
-		ping_host->fd = -1;
-		goto errout;
-	}
-
-	return 0;
-
-errout:
-	if (fd > 0) {
-		close(fd);
-		ping_host->fd = -1;
-	}
-	return -1;
-}
-
-static int _fast_ping_sendping(struct ping_host_struct *ping_host)
-{
-	int ret = -1;
-	gettimeofday(&ping_host->last, NULL);
-
-	if (ping_host->type == FAST_PING_ICMP) {
-		ret = _fast_ping_sendping_v4(ping_host);
-	} else if (ping_host->type == FAST_PING_ICMP6) {
-		ret = _fast_ping_sendping_v6(ping_host);
-	} else if (ping_host->type == FAST_PING_TCP) {
-		ret = _fast_ping_sendping_tcp(ping_host);
-	} else if (ping_host->type == FAST_PING_UDP || ping_host->type == FAST_PING_UDP6) {
-		ret = _fast_ping_sendping_udp(ping_host);
-	}
-
-	ping_host->send = 1;
-
-	if (ret != 0) {
-		return ret;
-	}
-
-	return 0;
-}
-
-static int _fast_ping_create_icmp_sock(FAST_PING_TYPE type)
-{
-	int fd = -1;
-	struct ping_host_struct *icmp_host = NULL;
-	struct epoll_event event;
-	int buffsize = 64 * 1024;
-	socklen_t optlen = sizeof(buffsize);
-	const int val = 255;
-	const int on = 1;
-	const int ip_tos = (IPTOS_LOWDELAY | IPTOS_RELIABILITY);
-
-	switch (type) {
-	case FAST_PING_ICMP:
-		fd = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP);
-		if (fd < 0) {
-			tlog(TLOG_ERROR, "create icmp socket failed, %s\n", strerror(errno));
-			goto errout;
-		}
-		_fast_ping_install_filter_v4(fd);
-		icmp_host = &ping.icmp_host;
-		break;
-	case FAST_PING_ICMP6:
-		fd = socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6);
-		if (fd < 0) {
-			tlog(TLOG_ERROR, "create icmp socket failed, %s\n", strerror(errno));
-			goto errout;
-		}
-		_fast_ping_install_filter_v6(fd);
-		setsockopt(fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on, sizeof(on));
-		setsockopt(fd, IPPROTO_IPV6, IPV6_2292HOPLIMIT, &on, sizeof(on));
-		setsockopt(fd, IPPROTO_IPV6, IPV6_HOPLIMIT, &on, sizeof(on));
-		icmp_host = &ping.icmp6_host;
-		break;
-	default:
-		return -1;
-	}
-
-	struct icmp_filter filt;
-	filt.data = ~((1 << ICMP_SOURCE_QUENCH) | (1 << ICMP_DEST_UNREACH) | (1 << ICMP_TIME_EXCEEDED) | (1 << ICMP_PARAMETERPROB) | (1 << ICMP_REDIRECT) |
-				  (1 << ICMP_ECHOREPLY));
-	setsockopt(fd, SOL_RAW, ICMP_FILTER, &filt, sizeof filt);
-	setsockopt(fd, SOL_SOCKET, SO_SNDBUF, (const char *)&buffsize, optlen);
-	setsockopt(fd, SOL_SOCKET, SO_RCVBUF, (const char *)&buffsize, optlen);
-	setsockopt(fd, SOL_IP, IP_TTL, &val, sizeof(val));
-	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
-
-	memset(&event, 0, sizeof(event));
-	event.events = EPOLLIN;
-	event.data.ptr = icmp_host;
-	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
-		goto errout;
-	}
-
-	icmp_host->fd = fd;
-	icmp_host->type = type;
-	return fd;
-
-errout:
-	close(fd);
-	return -1;
-}
-
-static int _fast_ping_create_icmp(FAST_PING_TYPE type)
-{
-	int fd = 0;
-	int *set_fd = NULL;
-
-	pthread_mutex_lock(&ping.lock);
-	switch (type) {
-	case FAST_PING_ICMP:
-		set_fd = &ping.fd_icmp;
-		break;
-	case FAST_PING_ICMP6:
-		set_fd = &ping.fd_icmp6;
-		break;
-	default:
-		goto errout;
-		break;
-	}
-
-	if (*set_fd > 0) {
-		goto out;
-	}
-
-	fd = _fast_ping_create_icmp_sock(type);
-	if (fd < 0) {
-		goto errout;
-	}
-
-	*set_fd = fd;
-out:
-	pthread_mutex_unlock(&ping.lock);
-	return *set_fd;
-errout:
-	if (fd > 0) {
-		close(fd);
-	}
-	pthread_mutex_unlock(&ping.lock);
-	return -1;
-}
-
-static int _fast_ping_create_udp_sock(FAST_PING_TYPE type)
-{
-	int fd = -1;
-	struct ping_host_struct *udp_host = NULL;
-	struct epoll_event event;
-	const int val = 255;
-	const int on = 1;
-	const int ip_tos = (IPTOS_LOWDELAY | IPTOS_RELIABILITY);
-
-	switch (type) {
-	case FAST_PING_UDP:
-		fd = socket(AF_INET, SOCK_DGRAM, 0);
-		if (fd < 0) {
-			tlog(TLOG_ERROR, "create udp socket failed, %s\n", strerror(errno));
-			goto errout;
-		}
-
-		udp_host = &ping.udp_host;
-		udp_host->type = FAST_PING_UDP;
-		break;
-	case FAST_PING_UDP6:
-		fd = socket(AF_INET6, SOCK_DGRAM, 0);
-		if (fd < 0) {
-			tlog(TLOG_ERROR, "create udp socket failed, %s\n", strerror(errno));
-			goto errout;
-		}
-
-		udp_host = &ping.udp6_host;
-		udp_host->type = FAST_PING_UDP6;
-		setsockopt(fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on, sizeof(on));
-		setsockopt(fd, IPPROTO_IPV6, IPV6_2292HOPLIMIT, &on, sizeof(on));
-		setsockopt(fd, IPPROTO_IPV6, IPV6_HOPLIMIT, &on, sizeof(on));
-		break;
-	default:
-		return -1;
-	}
-
-	setsockopt(fd, SOL_IP, IP_TTL, &val, sizeof(val));
-	setsockopt(fd, IPPROTO_IP, IP_RECVTTL, &on, sizeof(on));
-	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
-
-	memset(&event, 0, sizeof(event));
-	event.events = EPOLLIN;
-	event.data.ptr = udp_host;
-	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
-		goto errout;
-	}
-
-	udp_host->fd = fd;
-	return fd;
-
-errout:
-	close(fd);
-	return -1;
-}
-
-static int _fast_ping_create_udp(FAST_PING_TYPE type)
-{
-	int fd = 0;
-	int *set_fd = NULL;
-
-	pthread_mutex_lock(&ping.lock);
-	switch (type) {
-	case FAST_PING_UDP:
-		set_fd = &ping.fd_udp;
-		break;
-	case FAST_PING_UDP6:
-		set_fd = &ping.fd_udp6;
-		break;
-	default:
-		goto errout;
-		break;
-	}
-
-	if (*set_fd > 0) {
-		goto out;
-	}
-
-	fd = _fast_ping_create_udp_sock(type);
-	if (fd < 0) {
-		goto errout;
-	}
-
-	*set_fd = fd;
-out:
-	pthread_mutex_unlock(&ping.lock);
-	return *set_fd;
-errout:
-	if (fd > 0) {
-		close(fd);
-	}
-	pthread_mutex_unlock(&ping.lock);
-	return -1;
-}
-
-static void _fast_ping_print_result(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result, struct sockaddr *addr, socklen_t addr_len,
-									int seqno, int ttl, struct timeval *tv, void *userptr)
-{
-	if (result == PING_RESULT_RESPONSE) {
-		double rtt = tv->tv_sec * 1000.0 + tv->tv_usec / 1000.0;
-		tlog(TLOG_INFO, "from %15s: seq=%d ttl=%d time=%.3f\n", host, seqno, ttl, rtt);
-	} else if (result == PING_RESULT_TIMEOUT) {
-		tlog(TLOG_INFO, "from %15s: seq=%d timeout\n", host, seqno);
-	} else if (result == PING_RESULT_END) {
-		fast_ping_stop(ping_host);
-	}
-}
-
-static int _fast_ping_get_addr_by_icmp(const char *ip_str, int port, struct addrinfo **out_gai, FAST_PING_TYPE *out_ping_type)
-{
-	struct addrinfo *gai = NULL;
-	int socktype = 0;
-	int domain = -1;
-	FAST_PING_TYPE ping_type;
-	int sockproto = 0;
-	char *service = NULL;
-
-	socktype = SOCK_RAW;
-	domain = _fast_ping_getdomain(ip_str);
-	if (domain < 0) {
-		goto errout;
-	}
-
-	switch (domain) {
-	case AF_INET:
-		sockproto = IPPROTO_ICMP;
-		ping_type = FAST_PING_ICMP;
-		break;
-	case AF_INET6:
-		sockproto = IPPROTO_ICMPV6;
-		ping_type = FAST_PING_ICMP6;
-		break;
-	default:
-		goto errout;
-		break;
-	}
-
-	if (_fast_ping_create_icmp(ping_type) < 0) {
-		goto errout;
-	}
-
-	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
-	if (gai == NULL) {
-		goto errout;
-	}
-
-	*out_gai = gai;
-	*out_ping_type = ping_type;
-
-	return 0;
-errout:
-	if (gai) {
-		freeaddrinfo(gai);
-	}
-	return -1;
-}
-
-static int _fast_ping_get_addr_by_tcp(const char *ip_str, int port, struct addrinfo **out_gai, FAST_PING_TYPE *out_ping_type)
-{
-	struct addrinfo *gai = NULL;
-	int socktype = 0;
-	FAST_PING_TYPE ping_type;
-	int sockproto = 0;
-	char *service = NULL;
-	char port_str[MAX_IP_LEN];
-
-	if (port <= 0) {
-		port = 80;
-	}
-
-	sockproto = 0;
-	socktype = SOCK_STREAM;
-	snprintf(port_str, MAX_IP_LEN, "%d", port);
-	service = port_str;
-	ping_type = FAST_PING_TCP;
-
-	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
-	if (gai == NULL) {
-		goto errout;
-	}
-
-	*out_gai = gai;
-	*out_ping_type = ping_type;
-
-	return 0;
-errout:
-	if (gai) {
-		freeaddrinfo(gai);
-	}
-	return -1;
-}
-
-static int _fast_ping_get_addr_by_dns(const char *ip_str, int port, struct addrinfo **out_gai, FAST_PING_TYPE *out_ping_type)
-{
-	struct addrinfo *gai = NULL;
-	int socktype = 0;
-	FAST_PING_TYPE ping_type;
-	int sockproto = 0;
-	char port_str[MAX_IP_LEN];
-	int domain = -1;
-	char *service = NULL;
-
-	if (port <= 0) {
-		port = 53;
-	}
-
-	domain = _fast_ping_getdomain(ip_str);
-	if (domain < 0) {
-		goto errout;
-	}
-
-	switch (domain) {
-	case AF_INET:
-		ping_type = FAST_PING_UDP;
-		break;
-	case AF_INET6:
-		ping_type = FAST_PING_UDP6;
-		break;
-	default:
-		goto errout;
-		break;
-	}
-
-	sockproto = 0;
-	socktype = SOCK_DGRAM;
-	snprintf(port_str, MAX_IP_LEN, "%d", port);
-	service = port_str;
-
-	if (_fast_ping_create_udp(ping_type) < 0) {
-		goto errout;
-	}
-
-	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
-	if (gai == NULL) {
-		goto errout;
-	}
-
-	*out_gai = gai;
-	*out_ping_type = ping_type;
-
-	return 0;
-errout:
-	if (gai) {
-		freeaddrinfo(gai);
-	}
-	return -1;
-}
-
-static int _fast_ping_get_addr_by_type(PING_TYPE type, const char *ip_str, int port, struct addrinfo **out_gai, FAST_PING_TYPE *out_ping_type)
-{
-	switch (type) {
-	case PING_TYPE_ICMP:
-		return _fast_ping_get_addr_by_icmp(ip_str, port, out_gai, out_ping_type);
-		break;
-	case PING_TYPE_TCP:
-		return _fast_ping_get_addr_by_tcp(ip_str, port, out_gai, out_ping_type);
-		break;
-	case PING_TYPE_DNS:
-		return _fast_ping_get_addr_by_dns(ip_str, port, out_gai, out_ping_type);
-		break;
-	default:
-		break;
-	}
-
-	return -1;
-}
-
-struct ping_host_struct *fast_ping_start(PING_TYPE type, const char *host, int count, int interval, int timeout, fast_ping_result ping_callback, void *userptr)
-{
-	struct ping_host_struct *ping_host = NULL;
-	struct addrinfo *gai = NULL;
-	uint32_t addrkey;
-	char ip_str[PING_MAX_HOSTLEN];
-	int port = -1;
-	FAST_PING_TYPE ping_type;
-	unsigned int seed;
-	int ret = 0;
-
-	if (parse_ip(host, ip_str, &port) != 0) {
-		goto errout;
-	}
-
-	ret = _fast_ping_get_addr_by_type(type, ip_str, port, &gai, &ping_type);
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "get addr by type failed, host: %s", host);
-		goto errout;
-	}
-
-	ping_host = malloc(sizeof(*ping_host));
-	if (ping_host == NULL) {
-		goto errout;
-	}
-
-	memset(ping_host, 0, sizeof(*ping_host));
-	safe_strncpy(ping_host->host, host, PING_MAX_HOSTLEN);
-	ping_host->fd = -1;
-	ping_host->timeout = timeout;
-	ping_host->count = count;
-	ping_host->type = ping_type;
-	ping_host->userptr = userptr;
-	atomic_set(&ping_host->ref, 0);
-	atomic_set(&ping_host->notified, 0);
-	ping_host->sid = atomic_inc_return(&ping_sid);
-	seed = ping_host->sid;
-	ping_host->cookie = rand_r(&seed);
-	ping_host->run = 0;
-	if (ping_callback) {
-		ping_host->ping_callback = ping_callback;
-	} else {
-		ping_host->ping_callback = _fast_ping_print_result;
-	}
-	ping_host->interval = (timeout > interval) ? timeout : interval;
-	ping_host->addr_len = gai->ai_addrlen;
-	ping_host->port = port;
-	ping_host->ss_family = gai->ai_family;
-	if (gai->ai_addrlen > sizeof(struct sockaddr_in6)) {
-		goto errout;
-	}
-	memcpy(&ping_host->addr, gai->ai_addr, gai->ai_addrlen);
-
-	tlog(TLOG_DEBUG, "ping %s, id = %d", host, ping_host->sid);
-
-	addrkey = _fast_ping_hash_key(ping_host->sid, &ping_host->addr);
-	pthread_mutex_lock(&ping.map_lock);
-	_fast_ping_host_get(ping_host);
-	hash_add(ping.addrmap, &ping_host->addr_node, addrkey);
-	pthread_mutex_unlock(&ping.map_lock);
-
-	_fast_ping_host_get(ping_host);
-	if (_fast_ping_sendping(ping_host) != 0) {
-		goto errout_remove;
-	}
-
-	ping_host->run = 1;
-	freeaddrinfo(gai);
-	return ping_host;
-errout_remove:
-	fast_ping_stop(ping_host);
-	ping_host = NULL;
-errout:
-	if (gai) {
-		freeaddrinfo(gai);
-	}
-
-	if (ping_host) {
-		free(ping_host);
-	}
-
-	return NULL;
-}
-
-int fast_ping_stop(struct ping_host_struct *ping_host)
-{
-	if (ping_host == NULL) {
-		return 0;
-	}
-
-	atomic_inc_return(&ping_host->notified);
-	_fast_ping_host_remove(ping_host);
-	_fast_ping_host_put(ping_host);
-	return 0;
-}
-
-static void tv_sub(struct timeval *out, struct timeval *in)
-{
-	if ((out->tv_usec -= in->tv_usec) < 0) { /* out -= in */
-		--out->tv_sec;
-		out->tv_usec += 1000000;
-	}
-	out->tv_sec -= in->tv_sec;
-}
-
-static struct fast_ping_packet *_fast_ping_icmp6_packet(struct ping_host_struct *ping_host, struct msghdr *msg, u_char *packet_data, int data_len)
-{
-	int icmp_len;
-	struct fast_ping_packet *packet = (struct fast_ping_packet *)packet_data;
-	struct icmp6_hdr *icmp6 = &packet->icmp6;
-	struct cmsghdr *c;
-	int hops = 0;
-
-	for (c = CMSG_FIRSTHDR(msg); c; c = CMSG_NXTHDR(msg, c)) {
-		if (c->cmsg_level != IPPROTO_IPV6)
-			continue;
-		switch (c->cmsg_type) {
-		case IPV6_HOPLIMIT:
-#ifdef IPV6_2292HOPLIMIT
-		case IPV6_2292HOPLIMIT:
-#endif
-			if (c->cmsg_len < CMSG_LEN(sizeof(int)))
-				continue;
-			memcpy(&hops, CMSG_DATA(c), sizeof(hops));
-		}
-	}
-
-	packet->ttl = hops;
-	if (icmp6->icmp6_type != ICMP6_ECHO_REPLY) {
-		tlog(TLOG_DEBUG, "icmp6 type faild, %d:%d", icmp6->icmp6_type, ICMP6_ECHO_REPLY);
-		return NULL;
-	}
-
-	icmp_len = data_len;
-	if (icmp_len < 16) {
-		tlog(TLOG_ERROR, "length is invalid, %d", icmp_len);
-		return NULL;
-	}
-
-	if (icmp6->icmp6_id != ping.ident) {
-		tlog(TLOG_ERROR, "ident failed, %d:%d", icmp6->icmp6_id, ping.ident);
-		return NULL;
-	}
-
-	return packet;
-}
-
-static struct fast_ping_packet *_fast_ping_icmp_packet(struct ping_host_struct *ping_host, struct msghdr *msg, u_char *packet_data, int data_len)
-{
-	struct ip *ip = (struct ip *)packet_data;
-	struct fast_ping_packet *packet;
-	struct icmp *icmp;
-	int hlen;
-	int icmp_len;
-
-	if (ip->ip_p != IPPROTO_ICMP) {
-		tlog(TLOG_ERROR, "ip type faild, %d:%d", ip->ip_p, IPPROTO_ICMP);
-		return NULL;
-	}
-
-	hlen = ip->ip_hl << 2;
-	packet = (struct fast_ping_packet *)(packet_data + hlen);
-	icmp = &packet->icmp;
-	icmp_len = data_len - hlen;
-	packet->ttl = ip->ip_ttl;
-
-	if (icmp_len < 16) {
-		tlog(TLOG_ERROR, "length is invalid, %d", icmp_len);
-		return NULL;
-	}
-
-	if (icmp->icmp_type != ICMP_ECHOREPLY) {
-		tlog(TLOG_DEBUG, "icmp type faild, %d:%d", icmp->icmp_type, ICMP_ECHOREPLY);
-		return NULL;
-	}
-
-	if (icmp->icmp_id != ping.ident) {
-		tlog(TLOG_ERROR, "ident failed, %d:%d", icmp->icmp_id, ping.ident);
-		return NULL;
-	}
-
-	return packet;
-}
-
-static struct fast_ping_packet *_fast_ping_recv_packet(struct ping_host_struct *ping_host, struct msghdr *msg, u_char *inpacket, int len,
-													   struct timeval *tvrecv)
-{
-	struct fast_ping_packet *packet = NULL;
-
-	if (ping_host->type == FAST_PING_ICMP6) {
-		packet = _fast_ping_icmp6_packet(ping_host, msg, inpacket, len);
-		if (packet == NULL) {
-			goto errout;
-		}
-	} else if (ping_host->type == FAST_PING_ICMP) {
-		packet = _fast_ping_icmp_packet(ping_host, msg, inpacket, len);
-		if (packet == NULL) {
-			goto errout;
-		}
-	} else {
-		tlog(TLOG_ERROR, "ping host type is invalid, %d", ping_host->type);
-		goto errout;
-	}
-
-	return packet;
-errout:
-	return NULL;
-}
-
-static int _fast_ping_process_icmp(struct ping_host_struct *ping_host, struct timeval *now)
-{
-	int len;
-	u_char inpacket[ICMP_INPACKET_SIZE];
-	struct sockaddr_storage from;
-	struct ping_host_struct *recv_ping_host;
-	struct fast_ping_packet *packet = NULL;
-	socklen_t from_len = sizeof(from);
-	uint32_t addrkey;
-	struct timeval tvresult = *now;
-	struct timeval *tvsend = NULL;
-	unsigned int sid;
-	unsigned int seq;
-	unsigned int cookie;
-	struct msghdr msg;
-	struct iovec iov;
-	char ans_data[4096];
-
-	memset(&msg, 0, sizeof(msg));
-	iov.iov_base = (char *)inpacket;
-	iov.iov_len = sizeof(inpacket);
-	msg.msg_name = &from;
-	msg.msg_namelen = sizeof(from);
-	msg.msg_iov = &iov;
-	msg.msg_iovlen = 1;
-	msg.msg_control = ans_data;
-	msg.msg_controllen = sizeof(ans_data);
-
-	len = recvmsg(ping_host->fd, &msg, MSG_DONTWAIT);
-	if (len < 0) {
-		tlog(TLOG_ERROR, "recvfrom failed, %s\n", strerror(errno));
-		goto errout;
-	}
-
-	from_len = msg.msg_namelen;
-	packet = _fast_ping_recv_packet(ping_host, &msg, inpacket, len, now);
-	if (packet == NULL) {
-		char name[PING_MAX_HOSTLEN];
-		tlog(TLOG_DEBUG, "recv ping packet from %s failed.", gethost_by_addr(name, sizeof(name), (struct sockaddr *)&from));
-		goto errout;
-	}
-
-	tvsend = &packet->msg.tv;
-	sid = packet->msg.sid;
-	seq = packet->msg.seq;
-	cookie = packet->msg.cookie;
-	addrkey = _fast_ping_hash_key(sid, (struct sockaddr *)&from);
-	pthread_mutex_lock(&ping.map_lock);
-	hash_for_each_possible(ping.addrmap, recv_ping_host, addr_node, addrkey)
-	{
-		if (_fast_ping_sockaddr_ip_cmp(&recv_ping_host->addr, recv_ping_host->addr_len, (struct sockaddr *)&from, from_len) == 0 &&
-			recv_ping_host->sid == sid && recv_ping_host->cookie == cookie) {
-			_fast_ping_host_get(recv_ping_host);
-			break;
-		}
-	}
-
-	pthread_mutex_unlock(&ping.map_lock);
-
-	if (recv_ping_host == NULL) {
-		return -1;
-	}
-
-	if (recv_ping_host->seq != seq) {
-		tlog(TLOG_ERROR, "seq num mismatch, expect %u, real %u", recv_ping_host->seq, seq);
-		_fast_ping_host_put(recv_ping_host);
-		return -1;
-	}
-
-	recv_ping_host->ttl = packet->ttl;
-	tv_sub(&tvresult, tvsend);
-	if (recv_ping_host->ping_callback) {
-		recv_ping_host->ping_callback(recv_ping_host, recv_ping_host->host, PING_RESULT_RESPONSE, &recv_ping_host->addr, recv_ping_host->addr_len,
-									  recv_ping_host->seq, recv_ping_host->ttl, &tvresult, recv_ping_host->userptr);
-	}
-
-	recv_ping_host->send = 0;
-
-	if (recv_ping_host->count == 1) {
-		_fast_ping_host_remove(recv_ping_host);
-	}
-
-	_fast_ping_host_put(recv_ping_host);
-	return 0;
-errout:
-	return -1;
-}
-
-static int _fast_ping_process_tcp(struct ping_host_struct *ping_host, struct epoll_event *event, struct timeval *now)
-{
-	struct timeval tvresult = *now;
-	struct timeval *tvsend = &ping_host->last;
-	int connect_error = 0;
-	socklen_t len = sizeof(connect_error);
-
-	if (event->events & EPOLLIN || event->events & EPOLLERR) {
-		if (getsockopt(ping_host->fd, SOL_SOCKET, SO_ERROR, (char *)&connect_error, &len) != 0) {
-			goto errout;
-		}
-
-		if (connect_error != 0 && connect_error != ECONNREFUSED) {
-			goto errout;
-		}
-	}
-	tv_sub(&tvresult, tvsend);
-	if (ping_host->ping_callback) {
-		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_RESPONSE, &ping_host->addr, ping_host->addr_len, ping_host->seq, ping_host->ttl,
-								 &tvresult, ping_host->userptr);
-	}
-
-	ping_host->send = 0;
-
-	_fast_ping_close_host_sock(ping_host);
-
-	if (ping_host->count == 1) {
-		_fast_ping_host_remove(ping_host);
-	}
-	return 0;
-errout:
-	_fast_ping_host_remove(ping_host);
-
-	return -1;
-}
-
-static int _fast_ping_process_udp(struct ping_host_struct *ping_host, struct timeval *now)
-{
-	int len;
-	u_char inpacket[ICMP_INPACKET_SIZE];
-	struct sockaddr_storage from;
-	struct ping_host_struct *recv_ping_host;
-	struct ping_dns_head *dns_head = NULL;
-	socklen_t from_len = sizeof(from);
-	uint32_t addrkey;
-	struct timeval tvresult = *now;
-	struct timeval *tvsend = NULL;
-	unsigned int sid;
-	struct msghdr msg;
-	struct iovec iov;
-	char ans_data[4096];
-	struct cmsghdr *cmsg;
-	int ttl = 0;
-
-	memset(&msg, 0, sizeof(msg));
-	iov.iov_base = (char *)inpacket;
-	iov.iov_len = sizeof(inpacket);
-	msg.msg_name = &from;
-	msg.msg_namelen = sizeof(from);
-	msg.msg_iov = &iov;
-	msg.msg_iovlen = 1;
-	msg.msg_control = ans_data;
-	msg.msg_controllen = sizeof(ans_data);
-
-	len = recvmsg(ping_host->fd, &msg, MSG_DONTWAIT);
-	if (len < 0) {
-		tlog(TLOG_ERROR, "recvfrom failed, %s\n", strerror(errno));
-		goto errout;
-	}
-
-	for (cmsg = CMSG_FIRSTHDR(&msg); cmsg; cmsg = CMSG_NXTHDR(&msg, cmsg)) {
-		if (cmsg->cmsg_level == SOL_IP && cmsg->cmsg_type == IP_TTL) {
-			if (cmsg->cmsg_len >= sizeof(int)) {
-				int *ttlPtr = (int *)CMSG_DATA(cmsg);
-				ttl = *ttlPtr;
-			}
-		} else if (cmsg->cmsg_level == IPPROTO_IPV6 && cmsg->cmsg_type == IPV6_HOPLIMIT) {
-			if (cmsg->cmsg_len >= sizeof(int)) {
-				int *ttlPtr = (int *)CMSG_DATA(cmsg);
-				ttl = *ttlPtr;
-			}
-		}
-	}
-
-	from_len = msg.msg_namelen;
-	dns_head = (struct ping_dns_head *)inpacket;
-	if (len < sizeof(*dns_head)) {
-		goto errout;
-	}
-
-	sid = ntohs(dns_head->id);
-	addrkey = _fast_ping_hash_key(sid, (struct sockaddr *)&from);
-	pthread_mutex_lock(&ping.map_lock);
-	hash_for_each_possible(ping.addrmap, recv_ping_host, addr_node, addrkey)
-	{
-		if (_fast_ping_sockaddr_ip_cmp(&recv_ping_host->addr, recv_ping_host->addr_len, (struct sockaddr *)&from, from_len) == 0 &&
-			recv_ping_host->sid == sid) {
-			_fast_ping_host_get(recv_ping_host);
-			break;
-		}
-	}
-
-	pthread_mutex_unlock(&ping.map_lock);
-
-	if (recv_ping_host == NULL) {
-		return -1;
-	}
-
-	recv_ping_host->ttl = ttl;
-	tvsend = &recv_ping_host->last;
-	tv_sub(&tvresult, tvsend);
-	if (recv_ping_host->ping_callback) {
-		recv_ping_host->ping_callback(recv_ping_host, recv_ping_host->host, PING_RESULT_RESPONSE, &recv_ping_host->addr, recv_ping_host->addr_len,
-									  recv_ping_host->seq, recv_ping_host->ttl, &tvresult, recv_ping_host->userptr);
-	}
-
-	recv_ping_host->send = 0;
-
-	if (recv_ping_host->count == 1) {
-		_fast_ping_host_remove(recv_ping_host);
-	}
-
-	_fast_ping_host_put(recv_ping_host);
-
-	return 0;
-errout:
-	return -1;
-}
-
-static int _fast_ping_process(struct ping_host_struct *ping_host, struct epoll_event *event, struct timeval *now)
-{
-	int ret = -1;
-
-	switch (ping_host->type) {
-	case FAST_PING_ICMP6:
-	case FAST_PING_ICMP:
-		ret = _fast_ping_process_icmp(ping_host, now);
-		break;
-	case FAST_PING_TCP:
-		ret = _fast_ping_process_tcp(ping_host, event, now);
-		break;
-	case FAST_PING_UDP6:
-	case FAST_PING_UDP:
-		ret = _fast_ping_process_udp(ping_host, now);
-		break;
-	default:
-		tlog(TLOG_ERROR, "BUG: type error : %p, %d, %s, %d", ping_host, ping_host->sid, ping_host->host, ping_host->fd);
-		abort();
-		break;
-	}
-
-	return ret;
-}
-
-static void _fast_ping_remove_all(void)
-{
-	struct ping_host_struct *ping_host = NULL;
-	struct ping_host_struct *ping_host_tmp = NULL;
-	struct hlist_node *tmp = NULL;
-	int i;
-
-	LIST_HEAD(remove_list);
-
-	pthread_mutex_lock(&ping.map_lock);
-	hash_for_each_safe(ping.addrmap, i, tmp, ping_host, addr_node)
-	{
-		list_add_tail(&ping_host->action_list, &remove_list);
-	}
-	pthread_mutex_unlock(&ping.map_lock);
-
-	list_for_each_entry_safe(ping_host, ping_host_tmp, &remove_list, action_list)
-	{
-		_fast_ping_host_remove(ping_host);
-	}
-}
-
-static void _fast_ping_period_run(void)
-{
-	struct ping_host_struct *ping_host = NULL;
-	struct ping_host_struct *ping_host_tmp = NULL;
-	struct hlist_node *tmp = NULL;
-	int i = 0;
-	struct timeval now;
-	struct timezone tz;
-	struct timeval interval;
-	int64_t millisecond;
-	gettimeofday(&now, &tz);
-	LIST_HEAD(action);
-
-	pthread_mutex_lock(&ping.map_lock);
-	hash_for_each_safe(ping.addrmap, i, tmp, ping_host, addr_node)
-	{
-		if (ping_host->run == 0) {
-			continue;
-		}
-
-		interval = now;
-		tv_sub(&interval, &ping_host->last);
-		millisecond = interval.tv_sec * 1000 + interval.tv_usec / 1000;
-		if (millisecond >= ping_host->timeout && ping_host->send == 1) {
-			list_add_tail(&ping_host->action_list, &action);
-			_fast_ping_host_get(ping_host);
-			continue;
-		}
-
-		if (millisecond < ping_host->interval) {
-			continue;
-		}
-
-		list_add_tail(&ping_host->action_list, &action);
-		_fast_ping_host_get(ping_host);
-	}
-	pthread_mutex_unlock(&ping.map_lock);
-
-	list_for_each_entry_safe(ping_host, ping_host_tmp, &action, action_list)
-	{
-		interval = now;
-		tv_sub(&interval, &ping_host->last);
-		millisecond = interval.tv_sec * 1000 + interval.tv_usec / 1000;
-		if (millisecond >= ping_host->timeout && ping_host->send == 1) {
-			ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_TIMEOUT, &ping_host->addr, ping_host->addr_len, ping_host->seq, ping_host->ttl,
-									 &interval, ping_host->userptr);
-			ping_host->send = 0;
-		}
-
-		if (millisecond < ping_host->interval) {
-			list_del(&ping_host->action_list);
-			_fast_ping_host_put(ping_host);
-			continue;
-		}
-
-		if (ping_host->count > 0) {
-			if (ping_host->count == 1) {
-				_fast_ping_host_remove(ping_host);
-				list_del(&ping_host->action_list);
-				_fast_ping_host_put(ping_host);
-				continue;
-			}
-			ping_host->count--;
-		}
-
-		_fast_ping_sendping(ping_host);
-		list_del(&ping_host->action_list);
-		_fast_ping_host_put(ping_host);
-	}
-}
-
-static void *_fast_ping_work(void *arg)
-{
-	struct epoll_event events[PING_MAX_EVENTS + 1];
-	int num;
-	int i;
-	unsigned long now = {0};
-	struct timeval tvnow = {0};
-	int sleep = 100;
-	int sleep_time = 0;
-	unsigned long expect_time = 0;
-
-	sleep_time = sleep;
-	now = get_tick_count() - sleep;
-	expect_time = now + sleep;
-	while (ping.run) {
-		now = get_tick_count();
-		if (now >= expect_time) {
-			_fast_ping_period_run();
-			sleep_time = sleep - (now - expect_time);
-			if (sleep_time < 0) {
-				sleep_time = 0;
-				expect_time = now;
-			}
-			expect_time += sleep;
-		}
-
-		num = epoll_wait(ping.epoll_fd, events, PING_MAX_EVENTS, sleep_time);
-		if (num < 0) {
-			usleep(100000);
-			continue;
-		}
-
-		if (num == 0) {
-			continue;
-		}
-
-		gettimeofday(&tvnow, NULL);
-		for (i = 0; i < num; i++) {
-			struct epoll_event *event = &events[i];
-			struct ping_host_struct *ping_host = (struct ping_host_struct *)event->data.ptr;
-			_fast_ping_process(ping_host, event, &tvnow);
-		}
-	}
-
-	close(ping.epoll_fd);
-	ping.epoll_fd = -1;
-
-	return NULL;
-}
-
-int fast_ping_init(void)
-{
-	pthread_attr_t attr;
-	int epollfd = -1;
-	int ret;
-	bool_print_log = 1;
-
-	if (ping.epoll_fd > 0) {
-		return -1;
-	}
-
-	memset(&ping, 0, sizeof(ping));
-	pthread_attr_init(&attr);
-
-	epollfd = epoll_create1(EPOLL_CLOEXEC);
-	if (epollfd < 0) {
-		tlog(TLOG_ERROR, "create epoll failed, %s\n", strerror(errno));
-		goto errout;
-	}
-
-	pthread_mutex_init(&ping.map_lock, NULL);
-	pthread_mutex_init(&ping.lock, NULL);
-	hash_init(ping.addrmap);
-	ping.epoll_fd = epollfd;
-	ping.ident = (getpid() & 0XFFFF);
-	ping.run = 1;
-	ret = pthread_create(&ping.tid, &attr, _fast_ping_work, NULL);
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "create ping work thread failed, %s\n", strerror(errno));
-		goto errout;
-	}
-
-	return 0;
-errout:
-	if (ping.tid > 0) {
-		void *retval = NULL;
-		ping.run = 0;
-		pthread_join(ping.tid, &retval);
-	}
-
-	if (epollfd) {
-		close(epollfd);
-	}
-
-	pthread_mutex_destroy(&ping.lock);
-	pthread_mutex_destroy(&ping.map_lock);
-
-	return -1;
-}
-
-static void _fast_ping_close_fds(void)
-{
-	if (ping.fd_icmp > 0) {
-		close(ping.fd_icmp);
-		ping.fd_icmp = -1;
-	}
-
-	if (ping.fd_icmp6 > 0) {
-		close(ping.fd_icmp6);
-		ping.fd_icmp6 = -1;
-	}
-
-	if (ping.fd_udp > 0) {
-		close(ping.fd_udp);
-		ping.fd_udp = -1;
-	}
-
-	if (ping.fd_udp6 > 0) {
-		close(ping.fd_udp6);
-		ping.fd_udp6 = -1;
-	}
-}
-
-void fast_ping_exit(void)
-{
-	if (ping.tid > 0) {
-		void *ret = NULL;
-		ping.run = 0;
-		pthread_join(ping.tid, &ret);
-	}
-
-	_fast_ping_close_fds();
-	_fast_ping_remove_all();
-
-	pthread_mutex_destroy(&ping.lock);
-	pthread_mutex_destroy(&ping.map_lock);
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "fast_ping.h"
+#include "atomic.h"
+#include "hashtable.h"
+#include "tlog.h"
+#include "util.h"
+#include <arpa/inet.h>
+#include <errno.h>
+#include <fcntl.h>
+#include <linux/filter.h>
+#include <netdb.h>
+#include <netinet/icmp6.h>
+#include <netinet/ip.h>
+#include <netinet/ip6.h>
+#include <netinet/ip_icmp.h>
+#include <netinet/tcp.h>
+#include <pthread.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/epoll.h>
+#include <sys/socket.h>
+#include <sys/types.h>
+#include <unistd.h>
+
+#define PING_MAX_EVENTS 128
+#define PING_MAX_HOSTLEN 128
+#define ICMP_PACKET_SIZE (1024 * 64)
+#define ICMP_INPACKET_SIZE 1024
+#define IPV4_ADDR_LEN 4
+#define IPV6_ADDR_LEN 16
+#define SOCKET_PRIORITY (6)
+
+#ifndef ICMP_FILTER
+#define ICMP_FILTER 1
+struct icmp_filter {
+	uint32_t data;
+};
+#endif
+
+struct ping_dns_head {
+	unsigned short id;
+	unsigned short flag;
+	unsigned short qdcount;
+	unsigned short ancount;
+	unsigned short aucount;
+	unsigned short adcount;
+} __attribute__((packed));
+
+typedef enum FAST_PING_TYPE {
+	FAST_PING_ICMP = 1,
+	FAST_PING_ICMP6 = 2,
+	FAST_PING_TCP,
+	FAST_PING_UDP,
+	FAST_PING_UDP6,
+	FAST_PING_END,
+} FAST_PING_TYPE;
+
+struct fast_ping_packet_msg {
+	struct timeval tv;
+	unsigned int sid;
+	unsigned int seq;
+	unsigned int cookie;
+};
+
+struct fast_ping_packet {
+	union {
+		struct icmp icmp;
+		struct icmp6_hdr icmp6;
+	};
+	unsigned int ttl;
+	struct fast_ping_packet_msg msg;
+};
+
+struct ping_host_struct {
+	atomic_t ref;
+	atomic_t notified;
+	struct hlist_node addr_node;
+	struct list_head action_list;
+	FAST_PING_TYPE type;
+
+	void *userptr;
+	fast_ping_result ping_callback;
+	char host[PING_MAX_HOSTLEN];
+
+	int fd;
+	unsigned int seq;
+	int ttl;
+	struct timeval last;
+	int interval;
+	int timeout;
+	int count;
+	int send;
+	int run;
+	unsigned int cookie;
+	unsigned int sid;
+	unsigned short port;
+	unsigned short ss_family;
+	union {
+		struct sockaddr addr;
+		struct sockaddr_in6 in6;
+		struct sockaddr_in in;
+	};
+	socklen_t addr_len;
+	struct fast_ping_packet packet;
+};
+
+struct fast_ping_struct {
+	int run;
+	pthread_t tid;
+	pthread_mutex_t lock;
+	unsigned short ident;
+
+	int epoll_fd;
+	int fd_icmp;
+	struct ping_host_struct icmp_host;
+	int fd_icmp6;
+	struct ping_host_struct icmp6_host;
+	int fd_udp;
+	struct ping_host_struct udp_host;
+	int fd_udp6;
+	struct ping_host_struct udp6_host;
+
+	pthread_mutex_t map_lock;
+	DECLARE_HASHTABLE(addrmap, 6);
+};
+
+static struct fast_ping_struct ping;
+static atomic_t ping_sid = ATOMIC_INIT(0);
+static int bool_print_log = 1;
+
+static uint16_t _fast_ping_checksum(uint16_t *header, size_t len)
+{
+	uint32_t sum = 0;
+	int i;
+
+	for (i = 0; i < len / sizeof(uint16_t); i++) {
+		sum += ntohs(header[i]);
+	}
+
+	return htons(~((sum >> 16) + (sum & 0xffff)));
+}
+
+static void _fast_ping_install_filter_v6(int sock)
+{
+	struct icmp6_filter icmp6_filter;
+	ICMP6_FILTER_SETBLOCKALL(&icmp6_filter);
+	ICMP6_FILTER_SETPASS(ICMP6_ECHO_REPLY, &icmp6_filter);
+	setsockopt(sock, IPPROTO_ICMPV6, ICMP6_FILTER, &icmp6_filter, sizeof(struct icmp6_filter));
+
+	static int once;
+	static struct sock_filter insns[] = {
+		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 4),                       /* Load icmp echo ident */
+		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xAAAA, 0, 1),           /* Ours? */
+		BPF_STMT(BPF_RET | BPF_K, ~0U),                              /* Yes, it passes. */
+		BPF_STMT(BPF_LD | BPF_B | BPF_ABS, 0),                       /* Load icmp type */
+		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ICMP6_ECHO_REPLY, 1, 0), /* Echo? */
+		BPF_STMT(BPF_RET | BPF_K, ~0U),                              /* No. It passes. This must not happen. */
+		BPF_STMT(BPF_RET | BPF_K, 0),                                /* Echo with wrong ident. Reject. */
+	};
+	static struct sock_fprog filter = {sizeof insns / sizeof(insns[0]), insns};
+
+	if (once) {
+		return;
+	}
+	once = 1;
+
+	/* Patch bpflet for current identifier. */
+	insns[1] = (struct sock_filter)BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, htons(ping.ident), 0, 1);
+
+	if (setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter))) {
+		perror("WARNING: failed to install socket filter\n");
+	}
+}
+
+static void _fast_ping_install_filter_v4(int sock)
+{
+	static int once;
+	static struct sock_filter insns[] = {
+		BPF_STMT(BPF_LDX | BPF_B | BPF_MSH, 0),                    /* Skip IP header. F..g BSD... Look into ping6. */
+		BPF_STMT(BPF_LD | BPF_H | BPF_IND, 4),                     /* Load icmp echo ident */
+		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xAAAA, 0, 1),         /* Ours? */
+		BPF_STMT(BPF_RET | BPF_K, ~0U),                            /* Yes, it passes. */
+		BPF_STMT(BPF_LD | BPF_B | BPF_IND, 0),                     /* Load icmp type */
+		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ICMP_ECHOREPLY, 1, 0), /* Echo? */
+		BPF_STMT(BPF_RET | BPF_K, 0xFFFFFFF),                      /* No. It passes. */
+		BPF_STMT(BPF_RET | BPF_K, 0)                               /* Echo with wrong ident. Reject. */
+	};
+
+	static struct sock_fprog filter = {sizeof insns / sizeof(insns[0]), insns};
+
+	if (once) {
+		return;
+	}
+	once = 1;
+
+	/* Patch bpflet for current identifier. */
+	insns[2] = (struct sock_filter)BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, htons(ping.ident), 0, 1);
+
+	if (setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter))) {
+		perror("WARNING: failed to install socket filter\n");
+	}
+}
+
+static int _fast_ping_sockaddr_ip_cmp(struct sockaddr *first_addr, socklen_t first_addr_len,
+									  struct sockaddr *second_addr, socklen_t second_addr_len)
+{
+	if (first_addr_len != second_addr_len) {
+		return -1;
+	}
+
+	if (first_addr->sa_family != second_addr->sa_family) {
+		return -1;
+	}
+
+	switch (first_addr->sa_family) {
+	case AF_INET: {
+		struct sockaddr_in *first_addr_in = (struct sockaddr_in *)first_addr;
+		struct sockaddr_in *second_addr_in = (struct sockaddr_in *)second_addr;
+		if (memcmp(&first_addr_in->sin_addr.s_addr, &second_addr_in->sin_addr.s_addr, IPV4_ADDR_LEN) != 0) {
+			return -1;
+		}
+	} break;
+	case AF_INET6: {
+		struct sockaddr_in6 *first_addr_in6 = (struct sockaddr_in6 *)first_addr;
+		struct sockaddr_in6 *second_addr_in6 = (struct sockaddr_in6 *)second_addr;
+		if (memcmp(&first_addr_in6->sin6_addr.s6_addr, &second_addr_in6->sin6_addr.s6_addr, IPV4_ADDR_LEN) != 0) {
+			return -1;
+		}
+	} break;
+	default:
+		return -1;
+	}
+
+	return 0;
+}
+
+static uint32_t _fast_ping_hash_key(unsigned int sid, struct sockaddr *addr)
+{
+	uint32_t key = 0;
+	void *sin_addr = NULL;
+	unsigned int sin_addr_len = 0;
+
+	switch (addr->sa_family) {
+	case AF_INET: {
+		struct sockaddr_in *addr_in;
+		addr_in = (struct sockaddr_in *)addr;
+		sin_addr = &addr_in->sin_addr.s_addr;
+		sin_addr_len = IPV4_ADDR_LEN;
+	} break;
+	case AF_INET6: {
+		struct sockaddr_in6 *addr_in6;
+		addr_in6 = (struct sockaddr_in6 *)addr;
+		if (IN6_IS_ADDR_V4MAPPED(&addr_in6->sin6_addr)) {
+			sin_addr = addr_in6->sin6_addr.s6_addr + 12;
+			sin_addr_len = IPV4_ADDR_LEN;
+		} else {
+			sin_addr = addr_in6->sin6_addr.s6_addr;
+			sin_addr_len = IPV6_ADDR_LEN;
+		}
+	} break;
+	default:
+		goto errout;
+		break;
+	}
+	if (sin_addr == NULL) {
+		return -1;
+	}
+
+	key = jhash(sin_addr, sin_addr_len, 0);
+	key = jhash(&sid, sizeof(sid), key);
+
+	return key;
+errout:
+	return -1;
+}
+
+static struct addrinfo *_fast_ping_getaddr(const char *host, const char *port, int type, int protocol)
+{
+	struct addrinfo hints;
+	struct addrinfo *result = NULL;
+	int errcode = 0;
+
+	memset(&hints, 0, sizeof(hints));
+	hints.ai_family = AF_UNSPEC;
+	hints.ai_socktype = type;
+	hints.ai_protocol = protocol;
+	errcode = getaddrinfo(host, port, &hints, &result);
+	if (errcode != 0) {
+		tlog(TLOG_ERROR, "get addr info failed. host:%s, port: %s, error %s\n", host, port, gai_strerror(errcode));
+		goto errout;
+	}
+
+	return result;
+errout:
+	if (result) {
+		freeaddrinfo(result);
+	}
+	return NULL;
+}
+
+static int _fast_ping_getdomain(const char *host)
+{
+	struct addrinfo hints;
+	struct addrinfo *result = NULL;
+	int domain = -1;
+
+	memset(&hints, 0, sizeof(hints));
+	hints.ai_family = AF_UNSPEC;
+	hints.ai_socktype = SOCK_STREAM;
+	hints.ai_protocol = 0;
+	if (getaddrinfo(host, NULL, &hints, &result) != 0) {
+		tlog(TLOG_ERROR, "get addr info failed. %s\n", strerror(errno));
+		goto errout;
+	}
+
+	domain = result->ai_family;
+
+	freeaddrinfo(result);
+
+	return domain;
+errout:
+	if (result) {
+		freeaddrinfo(result);
+	}
+	return -1;
+}
+
+static void _fast_ping_host_get(struct ping_host_struct *ping_host)
+{
+	if (atomic_inc_return(&ping_host->ref) <= 0) {
+		tlog(TLOG_ERROR, "BUG: ping host ref is invalid, host: %s", ping_host->host);
+		abort();
+	}
+}
+
+static void _fast_ping_close_host_sock(struct ping_host_struct *ping_host)
+{
+	if (ping_host->fd < 0) {
+		return;
+	}
+	struct epoll_event *event;
+	event = (struct epoll_event *)1;
+	epoll_ctl(ping.epoll_fd, EPOLL_CTL_DEL, ping_host->fd, event);
+	close(ping_host->fd);
+	ping_host->fd = -1;
+}
+
+static void _fast_ping_host_put(struct ping_host_struct *ping_host)
+{
+	if (!atomic_dec_and_test(&ping_host->ref)) {
+		return;
+	}
+
+	_fast_ping_close_host_sock(ping_host);
+
+	pthread_mutex_lock(&ping.map_lock);
+	hash_del(&ping_host->addr_node);
+	pthread_mutex_unlock(&ping.map_lock);
+
+	if (atomic_inc_return(&ping_host->notified) == 1) {
+		struct timeval tv;
+		tv.tv_sec = 0;
+		tv.tv_usec = 0;
+
+		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_END, &ping_host->addr, ping_host->addr_len,
+								 ping_host->seq, ping_host->ttl, &tv, ping_host->userptr);
+	}
+
+	tlog(TLOG_DEBUG, "ping end, id %d", ping_host->sid);
+	// memset(ping_host, 0, sizeof(*ping_host));
+	ping_host->type = FAST_PING_END;
+	free(ping_host);
+}
+
+static void _fast_ping_host_remove(struct ping_host_struct *ping_host)
+{
+	_fast_ping_close_host_sock(ping_host);
+
+	pthread_mutex_lock(&ping.map_lock);
+	if (!hash_hashed(&ping_host->addr_node)) {
+		pthread_mutex_unlock(&ping.map_lock);
+		return;
+	}
+	hash_del(&ping_host->addr_node);
+
+	pthread_mutex_unlock(&ping.map_lock);
+
+	if (atomic_inc_return(&ping_host->notified) == 1) {
+		struct timeval tv;
+		tv.tv_sec = 0;
+		tv.tv_usec = 0;
+
+		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_END, &ping_host->addr, ping_host->addr_len,
+								 ping_host->seq, ping_host->ttl, &tv, ping_host->userptr);
+	}
+
+	_fast_ping_host_put(ping_host);
+}
+
+static int _fast_ping_sendping_v6(struct ping_host_struct *ping_host)
+{
+	struct fast_ping_packet *packet = &ping_host->packet;
+	struct icmp6_hdr *icmp6 = &packet->icmp6;
+	int len = 0;
+
+	ping_host->seq++;
+	memset(icmp6, 0, sizeof(*icmp6));
+	icmp6->icmp6_type = ICMP6_ECHO_REQUEST;
+	icmp6->icmp6_code = 0;
+	icmp6->icmp6_cksum = 0;
+	icmp6->icmp6_id = ping.ident;
+	icmp6->icmp6_seq = htons(ping_host->seq);
+
+	gettimeofday(&packet->msg.tv, NULL);
+	gettimeofday(&ping_host->last, NULL);
+	packet->msg.sid = ping_host->sid;
+	packet->msg.cookie = ping_host->cookie;
+	packet->msg.seq = ping_host->seq;
+	icmp6->icmp6_cksum = _fast_ping_checksum((void *)packet, sizeof(struct fast_ping_packet));
+
+	len = sendto(ping.fd_icmp6, &ping_host->packet, sizeof(struct fast_ping_packet), 0,
+				 (struct sockaddr *)&ping_host->addr, ping_host->addr_len);
+	if (len < 0 || len != sizeof(struct fast_ping_packet)) {
+		int err = errno;
+		if (errno == ENETUNREACH || errno == EINVAL) {
+			goto errout;
+		}
+
+		if (errno == EACCES) {
+			if (bool_print_log == 0) {
+				goto errout;
+			}
+			bool_print_log = 0;
+		}
+
+		char ping_host_name[PING_MAX_HOSTLEN];
+		tlog(TLOG_ERROR, "sendto %s, id %d, %s",
+			 gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr),
+			 ping_host->sid, strerror(err));
+		goto errout;
+	}
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _fast_ping_sendping_v4(struct ping_host_struct *ping_host)
+{
+	struct fast_ping_packet *packet = &ping_host->packet;
+	struct icmp *icmp = &packet->icmp;
+	int len;
+
+	ping_host->seq++;
+	memset(icmp, 0, sizeof(*icmp));
+	icmp->icmp_type = ICMP_ECHO;
+	icmp->icmp_code = 0;
+	icmp->icmp_cksum = 0;
+	icmp->icmp_id = ping.ident;
+	icmp->icmp_seq = htons(ping_host->seq);
+
+	gettimeofday(&packet->msg.tv, NULL);
+	gettimeofday(&ping_host->last, NULL);
+	packet->msg.sid = ping_host->sid;
+	packet->msg.seq = ping_host->seq;
+	packet->msg.cookie = ping_host->cookie;
+	icmp->icmp_cksum = _fast_ping_checksum((void *)packet, sizeof(struct fast_ping_packet));
+
+	len = sendto(ping.fd_icmp, packet, sizeof(struct fast_ping_packet), 0, (struct sockaddr *)&ping_host->addr,
+				 ping_host->addr_len);
+	if (len < 0 || len != sizeof(struct fast_ping_packet)) {
+		int err = errno;
+		if (errno == ENETUNREACH || errno == EINVAL) {
+			goto errout;
+		}
+		char ping_host_name[PING_MAX_HOSTLEN];
+		tlog(TLOG_ERROR, "sendto %s, id %d, %s",
+			 gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr),
+			 ping_host->sid, strerror(err));
+		goto errout;
+	}
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _fast_ping_sendping_udp(struct ping_host_struct *ping_host)
+{
+	struct ping_dns_head dns_head;
+	int len;
+	int flag = 0;
+	int fd = 0;
+
+	flag |= (0 << 15) & 0x8000;
+	flag |= (2 << 11) & 0x7800;
+	flag |= (0 << 10) & 0x0400;
+	flag |= (0 << 9) & 0x0200;
+	flag |= (0 << 8) & 0x0100;
+	flag |= (0 << 7) & 0x0080;
+	flag |= (0 << 0) & 0x000F;
+
+	if (ping_host->type == FAST_PING_UDP) {
+		fd = ping.fd_udp;
+	} else if (ping_host->type == FAST_PING_UDP6) {
+		fd = ping.fd_udp6;
+	} else {
+		return -1;
+	}
+
+	ping_host->seq++;
+	memset(&dns_head, 0, sizeof(dns_head));
+	dns_head.id = htons(ping_host->sid);
+	dns_head.flag = flag;
+	gettimeofday(&ping_host->last, NULL);
+	len = sendto(fd, &dns_head, sizeof(dns_head), 0, (struct sockaddr *)&ping_host->addr, ping_host->addr_len);
+	if (len < 0 || len != sizeof(dns_head)) {
+		int err = errno;
+		if (errno == ENETUNREACH || errno == EINVAL) {
+			goto errout;
+		}
+		char ping_host_name[PING_MAX_HOSTLEN];
+		tlog(TLOG_ERROR, "sendto %s, id %d, %s",
+			 gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr),
+			 ping_host->sid, strerror(err));
+		goto errout;
+	}
+
+	return 0;
+
+errout:
+	return -1;
+}
+
+static int _fast_ping_sendping_tcp(struct ping_host_struct *ping_host)
+{
+	struct epoll_event event;
+	int flags;
+	int fd = -1;
+	int yes = 1;
+	const int priority = SOCKET_PRIORITY;
+	const int ip_tos = IP_TOS;
+
+	_fast_ping_close_host_sock(ping_host);
+
+	fd = socket(ping_host->ss_family, SOCK_STREAM, 0);
+	if (fd < 0) {
+		goto errout;
+	}
+
+	flags = fcntl(fd, F_GETFL, 0);
+	fcntl(fd, F_SETFL, flags | O_NONBLOCK);
+	setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &yes, sizeof(yes));
+	setsockopt(fd, SOL_SOCKET, SO_PRIORITY, &priority, sizeof(priority));
+	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
+	set_sock_keepalive(fd, 0, 0, 0);
+	/* Set the socket lingering so we will RST connections instead of wasting
+	 * bandwidth with the four-step close
+	 */
+	set_sock_lingertime(fd, 0);
+
+	ping_host->seq++;
+	if (connect(fd, (struct sockaddr *)&ping_host->addr, ping_host->addr_len) != 0) {
+		if (errno != EINPROGRESS) {
+			char ping_host_name[PING_MAX_HOSTLEN];
+			if (errno == ENETUNREACH || errno == EINVAL) {
+				goto errout;
+			}
+
+			if (errno == EACCES) {
+				if (bool_print_log == 0) {
+					goto errout;
+				}
+				bool_print_log = 0;
+			}
+
+			tlog(TLOG_ERROR, "connect %s, id %d, %s",
+				 gethost_by_addr(ping_host_name, sizeof(ping_host_name), (struct sockaddr *)&ping_host->addr),
+				 ping_host->sid, strerror(errno));
+			goto errout;
+		}
+	}
+
+	gettimeofday(&ping_host->last, NULL);
+	ping_host->fd = fd;
+	memset(&event, 0, sizeof(event));
+	event.events = EPOLLIN | EPOLLOUT | EPOLLERR;
+	event.data.ptr = ping_host;
+	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
+		ping_host->fd = -1;
+		goto errout;
+	}
+
+	return 0;
+
+errout:
+	if (fd > 0) {
+		close(fd);
+		ping_host->fd = -1;
+	}
+	return -1;
+}
+
+static int _fast_ping_sendping(struct ping_host_struct *ping_host)
+{
+	int ret = -1;
+	gettimeofday(&ping_host->last, NULL);
+
+	if (ping_host->type == FAST_PING_ICMP) {
+		ret = _fast_ping_sendping_v4(ping_host);
+	} else if (ping_host->type == FAST_PING_ICMP6) {
+		ret = _fast_ping_sendping_v6(ping_host);
+	} else if (ping_host->type == FAST_PING_TCP) {
+		ret = _fast_ping_sendping_tcp(ping_host);
+	} else if (ping_host->type == FAST_PING_UDP || ping_host->type == FAST_PING_UDP6) {
+		ret = _fast_ping_sendping_udp(ping_host);
+	}
+
+	ping_host->send = 1;
+
+	if (ret != 0) {
+		return ret;
+	}
+
+	return 0;
+}
+
+static int _fast_ping_create_icmp_sock(FAST_PING_TYPE type)
+{
+	int fd = -1;
+	struct ping_host_struct *icmp_host = NULL;
+	struct epoll_event event;
+	int buffsize = 64 * 1024;
+	socklen_t optlen = sizeof(buffsize);
+	const int val = 255;
+	const int on = 1;
+	const int ip_tos = (IPTOS_LOWDELAY | IPTOS_RELIABILITY);
+
+	switch (type) {
+	case FAST_PING_ICMP:
+		fd = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP);
+		if (fd < 0) {
+			tlog(TLOG_ERROR, "create icmp socket failed, %s\n", strerror(errno));
+			goto errout;
+		}
+		_fast_ping_install_filter_v4(fd);
+		icmp_host = &ping.icmp_host;
+		break;
+	case FAST_PING_ICMP6:
+		fd = socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6);
+		if (fd < 0) {
+			tlog(TLOG_ERROR, "create icmp socket failed, %s\n", strerror(errno));
+			goto errout;
+		}
+		_fast_ping_install_filter_v6(fd);
+		setsockopt(fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on, sizeof(on));
+		setsockopt(fd, IPPROTO_IPV6, IPV6_2292HOPLIMIT, &on, sizeof(on));
+		setsockopt(fd, IPPROTO_IPV6, IPV6_HOPLIMIT, &on, sizeof(on));
+		icmp_host = &ping.icmp6_host;
+		break;
+	default:
+		return -1;
+	}
+
+	struct icmp_filter filt;
+	filt.data = ~((1 << ICMP_SOURCE_QUENCH) | (1 << ICMP_DEST_UNREACH) | (1 << ICMP_TIME_EXCEEDED) |
+				  (1 << ICMP_PARAMETERPROB) | (1 << ICMP_REDIRECT) | (1 << ICMP_ECHOREPLY));
+	setsockopt(fd, SOL_RAW, ICMP_FILTER, &filt, sizeof filt);
+	setsockopt(fd, SOL_SOCKET, SO_SNDBUF, (const char *)&buffsize, optlen);
+	setsockopt(fd, SOL_SOCKET, SO_RCVBUF, (const char *)&buffsize, optlen);
+	setsockopt(fd, SOL_IP, IP_TTL, &val, sizeof(val));
+	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
+
+	memset(&event, 0, sizeof(event));
+	event.events = EPOLLIN;
+	event.data.ptr = icmp_host;
+	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
+		goto errout;
+	}
+
+	icmp_host->fd = fd;
+	icmp_host->type = type;
+	return fd;
+
+errout:
+	close(fd);
+	return -1;
+}
+
+static int _fast_ping_create_icmp(FAST_PING_TYPE type)
+{
+	int fd = 0;
+	int *set_fd = NULL;
+
+	pthread_mutex_lock(&ping.lock);
+	switch (type) {
+	case FAST_PING_ICMP:
+		set_fd = &ping.fd_icmp;
+		break;
+	case FAST_PING_ICMP6:
+		set_fd = &ping.fd_icmp6;
+		break;
+	default:
+		goto errout;
+		break;
+	}
+
+	if (*set_fd > 0) {
+		goto out;
+	}
+
+	fd = _fast_ping_create_icmp_sock(type);
+	if (fd < 0) {
+		goto errout;
+	}
+
+	*set_fd = fd;
+out:
+	pthread_mutex_unlock(&ping.lock);
+	return *set_fd;
+errout:
+	if (fd > 0) {
+		close(fd);
+	}
+	pthread_mutex_unlock(&ping.lock);
+	return -1;
+}
+
+static int _fast_ping_create_udp_sock(FAST_PING_TYPE type)
+{
+	int fd = -1;
+	struct ping_host_struct *udp_host = NULL;
+	struct epoll_event event;
+	const int val = 255;
+	const int on = 1;
+	const int ip_tos = (IPTOS_LOWDELAY | IPTOS_RELIABILITY);
+
+	switch (type) {
+	case FAST_PING_UDP:
+		fd = socket(AF_INET, SOCK_DGRAM, 0);
+		if (fd < 0) {
+			tlog(TLOG_ERROR, "create udp socket failed, %s\n", strerror(errno));
+			goto errout;
+		}
+
+		udp_host = &ping.udp_host;
+		udp_host->type = FAST_PING_UDP;
+		break;
+	case FAST_PING_UDP6:
+		fd = socket(AF_INET6, SOCK_DGRAM, 0);
+		if (fd < 0) {
+			tlog(TLOG_ERROR, "create udp socket failed, %s\n", strerror(errno));
+			goto errout;
+		}
+
+		udp_host = &ping.udp6_host;
+		udp_host->type = FAST_PING_UDP6;
+		setsockopt(fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on, sizeof(on));
+		setsockopt(fd, IPPROTO_IPV6, IPV6_2292HOPLIMIT, &on, sizeof(on));
+		setsockopt(fd, IPPROTO_IPV6, IPV6_HOPLIMIT, &on, sizeof(on));
+		break;
+	default:
+		return -1;
+	}
+
+	setsockopt(fd, SOL_IP, IP_TTL, &val, sizeof(val));
+	setsockopt(fd, IPPROTO_IP, IP_RECVTTL, &on, sizeof(on));
+	setsockopt(fd, IPPROTO_IP, IP_TOS, &ip_tos, sizeof(ip_tos));
+
+	memset(&event, 0, sizeof(event));
+	event.events = EPOLLIN;
+	event.data.ptr = udp_host;
+	if (epoll_ctl(ping.epoll_fd, EPOLL_CTL_ADD, fd, &event) != 0) {
+		goto errout;
+	}
+
+	udp_host->fd = fd;
+	return fd;
+
+errout:
+	close(fd);
+	return -1;
+}
+
+static int _fast_ping_create_udp(FAST_PING_TYPE type)
+{
+	int fd = 0;
+	int *set_fd = NULL;
+
+	pthread_mutex_lock(&ping.lock);
+	switch (type) {
+	case FAST_PING_UDP:
+		set_fd = &ping.fd_udp;
+		break;
+	case FAST_PING_UDP6:
+		set_fd = &ping.fd_udp6;
+		break;
+	default:
+		goto errout;
+		break;
+	}
+
+	if (*set_fd > 0) {
+		goto out;
+	}
+
+	fd = _fast_ping_create_udp_sock(type);
+	if (fd < 0) {
+		goto errout;
+	}
+
+	*set_fd = fd;
+out:
+	pthread_mutex_unlock(&ping.lock);
+	return *set_fd;
+errout:
+	if (fd > 0) {
+		close(fd);
+	}
+	pthread_mutex_unlock(&ping.lock);
+	return -1;
+}
+
+static void _fast_ping_print_result(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result,
+									struct sockaddr *addr, socklen_t addr_len, int seqno, int ttl, struct timeval *tv,
+									void *userptr)
+{
+	if (result == PING_RESULT_RESPONSE) {
+		double rtt = tv->tv_sec * 1000.0 + tv->tv_usec / 1000.0;
+		tlog(TLOG_INFO, "from %15s: seq=%d ttl=%d time=%.3f\n", host, seqno, ttl, rtt);
+	} else if (result == PING_RESULT_TIMEOUT) {
+		tlog(TLOG_INFO, "from %15s: seq=%d timeout\n", host, seqno);
+	} else if (result == PING_RESULT_END) {
+		fast_ping_stop(ping_host);
+	}
+}
+
+static int _fast_ping_get_addr_by_icmp(const char *ip_str, int port, struct addrinfo **out_gai,
+									   FAST_PING_TYPE *out_ping_type)
+{
+	struct addrinfo *gai = NULL;
+	int socktype = 0;
+	int domain = -1;
+	FAST_PING_TYPE ping_type;
+	int sockproto = 0;
+	char *service = NULL;
+
+	socktype = SOCK_RAW;
+	domain = _fast_ping_getdomain(ip_str);
+	if (domain < 0) {
+		goto errout;
+	}
+
+	switch (domain) {
+	case AF_INET:
+		sockproto = IPPROTO_ICMP;
+		ping_type = FAST_PING_ICMP;
+		break;
+	case AF_INET6:
+		sockproto = IPPROTO_ICMPV6;
+		ping_type = FAST_PING_ICMP6;
+		break;
+	default:
+		goto errout;
+		break;
+	}
+
+	if (_fast_ping_create_icmp(ping_type) < 0) {
+		goto errout;
+	}
+
+	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
+	if (gai == NULL) {
+		goto errout;
+	}
+
+	*out_gai = gai;
+	*out_ping_type = ping_type;
+
+	return 0;
+errout:
+	if (gai) {
+		freeaddrinfo(gai);
+	}
+	return -1;
+}
+
+static int _fast_ping_get_addr_by_tcp(const char *ip_str, int port, struct addrinfo **out_gai,
+									  FAST_PING_TYPE *out_ping_type)
+{
+	struct addrinfo *gai = NULL;
+	int socktype = 0;
+	FAST_PING_TYPE ping_type;
+	int sockproto = 0;
+	char *service = NULL;
+	char port_str[MAX_IP_LEN];
+
+	if (port <= 0) {
+		port = 80;
+	}
+
+	sockproto = 0;
+	socktype = SOCK_STREAM;
+	snprintf(port_str, MAX_IP_LEN, "%d", port);
+	service = port_str;
+	ping_type = FAST_PING_TCP;
+
+	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
+	if (gai == NULL) {
+		goto errout;
+	}
+
+	*out_gai = gai;
+	*out_ping_type = ping_type;
+
+	return 0;
+errout:
+	if (gai) {
+		freeaddrinfo(gai);
+	}
+	return -1;
+}
+
+static int _fast_ping_get_addr_by_dns(const char *ip_str, int port, struct addrinfo **out_gai,
+									  FAST_PING_TYPE *out_ping_type)
+{
+	struct addrinfo *gai = NULL;
+	int socktype = 0;
+	FAST_PING_TYPE ping_type;
+	int sockproto = 0;
+	char port_str[MAX_IP_LEN];
+	int domain = -1;
+	char *service = NULL;
+
+	if (port <= 0) {
+		port = 53;
+	}
+
+	domain = _fast_ping_getdomain(ip_str);
+	if (domain < 0) {
+		goto errout;
+	}
+
+	switch (domain) {
+	case AF_INET:
+		ping_type = FAST_PING_UDP;
+		break;
+	case AF_INET6:
+		ping_type = FAST_PING_UDP6;
+		break;
+	default:
+		goto errout;
+		break;
+	}
+
+	sockproto = 0;
+	socktype = SOCK_DGRAM;
+	snprintf(port_str, MAX_IP_LEN, "%d", port);
+	service = port_str;
+
+	if (_fast_ping_create_udp(ping_type) < 0) {
+		goto errout;
+	}
+
+	gai = _fast_ping_getaddr(ip_str, service, socktype, sockproto);
+	if (gai == NULL) {
+		goto errout;
+	}
+
+	*out_gai = gai;
+	*out_ping_type = ping_type;
+
+	return 0;
+errout:
+	if (gai) {
+		freeaddrinfo(gai);
+	}
+	return -1;
+}
+
+static int _fast_ping_get_addr_by_type(PING_TYPE type, const char *ip_str, int port, struct addrinfo **out_gai,
+									   FAST_PING_TYPE *out_ping_type)
+{
+	switch (type) {
+	case PING_TYPE_ICMP:
+		return _fast_ping_get_addr_by_icmp(ip_str, port, out_gai, out_ping_type);
+		break;
+	case PING_TYPE_TCP:
+		return _fast_ping_get_addr_by_tcp(ip_str, port, out_gai, out_ping_type);
+		break;
+	case PING_TYPE_DNS:
+		return _fast_ping_get_addr_by_dns(ip_str, port, out_gai, out_ping_type);
+		break;
+	default:
+		break;
+	}
+
+	return -1;
+}
+
+struct ping_host_struct *fast_ping_start(PING_TYPE type, const char *host, int count, int interval, int timeout,
+										 fast_ping_result ping_callback, void *userptr)
+{
+	struct ping_host_struct *ping_host = NULL;
+	struct addrinfo *gai = NULL;
+	uint32_t addrkey;
+	char ip_str[PING_MAX_HOSTLEN];
+	int port = -1;
+	FAST_PING_TYPE ping_type = FAST_PING_END;
+	unsigned int seed;
+	int ret = 0;
+
+	if (parse_ip(host, ip_str, &port) != 0) {
+		goto errout;
+	}
+
+	ret = _fast_ping_get_addr_by_type(type, ip_str, port, &gai, &ping_type);
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "get addr by type failed, host: %s", host);
+		goto errout;
+	}
+
+	ping_host = malloc(sizeof(*ping_host));
+	if (ping_host == NULL) {
+		goto errout;
+	}
+
+	memset(ping_host, 0, sizeof(*ping_host));
+	safe_strncpy(ping_host->host, host, PING_MAX_HOSTLEN);
+	ping_host->fd = -1;
+	ping_host->timeout = timeout;
+	ping_host->count = count;
+	ping_host->type = ping_type;
+	ping_host->userptr = userptr;
+	atomic_set(&ping_host->ref, 0);
+	atomic_set(&ping_host->notified, 0);
+	ping_host->sid = atomic_inc_return(&ping_sid);
+	seed = ping_host->sid;
+	ping_host->cookie = rand_r(&seed);
+	ping_host->run = 0;
+	if (ping_callback) {
+		ping_host->ping_callback = ping_callback;
+	} else {
+		ping_host->ping_callback = _fast_ping_print_result;
+	}
+	ping_host->interval = (timeout > interval) ? timeout : interval;
+	ping_host->addr_len = gai->ai_addrlen;
+	ping_host->port = port;
+	ping_host->ss_family = gai->ai_family;
+	if (gai->ai_addrlen > sizeof(struct sockaddr_in6)) {
+		goto errout;
+	}
+	memcpy(&ping_host->addr, gai->ai_addr, gai->ai_addrlen);
+
+	tlog(TLOG_DEBUG, "ping %s, id = %d", host, ping_host->sid);
+
+	addrkey = _fast_ping_hash_key(ping_host->sid, &ping_host->addr);
+	pthread_mutex_lock(&ping.map_lock);
+	_fast_ping_host_get(ping_host);
+	hash_add(ping.addrmap, &ping_host->addr_node, addrkey);
+	pthread_mutex_unlock(&ping.map_lock);
+
+	_fast_ping_host_get(ping_host);
+	if (_fast_ping_sendping(ping_host) != 0) {
+		goto errout_remove;
+	}
+
+	ping_host->run = 1;
+	freeaddrinfo(gai);
+	return ping_host;
+errout_remove:
+	fast_ping_stop(ping_host);
+	ping_host = NULL;
+errout:
+	if (gai) {
+		freeaddrinfo(gai);
+	}
+
+	if (ping_host) {
+		free(ping_host);
+	}
+
+	return NULL;
+}
+
+int fast_ping_stop(struct ping_host_struct *ping_host)
+{
+	if (ping_host == NULL) {
+		return 0;
+	}
+
+	atomic_inc_return(&ping_host->notified);
+	_fast_ping_host_remove(ping_host);
+	_fast_ping_host_put(ping_host);
+	return 0;
+}
+
+static void tv_sub(struct timeval *out, struct timeval *in)
+{
+	if ((out->tv_usec -= in->tv_usec) < 0) { /* out -= in */
+		--out->tv_sec;
+		out->tv_usec += 1000000;
+	}
+	out->tv_sec -= in->tv_sec;
+}
+
+static struct fast_ping_packet *_fast_ping_icmp6_packet(struct ping_host_struct *ping_host, struct msghdr *msg,
+														u_char *packet_data, int data_len)
+{
+	int icmp_len;
+	struct fast_ping_packet *packet = (struct fast_ping_packet *)packet_data;
+	struct icmp6_hdr *icmp6 = &packet->icmp6;
+	struct cmsghdr *c;
+	int hops = 0;
+
+	for (c = CMSG_FIRSTHDR(msg); c; c = CMSG_NXTHDR(msg, c)) {
+		if (c->cmsg_level != IPPROTO_IPV6)
+			continue;
+		switch (c->cmsg_type) {
+		case IPV6_HOPLIMIT:
+#ifdef IPV6_2292HOPLIMIT
+		case IPV6_2292HOPLIMIT:
+#endif
+			if (c->cmsg_len < CMSG_LEN(sizeof(int)))
+				continue;
+			memcpy(&hops, CMSG_DATA(c), sizeof(hops));
+		}
+	}
+
+	packet->ttl = hops;
+	if (icmp6->icmp6_type != ICMP6_ECHO_REPLY) {
+		tlog(TLOG_DEBUG, "icmp6 type faild, %d:%d", icmp6->icmp6_type, ICMP6_ECHO_REPLY);
+		return NULL;
+	}
+
+	icmp_len = data_len;
+	if (icmp_len < 16) {
+		tlog(TLOG_ERROR, "length is invalid, %d", icmp_len);
+		return NULL;
+	}
+
+	if (icmp6->icmp6_id != ping.ident) {
+		tlog(TLOG_ERROR, "ident failed, %d:%d", icmp6->icmp6_id, ping.ident);
+		return NULL;
+	}
+
+	return packet;
+}
+
+static struct fast_ping_packet *_fast_ping_icmp_packet(struct ping_host_struct *ping_host, struct msghdr *msg,
+													   u_char *packet_data, int data_len)
+{
+	struct ip *ip = (struct ip *)packet_data;
+	struct fast_ping_packet *packet;
+	struct icmp *icmp;
+	int hlen;
+	int icmp_len;
+
+	if (ip->ip_p != IPPROTO_ICMP) {
+		tlog(TLOG_ERROR, "ip type faild, %d:%d", ip->ip_p, IPPROTO_ICMP);
+		return NULL;
+	}
+
+	hlen = ip->ip_hl << 2;
+	packet = (struct fast_ping_packet *)(packet_data + hlen);
+	icmp = &packet->icmp;
+	icmp_len = data_len - hlen;
+	packet->ttl = ip->ip_ttl;
+
+	if (icmp_len < 16) {
+		tlog(TLOG_ERROR, "length is invalid, %d", icmp_len);
+		return NULL;
+	}
+
+	if (icmp->icmp_type != ICMP_ECHOREPLY) {
+		tlog(TLOG_DEBUG, "icmp type faild, %d:%d", icmp->icmp_type, ICMP_ECHOREPLY);
+		return NULL;
+	}
+
+	if (icmp->icmp_id != ping.ident) {
+		tlog(TLOG_ERROR, "ident failed, %d:%d", icmp->icmp_id, ping.ident);
+		return NULL;
+	}
+
+	return packet;
+}
+
+static struct fast_ping_packet *_fast_ping_recv_packet(struct ping_host_struct *ping_host, struct msghdr *msg,
+													   u_char *inpacket, int len, struct timeval *tvrecv)
+{
+	struct fast_ping_packet *packet = NULL;
+
+	if (ping_host->type == FAST_PING_ICMP6) {
+		packet = _fast_ping_icmp6_packet(ping_host, msg, inpacket, len);
+		if (packet == NULL) {
+			goto errout;
+		}
+	} else if (ping_host->type == FAST_PING_ICMP) {
+		packet = _fast_ping_icmp_packet(ping_host, msg, inpacket, len);
+		if (packet == NULL) {
+			goto errout;
+		}
+	} else {
+		tlog(TLOG_ERROR, "ping host type is invalid, %d", ping_host->type);
+		goto errout;
+	}
+
+	return packet;
+errout:
+	return NULL;
+}
+
+static int _fast_ping_process_icmp(struct ping_host_struct *ping_host, struct timeval *now)
+{
+	int len;
+	u_char inpacket[ICMP_INPACKET_SIZE];
+	struct sockaddr_storage from;
+	struct ping_host_struct *recv_ping_host;
+	struct fast_ping_packet *packet = NULL;
+	socklen_t from_len = sizeof(from);
+	uint32_t addrkey;
+	struct timeval tvresult = *now;
+	struct timeval *tvsend = NULL;
+	unsigned int sid;
+	unsigned int seq;
+	unsigned int cookie;
+	struct msghdr msg;
+	struct iovec iov;
+	char ans_data[4096];
+
+	memset(&msg, 0, sizeof(msg));
+	iov.iov_base = (char *)inpacket;
+	iov.iov_len = sizeof(inpacket);
+	msg.msg_name = &from;
+	msg.msg_namelen = sizeof(from);
+	msg.msg_iov = &iov;
+	msg.msg_iovlen = 1;
+	msg.msg_control = ans_data;
+	msg.msg_controllen = sizeof(ans_data);
+
+	len = recvmsg(ping_host->fd, &msg, MSG_DONTWAIT);
+	if (len < 0) {
+		tlog(TLOG_ERROR, "recvfrom failed, %s\n", strerror(errno));
+		goto errout;
+	}
+
+	from_len = msg.msg_namelen;
+	packet = _fast_ping_recv_packet(ping_host, &msg, inpacket, len, now);
+	if (packet == NULL) {
+		char name[PING_MAX_HOSTLEN];
+		tlog(TLOG_DEBUG, "recv ping packet from %s failed.",
+			 gethost_by_addr(name, sizeof(name), (struct sockaddr *)&from));
+		goto errout;
+	}
+
+	tvsend = &packet->msg.tv;
+	sid = packet->msg.sid;
+	seq = packet->msg.seq;
+	cookie = packet->msg.cookie;
+	addrkey = _fast_ping_hash_key(sid, (struct sockaddr *)&from);
+	pthread_mutex_lock(&ping.map_lock);
+	hash_for_each_possible(ping.addrmap, recv_ping_host, addr_node, addrkey)
+	{
+		if (_fast_ping_sockaddr_ip_cmp(&recv_ping_host->addr, recv_ping_host->addr_len, (struct sockaddr *)&from,
+									   from_len) == 0 &&
+			recv_ping_host->sid == sid && recv_ping_host->cookie == cookie) {
+			_fast_ping_host_get(recv_ping_host);
+			break;
+		}
+	}
+
+	pthread_mutex_unlock(&ping.map_lock);
+
+	if (recv_ping_host == NULL) {
+		return -1;
+	}
+
+	if (recv_ping_host->seq != seq) {
+		tlog(TLOG_ERROR, "seq num mismatch, expect %u, real %u", recv_ping_host->seq, seq);
+		_fast_ping_host_put(recv_ping_host);
+		return -1;
+	}
+
+	recv_ping_host->ttl = packet->ttl;
+	tv_sub(&tvresult, tvsend);
+	if (recv_ping_host->ping_callback) {
+		recv_ping_host->ping_callback(recv_ping_host, recv_ping_host->host, PING_RESULT_RESPONSE, &recv_ping_host->addr,
+									  recv_ping_host->addr_len, recv_ping_host->seq, recv_ping_host->ttl, &tvresult,
+									  recv_ping_host->userptr);
+	}
+
+	recv_ping_host->send = 0;
+
+	if (recv_ping_host->count == 1) {
+		_fast_ping_host_remove(recv_ping_host);
+	}
+
+	_fast_ping_host_put(recv_ping_host);
+	return 0;
+errout:
+	return -1;
+}
+
+static int _fast_ping_process_tcp(struct ping_host_struct *ping_host, struct epoll_event *event, struct timeval *now)
+{
+	struct timeval tvresult = *now;
+	struct timeval *tvsend = &ping_host->last;
+	int connect_error = 0;
+	socklen_t len = sizeof(connect_error);
+
+	if (event->events & EPOLLIN || event->events & EPOLLERR) {
+		if (getsockopt(ping_host->fd, SOL_SOCKET, SO_ERROR, (char *)&connect_error, &len) != 0) {
+			goto errout;
+		}
+
+		if (connect_error != 0 && connect_error != ECONNREFUSED) {
+			goto errout;
+		}
+	}
+	tv_sub(&tvresult, tvsend);
+	if (ping_host->ping_callback) {
+		ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_RESPONSE, &ping_host->addr,
+								 ping_host->addr_len, ping_host->seq, ping_host->ttl, &tvresult, ping_host->userptr);
+	}
+
+	ping_host->send = 0;
+
+	_fast_ping_close_host_sock(ping_host);
+
+	if (ping_host->count == 1) {
+		_fast_ping_host_remove(ping_host);
+	}
+	return 0;
+errout:
+	_fast_ping_host_remove(ping_host);
+
+	return -1;
+}
+
+static int _fast_ping_process_udp(struct ping_host_struct *ping_host, struct timeval *now)
+{
+	int len;
+	u_char inpacket[ICMP_INPACKET_SIZE];
+	struct sockaddr_storage from;
+	struct ping_host_struct *recv_ping_host;
+	struct ping_dns_head *dns_head = NULL;
+	socklen_t from_len = sizeof(from);
+	uint32_t addrkey;
+	struct timeval tvresult = *now;
+	struct timeval *tvsend = NULL;
+	unsigned int sid;
+	struct msghdr msg;
+	struct iovec iov;
+	char ans_data[4096];
+	struct cmsghdr *cmsg;
+	int ttl = 0;
+
+	memset(&msg, 0, sizeof(msg));
+	iov.iov_base = (char *)inpacket;
+	iov.iov_len = sizeof(inpacket);
+	msg.msg_name = &from;
+	msg.msg_namelen = sizeof(from);
+	msg.msg_iov = &iov;
+	msg.msg_iovlen = 1;
+	msg.msg_control = ans_data;
+	msg.msg_controllen = sizeof(ans_data);
+
+	len = recvmsg(ping_host->fd, &msg, MSG_DONTWAIT);
+	if (len < 0) {
+		tlog(TLOG_ERROR, "recvfrom failed, %s\n", strerror(errno));
+		goto errout;
+	}
+
+	for (cmsg = CMSG_FIRSTHDR(&msg); cmsg; cmsg = CMSG_NXTHDR(&msg, cmsg)) {
+		if (cmsg->cmsg_level == SOL_IP && cmsg->cmsg_type == IP_TTL) {
+			if (cmsg->cmsg_len >= sizeof(int)) {
+				int *ttlPtr = (int *)CMSG_DATA(cmsg);
+				ttl = *ttlPtr;
+			}
+		} else if (cmsg->cmsg_level == IPPROTO_IPV6 && cmsg->cmsg_type == IPV6_HOPLIMIT) {
+			if (cmsg->cmsg_len >= sizeof(int)) {
+				int *ttlPtr = (int *)CMSG_DATA(cmsg);
+				ttl = *ttlPtr;
+			}
+		}
+	}
+
+	from_len = msg.msg_namelen;
+	dns_head = (struct ping_dns_head *)inpacket;
+	if (len < sizeof(*dns_head)) {
+		goto errout;
+	}
+
+	sid = ntohs(dns_head->id);
+	addrkey = _fast_ping_hash_key(sid, (struct sockaddr *)&from);
+	pthread_mutex_lock(&ping.map_lock);
+	hash_for_each_possible(ping.addrmap, recv_ping_host, addr_node, addrkey)
+	{
+		if (_fast_ping_sockaddr_ip_cmp(&recv_ping_host->addr, recv_ping_host->addr_len, (struct sockaddr *)&from,
+									   from_len) == 0 &&
+			recv_ping_host->sid == sid) {
+			_fast_ping_host_get(recv_ping_host);
+			break;
+		}
+	}
+
+	pthread_mutex_unlock(&ping.map_lock);
+
+	if (recv_ping_host == NULL) {
+		return -1;
+	}
+
+	recv_ping_host->ttl = ttl;
+	tvsend = &recv_ping_host->last;
+	tv_sub(&tvresult, tvsend);
+	if (recv_ping_host->ping_callback) {
+		recv_ping_host->ping_callback(recv_ping_host, recv_ping_host->host, PING_RESULT_RESPONSE, &recv_ping_host->addr,
+									  recv_ping_host->addr_len, recv_ping_host->seq, recv_ping_host->ttl, &tvresult,
+									  recv_ping_host->userptr);
+	}
+
+	recv_ping_host->send = 0;
+
+	if (recv_ping_host->count == 1) {
+		_fast_ping_host_remove(recv_ping_host);
+	}
+
+	_fast_ping_host_put(recv_ping_host);
+
+	return 0;
+errout:
+	return -1;
+}
+
+static int _fast_ping_process(struct ping_host_struct *ping_host, struct epoll_event *event, struct timeval *now)
+{
+	int ret = -1;
+
+	switch (ping_host->type) {
+	case FAST_PING_ICMP6:
+	case FAST_PING_ICMP:
+		ret = _fast_ping_process_icmp(ping_host, now);
+		break;
+	case FAST_PING_TCP:
+		ret = _fast_ping_process_tcp(ping_host, event, now);
+		break;
+	case FAST_PING_UDP6:
+	case FAST_PING_UDP:
+		ret = _fast_ping_process_udp(ping_host, now);
+		break;
+	default:
+		tlog(TLOG_ERROR, "BUG: type error : %p, %d, %s, %d", ping_host, ping_host->sid, ping_host->host, ping_host->fd);
+		abort();
+		break;
+	}
+
+	return ret;
+}
+
+static void _fast_ping_remove_all(void)
+{
+	struct ping_host_struct *ping_host = NULL;
+	struct ping_host_struct *ping_host_tmp = NULL;
+	struct hlist_node *tmp = NULL;
+	int i;
+
+	LIST_HEAD(remove_list);
+
+	pthread_mutex_lock(&ping.map_lock);
+	hash_for_each_safe(ping.addrmap, i, tmp, ping_host, addr_node)
+	{
+		list_add_tail(&ping_host->action_list, &remove_list);
+	}
+	pthread_mutex_unlock(&ping.map_lock);
+
+	list_for_each_entry_safe(ping_host, ping_host_tmp, &remove_list, action_list)
+	{
+		_fast_ping_host_remove(ping_host);
+	}
+}
+
+static void _fast_ping_period_run(void)
+{
+	struct ping_host_struct *ping_host = NULL;
+	struct ping_host_struct *ping_host_tmp = NULL;
+	struct hlist_node *tmp = NULL;
+	int i = 0;
+	struct timeval now;
+	struct timezone tz;
+	struct timeval interval;
+	int64_t millisecond;
+	gettimeofday(&now, &tz);
+	LIST_HEAD(action);
+
+	pthread_mutex_lock(&ping.map_lock);
+	hash_for_each_safe(ping.addrmap, i, tmp, ping_host, addr_node)
+	{
+		if (ping_host->run == 0) {
+			continue;
+		}
+
+		interval = now;
+		tv_sub(&interval, &ping_host->last);
+		millisecond = interval.tv_sec * 1000 + interval.tv_usec / 1000;
+		if (millisecond >= ping_host->timeout && ping_host->send == 1) {
+			list_add_tail(&ping_host->action_list, &action);
+			_fast_ping_host_get(ping_host);
+			continue;
+		}
+
+		if (millisecond < ping_host->interval) {
+			continue;
+		}
+
+		list_add_tail(&ping_host->action_list, &action);
+		_fast_ping_host_get(ping_host);
+	}
+	pthread_mutex_unlock(&ping.map_lock);
+
+	list_for_each_entry_safe(ping_host, ping_host_tmp, &action, action_list)
+	{
+		interval = now;
+		tv_sub(&interval, &ping_host->last);
+		millisecond = interval.tv_sec * 1000 + interval.tv_usec / 1000;
+		if (millisecond >= ping_host->timeout && ping_host->send == 1) {
+			ping_host->ping_callback(ping_host, ping_host->host, PING_RESULT_TIMEOUT, &ping_host->addr,
+									 ping_host->addr_len, ping_host->seq, ping_host->ttl, &interval,
+									 ping_host->userptr);
+			ping_host->send = 0;
+		}
+
+		if (millisecond < ping_host->interval) {
+			list_del(&ping_host->action_list);
+			_fast_ping_host_put(ping_host);
+			continue;
+		}
+
+		if (ping_host->count > 0) {
+			if (ping_host->count == 1) {
+				_fast_ping_host_remove(ping_host);
+				list_del(&ping_host->action_list);
+				_fast_ping_host_put(ping_host);
+				continue;
+			}
+			ping_host->count--;
+		}
+
+		_fast_ping_sendping(ping_host);
+		list_del(&ping_host->action_list);
+		_fast_ping_host_put(ping_host);
+	}
+}
+
+static void *_fast_ping_work(void *arg)
+{
+	struct epoll_event events[PING_MAX_EVENTS + 1];
+	int num;
+	int i;
+	unsigned long now = {0};
+	struct timeval tvnow = {0};
+	int sleep = 100;
+	int sleep_time = 0;
+	unsigned long expect_time = 0;
+
+	sleep_time = sleep;
+	now = get_tick_count() - sleep;
+	expect_time = now + sleep;
+	while (ping.run) {
+		now = get_tick_count();
+		if (now >= expect_time) {
+			_fast_ping_period_run();
+			sleep_time = sleep - (now - expect_time);
+			if (sleep_time < 0) {
+				sleep_time = 0;
+				expect_time = now;
+			}
+			expect_time += sleep;
+		}
+
+		num = epoll_wait(ping.epoll_fd, events, PING_MAX_EVENTS, sleep_time);
+		if (num < 0) {
+			usleep(100000);
+			continue;
+		}
+
+		if (num == 0) {
+			continue;
+		}
+
+		gettimeofday(&tvnow, NULL);
+		for (i = 0; i < num; i++) {
+			struct epoll_event *event = &events[i];
+			struct ping_host_struct *ping_host = (struct ping_host_struct *)event->data.ptr;
+			_fast_ping_process(ping_host, event, &tvnow);
+		}
+	}
+
+	close(ping.epoll_fd);
+	ping.epoll_fd = -1;
+
+	return NULL;
+}
+
+int fast_ping_init(void)
+{
+	pthread_attr_t attr;
+	int epollfd = -1;
+	int ret;
+	bool_print_log = 1;
+
+	if (ping.epoll_fd > 0) {
+		return -1;
+	}
+
+	memset(&ping, 0, sizeof(ping));
+	pthread_attr_init(&attr);
+
+	epollfd = epoll_create1(EPOLL_CLOEXEC);
+	if (epollfd < 0) {
+		tlog(TLOG_ERROR, "create epoll failed, %s\n", strerror(errno));
+		goto errout;
+	}
+
+	pthread_mutex_init(&ping.map_lock, NULL);
+	pthread_mutex_init(&ping.lock, NULL);
+	hash_init(ping.addrmap);
+	ping.epoll_fd = epollfd;
+	ping.ident = (getpid() & 0XFFFF);
+	ping.run = 1;
+	ret = pthread_create(&ping.tid, &attr, _fast_ping_work, NULL);
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "create ping work thread failed, %s\n", strerror(errno));
+		goto errout;
+	}
+
+	return 0;
+errout:
+	if (ping.tid > 0) {
+		void *retval = NULL;
+		ping.run = 0;
+		pthread_join(ping.tid, &retval);
+	}
+
+	if (epollfd) {
+		close(epollfd);
+	}
+
+	pthread_mutex_destroy(&ping.lock);
+	pthread_mutex_destroy(&ping.map_lock);
+
+	return -1;
+}
+
+static void _fast_ping_close_fds(void)
+{
+	if (ping.fd_icmp > 0) {
+		close(ping.fd_icmp);
+		ping.fd_icmp = -1;
+	}
+
+	if (ping.fd_icmp6 > 0) {
+		close(ping.fd_icmp6);
+		ping.fd_icmp6 = -1;
+	}
+
+	if (ping.fd_udp > 0) {
+		close(ping.fd_udp);
+		ping.fd_udp = -1;
+	}
+
+	if (ping.fd_udp6 > 0) {
+		close(ping.fd_udp6);
+		ping.fd_udp6 = -1;
+	}
+}
+
+void fast_ping_exit(void)
+{
+	if (ping.tid > 0) {
+		void *ret = NULL;
+		ping.run = 0;
+		pthread_join(ping.tid, &ret);
+	}
+
+	_fast_ping_close_fds();
+	_fast_ping_remove_all();
+
+	pthread_mutex_destroy(&ping.lock);
+	pthread_mutex_destroy(&ping.map_lock);
+}
diff --git a/release/src/router/smartdns/src/fast_ping.h b/release/src/router/smartdns/src/fast_ping.h
index 16821068bd..b9124c3670 100644
--- a/release/src/router/smartdns/src/fast_ping.h
+++ b/release/src/router/smartdns/src/fast_ping.h
@@ -1,58 +1,60 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef FAST_PING_H
-#define FAST_PING_H
-
-#include <netdb.h>
-#include <sys/time.h>
-#ifdef __cpluscplus
-extern "C" {
-#endif
-
-typedef enum {
-	PING_TYPE_ICMP = 1,
-	PING_TYPE_TCP = 2,
-	PING_TYPE_DNS = 3,
-} PING_TYPE;
-
-typedef enum {
-	PING_RESULT_RESPONSE = 1,
-	PING_RESULT_TIMEOUT = 2,
-	PING_RESULT_END = 3,
-} FAST_PING_RESULT;
-
-struct ping_host_struct;
-typedef void (*fast_ping_result)(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result, struct sockaddr *addr, socklen_t addr_len,
-								 int seqno, int ttl, struct timeval *tv, void *userptr);
-
-/* start ping */
-struct ping_host_struct *fast_ping_start(PING_TYPE type, const char *host, int count, int interval, int timeout, fast_ping_result ping_callback, void *userptr);
-
-/* stop ping */
-int fast_ping_stop(struct ping_host_struct *ping_host);
-
-int fast_ping_init(void);
-
-void fast_ping_exit(void);
-
-#ifdef __cpluscplus
-}
-#endif
-
-#endif // !FAST_PING_H
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef FAST_PING_H
+#define FAST_PING_H
+
+#include <netdb.h>
+#include <sys/time.h>
+#ifdef __cpluscplus
+extern "C" {
+#endif
+
+typedef enum {
+	PING_TYPE_ICMP = 1,
+	PING_TYPE_TCP = 2,
+	PING_TYPE_DNS = 3,
+} PING_TYPE;
+
+typedef enum {
+	PING_RESULT_RESPONSE = 1,
+	PING_RESULT_TIMEOUT = 2,
+	PING_RESULT_END = 3,
+} FAST_PING_RESULT;
+
+struct ping_host_struct;
+typedef void (*fast_ping_result)(struct ping_host_struct *ping_host, const char *host, FAST_PING_RESULT result,
+								 struct sockaddr *addr, socklen_t addr_len, int seqno, int ttl, struct timeval *tv,
+								 void *userptr);
+
+/* start ping */
+struct ping_host_struct *fast_ping_start(PING_TYPE type, const char *host, int count, int interval, int timeout,
+										 fast_ping_result ping_callback, void *userptr);
+
+/* stop ping */
+int fast_ping_stop(struct ping_host_struct *ping_host);
+
+int fast_ping_init(void);
+
+void fast_ping_exit(void);
+
+#ifdef __cpluscplus
+}
+#endif
+
+#endif // !FAST_PING_H
diff --git a/release/src/router/smartdns/src/http_parse.c b/release/src/router/smartdns/src/http_parse.c
index 9aa7707d7f..57564c7b68 100644
--- a/release/src/router/smartdns/src/http_parse.c
+++ b/release/src/router/smartdns/src/http_parse.c
@@ -1,463 +1,463 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "http_parse.h"
-#include "hash.h"
-#include "hashtable.h"
-#include "jhash.h"
-#include "list.h"
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-struct http_head_fields {
-	struct hlist_node node;
-	struct list_head list;
-
-	char *name;
-	char *value;
-};
-
-struct http_head {
-	HTTP_HEAD_TYPE head_type;
-	HTTP_METHOD method;
-	char *url;
-	char *version;
-	int code;
-	char *code_msg;
-	int buff_size;
-	int buff_len;
-	char *buff;
-	int head_ok;
-	int head_len;
-	char *data;
-	int data_len;
-	int expect_data_len;
-	struct http_head_fields field_head;
-	DECLARE_HASHTABLE(field_map, 4);
-};
-
-/*
- * Returns:
- *  >=0  - success http data len
- *  -1   - Incomplete request
- *  -2   - parse failed
- */
-struct http_head *http_head_init(int buffsize)
-{
-	struct http_head *http_head = NULL;
-	char *buffer = NULL;
-
-	http_head = malloc(sizeof(*http_head));
-	if (http_head == NULL) {
-		goto errout;
-	}
-	memset(http_head, 0, sizeof(*http_head));
-	INIT_LIST_HEAD(&http_head->field_head.list);
-	hash_init(http_head->field_map);
-
-	buffer = malloc(buffsize);
-	if (buffer == NULL) {
-		goto errout;
-	}
-
-	http_head->buff = buffer;
-	http_head->buff_size = buffsize;
-
-	return http_head;
-
-errout:
-	if (buffer) {
-		free(buffer);
-	}
-
-	if (http_head) {
-		free(http_head);
-	}
-
-	return NULL;
-}
-
-struct http_head_fields *http_head_first_fields(struct http_head *http_head)
-{
-	struct http_head_fields *first = NULL;
-	first = list_first_entry(&http_head->field_head.list, struct http_head_fields, list);
-
-	if (first->name == NULL && first->value == NULL) {
-		return NULL;
-	}
-
-	return first;
-}
-
-const char *http_head_get_fields_value(struct http_head *http_head, const char *name)
-{
-	unsigned long key;
-	struct http_head_fields *filed;
-
-	key = hash_string(name);
-	hash_for_each_possible(http_head->field_map, filed, node, key)
-	{
-		if (strncmp(filed->name, name, 128) == 0) {
-			return filed->value;
-		}
-	}
-
-	return NULL;
-}
-
-struct http_head_fields *http_head_next_fields(struct http_head_fields *fields)
-{
-	struct http_head_fields *next = NULL;
-	next = list_next_entry(fields, list);
-
-	if (next->name == NULL && next->value == NULL) {
-		return NULL;
-	}
-
-	return next;
-}
-
-int http_head_lookup_fields(struct http_head_fields *fields, const char **name, const char **value)
-{
-	if (fields == NULL) {
-		return -1;
-	}
-
-	if (name) {
-		*name = fields->name;
-	}
-
-	if (value) {
-		*value = fields->value;
-	}
-
-	return 0;
-}
-
-HTTP_METHOD http_head_get_method(struct http_head *http_head)
-{
-	return http_head->method;
-}
-
-const char *http_head_get_url(struct http_head *http_head)
-{
-	return http_head->url;
-}
-
-const char *http_head_get_httpversion(struct http_head *http_head)
-{
-	return http_head->version;
-}
-
-int http_head_get_httpcode(struct http_head *http_head)
-{
-	return http_head->code;
-}
-
-char *http_head_get_httpcode_msg(struct http_head *http_head)
-{
-	return http_head->code_msg;
-}
-
-HTTP_HEAD_TYPE http_head_get_head_type(struct http_head *http_head)
-{
-	return http_head->head_type;
-}
-
-char *http_head_get_data(struct http_head *http_head)
-{
-	return http_head->data;
-}
-
-int http_head_get_data_len(struct http_head *http_head)
-{
-	return http_head->data_len;
-}
-
-static int _http_head_add_fields(struct http_head *http_head, char *name, char *value)
-{
-	unsigned long key = 0;
-	struct http_head_fields *fields = NULL;
-	fields = malloc(sizeof(*fields));
-	if (fields == NULL) {
-		return -1;
-	}
-	memset(fields, 0, sizeof(*fields));
-
-	fields->name = name;
-	fields->value = value;
-
-	list_add_tail(&fields->list, &http_head->field_head.list);
-	key = hash_string(name);
-	hash_add(http_head->field_map, &fields->node, key);
-
-	return 0;
-}
-
-static int _http_head_parse_response(struct http_head *http_head, char *key, char *value)
-{
-	char *field_start = NULL;
-	char *tmp_ptr = NULL;
-	char *result = NULL;
-	char *ret_code = NULL;
-
-	if (strstr(key, "HTTP/") == NULL) {
-		return -1;
-	}
-
-	for (tmp_ptr = value; *tmp_ptr != 0; tmp_ptr++) {
-		if (field_start == NULL) {
-			field_start = tmp_ptr;
-		}
-
-		if (*tmp_ptr == ' ') {
-			*tmp_ptr = '\0';
-			if (ret_code == NULL) {
-				ret_code = field_start;
-			} else if (result == NULL) {
-				result = field_start;
-				break;
-			}
-
-			field_start = NULL;
-		}
-	}
-
-	if (field_start && result == NULL) {
-		result = field_start;
-	}
-
-	if (ret_code == NULL || result == NULL) {
-		return -1;
-	}
-
-	http_head->code = atol(ret_code);
-	http_head->code_msg = result;
-	http_head->version = key;
-	http_head->head_type = HTTP_HEAD_RESPONSE;
-
-	return 0;
-}
-
-static int _http_head_parse_request(struct http_head *http_head, char *key, char *value)
-{
-	int method = HTTP_METHOD_INVALID;
-	char *url = NULL;
-	char *version = NULL;
-	char *tmp_ptr = value;
-	char *field_start = NULL;
-
-	if (strncmp(key, "GET", sizeof("GET")) == 0) {
-		method = HTTP_METHOD_GET;
-	} else if (strncmp(key, "POST", sizeof("POST")) == 0) {
-		method = HTTP_METHOD_POST;
-	} else if (strncmp(key, "PUT", sizeof("PUT")) == 0) {
-		method = HTTP_METHOD_PUT;
-	} else if (strncmp(key, "DELETE", sizeof("DELETE")) == 0) {
-		method = HTTP_METHOD_DELETE;
-	} else if (strncmp(key, "TRACE", sizeof("TRACE")) == 0) {
-		method = HTTP_METHOD_TRACE;
-	} else if (strncmp(key, "CONNECT", sizeof("CONNECT")) == 0) {
-		method = HTTP_METHOD_CONNECT;
-	} else {
-		return _http_head_parse_response(http_head, key, value);
-	}
-
-	for (tmp_ptr = value; *tmp_ptr != 0; tmp_ptr++) {
-		if (field_start == NULL) {
-			field_start = tmp_ptr;
-		}
-		if (*tmp_ptr == ' ') {
-			*tmp_ptr = '\0';
-			if (url == NULL) {
-				url = field_start;
-			}
-
-			field_start = NULL;
-		}
-	}
-
-	if (field_start && version == NULL) {
-		version = field_start;
-	}
-
-	http_head->method = method;
-	http_head->url = url;
-	http_head->version = version;
-	http_head->head_type = HTTP_HEAD_REQUEST;
-
-	return 0;
-}
-
-static int _http_head_parse(struct http_head *http_head)
-{
-	int i = 0;
-	char *key = NULL;
-	char *value = NULL;
-	char *data;
-	int has_first_line = 0;
-
-	int inkey = 1;
-	int invalue = 0;
-
-	data = http_head->buff;
-	for (i = 0; i < http_head->head_len; i++, data++) {
-		if (inkey) {
-			if (key == NULL && *data != ' ' && *data != '\r' && *data != '\n') {
-				key = data;
-				continue;
-			}
-
-			if (*data == ':' || *data == ' ') {
-				*data = '\0';
-				inkey = 0;
-				invalue = 1;
-				continue;
-			}
-		}
-
-		if (invalue) {
-			if (value == NULL && *data != ' ') {
-				value = data;
-				continue;
-			}
-
-			if (*data == '\r' || *data == '\n') {
-				*data = '\0';
-				inkey = 1;
-				invalue = 0;
-			}
-		}
-
-		if (key && value && invalue == 0) {
-			if (has_first_line == 0) {
-				if (_http_head_parse_request(http_head, key, value) != 0) {
-					return -2;
-				}
-
-				has_first_line = 1;
-			} else {
-				if (_http_head_add_fields(http_head, key, value) != 0) {
-					return -2;
-				}
-			}
-
-			key = NULL;
-			value = NULL;
-			inkey = 1;
-			invalue = 0;
-		}
-	}
-
-	return 0;
-}
-
-int http_head_parse(struct http_head *http_head, const char *data, int data_len)
-{
-	int i = 0;
-	char *buff_end = NULL;
-	int left_size = 0;
-	int process_data_len = 0;
-
-	left_size = http_head->buff_size - http_head->buff_len;
-
-	if (left_size < data_len) {
-		return -3;
-	}
-
-	buff_end = http_head->buff + http_head->buff_len;
-	if (http_head->head_ok == 0) {
-		for (i = 0; i < data_len; i++, data++) {
-			*(buff_end + i) = *data;
-			if (*data == '\n') {
-				if (http_head->buff_len + i < 2) {
-					continue;
-				}
-
-				if (*(buff_end + i - 2) == '\n') {
-					http_head->head_ok = 1;
-					http_head->head_len = http_head->buff_len + i - 2;
-					i++;
-					buff_end += i;
-					data_len -= i;
-					data++;
-					if (_http_head_parse(http_head) != 0) {
-						return -2;
-					}
-
-					const char *content_len = NULL;
-					content_len = http_head_get_fields_value(http_head, "Content-Length");
-					if (content_len) {
-						http_head->expect_data_len = atol(content_len);
-					} else {
-						http_head->expect_data_len = 0;
-					}
-
-					if (http_head->expect_data_len < 0) {
-						return -2;
-					}
-
-					break;
-				}
-			}
-		}
-
-		process_data_len += i;
-		if (http_head->head_ok == 0) {
-			// Read data again */
-			http_head->buff_len += process_data_len;
-			return -1;
-		}
-	}
-
-	if (http_head->head_ok == 1) {
-		int get_data_len = (http_head->expect_data_len > data_len) ? data_len : http_head->expect_data_len;
-		if (http_head->data == NULL) {
-			http_head->data = buff_end;
-		}
-
-		memcpy(buff_end, data, get_data_len);
-		process_data_len += get_data_len;
-		http_head->data_len += get_data_len;
-	}
-
-	http_head->buff_len += process_data_len;
-	if (http_head->data_len < http_head->expect_data_len) {
-		return -1;
-	}
-
-	return process_data_len;
-}
-
-void http_head_destroy(struct http_head *http_head)
-{
-	struct http_head_fields *fields, *tmp;
-
-	list_for_each_entry_safe(fields, tmp, &http_head->field_head.list, list)
-	{
-		list_del(&fields->list);
-		free(fields);
-	}
-
-	if (http_head->buff) {
-		free(http_head->buff);
-	}
-
-	free(http_head);
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "http_parse.h"
+#include "hash.h"
+#include "hashtable.h"
+#include "jhash.h"
+#include "list.h"
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+struct http_head_fields {
+	struct hlist_node node;
+	struct list_head list;
+
+	char *name;
+	char *value;
+};
+
+struct http_head {
+	HTTP_HEAD_TYPE head_type;
+	HTTP_METHOD method;
+	char *url;
+	char *version;
+	int code;
+	char *code_msg;
+	int buff_size;
+	int buff_len;
+	char *buff;
+	int head_ok;
+	int head_len;
+	char *data;
+	int data_len;
+	int expect_data_len;
+	struct http_head_fields field_head;
+	DECLARE_HASHTABLE(field_map, 4);
+};
+
+/*
+ * Returns:
+ *  >=0  - success http data len
+ *  -1   - Incomplete request
+ *  -2   - parse failed
+ */
+struct http_head *http_head_init(int buffsize)
+{
+	struct http_head *http_head = NULL;
+	char *buffer = NULL;
+
+	http_head = malloc(sizeof(*http_head));
+	if (http_head == NULL) {
+		goto errout;
+	}
+	memset(http_head, 0, sizeof(*http_head));
+	INIT_LIST_HEAD(&http_head->field_head.list);
+	hash_init(http_head->field_map);
+
+	buffer = malloc(buffsize);
+	if (buffer == NULL) {
+		goto errout;
+	}
+
+	http_head->buff = buffer;
+	http_head->buff_size = buffsize;
+
+	return http_head;
+
+errout:
+	if (buffer) {
+		free(buffer);
+	}
+
+	if (http_head) {
+		free(http_head);
+	}
+
+	return NULL;
+}
+
+struct http_head_fields *http_head_first_fields(struct http_head *http_head)
+{
+	struct http_head_fields *first = NULL;
+	first = list_first_entry(&http_head->field_head.list, struct http_head_fields, list);
+
+	if (first->name == NULL && first->value == NULL) {
+		return NULL;
+	}
+
+	return first;
+}
+
+const char *http_head_get_fields_value(struct http_head *http_head, const char *name)
+{
+	unsigned long key;
+	struct http_head_fields *filed;
+
+	key = hash_string(name);
+	hash_for_each_possible(http_head->field_map, filed, node, key)
+	{
+		if (strncmp(filed->name, name, 128) == 0) {
+			return filed->value;
+		}
+	}
+
+	return NULL;
+}
+
+struct http_head_fields *http_head_next_fields(struct http_head_fields *fields)
+{
+	struct http_head_fields *next = NULL;
+	next = list_next_entry(fields, list);
+
+	if (next->name == NULL && next->value == NULL) {
+		return NULL;
+	}
+
+	return next;
+}
+
+int http_head_lookup_fields(struct http_head_fields *fields, const char **name, const char **value)
+{
+	if (fields == NULL) {
+		return -1;
+	}
+
+	if (name) {
+		*name = fields->name;
+	}
+
+	if (value) {
+		*value = fields->value;
+	}
+
+	return 0;
+}
+
+HTTP_METHOD http_head_get_method(struct http_head *http_head)
+{
+	return http_head->method;
+}
+
+const char *http_head_get_url(struct http_head *http_head)
+{
+	return http_head->url;
+}
+
+const char *http_head_get_httpversion(struct http_head *http_head)
+{
+	return http_head->version;
+}
+
+int http_head_get_httpcode(struct http_head *http_head)
+{
+	return http_head->code;
+}
+
+char *http_head_get_httpcode_msg(struct http_head *http_head)
+{
+	return http_head->code_msg;
+}
+
+HTTP_HEAD_TYPE http_head_get_head_type(struct http_head *http_head)
+{
+	return http_head->head_type;
+}
+
+char *http_head_get_data(struct http_head *http_head)
+{
+	return http_head->data;
+}
+
+int http_head_get_data_len(struct http_head *http_head)
+{
+	return http_head->data_len;
+}
+
+static int _http_head_add_fields(struct http_head *http_head, char *name, char *value)
+{
+	unsigned long key = 0;
+	struct http_head_fields *fields = NULL;
+	fields = malloc(sizeof(*fields));
+	if (fields == NULL) {
+		return -1;
+	}
+	memset(fields, 0, sizeof(*fields));
+
+	fields->name = name;
+	fields->value = value;
+
+	list_add_tail(&fields->list, &http_head->field_head.list);
+	key = hash_string(name);
+	hash_add(http_head->field_map, &fields->node, key);
+
+	return 0;
+}
+
+static int _http_head_parse_response(struct http_head *http_head, char *key, char *value)
+{
+	char *field_start = NULL;
+	char *tmp_ptr = NULL;
+	char *result = NULL;
+	char *ret_code = NULL;
+
+	if (strstr(key, "HTTP/") == NULL) {
+		return -1;
+	}
+
+	for (tmp_ptr = value; *tmp_ptr != 0; tmp_ptr++) {
+		if (field_start == NULL) {
+			field_start = tmp_ptr;
+		}
+
+		if (*tmp_ptr == ' ') {
+			*tmp_ptr = '\0';
+			if (ret_code == NULL) {
+				ret_code = field_start;
+			} else if (result == NULL) {
+				result = field_start;
+				break;
+			}
+
+			field_start = NULL;
+		}
+	}
+
+	if (field_start && result == NULL) {
+		result = field_start;
+	}
+
+	if (ret_code == NULL || result == NULL) {
+		return -1;
+	}
+
+	http_head->code = atol(ret_code);
+	http_head->code_msg = result;
+	http_head->version = key;
+	http_head->head_type = HTTP_HEAD_RESPONSE;
+
+	return 0;
+}
+
+static int _http_head_parse_request(struct http_head *http_head, char *key, char *value)
+{
+	int method = HTTP_METHOD_INVALID;
+	char *url = NULL;
+	char *version = NULL;
+	char *tmp_ptr = value;
+	char *field_start = NULL;
+
+	if (strncmp(key, "GET", sizeof("GET")) == 0) {
+		method = HTTP_METHOD_GET;
+	} else if (strncmp(key, "POST", sizeof("POST")) == 0) {
+		method = HTTP_METHOD_POST;
+	} else if (strncmp(key, "PUT", sizeof("PUT")) == 0) {
+		method = HTTP_METHOD_PUT;
+	} else if (strncmp(key, "DELETE", sizeof("DELETE")) == 0) {
+		method = HTTP_METHOD_DELETE;
+	} else if (strncmp(key, "TRACE", sizeof("TRACE")) == 0) {
+		method = HTTP_METHOD_TRACE;
+	} else if (strncmp(key, "CONNECT", sizeof("CONNECT")) == 0) {
+		method = HTTP_METHOD_CONNECT;
+	} else {
+		return _http_head_parse_response(http_head, key, value);
+	}
+
+	for (tmp_ptr = value; *tmp_ptr != 0; tmp_ptr++) {
+		if (field_start == NULL) {
+			field_start = tmp_ptr;
+		}
+		if (*tmp_ptr == ' ') {
+			*tmp_ptr = '\0';
+			if (url == NULL) {
+				url = field_start;
+			}
+
+			field_start = NULL;
+		}
+	}
+
+	if (field_start && version == NULL) {
+		version = field_start;
+	}
+
+	http_head->method = method;
+	http_head->url = url;
+	http_head->version = version;
+	http_head->head_type = HTTP_HEAD_REQUEST;
+
+	return 0;
+}
+
+static int _http_head_parse(struct http_head *http_head)
+{
+	int i = 0;
+	char *key = NULL;
+	char *value = NULL;
+	char *data;
+	int has_first_line = 0;
+
+	int inkey = 1;
+	int invalue = 0;
+
+	data = http_head->buff;
+	for (i = 0; i < http_head->head_len; i++, data++) {
+		if (inkey) {
+			if (key == NULL && *data != ' ' && *data != '\r' && *data != '\n') {
+				key = data;
+				continue;
+			}
+
+			if (*data == ':' || *data == ' ') {
+				*data = '\0';
+				inkey = 0;
+				invalue = 1;
+				continue;
+			}
+		}
+
+		if (invalue) {
+			if (value == NULL && *data != ' ') {
+				value = data;
+				continue;
+			}
+
+			if (*data == '\r' || *data == '\n') {
+				*data = '\0';
+				inkey = 1;
+				invalue = 0;
+			}
+		}
+
+		if (key && value && invalue == 0) {
+			if (has_first_line == 0) {
+				if (_http_head_parse_request(http_head, key, value) != 0) {
+					return -2;
+				}
+
+				has_first_line = 1;
+			} else {
+				if (_http_head_add_fields(http_head, key, value) != 0) {
+					return -2;
+				}
+			}
+
+			key = NULL;
+			value = NULL;
+			inkey = 1;
+			invalue = 0;
+		}
+	}
+
+	return 0;
+}
+
+int http_head_parse(struct http_head *http_head, const char *data, int data_len)
+{
+	int i = 0;
+	char *buff_end = NULL;
+	int left_size = 0;
+	int process_data_len = 0;
+
+	left_size = http_head->buff_size - http_head->buff_len;
+
+	if (left_size < data_len) {
+		return -3;
+	}
+
+	buff_end = http_head->buff + http_head->buff_len;
+	if (http_head->head_ok == 0) {
+		for (i = 0; i < data_len; i++, data++) {
+			*(buff_end + i) = *data;
+			if (*data == '\n') {
+				if (http_head->buff_len + i < 2) {
+					continue;
+				}
+
+				if (*(buff_end + i - 2) == '\n') {
+					http_head->head_ok = 1;
+					http_head->head_len = http_head->buff_len + i - 2;
+					i++;
+					buff_end += i;
+					data_len -= i;
+					data++;
+					if (_http_head_parse(http_head) != 0) {
+						return -2;
+					}
+
+					const char *content_len = NULL;
+					content_len = http_head_get_fields_value(http_head, "Content-Length");
+					if (content_len) {
+						http_head->expect_data_len = atol(content_len);
+					} else {
+						http_head->expect_data_len = 0;
+					}
+
+					if (http_head->expect_data_len < 0) {
+						return -2;
+					}
+
+					break;
+				}
+			}
+		}
+
+		process_data_len += i;
+		if (http_head->head_ok == 0) {
+			// Read data again */
+			http_head->buff_len += process_data_len;
+			return -1;
+		}
+	}
+
+	if (http_head->head_ok == 1) {
+		int get_data_len = (http_head->expect_data_len > data_len) ? data_len : http_head->expect_data_len;
+		if (http_head->data == NULL) {
+			http_head->data = buff_end;
+		}
+
+		memcpy(buff_end, data, get_data_len);
+		process_data_len += get_data_len;
+		http_head->data_len += get_data_len;
+	}
+
+	http_head->buff_len += process_data_len;
+	if (http_head->data_len < http_head->expect_data_len) {
+		return -1;
+	}
+
+	return process_data_len;
+}
+
+void http_head_destroy(struct http_head *http_head)
+{
+	struct http_head_fields *fields, *tmp;
+
+	list_for_each_entry_safe(fields, tmp, &http_head->field_head.list, list)
+	{
+		list_del(&fields->list);
+		free(fields);
+	}
+
+	if (http_head->buff) {
+		free(http_head->buff);
+	}
+
+	free(http_head);
+}
diff --git a/release/src/router/smartdns/src/http_parse.h b/release/src/router/smartdns/src/http_parse.h
index 250969e7d9..8aa66ae05c 100644
--- a/release/src/router/smartdns/src/http_parse.h
+++ b/release/src/router/smartdns/src/http_parse.h
@@ -1,87 +1,87 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef HTTP_PARSER_H
-#define HTTP_PARSER_H
-
-#ifdef __cpluscplus
-extern "C" {
-#endif
-
-struct http_head;
-struct http_head_fields;
-
-typedef enum HTTP_METHOD {
-	HTTP_METHOD_INVALID = 0,
-	HTTP_METHOD_GET,
-	HTTP_METHOD_HEAD,
-	HTTP_METHOD_POST,
-	HTTP_METHOD_PUT,
-	HTTP_METHOD_DELETE,
-	HTTP_METHOD_TRACE,
-	HTTP_METHOD_CONNECT,
-} HTTP_METHOD;
-
-typedef enum HTTP_HEAD_TYPE {
-	HTTP_HEAD_INVALID = 0,
-	HTTP_HEAD_REQUEST = 1,
-	HTTP_HEAD_RESPONSE = 2,
-} HTTP_HEAD_TYPE;
-
-struct http_head *http_head_init(int buffsize);
-
-HTTP_HEAD_TYPE http_head_get_head_type(struct http_head *http_head);
-
-HTTP_METHOD http_head_get_method(struct http_head *http_head);
-
-const char *http_head_get_url(struct http_head *http_head);
-
-const char *http_head_get_httpversion(struct http_head *http_head);
-
-int http_head_get_httpcode(struct http_head *http_head);
-
-char *http_head_get_httpcode_msg(struct http_head *http_head);
-
-char *http_head_get_data(struct http_head *http_head);
-
-int http_head_get_data_len(struct http_head *http_head);
-
-struct http_head_fields *http_head_first_fields(struct http_head *http_head);
-
-struct http_head_fields *http_head_next_fields(struct http_head_fields *fields);
-
-const char *http_head_get_fields_value(struct http_head *http_head, const char *name);
-
-int http_head_lookup_fields(struct http_head_fields *fields, const char **name, const char **value);
-
-/*
- * Returns:
- *  >=0  - success http data len
- *  -1   - Incomplete request
- *  -2   - parse failed
- *  -3   - buffer is small
- */
-int http_head_parse(struct http_head *http_head, const char *data, int data_len);
-
-void http_head_destroy(struct http_head *http_head);
-
-#ifdef __cpluscplus
-}
-#endif
-
-#endif // !HTTP_PARSER_H
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef HTTP_PARSER_H
+#define HTTP_PARSER_H
+
+#ifdef __cpluscplus
+extern "C" {
+#endif
+
+struct http_head;
+struct http_head_fields;
+
+typedef enum HTTP_METHOD {
+	HTTP_METHOD_INVALID = 0,
+	HTTP_METHOD_GET,
+	HTTP_METHOD_HEAD,
+	HTTP_METHOD_POST,
+	HTTP_METHOD_PUT,
+	HTTP_METHOD_DELETE,
+	HTTP_METHOD_TRACE,
+	HTTP_METHOD_CONNECT,
+} HTTP_METHOD;
+
+typedef enum HTTP_HEAD_TYPE {
+	HTTP_HEAD_INVALID = 0,
+	HTTP_HEAD_REQUEST = 1,
+	HTTP_HEAD_RESPONSE = 2,
+} HTTP_HEAD_TYPE;
+
+struct http_head *http_head_init(int buffsize);
+
+HTTP_HEAD_TYPE http_head_get_head_type(struct http_head *http_head);
+
+HTTP_METHOD http_head_get_method(struct http_head *http_head);
+
+const char *http_head_get_url(struct http_head *http_head);
+
+const char *http_head_get_httpversion(struct http_head *http_head);
+
+int http_head_get_httpcode(struct http_head *http_head);
+
+char *http_head_get_httpcode_msg(struct http_head *http_head);
+
+char *http_head_get_data(struct http_head *http_head);
+
+int http_head_get_data_len(struct http_head *http_head);
+
+struct http_head_fields *http_head_first_fields(struct http_head *http_head);
+
+struct http_head_fields *http_head_next_fields(struct http_head_fields *fields);
+
+const char *http_head_get_fields_value(struct http_head *http_head, const char *name);
+
+int http_head_lookup_fields(struct http_head_fields *fields, const char **name, const char **value);
+
+/*
+ * Returns:
+ *  >=0  - success http data len
+ *  -1   - Incomplete request
+ *  -2   - parse failed
+ *  -3   - buffer is small
+ */
+int http_head_parse(struct http_head *http_head, const char *data, int data_len);
+
+void http_head_destroy(struct http_head *http_head);
+
+#ifdef __cpluscplus
+}
+#endif
+
+#endif // !HTTP_PARSER_H
diff --git a/release/src/router/smartdns/src/include/art.h b/release/src/router/smartdns/src/include/art.h
index eb9ccf4f6f..fbdf307b4d 100644
--- a/release/src/router/smartdns/src/include/art.h
+++ b/release/src/router/smartdns/src/include/art.h
@@ -1,251 +1,251 @@
-/*
-Copyright (c) 2012, Armon Dadgar
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-    * Redistributions of source code must retain the above copyright
-      notice, this list of conditions and the following disclaimer.
-    * Redistributions in binary form must reproduce the above copyright
-      notice, this list of conditions and the following disclaimer in the
-      documentation and/or other materials provided with the distribution.
-    * Neither the name of the organization nor the
-      names of its contributors may be used to endorse or promote products
-      derived from this software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL ARMON DADGAR BE LIABLE FOR ANY
-DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
-ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-*/
-#include <stdint.h>
-#ifndef ART_H
-#define ART_H
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-#define NODE4   1
-#define NODE16  2
-#define NODE48  3
-#define NODE256 4
-
-#define MAX_PREFIX_LEN 10
-
-#if defined(__GNUC__) && !defined(__clang__)
-# if __STDC_VERSION__ >= 199901L && 402 == (__GNUC__ * 100 + __GNUC_MINOR__)
-/*
- * GCC 4.2.2's C99 inline keyword support is pretty broken; avoid. Introduced in
- * GCC 4.2.something, fixed in 4.3.0. So checking for specific major.minor of
- * 4.2 is fine.
- */
-#  define BROKEN_GCC_C99_INLINE
-# endif
-#endif
-
-typedef int(*art_callback)(void *data, const unsigned char *key, uint32_t key_len, void *value);
-
-/**
- * This struct is included as part
- * of all the various node sizes
- */
-typedef struct {
-    uint8_t type;
-    uint8_t num_children;
-    uint32_t partial_len;
-    unsigned char partial[MAX_PREFIX_LEN];
-} art_node;
-
-/**
- * Small node with only 4 children
- */
-typedef struct {
-    art_node n;
-    unsigned char keys[4];
-    art_node *children[4];
-} art_node4;
-
-/**
- * Node with 16 children
- */
-typedef struct {
-    art_node n;
-    unsigned char keys[16];
-    art_node *children[16];
-} art_node16;
-
-/**
- * Node with 48 children, but
- * a full 256 byte field.
- */
-typedef struct {
-    art_node n;
-    unsigned char keys[256];
-    art_node *children[48];
-} art_node48;
-
-/**
- * Full node with 256 children
- */
-typedef struct {
-    art_node n;
-    art_node *children[256];
-} art_node256;
-
-/**
- * Represents a leaf. These are
- * of arbitrary size, as they include the key.
- */
-typedef struct {
-    void *value;
-    uint32_t key_len;
-    unsigned char key[0];
-} art_leaf;
-
-/**
- * Main struct, points to root.
- */
-typedef struct {
-    art_node *root;
-    uint64_t size;
-} art_tree;
-
-/**
- * Initializes an ART tree
- * @return 0 on success.
- */
-int art_tree_init(art_tree *t);
-
-/**
- * DEPRECATED
- * Initializes an ART tree
- * @return 0 on success.
- */
-#define init_art_tree(...) art_tree_init(__VA_ARGS__)
-
-/**
- * Destroys an ART tree
- * @return 0 on success.
- */
-int art_tree_destroy(art_tree *t);
-
-/**
- * DEPRECATED
- * Initializes an ART tree
- * @return 0 on success.
- */
-#define destroy_art_tree(...) art_tree_destroy(__VA_ARGS__)
-
-/**
- * Returns the size of the ART tree.
- */
-#ifdef BROKEN_GCC_C99_INLINE
-# define art_size(t) ((t)->size)
-#else
-static inline uint64_t art_size(art_tree *t) {
-    return t->size;
-}
-#endif
-
-/**
- * Inserts a new value into the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @arg value Opaque value.
- * @return NULL if the item was newly inserted, otherwise
- * the old value pointer is returned.
- */
-void* art_insert(art_tree *t, const unsigned char *key, int key_len, void *value);
-
-/**
- * Deletes a value from the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-void* art_delete(art_tree *t, const unsigned char *key, int key_len);
-
-/**
- * Searches for a value in the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-void* art_search(const art_tree *t, const unsigned char *key, int key_len);
-
-/**
- * Searches substring for a value in the ART tree
- * @arg t The tree
- * @arg str The key
- * @arg str_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-void *art_substring(const art_tree *t, const unsigned char *str, int str_len, unsigned char *key, int *key_len);
-
-/**
- * Wakk substring for a value in the ART tree
- * @arg t The tree
- * @arg str The key
- * @arg str_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-typedef int (*walk_func)(unsigned char *key, uint32_t key_len, void *value, void *arg);
-void art_substring_walk(const art_tree *t, const unsigned char *str, int str_len, walk_func func, void *arg);
-
-/**
- * Returns the minimum valued leaf
- * @return The minimum leaf or NULL
- */
-art_leaf* art_minimum(art_tree *t);
-
-/**
- * Returns the maximum valued leaf
- * @return The maximum leaf or NULL
- */
-art_leaf* art_maximum(art_tree *t);
-
-/**
- * Iterates through the entries pairs in the map,
- * invoking a callback for each. The call back gets a
- * key, value for each and returns an integer stop value.
- * If the callback returns non-zero, then the iteration stops.
- * @arg t The tree to iterate over
- * @arg cb The callback function to invoke
- * @arg data Opaque handle passed to the callback
- * @return 0 on success, or the return of the callback.
- */
-int art_iter(art_tree *t, art_callback cb, void *data);
-
-/**
- * Iterates through the entries pairs in the map,
- * invoking a callback for each that matches a given prefix.
- * The call back gets a key, value for each and returns an integer stop value.
- * If the callback returns non-zero, then the iteration stops.
- * @arg t The tree to iterate over
- * @arg prefix The prefix of keys to read
- * @arg prefix_len The length of the prefix
- * @arg cb The callback function to invoke
- * @arg data Opaque handle passed to the callback
- * @return 0 on success, or the return of the callback.
- */
-int art_iter_prefix(art_tree *t, const unsigned char *prefix, int prefix_len, art_callback cb, void *data);
-
-#ifdef __cplusplus
-}
-#endif
-
-#endif
+/*
+Copyright (c) 2012, Armon Dadgar
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the organization nor the
+      names of its contributors may be used to endorse or promote products
+      derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL ARMON DADGAR BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+#include <stdint.h>
+#ifndef ART_H
+#define ART_H
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define NODE4   1
+#define NODE16  2
+#define NODE48  3
+#define NODE256 4
+
+#define MAX_PREFIX_LEN 10
+
+#if defined(__GNUC__) && !defined(__clang__)
+# if __STDC_VERSION__ >= 199901L && 402 == (__GNUC__ * 100 + __GNUC_MINOR__)
+/*
+ * GCC 4.2.2's C99 inline keyword support is pretty broken; avoid. Introduced in
+ * GCC 4.2.something, fixed in 4.3.0. So checking for specific major.minor of
+ * 4.2 is fine.
+ */
+#  define BROKEN_GCC_C99_INLINE
+# endif
+#endif
+
+typedef int(*art_callback)(void *data, const unsigned char *key, uint32_t key_len, void *value);
+
+/**
+ * This struct is included as part
+ * of all the various node sizes
+ */
+typedef struct {
+    uint8_t type;
+    uint8_t num_children;
+    uint32_t partial_len;
+    unsigned char partial[MAX_PREFIX_LEN];
+} art_node;
+
+/**
+ * Small node with only 4 children
+ */
+typedef struct {
+    art_node n;
+    unsigned char keys[4];
+    art_node *children[4];
+} art_node4;
+
+/**
+ * Node with 16 children
+ */
+typedef struct {
+    art_node n;
+    unsigned char keys[16];
+    art_node *children[16];
+} art_node16;
+
+/**
+ * Node with 48 children, but
+ * a full 256 byte field.
+ */
+typedef struct {
+    art_node n;
+    unsigned char keys[256];
+    art_node *children[48];
+} art_node48;
+
+/**
+ * Full node with 256 children
+ */
+typedef struct {
+    art_node n;
+    art_node *children[256];
+} art_node256;
+
+/**
+ * Represents a leaf. These are
+ * of arbitrary size, as they include the key.
+ */
+typedef struct {
+    void *value;
+    uint32_t key_len;
+    unsigned char key[0];
+} art_leaf;
+
+/**
+ * Main struct, points to root.
+ */
+typedef struct {
+    art_node *root;
+    uint64_t size;
+} art_tree;
+
+/**
+ * Initializes an ART tree
+ * @return 0 on success.
+ */
+int art_tree_init(art_tree *t);
+
+/**
+ * DEPRECATED
+ * Initializes an ART tree
+ * @return 0 on success.
+ */
+#define init_art_tree(...) art_tree_init(__VA_ARGS__)
+
+/**
+ * Destroys an ART tree
+ * @return 0 on success.
+ */
+int art_tree_destroy(art_tree *t);
+
+/**
+ * DEPRECATED
+ * Initializes an ART tree
+ * @return 0 on success.
+ */
+#define destroy_art_tree(...) art_tree_destroy(__VA_ARGS__)
+
+/**
+ * Returns the size of the ART tree.
+ */
+#ifdef BROKEN_GCC_C99_INLINE
+# define art_size(t) ((t)->size)
+#else
+static inline uint64_t art_size(art_tree *t) {
+    return t->size;
+}
+#endif
+
+/**
+ * Inserts a new value into the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @arg value Opaque value.
+ * @return NULL if the item was newly inserted, otherwise
+ * the old value pointer is returned.
+ */
+void* art_insert(art_tree *t, const unsigned char *key, int key_len, void *value);
+
+/**
+ * Deletes a value from the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+void* art_delete(art_tree *t, const unsigned char *key, int key_len);
+
+/**
+ * Searches for a value in the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+void* art_search(const art_tree *t, const unsigned char *key, int key_len);
+
+/**
+ * Searches substring for a value in the ART tree
+ * @arg t The tree
+ * @arg str The key
+ * @arg str_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+void *art_substring(const art_tree *t, const unsigned char *str, int str_len, unsigned char *key, int *key_len);
+
+/**
+ * Wakk substring for a value in the ART tree
+ * @arg t The tree
+ * @arg str The key
+ * @arg str_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+typedef int (*walk_func)(unsigned char *key, uint32_t key_len, void *value, void *arg);
+void art_substring_walk(const art_tree *t, const unsigned char *str, int str_len, walk_func func, void *arg);
+
+/**
+ * Returns the minimum valued leaf
+ * @return The minimum leaf or NULL
+ */
+art_leaf* art_minimum(art_tree *t);
+
+/**
+ * Returns the maximum valued leaf
+ * @return The maximum leaf or NULL
+ */
+art_leaf* art_maximum(art_tree *t);
+
+/**
+ * Iterates through the entries pairs in the map,
+ * invoking a callback for each. The call back gets a
+ * key, value for each and returns an integer stop value.
+ * If the callback returns non-zero, then the iteration stops.
+ * @arg t The tree to iterate over
+ * @arg cb The callback function to invoke
+ * @arg data Opaque handle passed to the callback
+ * @return 0 on success, or the return of the callback.
+ */
+int art_iter(art_tree *t, art_callback cb, void *data);
+
+/**
+ * Iterates through the entries pairs in the map,
+ * invoking a callback for each that matches a given prefix.
+ * The call back gets a key, value for each and returns an integer stop value.
+ * If the callback returns non-zero, then the iteration stops.
+ * @arg t The tree to iterate over
+ * @arg prefix The prefix of keys to read
+ * @arg prefix_len The length of the prefix
+ * @arg cb The callback function to invoke
+ * @arg data Opaque handle passed to the callback
+ * @return 0 on success, or the return of the callback.
+ */
+int art_iter_prefix(art_tree *t, const unsigned char *prefix, int prefix_len, art_callback cb, void *data);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif
diff --git a/release/src/router/smartdns/src/include/conf.h b/release/src/router/smartdns/src/include/conf.h
index 81159361b7..d0c73f9e32 100644
--- a/release/src/router/smartdns/src/include/conf.h
+++ b/release/src/router/smartdns/src/include/conf.h
@@ -1,142 +1,141 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-
-#ifndef _GENERIC_CONF_H
-#define _GENERIC_CONF_H
-
-#include <unistd.h>
-
-#define MAX_LINE_LEN 1024
-#define MAX_KEY_LEN 64
-#define CONF_INT_MAX (~(1 << 31))
-#define CONF_INT_MIN (1 << 31)
-
-#define CONF_RET_OK     0
-#define CONF_RET_ERR   -1
-#define CONF_RET_WARN  -2
-#define CONF_RET_NOENT -3
-
-struct config_item {
-	const char *item;
-	int (*item_func)(const char *item, void *data, int argc, char *argv[]);
-	void *data;
-};
-
-struct config_item_custom {
-	void *custom_data;
-	int (*custom_func)(void *data, int argc, char *argv[]);
-};
-
-struct config_item_int {
-	int *data;
-	int min;
-	int max;
-};
-
-struct config_item_string {
-	char *data;
-	size_t size;
-};
-
-struct config_item_yesno {
-	int *data;
-};
-
-struct config_item_size {
-	size_t *data;
-	size_t min;
-	size_t max;
-};
-
-#define CONF_INT(key, value, min_value, max_value)                                                                                                             \
-	{                                                                                                                                                          \
-		key, conf_int, &(struct config_item_int)                                                                                                               \
-		{                                                                                                                                                      \
-			.data = value, .min = min_value, .max = max_value                                                                                                  \
-		}                                                                                                                                                      \
-	}
-#define CONF_STRING(key, value, len_value)                                                                                                                     \
-	{                                                                                                                                                          \
-		key, conf_string, &(struct config_item_string)                                                                                                         \
-		{                                                                                                                                                      \
-			.data = value, .size = len_value                                                                                                                   \
-		}                                                                                                                                                      \
-	}
-#define CONF_YESNO(key, value)                                                                                                                                 \
-	{                                                                                                                                                          \
-		key, conf_yesno, &(struct config_item_yesno)                                                                                                           \
-		{                                                                                                                                                      \
-			.data = value                                                                                                                                      \
-		}                                                                                                                                                      \
-	}
-#define CONF_SIZE(key, value, min_value, max_value)                                                                                                            \
-	{                                                                                                                                                          \
-		key, conf_size, &(struct config_item_size)                                                                                                             \
-		{                                                                                                                                                      \
-			.data = value, .min = min_value, .max = max_value                                                                                                  \
-		}                                                                                                                                                      \
-	}
-/*
- * func: int (*func)(void *data, int argc, char *argv[]);
- */
-#define CONF_CUSTOM(key, func, data)                                                                                                                           \
-	{                                                                                                                                                          \
-		key, conf_custom, &(struct config_item_custom)                                                                                                         \
-		{                                                                                                                                                      \
-			.custom_data = data, .custom_func = func                                                                                                           \
-		}                                                                                                                                                      \
-	}
-
-#define CONF_END()                                                                                                                                             \
-	{                                                                                                                                                          \
-		NULL, NULL, NULL                                                                                                                                                \
-	}
-
-extern int conf_custom(const char *item, void *data, int argc, char *argv[]);
-
-extern int conf_int(const char *item, void *data, int argc, char *argv[]);
-
-extern int conf_string(const char *item, void *data, int argc, char *argv[]);
-
-extern int conf_yesno(const char *item, void *data, int argc, char *argv[]);
-
-extern int conf_size(const char *item, void *data, int argc, char *argv[]);
-
-/*
- * Example:
- *  int num = 0;
- *
- *  struct config_item itmes [] = {
- *       CONF_INT("CONF_NUM", &num, -1, 10),
- *       CONF_END();
- *  }
- *
- *  load_conf(file, items);
- *
- */
-
-typedef int(conf_error_handler)(const char *file, int lineno, int ret);
-
-int load_conf(const char *file, struct config_item items[], conf_error_handler handler);
-
-void load_exit(void);
-
-const char *conf_get_conf_file(void);
-
-#endif // !_GENERIC_CONF_H
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef _GENERIC_CONF_H
+#define _GENERIC_CONF_H
+
+#include <unistd.h>
+
+#define MAX_LINE_LEN 1024
+#define MAX_KEY_LEN 64
+#define CONF_INT_MAX (~(1 << 31))
+#define CONF_INT_MIN (1 << 31)
+
+#define CONF_RET_OK 0
+#define CONF_RET_ERR -1
+#define CONF_RET_WARN -2
+#define CONF_RET_NOENT -3
+
+struct config_item {
+	const char *item;
+	int (*item_func)(const char *item, void *data, int argc, char *argv[]);
+	void *data;
+};
+
+struct config_item_custom {
+	void *custom_data;
+	int (*custom_func)(void *data, int argc, char *argv[]);
+};
+
+struct config_item_int {
+	int *data;
+	int min;
+	int max;
+};
+
+struct config_item_string {
+	char *data;
+	size_t size;
+};
+
+struct config_item_yesno {
+	int *data;
+};
+
+struct config_item_size {
+	size_t *data;
+	size_t min;
+	size_t max;
+};
+
+#define CONF_INT(key, value, min_value, max_value)                                                                     \
+	{                                                                                                                  \
+		key, conf_int, &(struct config_item_int)                                                                       \
+		{                                                                                                              \
+			.data = value, .min = min_value, .max = max_value                                                          \
+		}                                                                                                              \
+	}
+#define CONF_STRING(key, value, len_value)                                                                             \
+	{                                                                                                                  \
+		key, conf_string, &(struct config_item_string)                                                                 \
+		{                                                                                                              \
+			.data = value, .size = len_value                                                                           \
+		}                                                                                                              \
+	}
+#define CONF_YESNO(key, value)                                                                                         \
+	{                                                                                                                  \
+		key, conf_yesno, &(struct config_item_yesno)                                                                   \
+		{                                                                                                              \
+			.data = value                                                                                              \
+		}                                                                                                              \
+	}
+#define CONF_SIZE(key, value, min_value, max_value)                                                                    \
+	{                                                                                                                  \
+		key, conf_size, &(struct config_item_size)                                                                     \
+		{                                                                                                              \
+			.data = value, .min = min_value, .max = max_value                                                          \
+		}                                                                                                              \
+	}
+/*
+ * func: int (*func)(void *data, int argc, char *argv[]);
+ */
+#define CONF_CUSTOM(key, func, data)                                                                                   \
+	{                                                                                                                  \
+		key, conf_custom, &(struct config_item_custom)                                                                 \
+		{                                                                                                              \
+			.custom_data = data, .custom_func = func                                                                   \
+		}                                                                                                              \
+	}
+
+#define CONF_END()                                                                                                     \
+	{                                                                                                                  \
+		NULL, NULL, NULL                                                                                               \
+	}
+
+extern int conf_custom(const char *item, void *data, int argc, char *argv[]);
+
+extern int conf_int(const char *item, void *data, int argc, char *argv[]);
+
+extern int conf_string(const char *item, void *data, int argc, char *argv[]);
+
+extern int conf_yesno(const char *item, void *data, int argc, char *argv[]);
+
+extern int conf_size(const char *item, void *data, int argc, char *argv[]);
+
+/*
+ * Example:
+ *  int num = 0;
+ *
+ *  struct config_item itmes [] = {
+ *       CONF_INT("CONF_NUM", &num, -1, 10),
+ *       CONF_END();
+ *  }
+ *
+ *  load_conf(file, items);
+ *
+ */
+
+typedef int(conf_error_handler)(const char *file, int lineno, int ret);
+
+int load_conf(const char *file, struct config_item items[], conf_error_handler handler);
+
+void load_exit(void);
+
+const char *conf_get_conf_file(void);
+
+#endif // !_GENERIC_CONF_H
diff --git a/release/src/router/smartdns/src/include/radix.h b/release/src/router/smartdns/src/include/radix.h
index adb5ab1278..a8bdbe765e 100644
--- a/release/src/router/smartdns/src/include/radix.h
+++ b/release/src/router/smartdns/src/include/radix.h
@@ -1,162 +1,162 @@
-/*
- * Copyright (c) 1999-2000
- * 
- * The Regents of the University of Michigan ("The Regents") and
- * Merit Network, Inc. All rights reserved.  Redistribution and use
- * in source and binary forms, with or without modification, are
- * permitted provided that the following conditions are met:
- * 
- * 1. Redistributions of source code must retain the above 
- * copyright notice, this list of conditions and the 
- * following disclaimer.
- * 
- * 2. Redistributions in binary form must reproduce the above 
- * copyright notice, this list of conditions and the 
- * following disclaimer in the documentation and/or other 
- * materials provided with the distribution.
- * 
- * 3. All advertising materials mentioning features or use of 
- * this software must display the following acknowledgement:
- * 
- *   This product includes software developed by the University of
- *   Michigan, Merit Network, Inc., and their contributors.
- * 
- * 4. Neither the name of the University, Merit Network, nor the
- * names of their contributors may be used to endorse or 
- * promote products derived from this software without 
- * specific prior written permission.
- * 
- * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS"
- * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
- * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
- * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL TH E REGENTS
- * OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
- * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HO WEVER CAUSED
- * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
- * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
- * POSSIBILITY OF SUCH DAMAGE.
- */
-/*
- * Portions Copyright (c) 2004,2005 Damien Miller <djm@mindrot.org>
- *
- * Permission to use, copy, modify, and distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
- * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
- * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
- * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
- */
-
-/* $Id: radix.h,v 1.9 2007/10/24 06:03:08 djm Exp $ */
-
-#ifndef _RADIX_H
-#define _RADIX_H
-
-#if defined(_MSC_VER)
-#include <winsock2.h>
-#include <ws2tcpip.h>
-#else
-# include <sys/types.h>
-# include <sys/socket.h>
-# include <netinet/in.h>
-# include <arpa/inet.h>
-# include <netdb.h>
-#endif
-
-#if defined(_MSC_VER)
-# define snprintf _snprintf
-typedef unsigned __int8		u_int8_t;
-typedef unsigned __int16	u_int16_t;
-typedef unsigned __int32	u_int32_t;
-const char *inet_ntop(int af, const void *src, char *dst, size_t size);
-size_t strlcpy(char *dst, const char *src, size_t size);
-#endif
-
-/*
- * Originally from MRT include/mrt.h
- * $MRTId: mrt.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
- */
-typedef struct _prefix_t {
-	u_int family;			/* AF_INET | AF_INET6 */
-	u_int bitlen;			/* same as mask? */
-	int ref_count;			/* reference count */
-	union {
-		struct in_addr sin;
-		struct in6_addr sin6;
-	} add;
-} prefix_t;
-
-void Deref_Prefix(prefix_t *prefix);
-
-/*
- * Originally from MRT include/radix.h
- * $MRTId: radix.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
- */
-typedef struct _radix_node_t {
-	u_int bit;			/* flag if this node used */
-	prefix_t *prefix;		/* who we are in radix tree */
-	struct _radix_node_t *l, *r;	/* left and right children */
-	struct _radix_node_t *parent;	/* may be used */
-	void *data;			/* pointer to data */
-} radix_node_t;
-
-typedef struct _radix_tree_t {
-	radix_node_t *head;
-	u_int maxbits;			/* for IP, 32 bit addresses */
-	int num_active_node;		/* for debug purpose */
-} radix_tree_t;
-
-/* Type of callback function */
-typedef void (*rdx_cb_t)(radix_node_t *, void *);
-
-radix_tree_t *New_Radix(void);
-void Destroy_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx);
-radix_node_t *radix_lookup(radix_tree_t *radix, prefix_t *prefix);
-void radix_remove(radix_tree_t *radix, radix_node_t *node);
-radix_node_t *radix_search_exact(radix_tree_t *radix, prefix_t *prefix);
-radix_node_t *radix_search_best(radix_tree_t *radix, prefix_t *prefix);
-void radix_process(radix_tree_t *radix, rdx_cb_t func, void *cbctx);
-
-#define RADIX_MAXBITS 128
-
-#define RADIX_WALK(Xhead, Xnode) \
-	do { \
-		radix_node_t *Xstack[RADIX_MAXBITS+1]; \
-		radix_node_t **Xsp = Xstack; \
-		radix_node_t *Xrn = (Xhead); \
-		while ((Xnode = Xrn)) { \
-			if (Xnode->prefix)
-
-#define RADIX_WALK_END \
-			if (Xrn->l) { \
-				if (Xrn->r) { \
-					*Xsp++ = Xrn->r; \
-				} \
-				Xrn = Xrn->l; \
-			} else if (Xrn->r) { \
-				Xrn = Xrn->r; \
-			} else if (Xsp != Xstack) { \
-				Xrn = *(--Xsp); \
-			} else { \
-				Xrn = (radix_node_t *) 0; \
-			} \
-		} \
-	} while (0)
-
-/* Local additions */
-
-prefix_t *prefix_pton(const char *string, long len, prefix_t *prefix, const char **errmsg);
-prefix_t *prefix_from_blob(unsigned char *blob, int len, int prefixlen, prefix_t *prefix);
-const char *prefix_addr_ntop(prefix_t *prefix, char *buf, size_t len);
-const char *prefix_ntop(prefix_t *prefix, char *buf, size_t len);
-
-#endif /* _RADIX_H */
-
+/*
+ * Copyright (c) 1999-2000
+ * 
+ * The Regents of the University of Michigan ("The Regents") and
+ * Merit Network, Inc. All rights reserved.  Redistribution and use
+ * in source and binary forms, with or without modification, are
+ * permitted provided that the following conditions are met:
+ * 
+ * 1. Redistributions of source code must retain the above 
+ * copyright notice, this list of conditions and the 
+ * following disclaimer.
+ * 
+ * 2. Redistributions in binary form must reproduce the above 
+ * copyright notice, this list of conditions and the 
+ * following disclaimer in the documentation and/or other 
+ * materials provided with the distribution.
+ * 
+ * 3. All advertising materials mentioning features or use of 
+ * this software must display the following acknowledgement:
+ * 
+ *   This product includes software developed by the University of
+ *   Michigan, Merit Network, Inc., and their contributors.
+ * 
+ * 4. Neither the name of the University, Merit Network, nor the
+ * names of their contributors may be used to endorse or 
+ * promote products derived from this software without 
+ * specific prior written permission.
+ * 
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS"
+ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+ * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+ * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL TH E REGENTS
+ * OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+ * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HO WEVER CAUSED
+ * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
+ * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+/*
+ * Portions Copyright (c) 2004,2005 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/* $Id: radix.h,v 1.9 2007/10/24 06:03:08 djm Exp $ */
+
+#ifndef _RADIX_H
+#define _RADIX_H
+
+#if defined(_MSC_VER)
+#include <winsock2.h>
+#include <ws2tcpip.h>
+#else
+# include <sys/types.h>
+# include <sys/socket.h>
+# include <netinet/in.h>
+# include <arpa/inet.h>
+# include <netdb.h>
+#endif
+
+#if defined(_MSC_VER)
+# define snprintf _snprintf
+typedef unsigned __int8		u_int8_t;
+typedef unsigned __int16	u_int16_t;
+typedef unsigned __int32	u_int32_t;
+const char *inet_ntop(int af, const void *src, char *dst, size_t size);
+size_t strlcpy(char *dst, const char *src, size_t size);
+#endif
+
+/*
+ * Originally from MRT include/mrt.h
+ * $MRTId: mrt.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
+ */
+typedef struct _prefix_t {
+	u_int family;			/* AF_INET | AF_INET6 */
+	u_int bitlen;			/* same as mask? */
+	int ref_count;			/* reference count */
+	union {
+		struct in_addr sin;
+		struct in6_addr sin6;
+	} add;
+} prefix_t;
+
+void Deref_Prefix(prefix_t *prefix);
+
+/*
+ * Originally from MRT include/radix.h
+ * $MRTId: radix.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
+ */
+typedef struct _radix_node_t {
+	u_int bit;			/* flag if this node used */
+	prefix_t *prefix;		/* who we are in radix tree */
+	struct _radix_node_t *l, *r;	/* left and right children */
+	struct _radix_node_t *parent;	/* may be used */
+	void *data;			/* pointer to data */
+} radix_node_t;
+
+typedef struct _radix_tree_t {
+	radix_node_t *head;
+	u_int maxbits;			/* for IP, 32 bit addresses */
+	int num_active_node;		/* for debug purpose */
+} radix_tree_t;
+
+/* Type of callback function */
+typedef void (*rdx_cb_t)(radix_node_t *, void *);
+
+radix_tree_t *New_Radix(void);
+void Destroy_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx);
+radix_node_t *radix_lookup(radix_tree_t *radix, prefix_t *prefix);
+void radix_remove(radix_tree_t *radix, radix_node_t *node);
+radix_node_t *radix_search_exact(radix_tree_t *radix, prefix_t *prefix);
+radix_node_t *radix_search_best(radix_tree_t *radix, prefix_t *prefix);
+void radix_process(radix_tree_t *radix, rdx_cb_t func, void *cbctx);
+
+#define RADIX_MAXBITS 128
+
+#define RADIX_WALK(Xhead, Xnode) \
+	do { \
+		radix_node_t *Xstack[RADIX_MAXBITS+1]; \
+		radix_node_t **Xsp = Xstack; \
+		radix_node_t *Xrn = (Xhead); \
+		while ((Xnode = Xrn)) { \
+			if (Xnode->prefix)
+
+#define RADIX_WALK_END \
+			if (Xrn->l) { \
+				if (Xrn->r) { \
+					*Xsp++ = Xrn->r; \
+				} \
+				Xrn = Xrn->l; \
+			} else if (Xrn->r) { \
+				Xrn = Xrn->r; \
+			} else if (Xsp != Xstack) { \
+				Xrn = *(--Xsp); \
+			} else { \
+				Xrn = (radix_node_t *) 0; \
+			} \
+		} \
+	} while (0)
+
+/* Local additions */
+
+prefix_t *prefix_pton(const char *string, long len, prefix_t *prefix, const char **errmsg);
+prefix_t *prefix_from_blob(unsigned char *blob, int len, int prefixlen, prefix_t *prefix);
+const char *prefix_addr_ntop(prefix_t *prefix, char *buf, size_t len);
+const char *prefix_ntop(prefix_t *prefix, char *buf, size_t len);
+
+#endif /* _RADIX_H */
+
diff --git a/release/src/router/smartdns/src/include/rbtree.h b/release/src/router/smartdns/src/include/rbtree.h
index c89e8ee845..96a49c57fa 100644
--- a/release/src/router/smartdns/src/include/rbtree.h
+++ b/release/src/router/smartdns/src/include/rbtree.h
@@ -1,305 +1,305 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef _GENERIC_RBTREE_H
-#define _GENERIC_RBTREE_H
-
-#include <stddef.h>
-
-struct rb_node {
-	unsigned long __rb_parent_color;
-	struct rb_node *rb_right;
-	struct rb_node *rb_left;
-} __attribute__((aligned(sizeof(long))));
-/* The alignment might seem pointless, but allegedly CRIS needs it */
-
-struct rb_root {
-	struct rb_node *rb_node;
-};
-
-#define rb_parent(r) ((struct rb_node *)((r)->__rb_parent_color & ~3))
-
-#define RB_ROOT                                                                                                                                                \
-	(struct rb_root)                                                                                                                                           \
-	{                                                                                                                                                          \
-		NULL,                                                                                                                                                  \
-	}
-#define rb_entry(ptr, type, member) container_of(ptr, type, member)
-
-#define RB_EMPTY_ROOT(root) ((root)->rb_node == NULL)
-
-/* 'empty' nodes are nodes that are known not to be inserted in an rbtree */
-#define RB_EMPTY_NODE(node) ((node)->__rb_parent_color == (unsigned long)(node))
-#define RB_CLEAR_NODE(node) ((node)->__rb_parent_color = (unsigned long)(node))
-
-extern void rb_insert_color(struct rb_node *, struct rb_root *);
-extern void rb_erase(struct rb_node *, struct rb_root *);
-
-/* Find logical next and previous nodes in a tree */
-extern struct rb_node *rb_next(const struct rb_node *);
-extern struct rb_node *rb_prev(const struct rb_node *);
-extern struct rb_node *rb_first(const struct rb_root *);
-extern struct rb_node *rb_last(const struct rb_root *);
-
-/* Postorder iteration - always visit the parent after its children */
-extern struct rb_node *rb_first_postorder(const struct rb_root *);
-extern struct rb_node *rb_next_postorder(const struct rb_node *);
-
-/* Fast replacement of a single node without remove/rebalance/add/rebalance */
-extern void rb_replace_node(struct rb_node *victim, struct rb_node *new_node, struct rb_root *root);
-
-static inline void rb_link_node(struct rb_node *node, struct rb_node *parent, struct rb_node **rb_link)
-{
-	node->__rb_parent_color = (unsigned long)parent;
-	node->rb_left = node->rb_right = NULL;
-
-	*rb_link = node;
-}
-
-#define rb_entry_safe(ptr, type, member)                                                                                                                       \
-	({                                                                                                                                                         \
-		typeof(ptr) ____ptr = (ptr);                                                                                                                           \
-		____ptr ? rb_entry(____ptr, type, member) : NULL;                                                                                                      \
-	})
-
-/*
- * Handy for checking that we are not deleting an entry that is
- * already in a list, found in block/{blk-throttle,cfq-iosched}.c,
- * probably should be moved to lib/rbtree.c...
- */
-static inline void rb_erase_init(struct rb_node *n, struct rb_root *root)
-{
-	rb_erase(n, root);
-	RB_CLEAR_NODE(n);
-}
-
-
-/*
- * Please note - only struct rb_augment_callbacks and the prototypes for
- * rb_insert_augmented() and rb_erase_augmented() are intended to be public.
- * The rest are implementation details you are not expected to depend on.
- *
- * See Documentation/rbtree.txt for documentation and samples.
- */
-
-struct rb_augment_callbacks {
-	void (*propagate)(struct rb_node *node, struct rb_node *stop);
-	void (*copy)(struct rb_node *old_node, struct rb_node *new_node);
-	void (*rotate)(struct rb_node *old_node, struct rb_node *new_node);
-};
-
-extern void __rb_insert_augmented(struct rb_node *node, struct rb_root *root,
-	void (*augment_rotate)(struct rb_node *old_node, struct rb_node *new_node));
-/*
- * Fixup the rbtree and update the augmented information when rebalancing.
- *
- * On insertion, the user must update the augmented information on the path
- * leading to the inserted node, then call rb_link_node() as usual and
- * rb_augment_inserted() instead of the usual rb_insert_color() call.
- * If rb_augment_inserted() rebalances the rbtree, it will callback into
- * a user provided function to update the augmented information on the
- * affected subtrees.
- */
-static inline void
-rb_insert_augmented(struct rb_node *node, struct rb_root *root,
-		    const struct rb_augment_callbacks *augment)
-{
-	__rb_insert_augmented(node, root, augment->rotate);
-}
-
-#define RB_DECLARE_CALLBACKS(rbstatic, rbname, rbstruct, rbfield,	\
-			     rbtype, rbaugmented, rbcompute)		\
-static inline void							\
-rbname ## _propagate(struct rb_node *rb, struct rb_node *stop)		\
-{									\
-	while (rb != stop) {						\
-		rbstruct *node = rb_entry(rb, rbstruct, rbfield);	\
-		rbtype augmented = rbcompute(node);			\
-		if (node->rbaugmented == augmented)			\
-			break;						\
-		node->rbaugmented = augmented;				\
-		rb = rb_parent(&node->rbfield);				\
-	}								\
-}									\
-static inline void							\
-rbname ## _copy(struct rb_node *rb_old, struct rb_node *rb_new)		\
-{									\
-	rbstruct *old_node = rb_entry(rb_old, rbstruct, rbfield);		\
-	rbstruct *new_node = rb_entry(rb_new, rbstruct, rbfield);		\
-	new_node->rbaugmented = old_node->rbaugmented;				\
-}									\
-static void								\
-rbname ## _rotate(struct rb_node *rb_old, struct rb_node *rb_new)	\
-{									\
-	rbstruct *old_node = rb_entry(rb_old, rbstruct, rbfield);		\
-	rbstruct *new_node = rb_entry(rb_new, rbstruct, rbfield);		\
-	new_node->rbaugmented = old_node->rbaugmented;				\
-	old_node->rbaugmented = rbcompute(old_node);				\
-}									\
-rbstatic const struct rb_augment_callbacks rbname = {			\
-	rbname ## _propagate, rbname ## _copy, rbname ## _rotate	\
-};
-
-
-#define	RB_RED		0
-#define	RB_BLACK	1
-
-#define __rb_parent(pc)    ((struct rb_node *)(pc & ~3))
-
-#define __rb_color(pc)     ((pc) & 1)
-#define __rb_is_black(pc)  __rb_color(pc)
-#define __rb_is_red(pc)    (!__rb_color(pc))
-#define rb_color(rb)       __rb_color((rb)->__rb_parent_color)
-#define rb_is_red(rb)      __rb_is_red((rb)->__rb_parent_color)
-#define rb_is_black(rb)    __rb_is_black((rb)->__rb_parent_color)
-
-static inline void rb_set_parent(struct rb_node *rb, struct rb_node *p)
-{
-	rb->__rb_parent_color = rb_color(rb) | (unsigned long)p;
-}
-
-static inline void rb_set_parent_color(struct rb_node *rb,
-				       struct rb_node *p, int color)
-{
-	rb->__rb_parent_color = (unsigned long)p | color;
-}
-
-static inline void
-__rb_change_child(struct rb_node *old_node, struct rb_node *new_node,
-		  struct rb_node *parent, struct rb_root *root)
-{
-	if (parent) {
-		if (parent->rb_left == old_node)
-			parent->rb_left = new_node;
-		else
-			parent->rb_right = new_node;
-	} else
-		root->rb_node = new_node;
-}
-
-extern void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
-	void (*augment_rotate)(struct rb_node *old_node, struct rb_node *new_node));
-
-static inline struct rb_node *
-__rb_erase_augmented(struct rb_node *node, struct rb_root *root,
-		     const struct rb_augment_callbacks *augment)
-{
-	struct rb_node *child = node->rb_right, *tmp = node->rb_left;
-	struct rb_node *parent, *rebalance;
-	unsigned long pc;
-
-	if (!tmp) {
-		/*
-		 * Case 1: node to erase has no more than 1 child (easy!)
-		 *
-		 * Note that if there is one child it must be red due to 5)
-		 * and node must be black due to 4). We adjust colors locally
-		 * so as to bypass __rb_erase_color() later on.
-		 */
-		pc = node->__rb_parent_color;
-		parent = __rb_parent(pc);
-		__rb_change_child(node, child, parent, root);
-		if (child) {
-			child->__rb_parent_color = pc;
-			rebalance = NULL;
-		} else
-			rebalance = __rb_is_black(pc) ? parent : NULL;
-		tmp = parent;
-	} else if (!child) {
-		/* Still case 1, but this time the child is node->rb_left */
-		tmp->__rb_parent_color = pc = node->__rb_parent_color;
-		parent = __rb_parent(pc);
-		__rb_change_child(node, tmp, parent, root);
-		rebalance = NULL;
-		tmp = parent;
-	} else {
-		struct rb_node *successor = child, *child2;
-		tmp = child->rb_left;
-		if (!tmp) {
-			/*
-			 * Case 2: node's successor is its right child
-			 *
-			 *    (n)          (s)
-			 *    / \          / \
-			 *  (x) (s)  ->  (x) (c)
-			 *        \
-			 *        (c)
-			 */
-			parent = successor;
-			child2 = successor->rb_right;
-			augment->copy(node, successor);
-		} else {
-			/*
-			 * Case 3: node's successor is leftmost under
-			 * node's right child subtree
-			 *
-			 *    (n)          (s)
-			 *    / \          / \
-			 *  (x) (y)  ->  (x) (y)
-			 *      /            /
-			 *    (p)          (p)
-			 *    /            /
-			 *  (s)          (c)
-			 *    \
-			 *    (c)
-			 */
-			do {
-				parent = successor;
-				successor = tmp;
-				tmp = tmp->rb_left;
-			} while (tmp);
-			parent->rb_left = child2 = successor->rb_right;
-			successor->rb_right = child;
-			rb_set_parent(child, successor);
-			augment->copy(node, successor);
-			augment->propagate(parent, successor);
-		}
-
-		successor->rb_left = tmp = node->rb_left;
-		rb_set_parent(tmp, successor);
-
-		pc = node->__rb_parent_color;
-		tmp = __rb_parent(pc);
-		__rb_change_child(node, successor, tmp, root);
-		if (child2) {
-			successor->__rb_parent_color = pc;
-			rb_set_parent_color(child2, parent, RB_BLACK);
-			rebalance = NULL;
-		} else {
-			unsigned long pc2 = successor->__rb_parent_color;
-			successor->__rb_parent_color = pc;
-			rebalance = __rb_is_black(pc2) ? parent : NULL;
-		}
-		tmp = successor;
-	}
-
-	augment->propagate(tmp, NULL);
-	return rebalance;
-}
-
-static inline void
-rb_erase_augmented(struct rb_node *node, struct rb_root *root,
-		   const struct rb_augment_callbacks *augment)
-{
-	struct rb_node *rebalance = __rb_erase_augmented(node, root, augment);
-	if (rebalance)
-		__rb_erase_color(rebalance, root, augment->rotate);
-}
-
-#endif /* _GENERIC_RBTREE_H */
-
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef _GENERIC_RBTREE_H
+#define _GENERIC_RBTREE_H
+
+#include <stddef.h>
+
+struct rb_node {
+	unsigned long __rb_parent_color;
+	struct rb_node *rb_right;
+	struct rb_node *rb_left;
+} __attribute__((aligned(sizeof(long))));
+/* The alignment might seem pointless, but allegedly CRIS needs it */
+
+struct rb_root {
+	struct rb_node *rb_node;
+};
+
+#define rb_parent(r) ((struct rb_node *)((r)->__rb_parent_color & ~3))
+
+#define RB_ROOT                                                                                                                                                \
+	(struct rb_root)                                                                                                                                           \
+	{                                                                                                                                                          \
+		NULL,                                                                                                                                                  \
+	}
+#define rb_entry(ptr, type, member) container_of(ptr, type, member)
+
+#define RB_EMPTY_ROOT(root) ((root)->rb_node == NULL)
+
+/* 'empty' nodes are nodes that are known not to be inserted in an rbtree */
+#define RB_EMPTY_NODE(node) ((node)->__rb_parent_color == (unsigned long)(node))
+#define RB_CLEAR_NODE(node) ((node)->__rb_parent_color = (unsigned long)(node))
+
+extern void rb_insert_color(struct rb_node *, struct rb_root *);
+extern void rb_erase(struct rb_node *, struct rb_root *);
+
+/* Find logical next and previous nodes in a tree */
+extern struct rb_node *rb_next(const struct rb_node *);
+extern struct rb_node *rb_prev(const struct rb_node *);
+extern struct rb_node *rb_first(const struct rb_root *);
+extern struct rb_node *rb_last(const struct rb_root *);
+
+/* Postorder iteration - always visit the parent after its children */
+extern struct rb_node *rb_first_postorder(const struct rb_root *);
+extern struct rb_node *rb_next_postorder(const struct rb_node *);
+
+/* Fast replacement of a single node without remove/rebalance/add/rebalance */
+extern void rb_replace_node(struct rb_node *victim, struct rb_node *new_node, struct rb_root *root);
+
+static inline void rb_link_node(struct rb_node *node, struct rb_node *parent, struct rb_node **rb_link)
+{
+	node->__rb_parent_color = (unsigned long)parent;
+	node->rb_left = node->rb_right = NULL;
+
+	*rb_link = node;
+}
+
+#define rb_entry_safe(ptr, type, member)                                                                                                                       \
+	({                                                                                                                                                         \
+		typeof(ptr) ____ptr = (ptr);                                                                                                                           \
+		____ptr ? rb_entry(____ptr, type, member) : NULL;                                                                                                      \
+	})
+
+/*
+ * Handy for checking that we are not deleting an entry that is
+ * already in a list, found in block/{blk-throttle,cfq-iosched}.c,
+ * probably should be moved to lib/rbtree.c...
+ */
+static inline void rb_erase_init(struct rb_node *n, struct rb_root *root)
+{
+	rb_erase(n, root);
+	RB_CLEAR_NODE(n);
+}
+
+
+/*
+ * Please note - only struct rb_augment_callbacks and the prototypes for
+ * rb_insert_augmented() and rb_erase_augmented() are intended to be public.
+ * The rest are implementation details you are not expected to depend on.
+ *
+ * See Documentation/rbtree.txt for documentation and samples.
+ */
+
+struct rb_augment_callbacks {
+	void (*propagate)(struct rb_node *node, struct rb_node *stop);
+	void (*copy)(struct rb_node *old_node, struct rb_node *new_node);
+	void (*rotate)(struct rb_node *old_node, struct rb_node *new_node);
+};
+
+extern void __rb_insert_augmented(struct rb_node *node, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old_node, struct rb_node *new_node));
+/*
+ * Fixup the rbtree and update the augmented information when rebalancing.
+ *
+ * On insertion, the user must update the augmented information on the path
+ * leading to the inserted node, then call rb_link_node() as usual and
+ * rb_augment_inserted() instead of the usual rb_insert_color() call.
+ * If rb_augment_inserted() rebalances the rbtree, it will callback into
+ * a user provided function to update the augmented information on the
+ * affected subtrees.
+ */
+static inline void
+rb_insert_augmented(struct rb_node *node, struct rb_root *root,
+		    const struct rb_augment_callbacks *augment)
+{
+	__rb_insert_augmented(node, root, augment->rotate);
+}
+
+#define RB_DECLARE_CALLBACKS(rbstatic, rbname, rbstruct, rbfield,	\
+			     rbtype, rbaugmented, rbcompute)		\
+static inline void							\
+rbname ## _propagate(struct rb_node *rb, struct rb_node *stop)		\
+{									\
+	while (rb != stop) {						\
+		rbstruct *node = rb_entry(rb, rbstruct, rbfield);	\
+		rbtype augmented = rbcompute(node);			\
+		if (node->rbaugmented == augmented)			\
+			break;						\
+		node->rbaugmented = augmented;				\
+		rb = rb_parent(&node->rbfield);				\
+	}								\
+}									\
+static inline void							\
+rbname ## _copy(struct rb_node *rb_old, struct rb_node *rb_new)		\
+{									\
+	rbstruct *old_node = rb_entry(rb_old, rbstruct, rbfield);		\
+	rbstruct *new_node = rb_entry(rb_new, rbstruct, rbfield);		\
+	new_node->rbaugmented = old_node->rbaugmented;				\
+}									\
+static void								\
+rbname ## _rotate(struct rb_node *rb_old, struct rb_node *rb_new)	\
+{									\
+	rbstruct *old_node = rb_entry(rb_old, rbstruct, rbfield);		\
+	rbstruct *new_node = rb_entry(rb_new, rbstruct, rbfield);		\
+	new_node->rbaugmented = old_node->rbaugmented;				\
+	old_node->rbaugmented = rbcompute(old_node);				\
+}									\
+rbstatic const struct rb_augment_callbacks rbname = {			\
+	rbname ## _propagate, rbname ## _copy, rbname ## _rotate	\
+};
+
+
+#define	RB_RED		0
+#define	RB_BLACK	1
+
+#define __rb_parent(pc)    ((struct rb_node *)(pc & ~3))
+
+#define __rb_color(pc)     ((pc) & 1)
+#define __rb_is_black(pc)  __rb_color(pc)
+#define __rb_is_red(pc)    (!__rb_color(pc))
+#define rb_color(rb)       __rb_color((rb)->__rb_parent_color)
+#define rb_is_red(rb)      __rb_is_red((rb)->__rb_parent_color)
+#define rb_is_black(rb)    __rb_is_black((rb)->__rb_parent_color)
+
+static inline void rb_set_parent(struct rb_node *rb, struct rb_node *p)
+{
+	rb->__rb_parent_color = rb_color(rb) | (unsigned long)p;
+}
+
+static inline void rb_set_parent_color(struct rb_node *rb,
+				       struct rb_node *p, int color)
+{
+	rb->__rb_parent_color = (unsigned long)p | color;
+}
+
+static inline void
+__rb_change_child(struct rb_node *old_node, struct rb_node *new_node,
+		  struct rb_node *parent, struct rb_root *root)
+{
+	if (parent) {
+		if (parent->rb_left == old_node)
+			parent->rb_left = new_node;
+		else
+			parent->rb_right = new_node;
+	} else
+		root->rb_node = new_node;
+}
+
+extern void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old_node, struct rb_node *new_node));
+
+static inline struct rb_node *
+__rb_erase_augmented(struct rb_node *node, struct rb_root *root,
+		     const struct rb_augment_callbacks *augment)
+{
+	struct rb_node *child = node->rb_right, *tmp = node->rb_left;
+	struct rb_node *parent, *rebalance;
+	unsigned long pc;
+
+	if (!tmp) {
+		/*
+		 * Case 1: node to erase has no more than 1 child (easy!)
+		 *
+		 * Note that if there is one child it must be red due to 5)
+		 * and node must be black due to 4). We adjust colors locally
+		 * so as to bypass __rb_erase_color() later on.
+		 */
+		pc = node->__rb_parent_color;
+		parent = __rb_parent(pc);
+		__rb_change_child(node, child, parent, root);
+		if (child) {
+			child->__rb_parent_color = pc;
+			rebalance = NULL;
+		} else
+			rebalance = __rb_is_black(pc) ? parent : NULL;
+		tmp = parent;
+	} else if (!child) {
+		/* Still case 1, but this time the child is node->rb_left */
+		tmp->__rb_parent_color = pc = node->__rb_parent_color;
+		parent = __rb_parent(pc);
+		__rb_change_child(node, tmp, parent, root);
+		rebalance = NULL;
+		tmp = parent;
+	} else {
+		struct rb_node *successor = child, *child2;
+		tmp = child->rb_left;
+		if (!tmp) {
+			/*
+			 * Case 2: node's successor is its right child
+			 *
+			 *    (n)          (s)
+			 *    / \          / \
+			 *  (x) (s)  ->  (x) (c)
+			 *        \
+			 *        (c)
+			 */
+			parent = successor;
+			child2 = successor->rb_right;
+			augment->copy(node, successor);
+		} else {
+			/*
+			 * Case 3: node's successor is leftmost under
+			 * node's right child subtree
+			 *
+			 *    (n)          (s)
+			 *    / \          / \
+			 *  (x) (y)  ->  (x) (y)
+			 *      /            /
+			 *    (p)          (p)
+			 *    /            /
+			 *  (s)          (c)
+			 *    \
+			 *    (c)
+			 */
+			do {
+				parent = successor;
+				successor = tmp;
+				tmp = tmp->rb_left;
+			} while (tmp);
+			parent->rb_left = child2 = successor->rb_right;
+			successor->rb_right = child;
+			rb_set_parent(child, successor);
+			augment->copy(node, successor);
+			augment->propagate(parent, successor);
+		}
+
+		successor->rb_left = tmp = node->rb_left;
+		rb_set_parent(tmp, successor);
+
+		pc = node->__rb_parent_color;
+		tmp = __rb_parent(pc);
+		__rb_change_child(node, successor, tmp, root);
+		if (child2) {
+			successor->__rb_parent_color = pc;
+			rb_set_parent_color(child2, parent, RB_BLACK);
+			rebalance = NULL;
+		} else {
+			unsigned long pc2 = successor->__rb_parent_color;
+			successor->__rb_parent_color = pc;
+			rebalance = __rb_is_black(pc2) ? parent : NULL;
+		}
+		tmp = successor;
+	}
+
+	augment->propagate(tmp, NULL);
+	return rebalance;
+}
+
+static inline void
+rb_erase_augmented(struct rb_node *node, struct rb_root *root,
+		   const struct rb_augment_callbacks *augment)
+{
+	struct rb_node *rebalance = __rb_erase_augmented(node, root, augment);
+	if (rebalance)
+		__rb_erase_color(rebalance, root, augment->rotate);
+}
+
+#endif /* _GENERIC_RBTREE_H */
+
diff --git a/release/src/router/smartdns/src/include/stringutil.h b/release/src/router/smartdns/src/include/stringutil.h
index 4d6ea6be57..626a58c8db 100644
--- a/release/src/router/smartdns/src/include/stringutil.h
+++ b/release/src/router/smartdns/src/include/stringutil.h
@@ -1,42 +1,42 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef _GENERIC_STRING_UITL_H
-#define _GENERIC_STRING_UITL_H
-
-#include <stddef.h>
-#include <string.h>
-
-static inline char *safe_strncpy(char *dest, const char *src, size_t n) 
-{
-#if __GNUC__  > 7
-#pragma GCC diagnostic push
-#pragma GCC diagnostic ignored "-Wstringop-truncation"
-#endif
-	char *ret = strncpy(dest, src, n - 1);
-    if (n > 0) {
-	    dest[n - 1] = '\0';
-    }
-#if __GNUC__  > 7
-#pragma GCC diagnostic pop
-#endif
-	return ret;
-}
-
-
-#endif
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef _GENERIC_STRING_UITL_H
+#define _GENERIC_STRING_UITL_H
+
+#include <stddef.h>
+#include <string.h>
+
+static inline char *safe_strncpy(char *dest, const char *src, size_t n) 
+{
+#if __GNUC__  > 7
+#pragma GCC diagnostic push
+#pragma GCC diagnostic ignored "-Wstringop-truncation"
+#endif
+	char *ret = strncpy(dest, src, n - 1);
+    if (n > 0) {
+	    dest[n - 1] = '\0';
+    }
+#if __GNUC__  > 7
+#pragma GCC diagnostic pop
+#endif
+	return ret;
+}
+
+
+#endif
diff --git a/release/src/router/smartdns/src/lib/art.c b/release/src/router/smartdns/src/lib/art.c
index be5a672056..d4308e3f96 100644
--- a/release/src/router/smartdns/src/lib/art.c
+++ b/release/src/router/smartdns/src/lib/art.c
@@ -1,1129 +1,1129 @@
-/*
-Copyright (c) 2012, Armon Dadgar
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-    * Redistributions of source code must retain the above copyright
-      notice, this list of conditions and the following disclaimer.
-    * Redistributions in binary form must reproduce the above copyright
-      notice, this list of conditions and the following disclaimer in the
-      documentation and/or other materials provided with the distribution.
-    * Neither the name of the organization nor the
-      names of its contributors may be used to endorse or promote products
-      derived from this software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL ARMON DADGAR BE LIABLE FOR ANY
-DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
-ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-*/
-#include <stdlib.h>
-#include <string.h>
-#include <strings.h>
-#include <stdio.h>
-#include <assert.h>
-#include "art.h"
-
-// #ifdef __i386__
-//     #include <emmintrin.h>
-// #else
-#ifdef __amd64__
-    #include <emmintrin.h>
-#endif
-// #endif
-
-/**
- * Macros to manipulate pointer tags
- */
-#define IS_LEAF(x) (((uintptr_t)x & 1))
-#define SET_LEAF(x) ((void*)((uintptr_t)x | 1))
-#define LEAF_RAW(x) ((art_leaf*)((void*)((uintptr_t)x & ~1)))
-
-/**
- * Allocates a node of the given type,
- * initializes to zero and sets the type.
- */
-static art_node* alloc_node(uint8_t type) {
-    art_node* n;
-	void *mem = NULL;
-	switch (type) {
-        case NODE4:
-            mem = (art_node*)calloc(1, sizeof(art_node4));
-            break;
-        case NODE16:
-            mem = (art_node*)calloc(1, sizeof(art_node16));
-            break;
-        case NODE48:
-            mem = (art_node*)calloc(1, sizeof(art_node48));
-            break;
-        case NODE256:
-            mem = (art_node*)calloc(1, sizeof(art_node256));
-            break;
-        default:
-            abort();
-    }
-    if (mem == NULL) {
-		abort();
-	}
-	n = mem;
-	n->type = type;
-    return n;
-}
-
-/**
- * Initializes an ART tree
- * @return 0 on success.
- */
-int art_tree_init(art_tree *t) {
-    t->root = NULL;
-    t->size = 0;
-    return 0;
-}
-
-// Recursively destroys the tree
-static void destroy_node(art_node *n) {
-    // Break if null
-    if (!n) return;
-
-    // Special case leafs
-    if (IS_LEAF(n)) {
-        free(LEAF_RAW(n));
-        return;
-    }
-
-    // Handle each node type
-    int i, idx;
-    union {
-        art_node4 *p1;
-        art_node16 *p2;
-        art_node48 *p3;
-        art_node256 *p4;
-    } p;
-    switch (n->type) {
-        case NODE4:
-            p.p1 = (art_node4*)n;
-            for (i=0;i<n->num_children;i++) {
-                destroy_node(p.p1->children[i]);
-            }
-            break;
-
-        case NODE16:
-            p.p2 = (art_node16*)n;
-            for (i=0;i<n->num_children;i++) {
-                destroy_node(p.p2->children[i]);
-            }
-            break;
-
-        case NODE48:
-            p.p3 = (art_node48*)n;
-            for (i=0;i<256;i++) {
-                idx = ((art_node48*)n)->keys[i]; 
-                if (!idx) continue; 
-                destroy_node(p.p3->children[idx-1]);
-            }
-            break;
-
-        case NODE256:
-            p.p4 = (art_node256*)n;
-            for (i=0;i<256;i++) {
-                if (p.p4->children[i])
-                    destroy_node(p.p4->children[i]);
-            }
-            break;
-
-        default:
-            abort();
-    }
-
-    // Free ourself on the way up
-    free(n);
-}
-
-/**
- * Destroys an ART tree
- * @return 0 on success.
- */
-int art_tree_destroy(art_tree *t) {
-    destroy_node(t->root);
-    return 0;
-}
-
-/**
- * Returns the size of the ART tree.
- */
-
-#ifndef BROKEN_GCC_C99_INLINE
-extern inline uint64_t art_size(art_tree *t);
-#endif
-
-static art_node** find_child(art_node *n, unsigned char c) {
-    int i, mask, bitfield;
-    union {
-        art_node4 *p1;
-        art_node16 *p2;
-        art_node48 *p3;
-        art_node256 *p4;
-    } p;
-    switch (n->type) {
-        case NODE4:
-            p.p1 = (art_node4*)n;
-            for (i=0 ; i < n->num_children; i++) {
-        /* this cast works around a bug in gcc 5.1 when unrolling loops
-         * https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59124
-         */
-                if (((unsigned char*)p.p1->keys)[i] == c)
-                    return &p.p1->children[i];
-            }
-            break;
-
-        {
-        case NODE16:
-            p.p2 = (art_node16*)n;
-
-            // support non-86 architectures
-
-            // #ifdef __i386__
-            //     // Compare the key to all 16 stored keys
-            //     __m128i cmp;
-            //     cmp = _mm_cmpeq_epi8(_mm_set1_epi8(c),
-            //             _mm_loadu_si128((__m128i*)p.p2->keys));
-                
-            //     // Use a mask to ignore children that don't exist
-            //     mask = (1 << n->num_children) - 1;
-            //     bitfield = _mm_movemask_epi8(cmp) & mask;
-            // #else
-            #ifdef __amd64__
-                // Compare the key to all 16 stored keys
-                __m128i cmp;
-                cmp = _mm_cmpeq_epi8(_mm_set1_epi8(c),
-                        _mm_loadu_si128((__m128i*)p.p2->keys));
-
-                // Use a mask to ignore children that don't exist
-                mask = (1 << n->num_children) - 1;
-                bitfield = _mm_movemask_epi8(cmp) & mask;
-            #else
-                // Compare the key to all 16 stored keys
-                bitfield = 0;
-                for (i = 0; i < 16; ++i) {
-                    if (p.p2->keys[i] == c)
-                        bitfield |= (1 << i);
-                }
-
-                // Use a mask to ignore children that don't exist
-                mask = (1 << n->num_children) - 1;
-                bitfield &= mask;
-            #endif
-            // #endif
-
-            /*
-             * If we have a match (any bit set) then we can
-             * return the pointer match using ctz to get
-             * the index.
-             */
-            if (bitfield)
-                return &p.p2->children[__builtin_ctz(bitfield)];
-            break;
-        }
-
-        case NODE48:
-            p.p3 = (art_node48*)n;
-            i = p.p3->keys[c];
-            if (i)
-                return &p.p3->children[i-1];
-            break;
-
-        case NODE256:
-            p.p4 = (art_node256*)n;
-            if (p.p4->children[c])
-                return &p.p4->children[c];
-            break;
-
-        default:
-            abort();
-    }
-    return NULL;
-}
-
-// Simple inlined if
-static inline int min(int a, int b) {
-    return (a < b) ? a : b;
-}
-
-/**
- * Returns the number of prefix characters shared between
- * the key and node.
- */
-static int check_prefix(const art_node *n, const unsigned char *key, int key_len, int depth) {
-    int max_cmp = min(min(n->partial_len, MAX_PREFIX_LEN), key_len - depth);
-    int idx;
-    for (idx=0; idx < max_cmp; idx++) {
-        if (n->partial[idx] != key[depth+idx])
-            return idx;
-    }
-    return idx;
-}
-
-/**
- * Checks if a leaf matches
- * @return 0 on success.
- */
-static int leaf_matches(const art_leaf *n, const unsigned char *key, int key_len, int depth) {
-    (void)depth;
-    // Fail if the key lengths are different
-    if (n->key_len != (uint32_t)key_len) return 1;
-
-    // Compare the keys starting at the depth
-    return memcmp(n->key, key, key_len);
-}
-
-/**
- * Searches for a value in the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-void* art_search(const art_tree *t, const unsigned char *key, int key_len) {
-    art_node **child;
-    art_node *n = t->root;
-    int prefix_len, depth = 0;
-    while (n) {
-        // Might be a leaf
-        if (IS_LEAF(n)) {
-            n = (art_node*)LEAF_RAW(n);
-            // Check if the expanded path matches
-            if (!leaf_matches((art_leaf*)n, key, key_len, depth)) {
-                return ((art_leaf*)n)->value;
-            }
-            return NULL;
-        }
-
-        // Bail if the prefix does not match
-        if (n->partial_len) {
-            prefix_len = check_prefix(n, key, key_len, depth);
-            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
-                return NULL;
-            depth = depth + n->partial_len;
-        }
-
-        // Recursively search
-        child = find_child(n, key[depth]);
-        n = (child) ? *child : NULL;
-        depth++;
-    }
-    return NULL;
-}
-
-// Find the minimum leaf under a node
-static art_leaf* minimum(const art_node *n) {
-    // Handle base cases
-    if (!n) return NULL;
-    if (IS_LEAF(n)) return LEAF_RAW(n);
-
-    int idx;
-    switch (n->type) {
-        case NODE4:
-            return minimum(((const art_node4*)n)->children[0]);
-        case NODE16:
-            return minimum(((const art_node16*)n)->children[0]);
-        case NODE48:
-            idx=0;
-            while (!((const art_node48*)n)->keys[idx]) idx++;
-            idx = ((const art_node48*)n)->keys[idx] - 1;
-            return minimum(((const art_node48*)n)->children[idx]);
-        case NODE256:
-            idx=0;
-            while (!((const art_node256*)n)->children[idx]) idx++;
-            return minimum(((const art_node256*)n)->children[idx]);
-        default:
-            abort();
-    }
-}
-
-// Find the maximum leaf under a node
-static art_leaf* maximum(const art_node *n) {
-    // Handle base cases
-    if (!n) return NULL;
-    if (IS_LEAF(n)) return LEAF_RAW(n);
-
-    int idx;
-    switch (n->type) {
-        case NODE4:
-            return maximum(((const art_node4*)n)->children[n->num_children-1]);
-        case NODE16:
-            return maximum(((const art_node16*)n)->children[n->num_children-1]);
-        case NODE48:
-            idx=255;
-            while (!((const art_node48*)n)->keys[idx]) idx--;
-            idx = ((const art_node48*)n)->keys[idx] - 1;
-            return maximum(((const art_node48*)n)->children[idx]);
-        case NODE256:
-            idx=255;
-            while (!((const art_node256*)n)->children[idx]) idx--;
-            return maximum(((const art_node256*)n)->children[idx]);
-        default:
-            abort();
-    }
-}
-
-/**
- * Returns the minimum valued leaf
- */
-art_leaf* art_minimum(art_tree *t) {
-    return minimum((art_node*)t->root);
-}
-
-/**
- * Returns the maximum valued leaf
- */
-art_leaf* art_maximum(art_tree *t) {
-    return maximum((art_node*)t->root);
-}
-
-static art_leaf* make_leaf(const unsigned char *key, int key_len, void *value) {
-    art_leaf *l = (art_leaf*)calloc(1, sizeof(art_leaf)+key_len+1);
-    if (l == NULL) {
-		return NULL;
-	}
-    
-    l->value = value;
-    l->key_len = key_len;
-    memcpy(l->key, key, key_len);
-    return l;
-}
-
-static int longest_common_prefix(art_leaf *l1, art_leaf *l2, int depth) {
-    int max_cmp = min(l1->key_len, l2->key_len) - depth;
-    int idx;
-    for (idx=0; idx < max_cmp; idx++) {
-        if (l1->key[depth+idx] != l2->key[depth+idx])
-            return idx;
-    }
-    return idx;
-}
-
-static void copy_header(art_node *dest, art_node *src) {
-    dest->num_children = src->num_children;
-    dest->partial_len = src->partial_len;
-    memcpy(dest->partial, src->partial, min(MAX_PREFIX_LEN, src->partial_len));
-}
-
-static void add_child256(art_node256 *n, art_node **ref, unsigned char c, void *child) {
-    (void)ref;
-    n->n.num_children++;
-    n->children[c] = (art_node*)child;
-}
-
-static void add_child48(art_node48 *n, art_node **ref, unsigned char c, void *child) {
-    if (n->n.num_children < 48) {
-        int pos = 0;
-        while (n->children[pos]) pos++;
-        n->children[pos] = (art_node*)child;
-        n->keys[c] = pos + 1;
-        n->n.num_children++;
-    } else {
-        art_node256 *new_node = (art_node256*)alloc_node(NODE256);
-        int i;
-        for (i=0;i<256;i++) {
-            if (n->keys[i]) {
-                new_node->children[i] = n->children[n->keys[i] - 1];
-            }
-        }
-        copy_header((art_node*)new_node, (art_node*)n);
-        *ref = (art_node*)new_node;
-        free(n);
-        add_child256(new_node, ref, c, child);
-    }
-}
-
-static void add_child16(art_node16 *n, art_node **ref, unsigned char c, void *child) {
-    if (n->n.num_children < 16) {
-        unsigned mask = (1 << n->n.num_children) - 1;
-        
-        // support non-x86 architectures
-        // #ifdef __i386__
-        //     __m128i cmp;
-
-        //     // Compare the key to all 16 stored keys
-        //     cmp = _mm_cmplt_epi8(_mm_set1_epi8(c),
-        //             _mm_loadu_si128((__m128i*)n->keys));
-
-        //     // Use a mask to ignore children that don't exist
-        //     unsigned bitfield = _mm_movemask_epi8(cmp) & mask;
-        // #else
-        #ifdef __amd64__
-            __m128i cmp;
-
-            // Compare the key to all 16 stored keys
-            cmp = _mm_cmplt_epi8(_mm_set1_epi8(c),
-                    _mm_loadu_si128((__m128i*)n->keys));
-
-            // Use a mask to ignore children that don't exist
-            unsigned bitfield = _mm_movemask_epi8(cmp) & mask;
-        #else
-            // Compare the key to all 16 stored keys
-            unsigned bitfield = 0;
-            int i;
-            for (i = 0; i < 16; ++i) {
-                if (c < n->keys[i])
-                    bitfield |= (1 << i);
-            }
-
-            // Use a mask to ignore children that don't exist
-            bitfield &= mask;    
-        #endif
-        // #endif
-
-        // Check if less than any
-        unsigned idx;
-        if (bitfield) {
-            idx = __builtin_ctz(bitfield);
-            memmove(n->keys+idx+1,n->keys+idx,n->n.num_children-idx);
-            memmove(n->children+idx+1,n->children+idx,
-                    (n->n.num_children-idx)*sizeof(void*));
-        } else
-            idx = n->n.num_children;
-
-        // Set the child
-        n->keys[idx] = c;
-        n->children[idx] = (art_node*)child;
-        n->n.num_children++;
-
-    } else {
-        art_node48 *new_node = (art_node48*)alloc_node(NODE48);
-        int i;
-
-        // Copy the child pointers and populate the key map
-        memcpy(new_node->children, n->children,
-                sizeof(void*)*n->n.num_children);
-        for (i=0;i<n->n.num_children;i++) {
-            new_node->keys[n->keys[i]] = i + 1;
-        }
-        copy_header((art_node*)new_node, (art_node*)n);
-        *ref = (art_node*)new_node;
-        free(n);
-        add_child48(new_node, ref, c, child);
-    }
-}
-
-static void add_child4(art_node4 *n, art_node **ref, unsigned char c, void *child) {
-    if (n->n.num_children < 4) {
-        int idx;
-        for (idx=0; idx < n->n.num_children; idx++) {
-            if (c < n->keys[idx]) break;
-        }
-
-        // Shift to make room
-        memmove(n->keys+idx+1, n->keys+idx, n->n.num_children - idx);
-        memmove(n->children+idx+1, n->children+idx,
-                (n->n.num_children - idx)*sizeof(void*));
-
-        // Insert element
-        n->keys[idx] = c;
-        n->children[idx] = (art_node*)child;
-        n->n.num_children++;
-
-    } else {
-        art_node16 *new_node = (art_node16*)alloc_node(NODE16);
-
-        // Copy the child pointers and the key map
-        memcpy(new_node->children, n->children,
-                sizeof(void*)*n->n.num_children);
-        memcpy(new_node->keys, n->keys,
-                sizeof(unsigned char)*n->n.num_children);
-        copy_header((art_node*)new_node, (art_node*)n);
-        *ref = (art_node*)new_node;
-        free(n);
-        add_child16(new_node, ref, c, child);
-    }
-}
-
-static void add_child(art_node *n, art_node **ref, unsigned char c, void *child) {
-    switch (n->type) {
-        case NODE4:
-            return add_child4((art_node4*)n, ref, c, child);
-        case NODE16:
-            return add_child16((art_node16*)n, ref, c, child);
-        case NODE48:
-            return add_child48((art_node48*)n, ref, c, child);
-        case NODE256:
-            return add_child256((art_node256*)n, ref, c, child);
-        default:
-            abort();
-    }
-}
-
-/**
- * Calculates the index at which the prefixes mismatch
- */
-static int prefix_mismatch(const art_node *n, const unsigned char *key, int key_len, int depth) {
-    int max_cmp = min(min(MAX_PREFIX_LEN, n->partial_len), key_len - depth);
-    int idx;
-    for (idx=0; idx < max_cmp; idx++) {
-        if (n->partial[idx] != key[depth+idx])
-            return idx;
-    }
-
-    // If the prefix is short we can avoid finding a leaf
-    if (n->partial_len > MAX_PREFIX_LEN) {
-        // Prefix is longer than what we've checked, find a leaf
-        art_leaf *l = minimum(n);
-        max_cmp = min(l->key_len, key_len)- depth;
-        for (; idx < max_cmp; idx++) {
-            if (l->key[idx+depth] != key[depth+idx])
-                return idx;
-        }
-    }
-    return idx;
-}
-
-static void* recursive_insert(art_node *n, art_node **ref, const unsigned char *key, int key_len, void *value, int depth, int *old) {
-    // If we are at a NULL node, inject a leaf
-    if (!n) {
-        *ref = (art_node*)SET_LEAF(make_leaf(key, key_len, value));
-        return NULL;
-    }
-
-    // If we are at a leaf, we need to replace it with a node
-    if (IS_LEAF(n)) {
-        art_leaf *l = LEAF_RAW(n);
-
-        // Check if we are updating an existing value
-        if (!leaf_matches(l, key, key_len, depth)) {
-            *old = 1;
-            void *old_val = l->value;
-            l->value = value;
-            return old_val;
-        }
-
-        // New value, we must split the leaf into a node4
-        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
-
-        // Create a new leaf
-        art_leaf *l2 = make_leaf(key, key_len, value);
-
-        // Determine longest prefix
-        int longest_prefix = longest_common_prefix(l, l2, depth);
-        new_node->n.partial_len = longest_prefix;
-        memcpy(new_node->n.partial, key+depth, min(MAX_PREFIX_LEN, longest_prefix));
-        // Add the leafs to the new node4
-        *ref = (art_node*)new_node;
-        add_child4(new_node, ref, l->key[depth+longest_prefix], SET_LEAF(l));
-        add_child4(new_node, ref, l2->key[depth+longest_prefix], SET_LEAF(l2));
-        return NULL;
-    }
-
-    // Check if given node has a prefix
-    if (n->partial_len) {
-        // Determine if the prefixes differ, since we need to split
-        int prefix_diff = prefix_mismatch(n, key, key_len, depth);
-        if ((uint32_t)prefix_diff >= n->partial_len) {
-            depth += n->partial_len;
-            goto RECURSE_SEARCH;
-        }
-
-        // Create a new node
-        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
-        *ref = (art_node*)new_node;
-        new_node->n.partial_len = prefix_diff;
-        memcpy(new_node->n.partial, n->partial, min(MAX_PREFIX_LEN, prefix_diff));
-
-        // Adjust the prefix of the old node
-        if (n->partial_len <= MAX_PREFIX_LEN) {
-            add_child4(new_node, ref, n->partial[prefix_diff], n);
-            n->partial_len -= (prefix_diff+1);
-            memmove(n->partial, n->partial+prefix_diff+1,
-                    min(MAX_PREFIX_LEN, n->partial_len));
-        } else {
-            n->partial_len -= (prefix_diff+1);
-            art_leaf *l = minimum(n);
-            add_child4(new_node, ref, l->key[depth+prefix_diff], n);
-            memcpy(n->partial, l->key+depth+prefix_diff+1,
-                    min(MAX_PREFIX_LEN, n->partial_len));
-        }
-
-        // Insert the new leaf
-        art_leaf *l = make_leaf(key, key_len, value);
-        add_child4(new_node, ref, key[depth+prefix_diff], SET_LEAF(l));
-        return NULL;
-    }
-
-RECURSE_SEARCH:;
-
-    // Find a child to recurse to
-    art_node **child = find_child(n, key[depth]);
-    if (child) {
-        return recursive_insert(*child, child, key, key_len, value, depth+1, old);
-    }
-
-    // No child, node goes within us
-    art_leaf *l = make_leaf(key, key_len, value);
-    add_child(n, ref, key[depth], SET_LEAF(l));
-    return NULL;
-}
-
-/**
- * Inserts a new value into the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @arg value Opaque value.
- * @return NULL if the item was newly inserted, otherwise
- * the old value pointer is returned.
- */
-void* art_insert(art_tree *t, const unsigned char *key, int key_len, void *value) {
-    int old_val = 0;
-    void *old = recursive_insert(t->root, &t->root, key, key_len, value, 0, &old_val);
-    if (!old_val) t->size++;
-    return old;
-}
-
-static void remove_child256(art_node256 *n, art_node **ref, unsigned char c) {
-    n->children[c] = NULL;
-    n->n.num_children--;
-
-    // Resize to a node48 on underflow, not immediately to prevent
-    // trashing if we sit on the 48/49 boundary
-    if (n->n.num_children == 37) {
-        art_node48 *new_node = (art_node48*)alloc_node(NODE48);
-        *ref = (art_node*)new_node;
-        copy_header((art_node*)new_node, (art_node*)n);
-
-        int pos = 0;
-        int i;
-        for (i=0;i<256;i++) {
-            if (n->children[i]) {
-                new_node->children[pos] = n->children[i];
-                new_node->keys[i] = pos + 1;
-                pos++;
-            }
-        }
-        free(n);
-    }
-}
-
-static void remove_child48(art_node48 *n, art_node **ref, unsigned char c) {
-    int pos = n->keys[c];
-    n->keys[c] = 0;
-    n->children[pos-1] = NULL;
-    n->n.num_children--;
-
-    if (n->n.num_children == 12) {
-        art_node16 *new_node = (art_node16*)alloc_node(NODE16);
-        *ref = (art_node*)new_node;
-        copy_header((art_node*)new_node, (art_node*)n);
-
-        int child = 0;
-        int i;
-        for (i=0;i<256;i++) {
-            pos = n->keys[i];
-            if (pos) {
-                new_node->keys[child] = i;
-                new_node->children[child] = n->children[pos - 1];
-                child++;
-            }
-        }
-        free(n);
-    }
-}
-
-static void remove_child16(art_node16 *n, art_node **ref, art_node **l) {
-    int pos = l - n->children;
-    memmove(n->keys+pos, n->keys+pos+1, n->n.num_children - 1 - pos);
-    memmove(n->children+pos, n->children+pos+1, (n->n.num_children - 1 - pos)*sizeof(void*));
-    n->n.num_children--;
-
-    if (n->n.num_children == 3) {
-        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
-        *ref = (art_node*)new_node;
-        copy_header((art_node*)new_node, (art_node*)n);
-        memcpy(new_node->keys, n->keys, 4);
-        memcpy(new_node->children, n->children, 4*sizeof(void*));
-        free(n);
-    }
-}
-
-static void remove_child4(art_node4 *n, art_node **ref, art_node **l) {
-    int pos = l - n->children;
-    memmove(n->keys+pos, n->keys+pos+1, n->n.num_children - 1 - pos);
-    memmove(n->children+pos, n->children+pos+1, (n->n.num_children - 1 - pos)*sizeof(void*));
-    n->n.num_children--;
-
-    // Remove nodes with only a single child
-    if (n->n.num_children == 1) {
-        art_node *child = n->children[0];
-        if (!IS_LEAF(child)) {
-            // Concatenate the prefixes
-            int prefix = n->n.partial_len;
-            if (prefix < MAX_PREFIX_LEN) {
-                n->n.partial[prefix] = n->keys[0];
-                prefix++;
-            }
-            if (prefix < MAX_PREFIX_LEN) {
-                int sub_prefix = min(child->partial_len, MAX_PREFIX_LEN - prefix);
-                memcpy(n->n.partial+prefix, child->partial, sub_prefix);
-                prefix += sub_prefix;
-            }
-
-            // Store the prefix in the child
-            memcpy(child->partial, n->n.partial, min(prefix, MAX_PREFIX_LEN));
-            child->partial_len += n->n.partial_len + 1;
-        }
-        *ref = child;
-        free(n);
-    }
-}
-
-static void remove_child(art_node *n, art_node **ref, unsigned char c, art_node **l) {
-    switch (n->type) {
-        case NODE4:
-            return remove_child4((art_node4*)n, ref, l);
-        case NODE16:
-            return remove_child16((art_node16*)n, ref, l);
-        case NODE48:
-            return remove_child48((art_node48*)n, ref, c);
-        case NODE256:
-            return remove_child256((art_node256*)n, ref, c);
-        default:
-            abort();
-    }
-}
-
-static art_leaf* recursive_delete(art_node *n, art_node **ref, const unsigned char *key, int key_len, int depth) {
-    // Search terminated
-    if (!n) return NULL;
-
-    // Handle hitting a leaf node
-    if (IS_LEAF(n)) {
-        art_leaf *l = LEAF_RAW(n);
-        if (!leaf_matches(l, key, key_len, depth)) {
-            *ref = NULL;
-            return l;
-        }
-        return NULL;
-    }
-
-    // Bail if the prefix does not match
-    if (n->partial_len) {
-        int prefix_len = check_prefix(n, key, key_len, depth);
-        if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len)) {
-            return NULL;
-        }
-        depth = depth + n->partial_len;
-    }
-
-    // Find child node
-    art_node **child = find_child(n, key[depth]);
-    if (!child) return NULL;
-
-    // If the child is leaf, delete from this node
-    if (IS_LEAF(*child)) {
-        art_leaf *l = LEAF_RAW(*child);
-        if (!leaf_matches(l, key, key_len, depth)) {
-            remove_child(n, ref, key[depth], child);
-            return l;
-        }
-        return NULL;
-
-    // Recurse
-    } else {
-        return recursive_delete(*child, child, key, key_len, depth+1);
-    }
-}
-
-/**
- * Deletes a value from the ART tree
- * @arg t The tree
- * @arg key The key
- * @arg key_len The length of the key
- * @return NULL if the item was not found, otherwise
- * the value pointer is returned.
- */
-void* art_delete(art_tree *t, const unsigned char *key, int key_len) {
-    art_leaf *l = recursive_delete(t->root, &t->root, key, key_len, 0);
-    if (l) {
-        t->size--;
-        void *old = l->value;
-        free(l);
-        return old;
-    }
-    return NULL;
-}
-
-// Recursively iterates over the tree
-static int recursive_iter(art_node *n, art_callback cb, void *data) {
-    // Handle base cases
-    if (!n) return 0;
-    if (IS_LEAF(n)) {
-        art_leaf *l = LEAF_RAW(n);
-        return cb(data, (const unsigned char*)l->key, l->key_len, l->value);
-    }
-
-    int idx, res;
-    int i;
-    switch (n->type) {
-        case NODE4:
-            for (i=0; i < n->num_children; i++) {
-                res = recursive_iter(((art_node4*)n)->children[i], cb, data);
-                if (res) return res;
-            }
-            break;
-
-        case NODE16:
-            for (i=0; i < n->num_children; i++) {
-                res = recursive_iter(((art_node16*)n)->children[i], cb, data);
-                if (res) return res;
-            }
-            break;
-
-        case NODE48:
-            for (i=0; i < 256; i++) {
-                idx = ((art_node48*)n)->keys[i];
-                if (!idx) continue;
-
-                res = recursive_iter(((art_node48*)n)->children[idx-1], cb, data);
-                if (res) return res;
-            }
-            break;
-
-        case NODE256:
-            for (i=0; i < 256; i++) {
-                if (!((art_node256*)n)->children[i]) continue;
-                res = recursive_iter(((art_node256*)n)->children[i], cb, data);
-                if (res) return res;
-            }
-            break;
-
-        default:
-            abort();
-    }
-    return 0;
-}
-
-/**
- * Iterates through the entries pairs in the map,
- * invoking a callback for each. The call back gets a
- * key, value for each and returns an integer stop value.
- * If the callback returns non-zero, then the iteration stops.
- * @arg t The tree to iterate over
- * @arg cb The callback function to invoke
- * @arg data Opaque handle passed to the callback
- * @return 0 on success, or the return of the callback.
- */
-int art_iter(art_tree *t, art_callback cb, void *data) {
-    return recursive_iter(t->root, cb, data);
-}
-
-/**
- * Checks if a leaf prefix matches
- * @return 0 on success.
- */
-static int leaf_prefix_matches(const art_leaf *n, const unsigned char *prefix, int prefix_len) {
-    // Fail if the key length is too short
-    if (n->key_len < (uint32_t)prefix_len) return 1;
-
-    // Compare the keys
-    return memcmp(n->key, prefix, prefix_len);
-}
-
-/**
- * Iterates through the entries pairs in the map,
- * invoking a callback for each that matches a given prefix.
- * The call back gets a key, value for each and returns an integer stop value.
- * If the callback returns non-zero, then the iteration stops.
- * @arg t The tree to iterate over
- * @arg prefix The prefix of keys to read
- * @arg prefix_len The length of the prefix
- * @arg cb The callback function to invoke
- * @arg data Opaque handle passed to the callback
- * @return 0 on success, or the return of the callback.
- */
-int art_iter_prefix(art_tree *t, const unsigned char *key, int key_len, art_callback cb, void *data) {
-    art_node **child;
-    art_node *n = t->root;
-    int prefix_len, depth = 0;
-    while (n) {
-        // Might be a leaf
-        if (IS_LEAF(n)) {
-            n = (art_node*)LEAF_RAW(n);
-            // Check if the expanded path matches
-            if (!leaf_prefix_matches((art_leaf*)n, key, key_len)) {
-                art_leaf *l = (art_leaf*)n;
-                return cb(data, (const unsigned char*)l->key, l->key_len, l->value);
-            }
-            return 0;
-        }
-
-        // If the depth matches the prefix, we need to handle this node
-        if (depth == key_len) {
-            art_leaf *l = minimum(n);
-            if (!leaf_prefix_matches(l, key, key_len))
-               return recursive_iter(n, cb, data);
-            return 0;
-        }
-
-        // Bail if the prefix does not match
-        if (n->partial_len) {
-            prefix_len = prefix_mismatch(n, key, key_len, depth);
-
-            // Guard if the mis-match is longer than the MAX_PREFIX_LEN
-            if ((uint32_t)prefix_len > n->partial_len) {
-                prefix_len = n->partial_len;
-            }
-
-            // If there is no match, search is terminated
-            if (!prefix_len) {
-                return 0;
-
-            // If we've matched the prefix, iterate on this node
-            } else if (depth + prefix_len == key_len) {
-                return recursive_iter(n, cb, data);
-            }
-
-            // if there is a full match, go deeper
-            depth = depth + n->partial_len;
-        }
-
-        // Recursively search
-        child = find_child(n, key[depth]);
-        n = (child) ? *child : NULL;
-        depth++;
-    }
-    return 0;
-}
-
-static int str_prefix_matches(const art_leaf *n, const unsigned char *str, int str_len) {
-    // Fail if the key length is too short
-    if (n->key_len > (uint32_t)str_len) return 1;
-
-    // Compare the keys
-    return memcmp(str, n->key, n->key_len);
-}
-
-static void art_copy_key(art_leaf *leaf, unsigned char *key, int *key_len)
-{
-	int len;
-
-    if (key == NULL || key_len == NULL) {
-		return;
-	}
-
-	len = leaf->key_len > *key_len ? *key_len : leaf->key_len;
-	memcpy(key, leaf->key, len);
-	*key_len = len;
-}
-
-void *art_substring(const art_tree *t, const unsigned char *str, int str_len, unsigned char *key, int *key_len)
-{
-    art_node **child;
-    art_node *n = t->root;
-    art_node *m;    
-    art_leaf *found = NULL;
-    int prefix_len, depth = 0;
-
-    while (n) {
-        // Might be a leaf
-        if (IS_LEAF(n)) {
-            n = (art_node*)LEAF_RAW(n);
-            // Check if the expanded path matches
-            if (!str_prefix_matches((art_leaf*)n, str, str_len)) {
-                found = (art_leaf*)n;
-			}
-            break;
-        }
-
-        // Check if current is leaf
-    	child = find_child(n, 0);
-    	m = (child) ? *child : NULL;
-    	if (m && IS_LEAF(m)) {
-            m = (art_node*)LEAF_RAW(m);
-            // Check if the expanded path matches
-            if (!str_prefix_matches((art_leaf*)m, str, str_len)) {
-                found = (art_leaf*)m;
-            }
-    	}
-
-        // Bail if the prefix does not match
-        if (n->partial_len) {
-            prefix_len = check_prefix(n, str, str_len, depth);
-            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
-                break;
-            depth = depth + n->partial_len;
-        }
-
-        // Recursively search
-        child = find_child(n, str[depth]);
-        n = (child) ? *child : NULL;
-        depth++;
-    }
-
-    if (found == NULL) {
-        return NULL;
-    }
-
-    art_copy_key(found, key, key_len);
-
-    return found->value;
-}
-
-void art_substring_walk(const art_tree *t, const unsigned char *str, int str_len, walk_func func, void *arg)
-{
-    art_node **child;
-    art_node *n = t->root;
-    art_node *m;    
-    art_leaf *found = NULL;
-    int prefix_len, depth = 0;
-	int stop_search = 0;
-
-	while (n && stop_search == 0) {
-        // Might be a leaf
-        if (IS_LEAF(n)) {
-            n = (art_node*)LEAF_RAW(n);
-            // Check if the expanded path matches
-            if (!str_prefix_matches((art_leaf*)n, str, str_len)) {
-                found = (art_leaf*)n;
-				stop_search = func(found->key, found->key_len, found->value, arg);
-			}
-            break;
-        }
-
-        // Check if current is leaf
-    	child = find_child(n, 0);
-    	m = (child) ? *child : NULL;
-    	if (m && IS_LEAF(m)) {
-            m = (art_node*)LEAF_RAW(m);
-            // Check if the expanded path matches
-            if (!str_prefix_matches((art_leaf*)m, str, str_len)) {
-                found = (art_leaf*)m;
-                stop_search = func(found->key, found->key_len, found->value, arg);
-            }
-    	}
-
-        // Bail if the prefix does not match
-        if (n->partial_len) {
-            prefix_len = check_prefix(n, str, str_len, depth);
-            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
-                break;
-            depth = depth + n->partial_len;
-        }
-
-        // Recursively search
-        child = find_child(n, str[depth]);
-        n = (child) ? *child : NULL;
-        depth++;
-    }
-
-    if (found == NULL) {
-        return ;
-    }
-
-    return ;
-}
+/*
+Copyright (c) 2012, Armon Dadgar
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the organization nor the
+      names of its contributors may be used to endorse or promote products
+      derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL ARMON DADGAR BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+#include <stdlib.h>
+#include <string.h>
+#include <strings.h>
+#include <stdio.h>
+#include <assert.h>
+#include "art.h"
+
+// #ifdef __i386__
+//     #include <emmintrin.h>
+// #else
+#ifdef __amd64__
+    #include <emmintrin.h>
+#endif
+// #endif
+
+/**
+ * Macros to manipulate pointer tags
+ */
+#define IS_LEAF(x) (((uintptr_t)x & 1))
+#define SET_LEAF(x) ((void*)((uintptr_t)x | 1))
+#define LEAF_RAW(x) ((art_leaf*)((void*)((uintptr_t)x & ~1)))
+
+/**
+ * Allocates a node of the given type,
+ * initializes to zero and sets the type.
+ */
+static art_node* alloc_node(uint8_t type) {
+    art_node* n;
+	void *mem = NULL;
+	switch (type) {
+        case NODE4:
+            mem = (art_node*)calloc(1, sizeof(art_node4));
+            break;
+        case NODE16:
+            mem = (art_node*)calloc(1, sizeof(art_node16));
+            break;
+        case NODE48:
+            mem = (art_node*)calloc(1, sizeof(art_node48));
+            break;
+        case NODE256:
+            mem = (art_node*)calloc(1, sizeof(art_node256));
+            break;
+        default:
+            abort();
+    }
+    if (mem == NULL) {
+		abort();
+	}
+	n = mem;
+	n->type = type;
+    return n;
+}
+
+/**
+ * Initializes an ART tree
+ * @return 0 on success.
+ */
+int art_tree_init(art_tree *t) {
+    t->root = NULL;
+    t->size = 0;
+    return 0;
+}
+
+// Recursively destroys the tree
+static void destroy_node(art_node *n) {
+    // Break if null
+    if (!n) return;
+
+    // Special case leafs
+    if (IS_LEAF(n)) {
+        free(LEAF_RAW(n));
+        return;
+    }
+
+    // Handle each node type
+    int i, idx;
+    union {
+        art_node4 *p1;
+        art_node16 *p2;
+        art_node48 *p3;
+        art_node256 *p4;
+    } p;
+    switch (n->type) {
+        case NODE4:
+            p.p1 = (art_node4*)n;
+            for (i=0;i<n->num_children;i++) {
+                destroy_node(p.p1->children[i]);
+            }
+            break;
+
+        case NODE16:
+            p.p2 = (art_node16*)n;
+            for (i=0;i<n->num_children;i++) {
+                destroy_node(p.p2->children[i]);
+            }
+            break;
+
+        case NODE48:
+            p.p3 = (art_node48*)n;
+            for (i=0;i<256;i++) {
+                idx = ((art_node48*)n)->keys[i]; 
+                if (!idx) continue; 
+                destroy_node(p.p3->children[idx-1]);
+            }
+            break;
+
+        case NODE256:
+            p.p4 = (art_node256*)n;
+            for (i=0;i<256;i++) {
+                if (p.p4->children[i])
+                    destroy_node(p.p4->children[i]);
+            }
+            break;
+
+        default:
+            abort();
+    }
+
+    // Free ourself on the way up
+    free(n);
+}
+
+/**
+ * Destroys an ART tree
+ * @return 0 on success.
+ */
+int art_tree_destroy(art_tree *t) {
+    destroy_node(t->root);
+    return 0;
+}
+
+/**
+ * Returns the size of the ART tree.
+ */
+
+#ifndef BROKEN_GCC_C99_INLINE
+extern inline uint64_t art_size(art_tree *t);
+#endif
+
+static art_node** find_child(art_node *n, unsigned char c) {
+    int i, mask, bitfield;
+    union {
+        art_node4 *p1;
+        art_node16 *p2;
+        art_node48 *p3;
+        art_node256 *p4;
+    } p;
+    switch (n->type) {
+        case NODE4:
+            p.p1 = (art_node4*)n;
+            for (i=0 ; i < n->num_children; i++) {
+        /* this cast works around a bug in gcc 5.1 when unrolling loops
+         * https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59124
+         */
+                if (((unsigned char*)p.p1->keys)[i] == c)
+                    return &p.p1->children[i];
+            }
+            break;
+
+        {
+        case NODE16:
+            p.p2 = (art_node16*)n;
+
+            // support non-86 architectures
+
+            // #ifdef __i386__
+            //     // Compare the key to all 16 stored keys
+            //     __m128i cmp;
+            //     cmp = _mm_cmpeq_epi8(_mm_set1_epi8(c),
+            //             _mm_loadu_si128((__m128i*)p.p2->keys));
+                
+            //     // Use a mask to ignore children that don't exist
+            //     mask = (1 << n->num_children) - 1;
+            //     bitfield = _mm_movemask_epi8(cmp) & mask;
+            // #else
+            #ifdef __amd64__
+                // Compare the key to all 16 stored keys
+                __m128i cmp;
+                cmp = _mm_cmpeq_epi8(_mm_set1_epi8(c),
+                        _mm_loadu_si128((__m128i*)p.p2->keys));
+
+                // Use a mask to ignore children that don't exist
+                mask = (1 << n->num_children) - 1;
+                bitfield = _mm_movemask_epi8(cmp) & mask;
+            #else
+                // Compare the key to all 16 stored keys
+                bitfield = 0;
+                for (i = 0; i < 16; ++i) {
+                    if (p.p2->keys[i] == c)
+                        bitfield |= (1 << i);
+                }
+
+                // Use a mask to ignore children that don't exist
+                mask = (1 << n->num_children) - 1;
+                bitfield &= mask;
+            #endif
+            // #endif
+
+            /*
+             * If we have a match (any bit set) then we can
+             * return the pointer match using ctz to get
+             * the index.
+             */
+            if (bitfield)
+                return &p.p2->children[__builtin_ctz(bitfield)];
+            break;
+        }
+
+        case NODE48:
+            p.p3 = (art_node48*)n;
+            i = p.p3->keys[c];
+            if (i)
+                return &p.p3->children[i-1];
+            break;
+
+        case NODE256:
+            p.p4 = (art_node256*)n;
+            if (p.p4->children[c])
+                return &p.p4->children[c];
+            break;
+
+        default:
+            abort();
+    }
+    return NULL;
+}
+
+// Simple inlined if
+static inline int min(int a, int b) {
+    return (a < b) ? a : b;
+}
+
+/**
+ * Returns the number of prefix characters shared between
+ * the key and node.
+ */
+static int check_prefix(const art_node *n, const unsigned char *key, int key_len, int depth) {
+    int max_cmp = min(min(n->partial_len, MAX_PREFIX_LEN), key_len - depth);
+    int idx;
+    for (idx=0; idx < max_cmp; idx++) {
+        if (n->partial[idx] != key[depth+idx])
+            return idx;
+    }
+    return idx;
+}
+
+/**
+ * Checks if a leaf matches
+ * @return 0 on success.
+ */
+static int leaf_matches(const art_leaf *n, const unsigned char *key, int key_len, int depth) {
+    (void)depth;
+    // Fail if the key lengths are different
+    if (n->key_len != (uint32_t)key_len) return 1;
+
+    // Compare the keys starting at the depth
+    return memcmp(n->key, key, key_len);
+}
+
+/**
+ * Searches for a value in the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+void* art_search(const art_tree *t, const unsigned char *key, int key_len) {
+    art_node **child;
+    art_node *n = t->root;
+    int prefix_len, depth = 0;
+    while (n) {
+        // Might be a leaf
+        if (IS_LEAF(n)) {
+            n = (art_node*)LEAF_RAW(n);
+            // Check if the expanded path matches
+            if (!leaf_matches((art_leaf*)n, key, key_len, depth)) {
+                return ((art_leaf*)n)->value;
+            }
+            return NULL;
+        }
+
+        // Bail if the prefix does not match
+        if (n->partial_len) {
+            prefix_len = check_prefix(n, key, key_len, depth);
+            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
+                return NULL;
+            depth = depth + n->partial_len;
+        }
+
+        // Recursively search
+        child = find_child(n, key[depth]);
+        n = (child) ? *child : NULL;
+        depth++;
+    }
+    return NULL;
+}
+
+// Find the minimum leaf under a node
+static art_leaf* minimum(const art_node *n) {
+    // Handle base cases
+    if (!n) return NULL;
+    if (IS_LEAF(n)) return LEAF_RAW(n);
+
+    int idx;
+    switch (n->type) {
+        case NODE4:
+            return minimum(((const art_node4*)n)->children[0]);
+        case NODE16:
+            return minimum(((const art_node16*)n)->children[0]);
+        case NODE48:
+            idx=0;
+            while (!((const art_node48*)n)->keys[idx]) idx++;
+            idx = ((const art_node48*)n)->keys[idx] - 1;
+            return minimum(((const art_node48*)n)->children[idx]);
+        case NODE256:
+            idx=0;
+            while (!((const art_node256*)n)->children[idx]) idx++;
+            return minimum(((const art_node256*)n)->children[idx]);
+        default:
+            abort();
+    }
+}
+
+// Find the maximum leaf under a node
+static art_leaf* maximum(const art_node *n) {
+    // Handle base cases
+    if (!n) return NULL;
+    if (IS_LEAF(n)) return LEAF_RAW(n);
+
+    int idx;
+    switch (n->type) {
+        case NODE4:
+            return maximum(((const art_node4*)n)->children[n->num_children-1]);
+        case NODE16:
+            return maximum(((const art_node16*)n)->children[n->num_children-1]);
+        case NODE48:
+            idx=255;
+            while (!((const art_node48*)n)->keys[idx]) idx--;
+            idx = ((const art_node48*)n)->keys[idx] - 1;
+            return maximum(((const art_node48*)n)->children[idx]);
+        case NODE256:
+            idx=255;
+            while (!((const art_node256*)n)->children[idx]) idx--;
+            return maximum(((const art_node256*)n)->children[idx]);
+        default:
+            abort();
+    }
+}
+
+/**
+ * Returns the minimum valued leaf
+ */
+art_leaf* art_minimum(art_tree *t) {
+    return minimum((art_node*)t->root);
+}
+
+/**
+ * Returns the maximum valued leaf
+ */
+art_leaf* art_maximum(art_tree *t) {
+    return maximum((art_node*)t->root);
+}
+
+static art_leaf* make_leaf(const unsigned char *key, int key_len, void *value) {
+    art_leaf *l = (art_leaf*)calloc(1, sizeof(art_leaf)+key_len+1);
+    if (l == NULL) {
+		return NULL;
+	}
+    
+    l->value = value;
+    l->key_len = key_len;
+    memcpy(l->key, key, key_len);
+    return l;
+}
+
+static int longest_common_prefix(art_leaf *l1, art_leaf *l2, int depth) {
+    int max_cmp = min(l1->key_len, l2->key_len) - depth;
+    int idx;
+    for (idx=0; idx < max_cmp; idx++) {
+        if (l1->key[depth+idx] != l2->key[depth+idx])
+            return idx;
+    }
+    return idx;
+}
+
+static void copy_header(art_node *dest, art_node *src) {
+    dest->num_children = src->num_children;
+    dest->partial_len = src->partial_len;
+    memcpy(dest->partial, src->partial, min(MAX_PREFIX_LEN, src->partial_len));
+}
+
+static void add_child256(art_node256 *n, art_node **ref, unsigned char c, void *child) {
+    (void)ref;
+    n->n.num_children++;
+    n->children[c] = (art_node*)child;
+}
+
+static void add_child48(art_node48 *n, art_node **ref, unsigned char c, void *child) {
+    if (n->n.num_children < 48) {
+        int pos = 0;
+        while (n->children[pos]) pos++;
+        n->children[pos] = (art_node*)child;
+        n->keys[c] = pos + 1;
+        n->n.num_children++;
+    } else {
+        art_node256 *new_node = (art_node256*)alloc_node(NODE256);
+        int i;
+        for (i=0;i<256;i++) {
+            if (n->keys[i]) {
+                new_node->children[i] = n->children[n->keys[i] - 1];
+            }
+        }
+        copy_header((art_node*)new_node, (art_node*)n);
+        *ref = (art_node*)new_node;
+        free(n);
+        add_child256(new_node, ref, c, child);
+    }
+}
+
+static void add_child16(art_node16 *n, art_node **ref, unsigned char c, void *child) {
+    if (n->n.num_children < 16) {
+        unsigned mask = (1 << n->n.num_children) - 1;
+        
+        // support non-x86 architectures
+        // #ifdef __i386__
+        //     __m128i cmp;
+
+        //     // Compare the key to all 16 stored keys
+        //     cmp = _mm_cmplt_epi8(_mm_set1_epi8(c),
+        //             _mm_loadu_si128((__m128i*)n->keys));
+
+        //     // Use a mask to ignore children that don't exist
+        //     unsigned bitfield = _mm_movemask_epi8(cmp) & mask;
+        // #else
+        #ifdef __amd64__
+            __m128i cmp;
+
+            // Compare the key to all 16 stored keys
+            cmp = _mm_cmplt_epi8(_mm_set1_epi8(c),
+                    _mm_loadu_si128((__m128i*)n->keys));
+
+            // Use a mask to ignore children that don't exist
+            unsigned bitfield = _mm_movemask_epi8(cmp) & mask;
+        #else
+            // Compare the key to all 16 stored keys
+            unsigned bitfield = 0;
+            int i;
+            for (i = 0; i < 16; ++i) {
+                if (c < n->keys[i])
+                    bitfield |= (1 << i);
+            }
+
+            // Use a mask to ignore children that don't exist
+            bitfield &= mask;    
+        #endif
+        // #endif
+
+        // Check if less than any
+        unsigned idx;
+        if (bitfield) {
+            idx = __builtin_ctz(bitfield);
+            memmove(n->keys+idx+1,n->keys+idx,n->n.num_children-idx);
+            memmove(n->children+idx+1,n->children+idx,
+                    (n->n.num_children-idx)*sizeof(void*));
+        } else
+            idx = n->n.num_children;
+
+        // Set the child
+        n->keys[idx] = c;
+        n->children[idx] = (art_node*)child;
+        n->n.num_children++;
+
+    } else {
+        art_node48 *new_node = (art_node48*)alloc_node(NODE48);
+        int i;
+
+        // Copy the child pointers and populate the key map
+        memcpy(new_node->children, n->children,
+                sizeof(void*)*n->n.num_children);
+        for (i=0;i<n->n.num_children;i++) {
+            new_node->keys[n->keys[i]] = i + 1;
+        }
+        copy_header((art_node*)new_node, (art_node*)n);
+        *ref = (art_node*)new_node;
+        free(n);
+        add_child48(new_node, ref, c, child);
+    }
+}
+
+static void add_child4(art_node4 *n, art_node **ref, unsigned char c, void *child) {
+    if (n->n.num_children < 4) {
+        int idx;
+        for (idx=0; idx < n->n.num_children; idx++) {
+            if (c < n->keys[idx]) break;
+        }
+
+        // Shift to make room
+        memmove(n->keys+idx+1, n->keys+idx, n->n.num_children - idx);
+        memmove(n->children+idx+1, n->children+idx,
+                (n->n.num_children - idx)*sizeof(void*));
+
+        // Insert element
+        n->keys[idx] = c;
+        n->children[idx] = (art_node*)child;
+        n->n.num_children++;
+
+    } else {
+        art_node16 *new_node = (art_node16*)alloc_node(NODE16);
+
+        // Copy the child pointers and the key map
+        memcpy(new_node->children, n->children,
+                sizeof(void*)*n->n.num_children);
+        memcpy(new_node->keys, n->keys,
+                sizeof(unsigned char)*n->n.num_children);
+        copy_header((art_node*)new_node, (art_node*)n);
+        *ref = (art_node*)new_node;
+        free(n);
+        add_child16(new_node, ref, c, child);
+    }
+}
+
+static void add_child(art_node *n, art_node **ref, unsigned char c, void *child) {
+    switch (n->type) {
+        case NODE4:
+            return add_child4((art_node4*)n, ref, c, child);
+        case NODE16:
+            return add_child16((art_node16*)n, ref, c, child);
+        case NODE48:
+            return add_child48((art_node48*)n, ref, c, child);
+        case NODE256:
+            return add_child256((art_node256*)n, ref, c, child);
+        default:
+            abort();
+    }
+}
+
+/**
+ * Calculates the index at which the prefixes mismatch
+ */
+static int prefix_mismatch(const art_node *n, const unsigned char *key, int key_len, int depth) {
+    int max_cmp = min(min(MAX_PREFIX_LEN, n->partial_len), key_len - depth);
+    int idx;
+    for (idx=0; idx < max_cmp; idx++) {
+        if (n->partial[idx] != key[depth+idx])
+            return idx;
+    }
+
+    // If the prefix is short we can avoid finding a leaf
+    if (n->partial_len > MAX_PREFIX_LEN) {
+        // Prefix is longer than what we've checked, find a leaf
+        art_leaf *l = minimum(n);
+        max_cmp = min(l->key_len, key_len)- depth;
+        for (; idx < max_cmp; idx++) {
+            if (l->key[idx+depth] != key[depth+idx])
+                return idx;
+        }
+    }
+    return idx;
+}
+
+static void* recursive_insert(art_node *n, art_node **ref, const unsigned char *key, int key_len, void *value, int depth, int *old) {
+    // If we are at a NULL node, inject a leaf
+    if (!n) {
+        *ref = (art_node*)SET_LEAF(make_leaf(key, key_len, value));
+        return NULL;
+    }
+
+    // If we are at a leaf, we need to replace it with a node
+    if (IS_LEAF(n)) {
+        art_leaf *l = LEAF_RAW(n);
+
+        // Check if we are updating an existing value
+        if (!leaf_matches(l, key, key_len, depth)) {
+            *old = 1;
+            void *old_val = l->value;
+            l->value = value;
+            return old_val;
+        }
+
+        // New value, we must split the leaf into a node4
+        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
+
+        // Create a new leaf
+        art_leaf *l2 = make_leaf(key, key_len, value);
+
+        // Determine longest prefix
+        int longest_prefix = longest_common_prefix(l, l2, depth);
+        new_node->n.partial_len = longest_prefix;
+        memcpy(new_node->n.partial, key+depth, min(MAX_PREFIX_LEN, longest_prefix));
+        // Add the leafs to the new node4
+        *ref = (art_node*)new_node;
+        add_child4(new_node, ref, l->key[depth+longest_prefix], SET_LEAF(l));
+        add_child4(new_node, ref, l2->key[depth+longest_prefix], SET_LEAF(l2));
+        return NULL;
+    }
+
+    // Check if given node has a prefix
+    if (n->partial_len) {
+        // Determine if the prefixes differ, since we need to split
+        int prefix_diff = prefix_mismatch(n, key, key_len, depth);
+        if ((uint32_t)prefix_diff >= n->partial_len) {
+            depth += n->partial_len;
+            goto RECURSE_SEARCH;
+        }
+
+        // Create a new node
+        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
+        *ref = (art_node*)new_node;
+        new_node->n.partial_len = prefix_diff;
+        memcpy(new_node->n.partial, n->partial, min(MAX_PREFIX_LEN, prefix_diff));
+
+        // Adjust the prefix of the old node
+        if (n->partial_len <= MAX_PREFIX_LEN) {
+            add_child4(new_node, ref, n->partial[prefix_diff], n);
+            n->partial_len -= (prefix_diff+1);
+            memmove(n->partial, n->partial+prefix_diff+1,
+                    min(MAX_PREFIX_LEN, n->partial_len));
+        } else {
+            n->partial_len -= (prefix_diff+1);
+            art_leaf *l = minimum(n);
+            add_child4(new_node, ref, l->key[depth+prefix_diff], n);
+            memcpy(n->partial, l->key+depth+prefix_diff+1,
+                    min(MAX_PREFIX_LEN, n->partial_len));
+        }
+
+        // Insert the new leaf
+        art_leaf *l = make_leaf(key, key_len, value);
+        add_child4(new_node, ref, key[depth+prefix_diff], SET_LEAF(l));
+        return NULL;
+    }
+
+RECURSE_SEARCH:;
+
+    // Find a child to recurse to
+    art_node **child = find_child(n, key[depth]);
+    if (child) {
+        return recursive_insert(*child, child, key, key_len, value, depth+1, old);
+    }
+
+    // No child, node goes within us
+    art_leaf *l = make_leaf(key, key_len, value);
+    add_child(n, ref, key[depth], SET_LEAF(l));
+    return NULL;
+}
+
+/**
+ * Inserts a new value into the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @arg value Opaque value.
+ * @return NULL if the item was newly inserted, otherwise
+ * the old value pointer is returned.
+ */
+void* art_insert(art_tree *t, const unsigned char *key, int key_len, void *value) {
+    int old_val = 0;
+    void *old = recursive_insert(t->root, &t->root, key, key_len, value, 0, &old_val);
+    if (!old_val) t->size++;
+    return old;
+}
+
+static void remove_child256(art_node256 *n, art_node **ref, unsigned char c) {
+    n->children[c] = NULL;
+    n->n.num_children--;
+
+    // Resize to a node48 on underflow, not immediately to prevent
+    // trashing if we sit on the 48/49 boundary
+    if (n->n.num_children == 37) {
+        art_node48 *new_node = (art_node48*)alloc_node(NODE48);
+        *ref = (art_node*)new_node;
+        copy_header((art_node*)new_node, (art_node*)n);
+
+        int pos = 0;
+        int i;
+        for (i=0;i<256;i++) {
+            if (n->children[i]) {
+                new_node->children[pos] = n->children[i];
+                new_node->keys[i] = pos + 1;
+                pos++;
+            }
+        }
+        free(n);
+    }
+}
+
+static void remove_child48(art_node48 *n, art_node **ref, unsigned char c) {
+    int pos = n->keys[c];
+    n->keys[c] = 0;
+    n->children[pos-1] = NULL;
+    n->n.num_children--;
+
+    if (n->n.num_children == 12) {
+        art_node16 *new_node = (art_node16*)alloc_node(NODE16);
+        *ref = (art_node*)new_node;
+        copy_header((art_node*)new_node, (art_node*)n);
+
+        int child = 0;
+        int i;
+        for (i=0;i<256;i++) {
+            pos = n->keys[i];
+            if (pos) {
+                new_node->keys[child] = i;
+                new_node->children[child] = n->children[pos - 1];
+                child++;
+            }
+        }
+        free(n);
+    }
+}
+
+static void remove_child16(art_node16 *n, art_node **ref, art_node **l) {
+    int pos = l - n->children;
+    memmove(n->keys+pos, n->keys+pos+1, n->n.num_children - 1 - pos);
+    memmove(n->children+pos, n->children+pos+1, (n->n.num_children - 1 - pos)*sizeof(void*));
+    n->n.num_children--;
+
+    if (n->n.num_children == 3) {
+        art_node4 *new_node = (art_node4*)alloc_node(NODE4);
+        *ref = (art_node*)new_node;
+        copy_header((art_node*)new_node, (art_node*)n);
+        memcpy(new_node->keys, n->keys, 4);
+        memcpy(new_node->children, n->children, 4*sizeof(void*));
+        free(n);
+    }
+}
+
+static void remove_child4(art_node4 *n, art_node **ref, art_node **l) {
+    int pos = l - n->children;
+    memmove(n->keys+pos, n->keys+pos+1, n->n.num_children - 1 - pos);
+    memmove(n->children+pos, n->children+pos+1, (n->n.num_children - 1 - pos)*sizeof(void*));
+    n->n.num_children--;
+
+    // Remove nodes with only a single child
+    if (n->n.num_children == 1) {
+        art_node *child = n->children[0];
+        if (!IS_LEAF(child)) {
+            // Concatenate the prefixes
+            int prefix = n->n.partial_len;
+            if (prefix < MAX_PREFIX_LEN) {
+                n->n.partial[prefix] = n->keys[0];
+                prefix++;
+            }
+            if (prefix < MAX_PREFIX_LEN) {
+                int sub_prefix = min(child->partial_len, MAX_PREFIX_LEN - prefix);
+                memcpy(n->n.partial+prefix, child->partial, sub_prefix);
+                prefix += sub_prefix;
+            }
+
+            // Store the prefix in the child
+            memcpy(child->partial, n->n.partial, min(prefix, MAX_PREFIX_LEN));
+            child->partial_len += n->n.partial_len + 1;
+        }
+        *ref = child;
+        free(n);
+    }
+}
+
+static void remove_child(art_node *n, art_node **ref, unsigned char c, art_node **l) {
+    switch (n->type) {
+        case NODE4:
+            return remove_child4((art_node4*)n, ref, l);
+        case NODE16:
+            return remove_child16((art_node16*)n, ref, l);
+        case NODE48:
+            return remove_child48((art_node48*)n, ref, c);
+        case NODE256:
+            return remove_child256((art_node256*)n, ref, c);
+        default:
+            abort();
+    }
+}
+
+static art_leaf* recursive_delete(art_node *n, art_node **ref, const unsigned char *key, int key_len, int depth) {
+    // Search terminated
+    if (!n) return NULL;
+
+    // Handle hitting a leaf node
+    if (IS_LEAF(n)) {
+        art_leaf *l = LEAF_RAW(n);
+        if (!leaf_matches(l, key, key_len, depth)) {
+            *ref = NULL;
+            return l;
+        }
+        return NULL;
+    }
+
+    // Bail if the prefix does not match
+    if (n->partial_len) {
+        int prefix_len = check_prefix(n, key, key_len, depth);
+        if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len)) {
+            return NULL;
+        }
+        depth = depth + n->partial_len;
+    }
+
+    // Find child node
+    art_node **child = find_child(n, key[depth]);
+    if (!child) return NULL;
+
+    // If the child is leaf, delete from this node
+    if (IS_LEAF(*child)) {
+        art_leaf *l = LEAF_RAW(*child);
+        if (!leaf_matches(l, key, key_len, depth)) {
+            remove_child(n, ref, key[depth], child);
+            return l;
+        }
+        return NULL;
+
+    // Recurse
+    } else {
+        return recursive_delete(*child, child, key, key_len, depth+1);
+    }
+}
+
+/**
+ * Deletes a value from the ART tree
+ * @arg t The tree
+ * @arg key The key
+ * @arg key_len The length of the key
+ * @return NULL if the item was not found, otherwise
+ * the value pointer is returned.
+ */
+void* art_delete(art_tree *t, const unsigned char *key, int key_len) {
+    art_leaf *l = recursive_delete(t->root, &t->root, key, key_len, 0);
+    if (l) {
+        t->size--;
+        void *old = l->value;
+        free(l);
+        return old;
+    }
+    return NULL;
+}
+
+// Recursively iterates over the tree
+static int recursive_iter(art_node *n, art_callback cb, void *data) {
+    // Handle base cases
+    if (!n) return 0;
+    if (IS_LEAF(n)) {
+        art_leaf *l = LEAF_RAW(n);
+        return cb(data, (const unsigned char*)l->key, l->key_len, l->value);
+    }
+
+    int idx, res;
+    int i;
+    switch (n->type) {
+        case NODE4:
+            for (i=0; i < n->num_children; i++) {
+                res = recursive_iter(((art_node4*)n)->children[i], cb, data);
+                if (res) return res;
+            }
+            break;
+
+        case NODE16:
+            for (i=0; i < n->num_children; i++) {
+                res = recursive_iter(((art_node16*)n)->children[i], cb, data);
+                if (res) return res;
+            }
+            break;
+
+        case NODE48:
+            for (i=0; i < 256; i++) {
+                idx = ((art_node48*)n)->keys[i];
+                if (!idx) continue;
+
+                res = recursive_iter(((art_node48*)n)->children[idx-1], cb, data);
+                if (res) return res;
+            }
+            break;
+
+        case NODE256:
+            for (i=0; i < 256; i++) {
+                if (!((art_node256*)n)->children[i]) continue;
+                res = recursive_iter(((art_node256*)n)->children[i], cb, data);
+                if (res) return res;
+            }
+            break;
+
+        default:
+            abort();
+    }
+    return 0;
+}
+
+/**
+ * Iterates through the entries pairs in the map,
+ * invoking a callback for each. The call back gets a
+ * key, value for each and returns an integer stop value.
+ * If the callback returns non-zero, then the iteration stops.
+ * @arg t The tree to iterate over
+ * @arg cb The callback function to invoke
+ * @arg data Opaque handle passed to the callback
+ * @return 0 on success, or the return of the callback.
+ */
+int art_iter(art_tree *t, art_callback cb, void *data) {
+    return recursive_iter(t->root, cb, data);
+}
+
+/**
+ * Checks if a leaf prefix matches
+ * @return 0 on success.
+ */
+static int leaf_prefix_matches(const art_leaf *n, const unsigned char *prefix, int prefix_len) {
+    // Fail if the key length is too short
+    if (n->key_len < (uint32_t)prefix_len) return 1;
+
+    // Compare the keys
+    return memcmp(n->key, prefix, prefix_len);
+}
+
+/**
+ * Iterates through the entries pairs in the map,
+ * invoking a callback for each that matches a given prefix.
+ * The call back gets a key, value for each and returns an integer stop value.
+ * If the callback returns non-zero, then the iteration stops.
+ * @arg t The tree to iterate over
+ * @arg prefix The prefix of keys to read
+ * @arg prefix_len The length of the prefix
+ * @arg cb The callback function to invoke
+ * @arg data Opaque handle passed to the callback
+ * @return 0 on success, or the return of the callback.
+ */
+int art_iter_prefix(art_tree *t, const unsigned char *key, int key_len, art_callback cb, void *data) {
+    art_node **child;
+    art_node *n = t->root;
+    int prefix_len, depth = 0;
+    while (n) {
+        // Might be a leaf
+        if (IS_LEAF(n)) {
+            n = (art_node*)LEAF_RAW(n);
+            // Check if the expanded path matches
+            if (!leaf_prefix_matches((art_leaf*)n, key, key_len)) {
+                art_leaf *l = (art_leaf*)n;
+                return cb(data, (const unsigned char*)l->key, l->key_len, l->value);
+            }
+            return 0;
+        }
+
+        // If the depth matches the prefix, we need to handle this node
+        if (depth == key_len) {
+            art_leaf *l = minimum(n);
+            if (!leaf_prefix_matches(l, key, key_len))
+               return recursive_iter(n, cb, data);
+            return 0;
+        }
+
+        // Bail if the prefix does not match
+        if (n->partial_len) {
+            prefix_len = prefix_mismatch(n, key, key_len, depth);
+
+            // Guard if the mis-match is longer than the MAX_PREFIX_LEN
+            if ((uint32_t)prefix_len > n->partial_len) {
+                prefix_len = n->partial_len;
+            }
+
+            // If there is no match, search is terminated
+            if (!prefix_len) {
+                return 0;
+
+            // If we've matched the prefix, iterate on this node
+            } else if (depth + prefix_len == key_len) {
+                return recursive_iter(n, cb, data);
+            }
+
+            // if there is a full match, go deeper
+            depth = depth + n->partial_len;
+        }
+
+        // Recursively search
+        child = find_child(n, key[depth]);
+        n = (child) ? *child : NULL;
+        depth++;
+    }
+    return 0;
+}
+
+static int str_prefix_matches(const art_leaf *n, const unsigned char *str, int str_len) {
+    // Fail if the key length is too short
+    if (n->key_len > (uint32_t)str_len) return 1;
+
+    // Compare the keys
+    return memcmp(str, n->key, n->key_len);
+}
+
+static void art_copy_key(art_leaf *leaf, unsigned char *key, int *key_len)
+{
+	int len;
+
+    if (key == NULL || key_len == NULL) {
+		return;
+	}
+
+	len = leaf->key_len > *key_len ? *key_len : leaf->key_len;
+	memcpy(key, leaf->key, len);
+	*key_len = len;
+}
+
+void *art_substring(const art_tree *t, const unsigned char *str, int str_len, unsigned char *key, int *key_len)
+{
+    art_node **child;
+    art_node *n = t->root;
+    art_node *m;    
+    art_leaf *found = NULL;
+    int prefix_len, depth = 0;
+
+    while (n) {
+        // Might be a leaf
+        if (IS_LEAF(n)) {
+            n = (art_node*)LEAF_RAW(n);
+            // Check if the expanded path matches
+            if (!str_prefix_matches((art_leaf*)n, str, str_len)) {
+                found = (art_leaf*)n;
+			}
+            break;
+        }
+
+        // Check if current is leaf
+    	child = find_child(n, 0);
+    	m = (child) ? *child : NULL;
+    	if (m && IS_LEAF(m)) {
+            m = (art_node*)LEAF_RAW(m);
+            // Check if the expanded path matches
+            if (!str_prefix_matches((art_leaf*)m, str, str_len)) {
+                found = (art_leaf*)m;
+            }
+    	}
+
+        // Bail if the prefix does not match
+        if (n->partial_len) {
+            prefix_len = check_prefix(n, str, str_len, depth);
+            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
+                break;
+            depth = depth + n->partial_len;
+        }
+
+        // Recursively search
+        child = find_child(n, str[depth]);
+        n = (child) ? *child : NULL;
+        depth++;
+    }
+
+    if (found == NULL) {
+        return NULL;
+    }
+
+    art_copy_key(found, key, key_len);
+
+    return found->value;
+}
+
+void art_substring_walk(const art_tree *t, const unsigned char *str, int str_len, walk_func func, void *arg)
+{
+    art_node **child;
+    art_node *n = t->root;
+    art_node *m;    
+    art_leaf *found = NULL;
+    int prefix_len, depth = 0;
+	int stop_search = 0;
+
+	while (n && stop_search == 0) {
+        // Might be a leaf
+        if (IS_LEAF(n)) {
+            n = (art_node*)LEAF_RAW(n);
+            // Check if the expanded path matches
+            if (!str_prefix_matches((art_leaf*)n, str, str_len)) {
+                found = (art_leaf*)n;
+				stop_search = func(found->key, found->key_len, found->value, arg);
+			}
+            break;
+        }
+
+        // Check if current is leaf
+    	child = find_child(n, 0);
+    	m = (child) ? *child : NULL;
+    	if (m && IS_LEAF(m)) {
+            m = (art_node*)LEAF_RAW(m);
+            // Check if the expanded path matches
+            if (!str_prefix_matches((art_leaf*)m, str, str_len)) {
+                found = (art_leaf*)m;
+                stop_search = func(found->key, found->key_len, found->value, arg);
+            }
+    	}
+
+        // Bail if the prefix does not match
+        if (n->partial_len) {
+            prefix_len = check_prefix(n, str, str_len, depth);
+            if (prefix_len != min(MAX_PREFIX_LEN, n->partial_len))
+                break;
+            depth = depth + n->partial_len;
+        }
+
+        // Recursively search
+        child = find_child(n, str[depth]);
+        n = (child) ? *child : NULL;
+        depth++;
+    }
+
+    if (found == NULL) {
+        return ;
+    }
+
+    return ;
+}
diff --git a/release/src/router/smartdns/src/lib/conf.c b/release/src/router/smartdns/src/lib/conf.c
index 23f244079b..88a89034b0 100644
--- a/release/src/router/smartdns/src/lib/conf.c
+++ b/release/src/router/smartdns/src/lib/conf.c
@@ -1,311 +1,311 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "conf.h"
-#include <getopt.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-static const char *currrent_conf_file = NULL;
-
-const char *conf_get_conf_file(void)
-{
-	return currrent_conf_file;
-}
-
-int conf_custom(const char *item, void *data, int argc, char *argv[])
-{
-	struct config_item_custom *item_custom = data;
-	return item_custom->custom_func(item_custom->custom_data, argc, argv);
-}
-
-int conf_int(const char *item, void *data, int argc, char *argv[])
-{
-	struct config_item_int *item_int = data;
-	int value = 0;
-	if (argc < 2) {
-		return -1;
-	}
-
-	value = atoi(argv[1]);
-
-	if (value < item_int->min) {
-		value = item_int->min;
-	} else if (value > item_int->max) {
-		value = item_int->max;
-	}
-
-	*(item_int->data) = value;
-
-	return 0;
-}
-
-int conf_string(const char *item, void *data, int argc, char *argv[])
-{
-	struct config_item_string *item_string = data;
-
-	if (argc < 2) {
-		return -1;
-	}
-
-	strncpy(item_string->data, argv[1], item_string->size);
-
-	return 0;
-}
-
-int conf_yesno(const char *item, void *data, int argc, char *argv[])
-{
-	struct config_item_yesno *item_yesno = data;
-	int yes = 0;
-
-	if (argc < 2) {
-		return -1;
-	}
-
-	char *value = argv[1];
-	if (strncmp("auto", value, sizeof("auto")) == 0 || strncmp("AUTO", value, sizeof("AUTO")) == 0) {
-		return 0;
-	}
-
-	if (strncmp("yes", value, sizeof("yes")) == 0 || strncmp("YES", value, sizeof("YES")) == 0) {
-		yes = 1;
-	} else if (strncmp("no", value, sizeof("no")) == 0 || strncmp("NO", value, sizeof("NO")) == 0) {
-		yes = 0;
-	}
-
-	*(item_yesno->data) = yes;
-
-	return 0;
-}
-
-int conf_size(const char *item, void *data, int argc, char *argv[])
-{
-	/* read dns cache size */
-	int base = 1;
-	size_t size = 0;
-	int num = 0;
-	struct config_item_size *item_size = data;
-	char *value = argv[1];
-
-	if (strstr(value, "k") || strstr(value, "K")) {
-		base = 1024;
-	} else if (strstr(value, "m") || strstr(value, "M")) {
-		base = 1024 * 1024;
-	} else if (strstr(value, "g") || strstr(value, "G")) {
-		base = 1024 * 1024 * 1024;
-	}
-
-	num = atoi(value);
-	if (num < 0) {
-		return -1;
-	}
-
-	size = num * base;
-	if (size > item_size->max) {
-		size = item_size->max;
-	} else if (size < item_size->min) {
-		size = item_size->min;
-	}
-
-	*(item_size->data) = size;
-
-	return 0;
-}
-
-void conf_getopt_reset(void)
-{
-	static struct option long_options[] = {{"-", 0, 0, 0}, {0, 0, 0, 0}};
-	int argc = 2;
-	char *argv[3] = {"reset", "", 0};
-
-	optind = 0;
-	opterr = 0;
-	optopt = 0;
-	getopt_long(argc, argv, "", long_options, NULL);
-	optind = 0;
-	opterr = 0;
-	optopt = 0;
-}
-
-int conf_parse_args(char *key, char *value, int *argc, char **argv)
-{
-	char *start = NULL;
-	char *ptr = value;
-	int count = 0;
-	int sep_flag = ' ';
-
-	argv[0] = key;
-	count++;
-
-	while (*ptr != '\0') {
-		if (*ptr == '\\') {
-			char *tmp = ptr + 1;
-			while (*tmp != '\0') {
-				*(tmp - 1) = *tmp;
-				tmp++;
-			}
-			ptr++;
-			continue;
-		}
-
-		if (*ptr == '"' && start == NULL) {
-			sep_flag = '"';
-			start = NULL;
-		}
-
-		if (*ptr != sep_flag && start == NULL) {
-			start = ptr;
-			ptr++;
-			continue;
-		}
-
-		if (*ptr == sep_flag && start == NULL) {
-			ptr++;
-			continue;
-		}
-
-		if (*ptr == sep_flag && start) {
-			argv[count] = start;
-			*ptr = '\0';
-			ptr++;
-			count++;
-			sep_flag = ' ';
-			start = NULL;
-			continue;
-		}
-
-		ptr++;
-	}
-
-	if (start != ptr && start) {
-		argv[count] = start;
-		count++;
-	}
-
-	*argc = count;
-	argv[count] = 0;
-
-	return 0;
-}
-
-void load_exit(void)
-{
-	return;
-}
-
-int load_conf_printf(const char *file, int lineno, int ret)
-{
-	if (ret != CONF_RET_OK) {
-		printf("process config file '%s' failed at line %d.", file, lineno);
-		if (ret == CONF_RET_ERR || ret == CONF_RET_NOENT) {
-			return -1;
-		}
-
-		return 0;
-	}
-
-	return 0;
-}
-
-int load_conf_file(const char *file, struct config_item *items, conf_error_handler handler)
-{
-	FILE *fp = NULL;
-	char line[MAX_LINE_LEN];
-	char key[MAX_KEY_LEN];
-	char value[MAX_LINE_LEN];
-	int filed_num = 0;
-	int i;
-	int argc;
-	char *argv[1024];
-	int ret = 0;
-	int call_ret = 0;
-	int line_no = 0;
-
-	if (handler == NULL) {
-		handler = load_conf_printf;
-	}
-
-	fp = fopen(file, "r");
-	if (fp == NULL) {
-		return -1;
-	}
-
-	line_no = 0;
-	while (fgets(line, MAX_LINE_LEN, fp)) {
-		line_no++;
-		filed_num = sscanf(line, "%63s %1023[^\r\n]s", key, value);
-		if (filed_num <= 0) {
-			continue;
-		}
-
-		/* comment, skip */
-		if (key[0] == '#') {
-			continue;
-		}
-
-		/* if field format is not key = value, error */
-		if (filed_num != 2) {
-			goto errout;
-		}
-
-		for (i = 0;; i++) {
-			if (items[i].item == NULL) {
-				handler(file, line_no, CONF_RET_NOENT);
-				break;
-			}
-
-			if (strncmp(items[i].item, key, MAX_KEY_LEN) != 0) {
-				continue;
-			}
-
-			if (conf_parse_args(key, value, &argc, argv) != 0) {
-				continue;
-			}
-
-			conf_getopt_reset();
-			/* call item function */
-			currrent_conf_file = file;
-			call_ret = items[i].item_func(items[i].item, items[i].data, argc, argv);
-			ret = handler(file, line_no, call_ret);
-			if (ret != 0) {
-				conf_getopt_reset();
-				goto errout;
-			}
-
-			conf_getopt_reset();
-
-			break;
-		}
-	}
-
-	fclose(fp);
-
-	return 0;
-errout:
-	if (fp) {
-		fclose(fp);
-	}
-	return -1;
-}
-
-int load_conf(const char *file, struct config_item items[], conf_error_handler handler)
-{
-	return load_conf_file(file, items, handler);
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "conf.h"
+#include <getopt.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+static const char *currrent_conf_file = NULL;
+
+const char *conf_get_conf_file(void)
+{
+	return currrent_conf_file;
+}
+
+int conf_custom(const char *item, void *data, int argc, char *argv[])
+{
+	struct config_item_custom *item_custom = data;
+	return item_custom->custom_func(item_custom->custom_data, argc, argv);
+}
+
+int conf_int(const char *item, void *data, int argc, char *argv[])
+{
+	struct config_item_int *item_int = data;
+	int value = 0;
+	if (argc < 2) {
+		return -1;
+	}
+
+	value = atoi(argv[1]);
+
+	if (value < item_int->min) {
+		value = item_int->min;
+	} else if (value > item_int->max) {
+		value = item_int->max;
+	}
+
+	*(item_int->data) = value;
+
+	return 0;
+}
+
+int conf_string(const char *item, void *data, int argc, char *argv[])
+{
+	struct config_item_string *item_string = data;
+
+	if (argc < 2) {
+		return -1;
+	}
+
+	strncpy(item_string->data, argv[1], item_string->size);
+
+	return 0;
+}
+
+int conf_yesno(const char *item, void *data, int argc, char *argv[])
+{
+	struct config_item_yesno *item_yesno = data;
+	int yes = 0;
+
+	if (argc < 2) {
+		return -1;
+	}
+
+	char *value = argv[1];
+	if (strncmp("auto", value, sizeof("auto")) == 0 || strncmp("AUTO", value, sizeof("AUTO")) == 0) {
+		return 0;
+	}
+
+	if (strncmp("yes", value, sizeof("yes")) == 0 || strncmp("YES", value, sizeof("YES")) == 0) {
+		yes = 1;
+	} else if (strncmp("no", value, sizeof("no")) == 0 || strncmp("NO", value, sizeof("NO")) == 0) {
+		yes = 0;
+	}
+
+	*(item_yesno->data) = yes;
+
+	return 0;
+}
+
+int conf_size(const char *item, void *data, int argc, char *argv[])
+{
+	/* read dns cache size */
+	int base = 1;
+	size_t size = 0;
+	int num = 0;
+	struct config_item_size *item_size = data;
+	char *value = argv[1];
+
+	if (strstr(value, "k") || strstr(value, "K")) {
+		base = 1024;
+	} else if (strstr(value, "m") || strstr(value, "M")) {
+		base = 1024 * 1024;
+	} else if (strstr(value, "g") || strstr(value, "G")) {
+		base = 1024 * 1024 * 1024;
+	}
+
+	num = atoi(value);
+	if (num < 0) {
+		return -1;
+	}
+
+	size = num * base;
+	if (size > item_size->max) {
+		size = item_size->max;
+	} else if (size < item_size->min) {
+		size = item_size->min;
+	}
+
+	*(item_size->data) = size;
+
+	return 0;
+}
+
+void conf_getopt_reset(void)
+{
+	static struct option long_options[] = {{"-", 0, 0, 0}, {0, 0, 0, 0}};
+	int argc = 2;
+	char *argv[3] = {"reset", "", 0};
+
+	optind = 0;
+	opterr = 0;
+	optopt = 0;
+	getopt_long(argc, argv, "", long_options, NULL);
+	optind = 0;
+	opterr = 0;
+	optopt = 0;
+}
+
+int conf_parse_args(char *key, char *value, int *argc, char **argv)
+{
+	char *start = NULL;
+	char *ptr = value;
+	int count = 0;
+	int sep_flag = ' ';
+
+	argv[0] = key;
+	count++;
+
+	while (*ptr != '\0') {
+		if (*ptr == '\\') {
+			char *tmp = ptr + 1;
+			while (*tmp != '\0') {
+				*(tmp - 1) = *tmp;
+				tmp++;
+			}
+			ptr++;
+			continue;
+		}
+
+		if (*ptr == '"' && start == NULL) {
+			sep_flag = '"';
+			start = NULL;
+		}
+
+		if (*ptr != sep_flag && start == NULL) {
+			start = ptr;
+			ptr++;
+			continue;
+		}
+
+		if (*ptr == sep_flag && start == NULL) {
+			ptr++;
+			continue;
+		}
+
+		if (*ptr == sep_flag && start) {
+			argv[count] = start;
+			*ptr = '\0';
+			ptr++;
+			count++;
+			sep_flag = ' ';
+			start = NULL;
+			continue;
+		}
+
+		ptr++;
+	}
+
+	if (start != ptr && start) {
+		argv[count] = start;
+		count++;
+	}
+
+	*argc = count;
+	argv[count] = 0;
+
+	return 0;
+}
+
+void load_exit(void)
+{
+	return;
+}
+
+int load_conf_printf(const char *file, int lineno, int ret)
+{
+	if (ret != CONF_RET_OK) {
+		printf("process config file '%s' failed at line %d.", file, lineno);
+		if (ret == CONF_RET_ERR || ret == CONF_RET_NOENT) {
+			return -1;
+		}
+
+		return 0;
+	}
+
+	return 0;
+}
+
+int load_conf_file(const char *file, struct config_item *items, conf_error_handler handler)
+{
+	FILE *fp = NULL;
+	char line[MAX_LINE_LEN];
+	char key[MAX_KEY_LEN];
+	char value[MAX_LINE_LEN];
+	int filed_num = 0;
+	int i;
+	int argc;
+	char *argv[1024];
+	int ret = 0;
+	int call_ret = 0;
+	int line_no = 0;
+
+	if (handler == NULL) {
+		handler = load_conf_printf;
+	}
+
+	fp = fopen(file, "r");
+	if (fp == NULL) {
+		return -1;
+	}
+
+	line_no = 0;
+	while (fgets(line, MAX_LINE_LEN, fp)) {
+		line_no++;
+		filed_num = sscanf(line, "%63s %1023[^\r\n]s", key, value);
+		if (filed_num <= 0) {
+			continue;
+		}
+
+		/* comment, skip */
+		if (key[0] == '#') {
+			continue;
+		}
+
+		/* if field format is not key = value, error */
+		if (filed_num != 2) {
+			goto errout;
+		}
+
+		for (i = 0;; i++) {
+			if (items[i].item == NULL) {
+				handler(file, line_no, CONF_RET_NOENT);
+				break;
+			}
+
+			if (strncmp(items[i].item, key, MAX_KEY_LEN) != 0) {
+				continue;
+			}
+
+			if (conf_parse_args(key, value, &argc, argv) != 0) {
+				continue;
+			}
+
+			conf_getopt_reset();
+			/* call item function */
+			currrent_conf_file = file;
+			call_ret = items[i].item_func(items[i].item, items[i].data, argc, argv);
+			ret = handler(file, line_no, call_ret);
+			if (ret != 0) {
+				conf_getopt_reset();
+				goto errout;
+			}
+
+			conf_getopt_reset();
+
+			break;
+		}
+	}
+
+	fclose(fp);
+
+	return 0;
+errout:
+	if (fp) {
+		fclose(fp);
+	}
+	return -1;
+}
+
+int load_conf(const char *file, struct config_item items[], conf_error_handler handler)
+{
+	return load_conf_file(file, items, handler);
+}
diff --git a/release/src/router/smartdns/src/lib/radix.c b/release/src/router/smartdns/src/lib/radix.c
index 20dcd1e23a..7ffbd042c9 100644
--- a/release/src/router/smartdns/src/lib/radix.c
+++ b/release/src/router/smartdns/src/lib/radix.c
@@ -1,676 +1,676 @@
-/*
- * Copyright (c) 1999-2000
- *
- * The Regents of the University of Michigan ("The Regents") and
- * Merit Network, Inc. All rights reserved.  Redistribution and use
- * in source and binary forms, with or without modification, are
- * permitted provided that the following conditions are met:
- *
- * 1. Redistributions of source code must retain the above
- * copyright notice, this list of conditions and the
- * following disclaimer.
- *
- * 2. Redistributions in binary form must reproduce the above
- * copyright notice, this list of conditions and the
- * following disclaimer in the documentation and/or other
- * materials provided with the distribution.
- *
- * 3. All advertising materials mentioning features or use of
- * this software must display the following acknowledgement:
- *
- *   This product includes software developed by the University of
- *   Michigan, Merit Network, Inc., and their contributors.
- *
- * 4. Neither the name of the University, Merit Network, nor the
- * names of their contributors may be used to endorse or
- * promote products derived from this software without
- * specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS"
- * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
- * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
- * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL TH E REGENTS
- * OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
- * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HO WEVER CAUSED
- * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
- * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
- * POSSIBILITY OF SUCH DAMAGE.
- */
-/*
- * Portions Copyright (c) 2004,2005 Damien Miller <djm@mindrot.org>
- *
- * Permission to use, copy, modify, and distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
- * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
- * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
- * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
- */
-
-#include <sys/types.h>
-#include <stdlib.h>
-#include <stdio.h>
-#include <string.h>
-
-#include "radix.h"
-
-/* $Id: radix.c,v 1.17 2007/10/24 06:04:31 djm Exp $ */
-
-/*
- * Originally from MRT include/defs.h
- * $MRTId: defs.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
- */
-#define BIT_TEST(f, b)  ((f) & (b))
-
-/*
- * Originally from MRT include/mrt.h
- * $MRTId: mrt.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
- */
-#define prefix_tochar(prefix)		((char *)&(prefix)->add)
-#define prefix_touchar(prefix)		((unsigned char *)&(prefix)->add)
-
-/*
- * Originally from MRT lib/mrt/prefix.c
- * $MRTId: prefix.c,v 1.1.1.1 2000/08/14 18:46:11 labovit Exp $
- */
-
-static int
-comp_with_mask(unsigned char *addr, unsigned char *dest, unsigned int mask)
-{
-	if (memcmp(addr, dest, mask / 8) == 0) {
-		unsigned int n = mask / 8;
-		unsigned int m = ((~0) << (8 - (mask % 8)));
-
-		if (mask % 8 == 0 || (addr[n] & m) == (dest[n] & m))
-			return (1);
-	}
-	return (0);
-}
-
-static prefix_t 
-*New_Prefix2(int family, void *dest, int bitlen, prefix_t *prefix)
-{
-	int dynamic_allocated = 0;
-	int default_bitlen = 32;
-
-	if (family == AF_INET6) {
-		default_bitlen = 128;
-		if (prefix == NULL) {
-			if ((prefix = malloc(sizeof(*prefix))) == NULL)
-				return (NULL);
-			memset(prefix, '\0', sizeof(*prefix));
-			dynamic_allocated++;
-		}
-		memcpy(&prefix->add.sin6, dest, 16);
-	} else if (family == AF_INET) {
-		if (prefix == NULL) {
-			if ((prefix = malloc(sizeof(*prefix))) == NULL)
-				return (NULL);
-			memset(prefix, '\0', sizeof(*prefix));
-			dynamic_allocated++;
-		}
-		memcpy(&prefix->add.sin, dest, 4);
-	} else
-		return (NULL);
-
-	prefix->bitlen = (bitlen >= 0) ? bitlen : default_bitlen;
-	prefix->family = family;
-	prefix->ref_count = 0;
-	if (dynamic_allocated)
-		prefix->ref_count++;
-	return (prefix);
-}
-
-
-static prefix_t 
-*Ref_Prefix(prefix_t *prefix)
-{
-	if (prefix == NULL)
-		return (NULL);
-	if (prefix->ref_count == 0) {
-		/* make a copy in case of a static prefix */
-		return (New_Prefix2(prefix->family, &prefix->add,
-		    prefix->bitlen, NULL));
-	}
-	prefix->ref_count++;
-	return (prefix);
-}
-
-
-void
-Deref_Prefix(prefix_t *prefix)
-{
-	if (prefix == NULL)
-		return;
-	prefix->ref_count--;
-	if (prefix->ref_count <= 0) {
-		free(prefix);
-		return;
-	}
-}
-
-/*
- * Originally from MRT lib/radix/radix.c
- * $MRTId: radix.c,v 1.1.1.1 2000/08/14 18:46:13 labovit Exp $
- */
-
-/* these routines support continuous mask only */
-
-radix_tree_t
-*New_Radix(void)
-{
-	radix_tree_t *radix;
-
-	if ((radix = malloc(sizeof(*radix))) == NULL)
-		return (NULL);
-	memset(radix, '\0', sizeof(*radix));
-
-	radix->maxbits = 128;
-	radix->head = NULL;
-	radix->num_active_node = 0;
-	return (radix);
-}
-
-/*
- * if func is supplied, it will be called as func(node->data)
- * before deleting the node
- */
-static void
-Clear_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
-{
-	if (radix->head) {
-		radix_node_t *Xstack[RADIX_MAXBITS + 1];
-		radix_node_t **Xsp = Xstack;
-		radix_node_t *Xrn = radix->head;
-
-		while (Xrn) {
-			radix_node_t *l = Xrn->l;
-			radix_node_t *r = Xrn->r;
-
-			if (Xrn->prefix) {
-				Deref_Prefix(Xrn->prefix);
-				if (Xrn->data && func)
-					func(Xrn, cbctx);
-			}
-			free(Xrn);
-			radix->num_active_node--;
-
-			if (l) {
-				if (r)
-					*Xsp++ = r;
-				Xrn = l;
-			} else if (r) {
-				Xrn = r;
-			} else if (Xsp != Xstack) {
-				Xrn = *(--Xsp);
-			} else {
-				Xrn = (radix_node_t *) 0;
-			}
-		}
-	}
-}
-
-void
-Destroy_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
-{
-	if (radix == NULL) {
-		return;
-	}
-	Clear_Radix(radix, func, cbctx);
-	free(radix);
-}
-
-/*
- * if func is supplied, it will be called as func(node->prefix, node->data)
- */
-void
-radix_process(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
-{
-	radix_node_t *node;
-
-	RADIX_WALK(radix->head, node) {
-		func(node, cbctx);
-	} RADIX_WALK_END;
-}
-
-radix_node_t
-*radix_search_exact(radix_tree_t *radix, prefix_t *prefix)
-{
-	radix_node_t *node;
-	unsigned char *addr;
-	unsigned int bitlen;
-
-	if (radix->head == NULL)
-		return (NULL);
-
-	node = radix->head;
-	addr = prefix_touchar(prefix);
-	bitlen = prefix->bitlen;
-
-	while (node->bit < bitlen) {
-		if (BIT_TEST(addr[node->bit >> 3], 0x80 >> (node->bit & 0x07)))
-			node = node->r;
-		else
-			node = node->l;
-
-		if (node == NULL)
-			return (NULL);
-	}
-
-	if (node->bit > bitlen || node->prefix == NULL)
-		return (NULL);
-
-	if (comp_with_mask(prefix_touchar(node->prefix),
-	    prefix_touchar(prefix), bitlen))
-		return (node);
-
-	return (NULL);
-}
-
-
-/* if inclusive != 0, "best" may be the given prefix itself */
-static radix_node_t
-*radix_search_best2(radix_tree_t *radix, prefix_t *prefix, int inclusive)
-{
-	radix_node_t *node;
-	radix_node_t *stack[RADIX_MAXBITS + 1] = {0};
-	unsigned char *addr;
-	unsigned int bitlen;
-	int cnt = 0;
-
-	if (radix->head == NULL)
-		return (NULL);
-
-	node = radix->head;
-	addr = prefix_touchar(prefix);
-	bitlen = prefix->bitlen;
-
-	while (node->bit < bitlen) {
-		if (node->prefix)
-			stack[cnt++] = node;
-		if (BIT_TEST(addr[node->bit >> 3], 0x80 >> (node->bit & 0x07)))
-			node = node->r;
-		else
-			node = node->l;
-
-		if (node == NULL)
-			break;
-	}
-
-	if (inclusive && node && node->prefix)
-		stack[cnt++] = node;
-
-
-	if (cnt <= 0)
-		return (NULL);
-
-	while (--cnt >= 0) {
-		node = stack[cnt];
-		if (comp_with_mask(prefix_touchar(node->prefix),
-		    prefix_touchar(prefix), node->prefix->bitlen))
-			return (node);
-	}
-	return (NULL);
-}
-
-
-radix_node_t
-*radix_search_best(radix_tree_t *radix, prefix_t *prefix)
-{
-	return (radix_search_best2(radix, prefix, 1));
-}
-
-
-radix_node_t
-*radix_lookup(radix_tree_t *radix, prefix_t *prefix)
-{
-	radix_node_t *node, *new_node, *parent, *glue;
-	unsigned char *addr, *test_addr;
-	unsigned int bitlen, check_bit, differ_bit;
-	unsigned int i, j, r;
-
-	if (radix->head == NULL) {
-		if ((node = malloc(sizeof(*node))) == NULL)
-			return (NULL);
-		memset(node, '\0', sizeof(*node));
-		node->bit = prefix->bitlen;
-		node->prefix = Ref_Prefix(prefix);
-		node->parent = NULL;
-		node->l = node->r = NULL;
-		node->data = NULL;
-		radix->head = node;
-		radix->num_active_node++;
-		return (node);
-	}
-	addr = prefix_touchar(prefix);
-	bitlen = prefix->bitlen;
-	node = radix->head;
-
-	while (node->bit < bitlen || node->prefix == NULL) {
-		if (node->bit < radix->maxbits && BIT_TEST(addr[node->bit >> 3],
-		    0x80 >> (node->bit & 0x07))) {
-			if (node->r == NULL)
-				break;
-			node = node->r;
-		} else {
-			if (node->l == NULL)
-				break;
-			node = node->l;
-		}
-	}
-
-	test_addr = prefix_touchar(node->prefix);
-	/* find the first bit different */
-	check_bit = (node->bit < bitlen) ? node->bit : bitlen;
-	differ_bit = 0;
-	for (i = 0; i * 8 < check_bit; i++) {
-		if ((r = (addr[i] ^ test_addr[i])) == 0) {
-			differ_bit = (i + 1) * 8;
-			continue;
-		}
-		/* I know the better way, but for now */
-		for (j = 0; j < 8; j++) {
-			if (BIT_TEST(r, (0x80 >> j)))
-				break;
-		}
-		/* must be found */
-		differ_bit = i * 8 + j;
-		break;
-	}
-	if (differ_bit > check_bit)
-		differ_bit = check_bit;
-
-	parent = node->parent;
-	while (parent && parent->bit >= differ_bit) {
-		node = parent;
-		parent = node->parent;
-	}
-
-	if (differ_bit == bitlen && node->bit == bitlen) {
-		if (node->prefix == NULL)
-			node->prefix = Ref_Prefix(prefix);
-		return (node);
-	}
-	if ((new_node = malloc(sizeof(*new_node))) == NULL)
-		return (NULL);
-	memset(new_node, '\0', sizeof(*new_node));
-	new_node->bit = prefix->bitlen;
-	new_node->prefix = Ref_Prefix(prefix);
-	new_node->parent = NULL;
-	new_node->l = new_node->r = NULL;
-	new_node->data = NULL;
-	radix->num_active_node++;
-
-	if (node->bit == differ_bit) {
-		new_node->parent = node;
-		if (node->bit < radix->maxbits && BIT_TEST(addr[node->bit >> 3],
-		    0x80 >> (node->bit & 0x07)))
-			node->r = new_node;
-		else
-			node->l = new_node;
-
-		return (new_node);
-	}
-	if (bitlen == differ_bit) {
-		if (bitlen < radix->maxbits && BIT_TEST(test_addr[bitlen >> 3],
-		    0x80 >> (bitlen & 0x07)))
-			new_node->r = node;
-		else
-			new_node->l = node;
-
-		new_node->parent = node->parent;
-		if (node->parent == NULL)
-			radix->head = new_node;
-		else if (node->parent->r == node)
-			node->parent->r = new_node;
-		else
-			node->parent->l = new_node;
-
-		node->parent = new_node;
-	} else {
-		if ((glue = malloc(sizeof(*glue))) == NULL)
-			return (NULL);
-		memset(glue, '\0', sizeof(*glue));
-		glue->bit = differ_bit;
-		glue->prefix = NULL;
-		glue->parent = node->parent;
-		glue->data = NULL;
-		radix->num_active_node++;
-		if (differ_bit < radix->maxbits &&
-		    BIT_TEST(addr[differ_bit >> 3],
-		    0x80 >> (differ_bit & 0x07))) {
-			glue->r = new_node;
-			glue->l = node;
-		} else {
-			glue->r = node;
-			glue->l = new_node;
-		}
-		new_node->parent = glue;
-
-		if (node->parent == NULL)
-			radix->head = glue;
-		else if (node->parent->r == node)
-			node->parent->r = glue;
-		else
-			node->parent->l = glue;
-
-		node->parent = glue;
-	}
-	return (new_node);
-}
-
-
-void
-radix_remove(radix_tree_t *radix, radix_node_t *node)
-{
-	radix_node_t *parent, *child;
-
-	if (node->r && node->l) {
-		/*
-		 * this might be a placeholder node -- have to check and make
-		 * sure there is a prefix aossciated with it !
-		 */
-		if (node->prefix != NULL)
-			Deref_Prefix(node->prefix);
-		node->prefix = NULL;
-		/* Also I needed to clear data pointer -- masaki */
-		node->data = NULL;
-		return;
-	}
-	if (node->r == NULL && node->l == NULL) {
-		parent = node->parent;
-		Deref_Prefix(node->prefix);
-		free(node);
-		radix->num_active_node--;
-
-		if (parent == NULL) {
-			radix->head = NULL;
-			return;
-		}
-		if (parent->r == node) {
-			parent->r = NULL;
-			child = parent->l;
-		} else {
-			parent->l = NULL;
-			child = parent->r;
-		}
-
-		if (parent->prefix)
-			return;
-
-		/* we need to remove parent too */
-		if (parent->parent == NULL)
-			radix->head = child;
-		else if (parent->parent->r == parent)
-			parent->parent->r = child;
-		else
-			parent->parent->l = child;
-
-		child->parent = parent->parent;
-		free(parent);
-		radix->num_active_node--;
-		return;
-	}
-	if (node->r)
-		child = node->r;
-	else
-		child = node->l;
-
-	parent = node->parent;
-	child->parent = parent;
-
-	Deref_Prefix(node->prefix);
-	free(node);
-	radix->num_active_node--;
-
-	if (parent == NULL) {
-		radix->head = child;
-		return;
-	}
-	if (parent->r == node)
-		parent->r = child;
-	else
-		parent->l = child;
-}
-
-/* Local additions */
-static void
-sanitise_mask(unsigned char *addr, unsigned int masklen, unsigned int maskbits)
-{
-	unsigned int i = masklen / 8;
-	unsigned int j = masklen % 8;
-
-	if (j != 0) {
-		addr[i] &= (~0) << (8 - j);
-		i++;
-	}
-	for (; i < maskbits / 8; i++)
-		addr[i] = 0;
-}
-
-prefix_t
-*prefix_pton(const char *string, long len, prefix_t *prefix, const char **errmsg)
-{
-	char save[256], *cp, *ep;
-	struct addrinfo hints, *ai;
-	void *addr;
-	prefix_t *ret;
-	size_t slen;
-	int r;
-
-	ret = NULL;
-
-	/* Copy the string to parse, because we modify it */
-	if ((slen = strlen(string) + 1) > sizeof(save)) {
-		*errmsg = "string too long";
-		return (NULL);
-	}
-	memcpy(save, string, slen);
-
-	if ((cp = strchr(save, '/')) != NULL) {
-		if (len != -1 ) {
-			*errmsg = "masklen specified twice";
-			return (NULL);
-		}
-		*cp++ = '\0';
-		len = strtol(cp, &ep, 10);
-		if (*cp == '\0' || *ep != '\0' || len < 0) {
-			*errmsg = "could not parse masklen";
-			return (NULL);
-		}
-		/* More checks below */
-	}
-	memset(&hints, '\0', sizeof(hints));
-	hints.ai_flags = AI_NUMERICHOST;
-
-	if ((r = getaddrinfo(save, NULL, &hints, &ai)) != 0) {
-		snprintf(save, sizeof(save), "getaddrinfo: %s:",
-		    gai_strerror(r));
-		*errmsg = save;
-		return NULL;
-	}
-	if (ai == NULL || ai->ai_addr == NULL) {
-		*errmsg = "getaddrinfo returned no result";
-		goto out;
-	}
-	switch (ai->ai_addr->sa_family) {
-	case AF_INET:
-		if (len == -1)
-			len = 32;
-		else if (len < 0 || len > 32)
-			goto out;
-		addr = &((struct sockaddr_in *) ai->ai_addr)->sin_addr;
-		sanitise_mask(addr, len, 32);
-		break;
-	case AF_INET6:
-		if (len == -1)
-			len = 128;
-		else if (len < 0 || len > 128)
-			goto out;
-		addr = &((struct sockaddr_in6 *) ai->ai_addr)->sin6_addr;
-		sanitise_mask(addr, len, 128);
-		break;
-	default:
-		goto out;
-	}
-
-	ret = New_Prefix2(ai->ai_addr->sa_family, addr, len, prefix);
-	if (ret == NULL)
-		*errmsg = "New_Prefix2 failed";
-out:
-	freeaddrinfo(ai);
-	return (ret);
-}
-
-prefix_t
-*prefix_from_blob(unsigned char *blob, int len, int prefixlen, prefix_t *prefix)
-{
-	int family, maxprefix;
-
-	switch (len) {
-	case 4:
-		/* Assume AF_INET */
-		family = AF_INET;
-		maxprefix = 32;
-		break;
-	case 16:
-		/* Assume AF_INET6 */
-		family = AF_INET6;
-		maxprefix = 128;
-		break;
-	default:
-		/* Who knows? */
-		return NULL;
-	}
-	if (prefixlen == -1)
-		prefixlen = maxprefix;
-	if (prefixlen < 0 || prefixlen > maxprefix)
-		return NULL;
-	return (New_Prefix2(family, blob, prefixlen, prefix));
-}
-
-const char *
-prefix_addr_ntop(prefix_t *prefix, char *buf, size_t len)
-{
-	return (inet_ntop(prefix->family, &prefix->add, buf, len));
-}
-
-const char *
-prefix_ntop(prefix_t *prefix, char *buf, size_t len)
-{
-	char addrbuf[128];
-
-	if (prefix_addr_ntop(prefix, addrbuf, sizeof(addrbuf)) == NULL)
-		return (NULL);
-	snprintf(buf, len, "%s/%d", addrbuf, prefix->bitlen);
-
-	return (buf);
-}
+/*
+ * Copyright (c) 1999-2000
+ *
+ * The Regents of the University of Michigan ("The Regents") and
+ * Merit Network, Inc. All rights reserved.  Redistribution and use
+ * in source and binary forms, with or without modification, are
+ * permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above
+ * copyright notice, this list of conditions and the
+ * following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above
+ * copyright notice, this list of conditions and the
+ * following disclaimer in the documentation and/or other
+ * materials provided with the distribution.
+ *
+ * 3. All advertising materials mentioning features or use of
+ * this software must display the following acknowledgement:
+ *
+ *   This product includes software developed by the University of
+ *   Michigan, Merit Network, Inc., and their contributors.
+ *
+ * 4. Neither the name of the University, Merit Network, nor the
+ * names of their contributors may be used to endorse or
+ * promote products derived from this software without
+ * specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS"
+ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+ * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+ * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL TH E REGENTS
+ * OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+ * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HO WEVER CAUSED
+ * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
+ * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+/*
+ * Portions Copyright (c) 2004,2005 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <sys/types.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <string.h>
+
+#include "radix.h"
+
+/* $Id: radix.c,v 1.17 2007/10/24 06:04:31 djm Exp $ */
+
+/*
+ * Originally from MRT include/defs.h
+ * $MRTId: defs.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
+ */
+#define BIT_TEST(f, b)  ((f) & (b))
+
+/*
+ * Originally from MRT include/mrt.h
+ * $MRTId: mrt.h,v 1.1.1.1 2000/08/14 18:46:10 labovit Exp $
+ */
+#define prefix_tochar(prefix)		((char *)&(prefix)->add)
+#define prefix_touchar(prefix)		((unsigned char *)&(prefix)->add)
+
+/*
+ * Originally from MRT lib/mrt/prefix.c
+ * $MRTId: prefix.c,v 1.1.1.1 2000/08/14 18:46:11 labovit Exp $
+ */
+
+static int
+comp_with_mask(unsigned char *addr, unsigned char *dest, unsigned int mask)
+{
+	if (memcmp(addr, dest, mask / 8) == 0) {
+		unsigned int n = mask / 8;
+		unsigned int m = ((~0) << (8 - (mask % 8)));
+
+		if (mask % 8 == 0 || (addr[n] & m) == (dest[n] & m))
+			return (1);
+	}
+	return (0);
+}
+
+static prefix_t 
+*New_Prefix2(int family, void *dest, int bitlen, prefix_t *prefix)
+{
+	int dynamic_allocated = 0;
+	int default_bitlen = 32;
+
+	if (family == AF_INET6) {
+		default_bitlen = 128;
+		if (prefix == NULL) {
+			if ((prefix = malloc(sizeof(*prefix))) == NULL)
+				return (NULL);
+			memset(prefix, '\0', sizeof(*prefix));
+			dynamic_allocated++;
+		}
+		memcpy(&prefix->add.sin6, dest, 16);
+	} else if (family == AF_INET) {
+		if (prefix == NULL) {
+			if ((prefix = malloc(sizeof(*prefix))) == NULL)
+				return (NULL);
+			memset(prefix, '\0', sizeof(*prefix));
+			dynamic_allocated++;
+		}
+		memcpy(&prefix->add.sin, dest, 4);
+	} else
+		return (NULL);
+
+	prefix->bitlen = (bitlen >= 0) ? bitlen : default_bitlen;
+	prefix->family = family;
+	prefix->ref_count = 0;
+	if (dynamic_allocated)
+		prefix->ref_count++;
+	return (prefix);
+}
+
+
+static prefix_t 
+*Ref_Prefix(prefix_t *prefix)
+{
+	if (prefix == NULL)
+		return (NULL);
+	if (prefix->ref_count == 0) {
+		/* make a copy in case of a static prefix */
+		return (New_Prefix2(prefix->family, &prefix->add,
+		    prefix->bitlen, NULL));
+	}
+	prefix->ref_count++;
+	return (prefix);
+}
+
+
+void
+Deref_Prefix(prefix_t *prefix)
+{
+	if (prefix == NULL)
+		return;
+	prefix->ref_count--;
+	if (prefix->ref_count <= 0) {
+		free(prefix);
+		return;
+	}
+}
+
+/*
+ * Originally from MRT lib/radix/radix.c
+ * $MRTId: radix.c,v 1.1.1.1 2000/08/14 18:46:13 labovit Exp $
+ */
+
+/* these routines support continuous mask only */
+
+radix_tree_t
+*New_Radix(void)
+{
+	radix_tree_t *radix;
+
+	if ((radix = malloc(sizeof(*radix))) == NULL)
+		return (NULL);
+	memset(radix, '\0', sizeof(*radix));
+
+	radix->maxbits = 128;
+	radix->head = NULL;
+	radix->num_active_node = 0;
+	return (radix);
+}
+
+/*
+ * if func is supplied, it will be called as func(node->data)
+ * before deleting the node
+ */
+static void
+Clear_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
+{
+	if (radix->head) {
+		radix_node_t *Xstack[RADIX_MAXBITS + 1];
+		radix_node_t **Xsp = Xstack;
+		radix_node_t *Xrn = radix->head;
+
+		while (Xrn) {
+			radix_node_t *l = Xrn->l;
+			radix_node_t *r = Xrn->r;
+
+			if (Xrn->prefix) {
+				Deref_Prefix(Xrn->prefix);
+				if (Xrn->data && func)
+					func(Xrn, cbctx);
+			}
+			free(Xrn);
+			radix->num_active_node--;
+
+			if (l) {
+				if (r)
+					*Xsp++ = r;
+				Xrn = l;
+			} else if (r) {
+				Xrn = r;
+			} else if (Xsp != Xstack) {
+				Xrn = *(--Xsp);
+			} else {
+				Xrn = (radix_node_t *) 0;
+			}
+		}
+	}
+}
+
+void
+Destroy_Radix(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
+{
+	if (radix == NULL) {
+		return;
+	}
+	Clear_Radix(radix, func, cbctx);
+	free(radix);
+}
+
+/*
+ * if func is supplied, it will be called as func(node->prefix, node->data)
+ */
+void
+radix_process(radix_tree_t *radix, rdx_cb_t func, void *cbctx)
+{
+	radix_node_t *node;
+
+	RADIX_WALK(radix->head, node) {
+		func(node, cbctx);
+	} RADIX_WALK_END;
+}
+
+radix_node_t
+*radix_search_exact(radix_tree_t *radix, prefix_t *prefix)
+{
+	radix_node_t *node;
+	unsigned char *addr;
+	unsigned int bitlen;
+
+	if (radix->head == NULL)
+		return (NULL);
+
+	node = radix->head;
+	addr = prefix_touchar(prefix);
+	bitlen = prefix->bitlen;
+
+	while (node->bit < bitlen) {
+		if (BIT_TEST(addr[node->bit >> 3], 0x80 >> (node->bit & 0x07)))
+			node = node->r;
+		else
+			node = node->l;
+
+		if (node == NULL)
+			return (NULL);
+	}
+
+	if (node->bit > bitlen || node->prefix == NULL)
+		return (NULL);
+
+	if (comp_with_mask(prefix_touchar(node->prefix),
+	    prefix_touchar(prefix), bitlen))
+		return (node);
+
+	return (NULL);
+}
+
+
+/* if inclusive != 0, "best" may be the given prefix itself */
+static radix_node_t
+*radix_search_best2(radix_tree_t *radix, prefix_t *prefix, int inclusive)
+{
+	radix_node_t *node;
+	radix_node_t *stack[RADIX_MAXBITS + 1] = {0};
+	unsigned char *addr;
+	unsigned int bitlen;
+	int cnt = 0;
+
+	if (radix->head == NULL)
+		return (NULL);
+
+	node = radix->head;
+	addr = prefix_touchar(prefix);
+	bitlen = prefix->bitlen;
+
+	while (node->bit < bitlen) {
+		if (node->prefix)
+			stack[cnt++] = node;
+		if (BIT_TEST(addr[node->bit >> 3], 0x80 >> (node->bit & 0x07)))
+			node = node->r;
+		else
+			node = node->l;
+
+		if (node == NULL)
+			break;
+	}
+
+	if (inclusive && node && node->prefix)
+		stack[cnt++] = node;
+
+
+	if (cnt <= 0)
+		return (NULL);
+
+	while (--cnt >= 0) {
+		node = stack[cnt];
+		if (comp_with_mask(prefix_touchar(node->prefix),
+		    prefix_touchar(prefix), node->prefix->bitlen))
+			return (node);
+	}
+	return (NULL);
+}
+
+
+radix_node_t
+*radix_search_best(radix_tree_t *radix, prefix_t *prefix)
+{
+	return (radix_search_best2(radix, prefix, 1));
+}
+
+
+radix_node_t
+*radix_lookup(radix_tree_t *radix, prefix_t *prefix)
+{
+	radix_node_t *node, *new_node, *parent, *glue;
+	unsigned char *addr, *test_addr;
+	unsigned int bitlen, check_bit, differ_bit;
+	unsigned int i, j, r;
+
+	if (radix->head == NULL) {
+		if ((node = malloc(sizeof(*node))) == NULL)
+			return (NULL);
+		memset(node, '\0', sizeof(*node));
+		node->bit = prefix->bitlen;
+		node->prefix = Ref_Prefix(prefix);
+		node->parent = NULL;
+		node->l = node->r = NULL;
+		node->data = NULL;
+		radix->head = node;
+		radix->num_active_node++;
+		return (node);
+	}
+	addr = prefix_touchar(prefix);
+	bitlen = prefix->bitlen;
+	node = radix->head;
+
+	while (node->bit < bitlen || node->prefix == NULL) {
+		if (node->bit < radix->maxbits && BIT_TEST(addr[node->bit >> 3],
+		    0x80 >> (node->bit & 0x07))) {
+			if (node->r == NULL)
+				break;
+			node = node->r;
+		} else {
+			if (node->l == NULL)
+				break;
+			node = node->l;
+		}
+	}
+
+	test_addr = prefix_touchar(node->prefix);
+	/* find the first bit different */
+	check_bit = (node->bit < bitlen) ? node->bit : bitlen;
+	differ_bit = 0;
+	for (i = 0; i * 8 < check_bit; i++) {
+		if ((r = (addr[i] ^ test_addr[i])) == 0) {
+			differ_bit = (i + 1) * 8;
+			continue;
+		}
+		/* I know the better way, but for now */
+		for (j = 0; j < 8; j++) {
+			if (BIT_TEST(r, (0x80 >> j)))
+				break;
+		}
+		/* must be found */
+		differ_bit = i * 8 + j;
+		break;
+	}
+	if (differ_bit > check_bit)
+		differ_bit = check_bit;
+
+	parent = node->parent;
+	while (parent && parent->bit >= differ_bit) {
+		node = parent;
+		parent = node->parent;
+	}
+
+	if (differ_bit == bitlen && node->bit == bitlen) {
+		if (node->prefix == NULL)
+			node->prefix = Ref_Prefix(prefix);
+		return (node);
+	}
+	if ((new_node = malloc(sizeof(*new_node))) == NULL)
+		return (NULL);
+	memset(new_node, '\0', sizeof(*new_node));
+	new_node->bit = prefix->bitlen;
+	new_node->prefix = Ref_Prefix(prefix);
+	new_node->parent = NULL;
+	new_node->l = new_node->r = NULL;
+	new_node->data = NULL;
+	radix->num_active_node++;
+
+	if (node->bit == differ_bit) {
+		new_node->parent = node;
+		if (node->bit < radix->maxbits && BIT_TEST(addr[node->bit >> 3],
+		    0x80 >> (node->bit & 0x07)))
+			node->r = new_node;
+		else
+			node->l = new_node;
+
+		return (new_node);
+	}
+	if (bitlen == differ_bit) {
+		if (bitlen < radix->maxbits && BIT_TEST(test_addr[bitlen >> 3],
+		    0x80 >> (bitlen & 0x07)))
+			new_node->r = node;
+		else
+			new_node->l = node;
+
+		new_node->parent = node->parent;
+		if (node->parent == NULL)
+			radix->head = new_node;
+		else if (node->parent->r == node)
+			node->parent->r = new_node;
+		else
+			node->parent->l = new_node;
+
+		node->parent = new_node;
+	} else {
+		if ((glue = malloc(sizeof(*glue))) == NULL)
+			return (NULL);
+		memset(glue, '\0', sizeof(*glue));
+		glue->bit = differ_bit;
+		glue->prefix = NULL;
+		glue->parent = node->parent;
+		glue->data = NULL;
+		radix->num_active_node++;
+		if (differ_bit < radix->maxbits &&
+		    BIT_TEST(addr[differ_bit >> 3],
+		    0x80 >> (differ_bit & 0x07))) {
+			glue->r = new_node;
+			glue->l = node;
+		} else {
+			glue->r = node;
+			glue->l = new_node;
+		}
+		new_node->parent = glue;
+
+		if (node->parent == NULL)
+			radix->head = glue;
+		else if (node->parent->r == node)
+			node->parent->r = glue;
+		else
+			node->parent->l = glue;
+
+		node->parent = glue;
+	}
+	return (new_node);
+}
+
+
+void
+radix_remove(radix_tree_t *radix, radix_node_t *node)
+{
+	radix_node_t *parent, *child;
+
+	if (node->r && node->l) {
+		/*
+		 * this might be a placeholder node -- have to check and make
+		 * sure there is a prefix aossciated with it !
+		 */
+		if (node->prefix != NULL)
+			Deref_Prefix(node->prefix);
+		node->prefix = NULL;
+		/* Also I needed to clear data pointer -- masaki */
+		node->data = NULL;
+		return;
+	}
+	if (node->r == NULL && node->l == NULL) {
+		parent = node->parent;
+		Deref_Prefix(node->prefix);
+		free(node);
+		radix->num_active_node--;
+
+		if (parent == NULL) {
+			radix->head = NULL;
+			return;
+		}
+		if (parent->r == node) {
+			parent->r = NULL;
+			child = parent->l;
+		} else {
+			parent->l = NULL;
+			child = parent->r;
+		}
+
+		if (parent->prefix)
+			return;
+
+		/* we need to remove parent too */
+		if (parent->parent == NULL)
+			radix->head = child;
+		else if (parent->parent->r == parent)
+			parent->parent->r = child;
+		else
+			parent->parent->l = child;
+
+		child->parent = parent->parent;
+		free(parent);
+		radix->num_active_node--;
+		return;
+	}
+	if (node->r)
+		child = node->r;
+	else
+		child = node->l;
+
+	parent = node->parent;
+	child->parent = parent;
+
+	Deref_Prefix(node->prefix);
+	free(node);
+	radix->num_active_node--;
+
+	if (parent == NULL) {
+		radix->head = child;
+		return;
+	}
+	if (parent->r == node)
+		parent->r = child;
+	else
+		parent->l = child;
+}
+
+/* Local additions */
+static void
+sanitise_mask(unsigned char *addr, unsigned int masklen, unsigned int maskbits)
+{
+	unsigned int i = masklen / 8;
+	unsigned int j = masklen % 8;
+
+	if (j != 0) {
+		addr[i] &= (~0) << (8 - j);
+		i++;
+	}
+	for (; i < maskbits / 8; i++)
+		addr[i] = 0;
+}
+
+prefix_t
+*prefix_pton(const char *string, long len, prefix_t *prefix, const char **errmsg)
+{
+	char save[256], *cp, *ep;
+	struct addrinfo hints, *ai;
+	void *addr;
+	prefix_t *ret;
+	size_t slen;
+	int r;
+
+	ret = NULL;
+
+	/* Copy the string to parse, because we modify it */
+	if ((slen = strlen(string) + 1) > sizeof(save)) {
+		*errmsg = "string too long";
+		return (NULL);
+	}
+	memcpy(save, string, slen);
+
+	if ((cp = strchr(save, '/')) != NULL) {
+		if (len != -1 ) {
+			*errmsg = "masklen specified twice";
+			return (NULL);
+		}
+		*cp++ = '\0';
+		len = strtol(cp, &ep, 10);
+		if (*cp == '\0' || *ep != '\0' || len < 0) {
+			*errmsg = "could not parse masklen";
+			return (NULL);
+		}
+		/* More checks below */
+	}
+	memset(&hints, '\0', sizeof(hints));
+	hints.ai_flags = AI_NUMERICHOST;
+
+	if ((r = getaddrinfo(save, NULL, &hints, &ai)) != 0) {
+		snprintf(save, sizeof(save), "getaddrinfo: %s:",
+		    gai_strerror(r));
+		*errmsg = save;
+		return NULL;
+	}
+	if (ai == NULL || ai->ai_addr == NULL) {
+		*errmsg = "getaddrinfo returned no result";
+		goto out;
+	}
+	switch (ai->ai_addr->sa_family) {
+	case AF_INET:
+		if (len == -1)
+			len = 32;
+		else if (len < 0 || len > 32)
+			goto out;
+		addr = &((struct sockaddr_in *) ai->ai_addr)->sin_addr;
+		sanitise_mask(addr, len, 32);
+		break;
+	case AF_INET6:
+		if (len == -1)
+			len = 128;
+		else if (len < 0 || len > 128)
+			goto out;
+		addr = &((struct sockaddr_in6 *) ai->ai_addr)->sin6_addr;
+		sanitise_mask(addr, len, 128);
+		break;
+	default:
+		goto out;
+	}
+
+	ret = New_Prefix2(ai->ai_addr->sa_family, addr, len, prefix);
+	if (ret == NULL)
+		*errmsg = "New_Prefix2 failed";
+out:
+	freeaddrinfo(ai);
+	return (ret);
+}
+
+prefix_t
+*prefix_from_blob(unsigned char *blob, int len, int prefixlen, prefix_t *prefix)
+{
+	int family, maxprefix;
+
+	switch (len) {
+	case 4:
+		/* Assume AF_INET */
+		family = AF_INET;
+		maxprefix = 32;
+		break;
+	case 16:
+		/* Assume AF_INET6 */
+		family = AF_INET6;
+		maxprefix = 128;
+		break;
+	default:
+		/* Who knows? */
+		return NULL;
+	}
+	if (prefixlen == -1)
+		prefixlen = maxprefix;
+	if (prefixlen < 0 || prefixlen > maxprefix)
+		return NULL;
+	return (New_Prefix2(family, blob, prefixlen, prefix));
+}
+
+const char *
+prefix_addr_ntop(prefix_t *prefix, char *buf, size_t len)
+{
+	return (inet_ntop(prefix->family, &prefix->add, buf, len));
+}
+
+const char *
+prefix_ntop(prefix_t *prefix, char *buf, size_t len)
+{
+	char addrbuf[128];
+
+	if (prefix_addr_ntop(prefix, addrbuf, sizeof(addrbuf)) == NULL)
+		return (NULL);
+	snprintf(buf, len, "%s/%d", addrbuf, prefix->bitlen);
+
+	return (buf);
+}
diff --git a/release/src/router/smartdns/src/lib/rbtree.c b/release/src/router/smartdns/src/lib/rbtree.c
index 8426cbebbb..87d0f276f0 100644
--- a/release/src/router/smartdns/src/lib/rbtree.c
+++ b/release/src/router/smartdns/src/lib/rbtree.c
@@ -1,524 +1,524 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#include "rbtree.h"
-#include <stdbool.h>
-
-static inline void rb_set_black(struct rb_node *rb)
-{
-	rb->__rb_parent_color |= RB_BLACK;
-}
-
-static inline struct rb_node *rb_red_parent(struct rb_node *red)
-{
-	return (struct rb_node *)red->__rb_parent_color;
-}
-
-/*
- * Helper function for rotations:
- * - old's parent and color get assigned to new
- * - old gets assigned new as a parent and 'color' as a color.
- */
-static inline void
-__rb_rotate_set_parents(struct rb_node *old, struct rb_node *new,
-			struct rb_root *root, int color)
-{
-	struct rb_node *parent = rb_parent(old);
-	new->__rb_parent_color = old->__rb_parent_color;
-	rb_set_parent_color(old, new, color);
-	__rb_change_child(old, new, parent, root);
-}
-
-static inline void
-__rb_insert(struct rb_node *node, struct rb_root *root,
-	    void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
-{
-	struct rb_node *parent = rb_red_parent(node), *gparent, *tmp;
-
-	while (true) {
-		/*
-		 * Loop invariant: node is red
-		 *
-		 * If there is a black parent, we are done.
-		 * Otherwise, take some corrective action as we don't
-		 * want a red root or two consecutive red nodes.
-		 */
-		if (!parent) {
-			rb_set_parent_color(node, NULL, RB_BLACK);
-			break;
-		} else if (rb_is_black(parent))
-			break;
-
-		gparent = rb_red_parent(parent);
-
-		tmp = gparent->rb_right;
-		if (parent != tmp) {	/* parent == gparent->rb_left */
-			if (tmp && rb_is_red(tmp)) {
-				/*
-				 * Case 1 - color flips
-				 *
-				 *       G            g
-				 *      / \          / \
-				 *     p   u  -->   P   U
-				 *    /            /
-				 *   n            n
-				 *
-				 * However, since g's parent might be red, and
-				 * 4) does not allow this, we need to recurse
-				 * at g.
-				 */
-				rb_set_parent_color(tmp, gparent, RB_BLACK);
-				rb_set_parent_color(parent, gparent, RB_BLACK);
-				node = gparent;
-				parent = rb_parent(node);
-				rb_set_parent_color(node, parent, RB_RED);
-				continue;
-			}
-
-			tmp = parent->rb_right;
-			if (node == tmp) {
-				/*
-				 * Case 2 - left rotate at parent
-				 *
-				 *      G             G
-				 *     / \           / \
-				 *    p   U  -->    n   U
-				 *     \           /
-				 *      n         p
-				 *
-				 * This still leaves us in violation of 4), the
-				 * continuation into Case 3 will fix that.
-				 */
-				parent->rb_right = tmp = node->rb_left;
-				node->rb_left = parent;
-				if (tmp)
-					rb_set_parent_color(tmp, parent,
-							    RB_BLACK);
-				rb_set_parent_color(parent, node, RB_RED);
-				augment_rotate(parent, node);
-				parent = node;
-				tmp = node->rb_right;
-			}
-
-			/*
-			 * Case 3 - right rotate at gparent
-			 *
-			 *        G           P
-			 *       / \         / \
-			 *      p   U  -->  n   g
-			 *     /                 \
-			 *    n                   U
-			 */
-			gparent->rb_left = tmp;  /* == parent->rb_right */
-			parent->rb_right = gparent;
-			if (tmp)
-				rb_set_parent_color(tmp, gparent, RB_BLACK);
-			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
-			augment_rotate(gparent, parent);
-			break;
-		} else {
-			tmp = gparent->rb_left;
-			if (tmp && rb_is_red(tmp)) {
-				/* Case 1 - color flips */
-				rb_set_parent_color(tmp, gparent, RB_BLACK);
-				rb_set_parent_color(parent, gparent, RB_BLACK);
-				node = gparent;
-				parent = rb_parent(node);
-				rb_set_parent_color(node, parent, RB_RED);
-				continue;
-			}
-
-			tmp = parent->rb_left;
-			if (node == tmp) {
-				/* Case 2 - right rotate at parent */
-				parent->rb_left = tmp = node->rb_right;
-				node->rb_right = parent;
-				if (tmp)
-					rb_set_parent_color(tmp, parent,
-							    RB_BLACK);
-				rb_set_parent_color(parent, node, RB_RED);
-				augment_rotate(parent, node);
-				parent = node;
-				tmp = node->rb_left;
-			}
-
-			/* Case 3 - left rotate at gparent */
-			gparent->rb_right = tmp;  /* == parent->rb_left */
-			parent->rb_left = gparent;
-			if (tmp)
-				rb_set_parent_color(tmp, gparent, RB_BLACK);
-			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
-			augment_rotate(gparent, parent);
-			break;
-		}
-	}
-}
-
-/*
- * Inline version for rb_erase() use - we want to be able to inline
- * and eliminate the dummy_rotate callback there
- */
-static inline void
-____rb_erase_color(struct rb_node *parent, struct rb_root *root,
-	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
-{
-	struct rb_node *node = NULL, *sibling, *tmp1, *tmp2;
-
-	while (true) {
-		/*
-		 * Loop invariants:
-		 * - node is black (or NULL on first iteration)
-		 * - node is not the root (parent is not NULL)
-		 * - All leaf paths going through parent and node have a
-		 *   black node count that is 1 lower than other leaf paths.
-		 */
-		sibling = parent->rb_right;
-		if (node != sibling) {	/* node == parent->rb_left */
-			if (rb_is_red(sibling)) {
-				/*
-				 * Case 1 - left rotate at parent
-				 *
-				 *     P               S
-				 *    / \             / \
-				 *   N   s    -->    p   Sr
-				 *      / \         / \
-				 *     Sl  Sr      N   Sl
-				 */
-				parent->rb_right = tmp1 = sibling->rb_left;
-				sibling->rb_left = parent;
-				rb_set_parent_color(tmp1, parent, RB_BLACK);
-				__rb_rotate_set_parents(parent, sibling, root,
-							RB_RED);
-				augment_rotate(parent, sibling);
-				sibling = tmp1;
-			}
-			tmp1 = sibling->rb_right;
-			if (!tmp1 || rb_is_black(tmp1)) {
-				tmp2 = sibling->rb_left;
-				if (!tmp2 || rb_is_black(tmp2)) {
-					/*
-					 * Case 2 - sibling color flip
-					 * (p could be either color here)
-					 *
-					 *    (p)           (p)
-					 *    / \           / \
-					 *   N   S    -->  N   s
-					 *      / \           / \
-					 *     Sl  Sr        Sl  Sr
-					 *
-					 * This leaves us violating 5) which
-					 * can be fixed by flipping p to black
-					 * if it was red, or by recursing at p.
-					 * p is red when coming from Case 1.
-					 */
-					rb_set_parent_color(sibling, parent,
-							    RB_RED);
-					if (rb_is_red(parent))
-						rb_set_black(parent);
-					else {
-						node = parent;
-						parent = rb_parent(node);
-						if (parent)
-							continue;
-					}
-					break;
-				}
-				/*
-				 * Case 3 - right rotate at sibling
-				 * (p could be either color here)
-				 *
-				 *   (p)           (p)
-				 *   / \           / \
-				 *  N   S    -->  N   Sl
-				 *     / \             \
-				 *    sl  Sr            s
-				 *                       \
-				 *                        Sr
-				 */
-				sibling->rb_left = tmp1 = tmp2->rb_right;
-				tmp2->rb_right = sibling;
-				parent->rb_right = tmp2;
-				if (tmp1)
-					rb_set_parent_color(tmp1, sibling,
-							    RB_BLACK);
-				augment_rotate(sibling, tmp2);
-				tmp1 = sibling;
-				sibling = tmp2;
-			}
-			/*
-			 * Case 4 - left rotate at parent + color flips
-			 * (p and sl could be either color here.
-			 *  After rotation, p becomes black, s acquires
-			 *  p's color, and sl keeps its color)
-			 *
-			 *      (p)             (s)
-			 *      / \             / \
-			 *     N   S     -->   P   Sr
-			 *        / \         / \
-			 *      (sl) sr      N  (sl)
-			 */
-			parent->rb_right = tmp2 = sibling->rb_left;
-			sibling->rb_left = parent;
-			rb_set_parent_color(tmp1, sibling, RB_BLACK);
-			if (tmp2)
-				rb_set_parent(tmp2, parent);
-			__rb_rotate_set_parents(parent, sibling, root,
-						RB_BLACK);
-			augment_rotate(parent, sibling);
-			break;
-		} else {
-			sibling = parent->rb_left;
-			if (rb_is_red(sibling)) {
-				/* Case 1 - right rotate at parent */
-				parent->rb_left = tmp1 = sibling->rb_right;
-				sibling->rb_right = parent;
-				rb_set_parent_color(tmp1, parent, RB_BLACK);
-				__rb_rotate_set_parents(parent, sibling, root,
-							RB_RED);
-				augment_rotate(parent, sibling);
-				sibling = tmp1;
-			}
-			tmp1 = sibling->rb_left;
-			if (!tmp1 || rb_is_black(tmp1)) {
-				tmp2 = sibling->rb_right;
-				if (!tmp2 || rb_is_black(tmp2)) {
-					/* Case 2 - sibling color flip */
-					rb_set_parent_color(sibling, parent,
-							    RB_RED);
-					if (rb_is_red(parent))
-						rb_set_black(parent);
-					else {
-						node = parent;
-						parent = rb_parent(node);
-						if (parent)
-							continue;
-					}
-					break;
-				}
-				/* Case 3 - right rotate at sibling */
-				sibling->rb_right = tmp1 = tmp2->rb_left;
-				tmp2->rb_left = sibling;
-				parent->rb_left = tmp2;
-				if (tmp1)
-					rb_set_parent_color(tmp1, sibling,
-							    RB_BLACK);
-				augment_rotate(sibling, tmp2);
-				tmp1 = sibling;
-				sibling = tmp2;
-			}
-			/* Case 4 - left rotate at parent + color flips */
-			parent->rb_left = tmp2 = sibling->rb_right;
-			sibling->rb_right = parent;
-			rb_set_parent_color(tmp1, sibling, RB_BLACK);
-			if (tmp2)
-				rb_set_parent(tmp2, parent);
-			__rb_rotate_set_parents(parent, sibling, root,
-						RB_BLACK);
-			augment_rotate(parent, sibling);
-			break;
-		}
-	}
-}
-
-/* Non-inline version for rb_erase_augmented() use */
-void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
-	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
-{
-	____rb_erase_color(parent, root, augment_rotate);
-}
-
-/*
- * Non-augmented rbtree manipulation functions.
- *
- * We use dummy augmented callbacks here, and have the compiler optimize them
- * out of the rb_insert_color() and rb_erase() function definitions.
- */
-
-static inline void dummy_propagate(struct rb_node *node, struct rb_node *stop) {}
-static inline void dummy_copy(struct rb_node *old, struct rb_node *new) {}
-static inline void dummy_rotate(struct rb_node *old, struct rb_node *new) {}
-
-static const struct rb_augment_callbacks dummy_callbacks = {
-	dummy_propagate, dummy_copy, dummy_rotate
-};
-
-void rb_insert_color(struct rb_node *node, struct rb_root *root)
-{
-	__rb_insert(node, root, dummy_rotate);
-}
-
-void rb_erase(struct rb_node *node, struct rb_root *root)
-{
-	struct rb_node *rebalance;
-	rebalance = __rb_erase_augmented(node, root, &dummy_callbacks);
-	if (rebalance)
-		____rb_erase_color(rebalance, root, dummy_rotate);
-}
-
-/*
- * Augmented rbtree manipulation functions.
- *
- * This instantiates the same inline functions as in the non-augmented
- * case, but this time with user-defined callbacks.
- */
-
-void __rb_insert_augmented(struct rb_node *node, struct rb_root *root,
-	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
-{
-	__rb_insert(node, root, augment_rotate);
-}
-
-/*
- * This function returns the first node (in sort order) of the tree.
- */
-struct rb_node *rb_first(const struct rb_root *root)
-{
-	struct rb_node	*n;
-
-	n = root->rb_node;
-	if (!n)
-		return NULL;
-	while (n->rb_left)
-		n = n->rb_left;
-	return n;
-}
-
-struct rb_node *rb_last(const struct rb_root *root)
-{
-	struct rb_node	*n;
-
-	n = root->rb_node;
-	if (!n)
-		return NULL;
-	while (n->rb_right)
-		n = n->rb_right;
-	return n;
-}
-
-struct rb_node *rb_next(const struct rb_node *node)
-{
-	struct rb_node *parent;
-
-	if (RB_EMPTY_NODE(node))
-		return NULL;
-
-	/*
-	 * If we have a right-hand child, go down and then left as far
-	 * as we can.
-	 */
-	if (node->rb_right) {
-		node = node->rb_right;
-		while (node->rb_left)
-			node=node->rb_left;
-		return (struct rb_node *)node;
-	}
-
-	/*
-	 * No right-hand children. Everything down and left is smaller than us,
-	 * so any 'next' node must be in the general direction of our parent.
-	 * Go up the tree; any time the ancestor is a right-hand child of its
-	 * parent, keep going up. First time it's a left-hand child of its
-	 * parent, said parent is our 'next' node.
-	 */
-	while ((parent = rb_parent(node)) && node == parent->rb_right)
-		node = parent;
-
-	return parent;
-}
-
-struct rb_node *rb_prev(const struct rb_node *node)
-{
-	struct rb_node *parent;
-
-	if (RB_EMPTY_NODE(node))
-		return NULL;
-
-	/*
-	 * If we have a left-hand child, go down and then right as far
-	 * as we can.
-	 */
-	if (node->rb_left) {
-		node = node->rb_left;
-		while (node->rb_right)
-			node=node->rb_right;
-		return (struct rb_node *)node;
-	}
-
-	/*
-	 * No left-hand children. Go up till we find an ancestor which
-	 * is a right-hand child of its parent.
-	 */
-	while ((parent = rb_parent(node)) && node == parent->rb_left)
-		node = parent;
-
-	return parent;
-}
-
-void rb_replace_node(struct rb_node *victim, struct rb_node *new,
-		     struct rb_root *root)
-{
-	struct rb_node *parent = rb_parent(victim);
-
-	/* Set the surrounding nodes to point to the replacement */
-	__rb_change_child(victim, new, parent, root);
-	if (victim->rb_left)
-		rb_set_parent(victim->rb_left, new);
-	if (victim->rb_right)
-		rb_set_parent(victim->rb_right, new);
-
-	/* Copy the pointers/colour from the victim to the replacement */
-	*new = *victim;
-}
-
-static struct rb_node *rb_left_deepest_node(const struct rb_node *node)
-{
-	for (;;) {
-		if (node->rb_left)
-			node = node->rb_left;
-		else if (node->rb_right)
-			node = node->rb_right;
-		else
-			return (struct rb_node *)node;
-	}
-}
-
-struct rb_node *rb_next_postorder(const struct rb_node *node)
-{
-	const struct rb_node *parent;
-	if (!node)
-		return NULL;
-	parent = rb_parent(node);
-
-	/* If we're sitting on node, we've already seen our children */
-	if (parent && node == parent->rb_left && parent->rb_right) {
-		/* If we are the parent's left node, go to the parent's right
-		 * node then all the way down to the left */
-		return rb_left_deepest_node(parent->rb_right);
-	} else
-		/* Otherwise we are the parent's right node, and the parent
-		 * should be next */
-		return (struct rb_node *)parent;
-}
-
-struct rb_node *rb_first_postorder(const struct rb_root *root)
-{
-	if (!root->rb_node)
-		return NULL;
-
-	return rb_left_deepest_node(root->rb_node);
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "rbtree.h"
+#include <stdbool.h>
+
+static inline void rb_set_black(struct rb_node *rb)
+{
+	rb->__rb_parent_color |= RB_BLACK;
+}
+
+static inline struct rb_node *rb_red_parent(struct rb_node *red)
+{
+	return (struct rb_node *)red->__rb_parent_color;
+}
+
+/*
+ * Helper function for rotations:
+ * - old's parent and color get assigned to new
+ * - old gets assigned new as a parent and 'color' as a color.
+ */
+static inline void
+__rb_rotate_set_parents(struct rb_node *old, struct rb_node *new,
+			struct rb_root *root, int color)
+{
+	struct rb_node *parent = rb_parent(old);
+	new->__rb_parent_color = old->__rb_parent_color;
+	rb_set_parent_color(old, new, color);
+	__rb_change_child(old, new, parent, root);
+}
+
+static inline void
+__rb_insert(struct rb_node *node, struct rb_root *root,
+	    void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	struct rb_node *parent = rb_red_parent(node), *gparent, *tmp;
+
+	while (true) {
+		/*
+		 * Loop invariant: node is red
+		 *
+		 * If there is a black parent, we are done.
+		 * Otherwise, take some corrective action as we don't
+		 * want a red root or two consecutive red nodes.
+		 */
+		if (!parent) {
+			rb_set_parent_color(node, NULL, RB_BLACK);
+			break;
+		} else if (rb_is_black(parent))
+			break;
+
+		gparent = rb_red_parent(parent);
+
+		tmp = gparent->rb_right;
+		if (parent != tmp) {	/* parent == gparent->rb_left */
+			if (tmp && rb_is_red(tmp)) {
+				/*
+				 * Case 1 - color flips
+				 *
+				 *       G            g
+				 *      / \          / \
+				 *     p   u  -->   P   U
+				 *    /            /
+				 *   n            n
+				 *
+				 * However, since g's parent might be red, and
+				 * 4) does not allow this, we need to recurse
+				 * at g.
+				 */
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+				rb_set_parent_color(parent, gparent, RB_BLACK);
+				node = gparent;
+				parent = rb_parent(node);
+				rb_set_parent_color(node, parent, RB_RED);
+				continue;
+			}
+
+			tmp = parent->rb_right;
+			if (node == tmp) {
+				/*
+				 * Case 2 - left rotate at parent
+				 *
+				 *      G             G
+				 *     / \           / \
+				 *    p   U  -->    n   U
+				 *     \           /
+				 *      n         p
+				 *
+				 * This still leaves us in violation of 4), the
+				 * continuation into Case 3 will fix that.
+				 */
+				parent->rb_right = tmp = node->rb_left;
+				node->rb_left = parent;
+				if (tmp)
+					rb_set_parent_color(tmp, parent,
+							    RB_BLACK);
+				rb_set_parent_color(parent, node, RB_RED);
+				augment_rotate(parent, node);
+				parent = node;
+				tmp = node->rb_right;
+			}
+
+			/*
+			 * Case 3 - right rotate at gparent
+			 *
+			 *        G           P
+			 *       / \         / \
+			 *      p   U  -->  n   g
+			 *     /                 \
+			 *    n                   U
+			 */
+			gparent->rb_left = tmp;  /* == parent->rb_right */
+			parent->rb_right = gparent;
+			if (tmp)
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
+			augment_rotate(gparent, parent);
+			break;
+		} else {
+			tmp = gparent->rb_left;
+			if (tmp && rb_is_red(tmp)) {
+				/* Case 1 - color flips */
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+				rb_set_parent_color(parent, gparent, RB_BLACK);
+				node = gparent;
+				parent = rb_parent(node);
+				rb_set_parent_color(node, parent, RB_RED);
+				continue;
+			}
+
+			tmp = parent->rb_left;
+			if (node == tmp) {
+				/* Case 2 - right rotate at parent */
+				parent->rb_left = tmp = node->rb_right;
+				node->rb_right = parent;
+				if (tmp)
+					rb_set_parent_color(tmp, parent,
+							    RB_BLACK);
+				rb_set_parent_color(parent, node, RB_RED);
+				augment_rotate(parent, node);
+				parent = node;
+				tmp = node->rb_left;
+			}
+
+			/* Case 3 - left rotate at gparent */
+			gparent->rb_right = tmp;  /* == parent->rb_left */
+			parent->rb_left = gparent;
+			if (tmp)
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
+			augment_rotate(gparent, parent);
+			break;
+		}
+	}
+}
+
+/*
+ * Inline version for rb_erase() use - we want to be able to inline
+ * and eliminate the dummy_rotate callback there
+ */
+static inline void
+____rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	struct rb_node *node = NULL, *sibling, *tmp1, *tmp2;
+
+	while (true) {
+		/*
+		 * Loop invariants:
+		 * - node is black (or NULL on first iteration)
+		 * - node is not the root (parent is not NULL)
+		 * - All leaf paths going through parent and node have a
+		 *   black node count that is 1 lower than other leaf paths.
+		 */
+		sibling = parent->rb_right;
+		if (node != sibling) {	/* node == parent->rb_left */
+			if (rb_is_red(sibling)) {
+				/*
+				 * Case 1 - left rotate at parent
+				 *
+				 *     P               S
+				 *    / \             / \
+				 *   N   s    -->    p   Sr
+				 *      / \         / \
+				 *     Sl  Sr      N   Sl
+				 */
+				parent->rb_right = tmp1 = sibling->rb_left;
+				sibling->rb_left = parent;
+				rb_set_parent_color(tmp1, parent, RB_BLACK);
+				__rb_rotate_set_parents(parent, sibling, root,
+							RB_RED);
+				augment_rotate(parent, sibling);
+				sibling = tmp1;
+			}
+			tmp1 = sibling->rb_right;
+			if (!tmp1 || rb_is_black(tmp1)) {
+				tmp2 = sibling->rb_left;
+				if (!tmp2 || rb_is_black(tmp2)) {
+					/*
+					 * Case 2 - sibling color flip
+					 * (p could be either color here)
+					 *
+					 *    (p)           (p)
+					 *    / \           / \
+					 *   N   S    -->  N   s
+					 *      / \           / \
+					 *     Sl  Sr        Sl  Sr
+					 *
+					 * This leaves us violating 5) which
+					 * can be fixed by flipping p to black
+					 * if it was red, or by recursing at p.
+					 * p is red when coming from Case 1.
+					 */
+					rb_set_parent_color(sibling, parent,
+							    RB_RED);
+					if (rb_is_red(parent))
+						rb_set_black(parent);
+					else {
+						node = parent;
+						parent = rb_parent(node);
+						if (parent)
+							continue;
+					}
+					break;
+				}
+				/*
+				 * Case 3 - right rotate at sibling
+				 * (p could be either color here)
+				 *
+				 *   (p)           (p)
+				 *   / \           / \
+				 *  N   S    -->  N   Sl
+				 *     / \             \
+				 *    sl  Sr            s
+				 *                       \
+				 *                        Sr
+				 */
+				sibling->rb_left = tmp1 = tmp2->rb_right;
+				tmp2->rb_right = sibling;
+				parent->rb_right = tmp2;
+				if (tmp1)
+					rb_set_parent_color(tmp1, sibling,
+							    RB_BLACK);
+				augment_rotate(sibling, tmp2);
+				tmp1 = sibling;
+				sibling = tmp2;
+			}
+			/*
+			 * Case 4 - left rotate at parent + color flips
+			 * (p and sl could be either color here.
+			 *  After rotation, p becomes black, s acquires
+			 *  p's color, and sl keeps its color)
+			 *
+			 *      (p)             (s)
+			 *      / \             / \
+			 *     N   S     -->   P   Sr
+			 *        / \         / \
+			 *      (sl) sr      N  (sl)
+			 */
+			parent->rb_right = tmp2 = sibling->rb_left;
+			sibling->rb_left = parent;
+			rb_set_parent_color(tmp1, sibling, RB_BLACK);
+			if (tmp2)
+				rb_set_parent(tmp2, parent);
+			__rb_rotate_set_parents(parent, sibling, root,
+						RB_BLACK);
+			augment_rotate(parent, sibling);
+			break;
+		} else {
+			sibling = parent->rb_left;
+			if (rb_is_red(sibling)) {
+				/* Case 1 - right rotate at parent */
+				parent->rb_left = tmp1 = sibling->rb_right;
+				sibling->rb_right = parent;
+				rb_set_parent_color(tmp1, parent, RB_BLACK);
+				__rb_rotate_set_parents(parent, sibling, root,
+							RB_RED);
+				augment_rotate(parent, sibling);
+				sibling = tmp1;
+			}
+			tmp1 = sibling->rb_left;
+			if (!tmp1 || rb_is_black(tmp1)) {
+				tmp2 = sibling->rb_right;
+				if (!tmp2 || rb_is_black(tmp2)) {
+					/* Case 2 - sibling color flip */
+					rb_set_parent_color(sibling, parent,
+							    RB_RED);
+					if (rb_is_red(parent))
+						rb_set_black(parent);
+					else {
+						node = parent;
+						parent = rb_parent(node);
+						if (parent)
+							continue;
+					}
+					break;
+				}
+				/* Case 3 - right rotate at sibling */
+				sibling->rb_right = tmp1 = tmp2->rb_left;
+				tmp2->rb_left = sibling;
+				parent->rb_left = tmp2;
+				if (tmp1)
+					rb_set_parent_color(tmp1, sibling,
+							    RB_BLACK);
+				augment_rotate(sibling, tmp2);
+				tmp1 = sibling;
+				sibling = tmp2;
+			}
+			/* Case 4 - left rotate at parent + color flips */
+			parent->rb_left = tmp2 = sibling->rb_right;
+			sibling->rb_right = parent;
+			rb_set_parent_color(tmp1, sibling, RB_BLACK);
+			if (tmp2)
+				rb_set_parent(tmp2, parent);
+			__rb_rotate_set_parents(parent, sibling, root,
+						RB_BLACK);
+			augment_rotate(parent, sibling);
+			break;
+		}
+	}
+}
+
+/* Non-inline version for rb_erase_augmented() use */
+void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	____rb_erase_color(parent, root, augment_rotate);
+}
+
+/*
+ * Non-augmented rbtree manipulation functions.
+ *
+ * We use dummy augmented callbacks here, and have the compiler optimize them
+ * out of the rb_insert_color() and rb_erase() function definitions.
+ */
+
+static inline void dummy_propagate(struct rb_node *node, struct rb_node *stop) {}
+static inline void dummy_copy(struct rb_node *old, struct rb_node *new) {}
+static inline void dummy_rotate(struct rb_node *old, struct rb_node *new) {}
+
+static const struct rb_augment_callbacks dummy_callbacks = {
+	dummy_propagate, dummy_copy, dummy_rotate
+};
+
+void rb_insert_color(struct rb_node *node, struct rb_root *root)
+{
+	__rb_insert(node, root, dummy_rotate);
+}
+
+void rb_erase(struct rb_node *node, struct rb_root *root)
+{
+	struct rb_node *rebalance;
+	rebalance = __rb_erase_augmented(node, root, &dummy_callbacks);
+	if (rebalance)
+		____rb_erase_color(rebalance, root, dummy_rotate);
+}
+
+/*
+ * Augmented rbtree manipulation functions.
+ *
+ * This instantiates the same inline functions as in the non-augmented
+ * case, but this time with user-defined callbacks.
+ */
+
+void __rb_insert_augmented(struct rb_node *node, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	__rb_insert(node, root, augment_rotate);
+}
+
+/*
+ * This function returns the first node (in sort order) of the tree.
+ */
+struct rb_node *rb_first(const struct rb_root *root)
+{
+	struct rb_node	*n;
+
+	n = root->rb_node;
+	if (!n)
+		return NULL;
+	while (n->rb_left)
+		n = n->rb_left;
+	return n;
+}
+
+struct rb_node *rb_last(const struct rb_root *root)
+{
+	struct rb_node	*n;
+
+	n = root->rb_node;
+	if (!n)
+		return NULL;
+	while (n->rb_right)
+		n = n->rb_right;
+	return n;
+}
+
+struct rb_node *rb_next(const struct rb_node *node)
+{
+	struct rb_node *parent;
+
+	if (RB_EMPTY_NODE(node))
+		return NULL;
+
+	/*
+	 * If we have a right-hand child, go down and then left as far
+	 * as we can.
+	 */
+	if (node->rb_right) {
+		node = node->rb_right;
+		while (node->rb_left)
+			node=node->rb_left;
+		return (struct rb_node *)node;
+	}
+
+	/*
+	 * No right-hand children. Everything down and left is smaller than us,
+	 * so any 'next' node must be in the general direction of our parent.
+	 * Go up the tree; any time the ancestor is a right-hand child of its
+	 * parent, keep going up. First time it's a left-hand child of its
+	 * parent, said parent is our 'next' node.
+	 */
+	while ((parent = rb_parent(node)) && node == parent->rb_right)
+		node = parent;
+
+	return parent;
+}
+
+struct rb_node *rb_prev(const struct rb_node *node)
+{
+	struct rb_node *parent;
+
+	if (RB_EMPTY_NODE(node))
+		return NULL;
+
+	/*
+	 * If we have a left-hand child, go down and then right as far
+	 * as we can.
+	 */
+	if (node->rb_left) {
+		node = node->rb_left;
+		while (node->rb_right)
+			node=node->rb_right;
+		return (struct rb_node *)node;
+	}
+
+	/*
+	 * No left-hand children. Go up till we find an ancestor which
+	 * is a right-hand child of its parent.
+	 */
+	while ((parent = rb_parent(node)) && node == parent->rb_left)
+		node = parent;
+
+	return parent;
+}
+
+void rb_replace_node(struct rb_node *victim, struct rb_node *new,
+		     struct rb_root *root)
+{
+	struct rb_node *parent = rb_parent(victim);
+
+	/* Set the surrounding nodes to point to the replacement */
+	__rb_change_child(victim, new, parent, root);
+	if (victim->rb_left)
+		rb_set_parent(victim->rb_left, new);
+	if (victim->rb_right)
+		rb_set_parent(victim->rb_right, new);
+
+	/* Copy the pointers/colour from the victim to the replacement */
+	*new = *victim;
+}
+
+static struct rb_node *rb_left_deepest_node(const struct rb_node *node)
+{
+	for (;;) {
+		if (node->rb_left)
+			node = node->rb_left;
+		else if (node->rb_right)
+			node = node->rb_right;
+		else
+			return (struct rb_node *)node;
+	}
+}
+
+struct rb_node *rb_next_postorder(const struct rb_node *node)
+{
+	const struct rb_node *parent;
+	if (!node)
+		return NULL;
+	parent = rb_parent(node);
+
+	/* If we're sitting on node, we've already seen our children */
+	if (parent && node == parent->rb_left && parent->rb_right) {
+		/* If we are the parent's left node, go to the parent's right
+		 * node then all the way down to the left */
+		return rb_left_deepest_node(parent->rb_right);
+	} else
+		/* Otherwise we are the parent's right node, and the parent
+		 * should be next */
+		return (struct rb_node *)parent;
+}
+
+struct rb_node *rb_first_postorder(const struct rb_root *root)
+{
+	if (!root->rb_node)
+		return NULL;
+
+	return rb_left_deepest_node(root->rb_node);
+}
diff --git a/release/src/router/smartdns/src/lib/stringutil.c b/release/src/router/smartdns/src/lib/stringutil.c
index 0e3c82b801..6923a38165 100644
--- a/release/src/router/smartdns/src/lib/stringutil.c
+++ b/release/src/router/smartdns/src/lib/stringutil.c
@@ -1,17 +1,17 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  */
\ No newline at end of file
diff --git a/release/src/router/smartdns/src/smartdns.c b/release/src/router/smartdns/src/smartdns.c
index a763840240..52674d3c88 100644
--- a/release/src/router/smartdns/src/smartdns.c
+++ b/release/src/router/smartdns/src/smartdns.c
@@ -1,443 +1,456 @@
-/*************************************************************************
- *
- * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
- *
- * smartdns is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * smartdns is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#define _GNU_SOURCE
-#include "art.h"
-#include "atomic.h"
-#include "dns_client.h"
-#include "dns_conf.h"
-#include "dns_server.h"
-#include "fast_ping.h"
-#include "hashtable.h"
-#include "list.h"
-#include "rbtree.h"
-#include "tlog.h"
-#include "util.h"
-#include <errno.h>
-#include <fcntl.h>
-#include <libgen.h>
-#include <openssl/err.h>
-#include <openssl/ssl.h>
-#include <signal.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/stat.h>
-#include <sys/types.h>
-#include <ucontext.h>
-
-#define RESOLVE_FILE "/etc/resolv.conf"
-#define MAX_LINE_LEN 1024
-#define MAX_KEY_LEN 64
-#define SMARTDNS_PID_FILE "/var/run/smartdns.pid"
-#define TMP_BUFF_LEN_32 32
-
-static int verbose_screen;
-
-static void _help(void)
-{
-	/* clang-format off */
-	char *help = ""
-		"Usage: smartdns [OPTION]...\n"
-		"Start smartdns server.\n"
-		"  -f            run forground.\n"
-		"  -c [conf]     config file.\n"
-		"  -p [pid]      pid file path\n"
-		"  -S            ignore segment fault signal.\n"
-		"  -x            verbose screen.\n"
-		"  -v            dispaly version.\n"
-		"  -h            show this help message.\n"
-
-		"Online help: http://pymumu.github.io/smartdns\n"
-		"Copyright (C) Nick Peng <pymumu@gmail.com>\n"
-		;
-	/* clang-format on */
-	printf("%s", help);
-}
-
-static void _show_version(void)
-{
-	char str_ver[256] = {0};
-#ifdef SMARTDNS_VERION
-	const char *ver = SMARTDNS_VERION;
-	snprintf(str_ver, sizeof(str_ver), "%s", ver);
-#else
-	struct tm tm;
-	get_compiled_time(&tm);
-	snprintf(str_ver, sizeof(str_ver), "1.%.4d%.2d%.2d-%.2d%.2d", tm.tm_year + 1900, tm.tm_mon + 1, tm.tm_mday, tm.tm_hour, tm.tm_min);
-#endif
-	printf("smartdns %s\n", str_ver);
-}
-
-static int _smartdns_load_from_resolv(void)
-{
-	FILE *fp = NULL;
-	char line[MAX_LINE_LEN];
-	char key[MAX_KEY_LEN];
-	char value[MAX_LINE_LEN];
-	char ns_ip[DNS_MAX_IPLEN];
-	int port = PORT_NOT_DEFINED;
-	int ret = -1;
-
-	int filed_num = 0;
-	int line_num = 0;
-
-	fp = fopen(RESOLVE_FILE, "r");
-	if (fp == NULL) {
-		tlog(TLOG_ERROR, "open %s failed, %s", RESOLVE_FILE, strerror(errno));
-		return -1;
-	}
-
-	while (fgets(line, MAX_LINE_LEN, fp)) {
-		line_num++;
-		filed_num = sscanf(line, "%63s %1023[^\r\n]s", key, value);
-
-		if (filed_num != 2) {
-			continue;
-		}
-
-		if (strncmp(key, "nameserver", MAX_KEY_LEN) != 0) {
-			continue;
-		}
-
-		if (parse_ip(value, ns_ip, &port) != 0) {
-			continue;
-		}
-
-		if (port == PORT_NOT_DEFINED) {
-			port = DEFAULT_DNS_PORT;
-		}
-
-		safe_strncpy(dns_conf_servers[dns_conf_server_num].server, ns_ip, DNS_MAX_IPLEN);
-		dns_conf_servers[dns_conf_server_num].port = port;
-		dns_conf_servers[dns_conf_server_num].type = DNS_SERVER_UDP;
-		dns_conf_server_num++;
-		ret = 0;
-	}
-
-	fclose(fp);
-
-	return ret;
-}
-
-static int _smartdns_add_servers(void)
-{
-	int i = 0;
-	int j = 0;
-	int ret = 0;
-	struct dns_server_groups *group = NULL;
-	struct dns_servers *server = NULL;
-	struct client_dns_server_flags flags;
-
-	for (i = 0; i < dns_conf_server_num; i++) {
-		memset(&flags, 0, sizeof(flags));
-		switch (dns_conf_servers[i].type) {
-		case DNS_SERVER_UDP: {
-			struct client_dns_server_flag_udp *flag_udp = &flags.udp;
-			flag_udp->ttl = dns_conf_servers[i].ttl;
-		} break;
-		case DNS_SERVER_HTTPS: {
-			struct client_dns_server_flag_https *flag_http = &flags.https;
-			flag_http->spi_len = dns_client_spki_decode(dns_conf_servers[i].spki, (unsigned char *)flag_http->spki);
-			safe_strncpy(flag_http->hostname, dns_conf_servers[i].hostname, sizeof(flag_http->hostname));
-			safe_strncpy(flag_http->path, dns_conf_servers[i].path, sizeof(flag_http->path));
-			safe_strncpy(flag_http->httphost, dns_conf_servers[i].httphost, sizeof(flag_http->httphost));
-			safe_strncpy(flag_http->tls_host_verify, dns_conf_servers[i].tls_host_verify, sizeof(flag_http->tls_host_verify));
-		} break;
-		case DNS_SERVER_TLS: {
-			struct client_dns_server_flag_tls *flag_tls = &flags.tls;
-			flag_tls->spi_len = dns_client_spki_decode(dns_conf_servers[i].spki, (unsigned char *)flag_tls->spki);
-			safe_strncpy(flag_tls->hostname, dns_conf_servers[i].hostname, sizeof(flag_tls->hostname));
-			safe_strncpy(flag_tls->tls_host_verify, dns_conf_servers[i].tls_host_verify, sizeof(flag_tls->tls_host_verify));
-		} break;
-		case DNS_SERVER_TCP:
-			break;
-		default:
-			return -1;
-			break;
-		}
-
-		flags.type = dns_conf_servers[i].type;
-		flags.server_flag = dns_conf_servers[i].server_flag;
-		flags.result_flag = dns_conf_servers[i].result_flag;
-		ret = dns_client_add_server(dns_conf_servers[i].server, dns_conf_servers[i].port, dns_conf_servers[i].type, &flags);
-		if (ret != 0) {
-			tlog(TLOG_ERROR, "add server failed, %s:%d", dns_conf_servers[i].server, dns_conf_servers[i].port);
-			return -1;
-		}
-	}
-
-	hash_for_each(dns_group_table.group, i, group, node)
-	{
-		ret = dns_client_add_group(group->group_name);
-		if (ret != 0) {
-			tlog(TLOG_ERROR, "add group failed, %s", group->group_name);
-			return -1;
-		}
-
-		for (j = 0; j < group->server_num; j++) {
-			server = group->servers[j];
-			if (server == NULL) {
-				continue;
-			}
-			ret = dns_client_add_to_group(group->group_name, server->server, server->port, server->type);
-			if (ret != 0) {
-				tlog(TLOG_ERROR, "add server %s to group %s failed", server->server, group->group_name);
-				return -1;
-			}
-		}
-	}
-
-	return 0;
-}
-
-static int _smartdns_set_ecs_ip(void)
-{
-	int ret = 0;
-	if (dns_conf_ipv4_ecs.enable) {
-		ret |= dns_client_set_ecs(dns_conf_ipv4_ecs.ip, dns_conf_ipv4_ecs.subnet);
-	}
-
-	if (dns_conf_ipv6_ecs.enable) {
-		ret |= dns_client_set_ecs(dns_conf_ipv6_ecs.ip, dns_conf_ipv6_ecs.subnet);
-	}
-
-	return ret;
-}
-
-static int _smartdns_init_ssl(void)
-{
-	SSL_load_error_strings();
-	SSL_library_init();
-	OpenSSL_add_all_algorithms();
-	SSL_CRYPTO_thread_setup();
-
-	return 0;
-}
-
-static int _smartdns_destroy_ssl(void)
-{
-	SSL_CRYPTO_thread_cleanup();
-	ERR_free_strings();
-	EVP_cleanup();
-
-	return 0;
-}
-
-static int _smartdns_init(void)
-{
-	int ret;
-	char *logfile = SMARTDNS_LOG_FILE;
-
-	if (dns_conf_log_file[0] != 0) {
-		logfile = dns_conf_log_file;
-	}
-
-	ret = tlog_init(logfile, dns_conf_log_size, dns_conf_log_num, 0, 0);
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "start tlog failed.\n");
-		goto errout;
-	}
-
-	tlog_setlogscreen(verbose_screen);
-	tlog_setlevel(dns_conf_log_level);
-
-	tlog(TLOG_NOTICE, "smartdns starting...(Copyright (C) Nick Peng <pymumu@gmail.com>, build:%s %s)", __DATE__, __TIME__);
-
-	if (_smartdns_init_ssl() != 0) {
-		tlog(TLOG_ERROR, "init ssl failed.");
-		goto errout;
-	}
-
-	if (dns_conf_server_num <= 0) {
-		if (_smartdns_load_from_resolv() != 0) {
-			tlog(TLOG_ERROR, "load dns from resolv failed.");
-			goto errout;
-		}
-	}
-
-	ret = fast_ping_init();
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "start ping failed.\n");
-		goto errout;
-	}
-
-	ret = dns_server_init();
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "start dns server failed.\n");
-		goto errout;
-	}
-
-	ret = dns_client_init();
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "start dns client failed.\n");
-		goto errout;
-	}
-	ret = _smartdns_add_servers();
-	if (ret != 0) {
-		tlog(TLOG_ERROR, "add servers failed.");
-		goto errout;
-	}
-
-	ret = _smartdns_set_ecs_ip();
-	if (ret != 0) {
-		tlog(TLOG_WARN, "set ecs ip address failed.");
-	}
-
-	return 0;
-errout:
-
-	return -1;
-}
-
-static int _smartdns_run(void)
-{
-	return dns_server_run();
-}
-
-static void _smartdns_exit(void)
-{
-	dns_server_exit();
-	dns_client_exit();
-	fast_ping_exit();
-	_smartdns_destroy_ssl();
-	tlog_exit();
-	dns_server_load_exit();
-}
-
-static void _sig_exit(int signo)
-{
-	dns_server_stop();
-}
-
-static void _sig_error_exit(int signo, siginfo_t *siginfo, void *ct)
-{
-	unsigned long PC = 0;
-	ucontext_t *context = ct;
-#if defined(__i386__)
-	int *pgregs = (int *)(&(context->uc_mcontext.gregs));
-	PC = pgregs[REG_EIP];
-#elif defined(__x86_64__)
-	int *pgregs = (int *)(&(context->uc_mcontext.gregs));
-	PC = pgregs[REG_RIP];
-#elif defined(__arm__)
-	PC = context->uc_mcontext.arm_pc;
-#elif defined(__aarch64__)
-	PC = context->uc_mcontext.pc;
-#elif defined(__mips__)
-	PC = context->uc_mcontext.pc;
-#endif
-	tlog(TLOG_FATAL, "process exit with signal %d, code = %d, errno = %d, pid = %d, self = %d, pc = %#lx, addr = %#lx, build(%s %s)\n", signo, siginfo->si_code,
-		 siginfo->si_errno, siginfo->si_pid, getpid(), PC, (unsigned long)siginfo->si_addr, __DATE__, __TIME__);
-
-	sleep(1);
-	_exit(0);
-}
-
-static int sig_list[] = {SIGSEGV, SIGABRT, SIGBUS, SIGILL, SIGFPE};
-
-static int sig_num = sizeof(sig_list) / sizeof(int);
-
-static void _reg_signal(void)
-{
-	struct sigaction act, old;
-	int i = 0;
-	act.sa_sigaction = _sig_error_exit;
-	sigemptyset(&act.sa_mask);
-	act.sa_flags = SA_RESTART | SA_SIGINFO;
-
-	for (i = 0; i < sig_num; i++) {
-		sigaction(sig_list[i], &act, &old);
-	}
-}
-
-int main(int argc, char *argv[])
-{
-	int ret;
-	int is_forground = 0;
-	int opt;
-	char config_file[MAX_LINE_LEN];
-	char pid_file[MAX_LINE_LEN];
-	int signal_ignore = 0;
-
-	safe_strncpy(config_file, SMARTDNS_CONF_FILE, MAX_LINE_LEN);
-	safe_strncpy(pid_file, SMARTDNS_PID_FILE, MAX_LINE_LEN);
-
-	while ((opt = getopt(argc, argv, "fhc:p:Svx")) != -1) {
-		switch (opt) {
-		case 'f':
-			is_forground = 1;
-			break;
-		case 'c':
-			snprintf(config_file, sizeof(config_file), "%s", optarg);
-			break;
-		case 'p':
-			snprintf(pid_file, sizeof(pid_file), "%s", optarg);
-			break;
-		case 'S':
-			signal_ignore = 1;
-			break;
-		case 'x':
-			verbose_screen = 1;
-			break;
-		case 'v':
-			_show_version();
-			return 0;
-			break;
-		case 'h':
-			_help();
-			return 1;
-		}
-	}
-
-	if (is_forground == 0) {
-		if (daemon(0, 0) < 0) {
-			fprintf(stderr, "run daemon process failed, %s\n", strerror(errno));
-			return 1;
-		}
-	}
-
-	if (signal_ignore == 0) {
-		_reg_signal();
-	}
-
-	if (create_pid_file(pid_file) != 0) {
-		goto errout;
-	}
-
-	if (dns_server_load_conf(config_file) != 0) {
-		fprintf(stderr, "load config failed.\n");
-		goto errout;
-	}
-
-	ret = _smartdns_init();
-	if (ret != 0) {
-		usleep(100000);
-		goto errout;
-	}
-
-	signal(SIGINT, _sig_exit);
-	signal(SIGPIPE, SIG_IGN);
-	atexit(_smartdns_exit);
-
-	return _smartdns_run();
-
-errout:
-
-	return 1;
-}
+/*************************************************************************
+ *
+ * Copyright (C) 2018-2020 Ruilin Peng (Nick) <pymumu@gmail.com>.
+ *
+ * smartdns is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * smartdns is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#define _GNU_SOURCE
+#include "art.h"
+#include "atomic.h"
+#include "dns_client.h"
+#include "dns_conf.h"
+#include "dns_server.h"
+#include "fast_ping.h"
+#include "hashtable.h"
+#include "list.h"
+#include "rbtree.h"
+#include "tlog.h"
+#include "util.h"
+#include <errno.h>
+#include <fcntl.h>
+#include <libgen.h>
+#include <openssl/err.h>
+#include <openssl/ssl.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <ucontext.h>
+
+#define RESOLVE_FILE "/etc/resolv.conf"
+#define MAX_LINE_LEN 1024
+#define MAX_KEY_LEN 64
+#define SMARTDNS_PID_FILE "/var/run/smartdns.pid"
+#define TMP_BUFF_LEN_32 32
+
+static int verbose_screen;
+
+static void _help(void)
+{
+	/* clang-format off */
+	char *help = ""
+		"Usage: smartdns [OPTION]...\n"
+		"Start smartdns server.\n"
+		"  -f            run forground.\n"
+		"  -c [conf]     config file.\n"
+		"  -p [pid]      pid file path\n"
+		"  -S            ignore segment fault signal.\n"
+		"  -x            verbose screen.\n"
+		"  -v            dispaly version.\n"
+		"  -h            show this help message.\n"
+
+		"Online help: http://pymumu.github.io/smartdns\n"
+		"Copyright (C) Nick Peng <pymumu@gmail.com>\n"
+		;
+	/* clang-format on */
+	printf("%s", help);
+}
+
+static void _show_version(void)
+{
+	char str_ver[256] = {0};
+#ifdef SMARTDNS_VERION
+	const char *ver = SMARTDNS_VERION;
+	snprintf(str_ver, sizeof(str_ver), "%s", ver);
+#else
+	struct tm tm;
+	get_compiled_time(&tm);
+	snprintf(str_ver, sizeof(str_ver), "1.%.4d%.2d%.2d-%.2d%.2d", tm.tm_year + 1900, tm.tm_mon + 1, tm.tm_mday,
+			 tm.tm_hour, tm.tm_min);
+#endif
+	printf("smartdns %s\n", str_ver);
+}
+
+static int _smartdns_load_from_resolv(void)
+{
+	FILE *fp = NULL;
+	char line[MAX_LINE_LEN];
+	char key[MAX_KEY_LEN];
+	char value[MAX_LINE_LEN];
+	char ns_ip[DNS_MAX_IPLEN];
+	int port = PORT_NOT_DEFINED;
+	int ret = -1;
+
+	int filed_num = 0;
+	int line_num = 0;
+
+	fp = fopen(RESOLVE_FILE, "r");
+	if (fp == NULL) {
+		tlog(TLOG_ERROR, "open %s failed, %s", RESOLVE_FILE, strerror(errno));
+		return -1;
+	}
+
+	while (fgets(line, MAX_LINE_LEN, fp)) {
+		line_num++;
+		filed_num = sscanf(line, "%63s %1023[^\r\n]s", key, value);
+
+		if (filed_num != 2) {
+			continue;
+		}
+
+		if (strncmp(key, "nameserver", MAX_KEY_LEN) != 0) {
+			continue;
+		}
+
+		if (parse_ip(value, ns_ip, &port) != 0) {
+			continue;
+		}
+
+		if (port == PORT_NOT_DEFINED) {
+			port = DEFAULT_DNS_PORT;
+		}
+
+		safe_strncpy(dns_conf_servers[dns_conf_server_num].server, ns_ip, DNS_MAX_IPLEN);
+		dns_conf_servers[dns_conf_server_num].port = port;
+		dns_conf_servers[dns_conf_server_num].type = DNS_SERVER_UDP;
+		dns_conf_server_num++;
+		ret = 0;
+	}
+
+	fclose(fp);
+
+	return ret;
+}
+
+static int _smartdns_add_servers(void)
+{
+	int i = 0;
+	int j = 0;
+	int ret = 0;
+	struct dns_server_groups *group = NULL;
+	struct dns_servers *server = NULL;
+	struct client_dns_server_flags flags;
+
+	for (i = 0; i < dns_conf_server_num; i++) {
+		memset(&flags, 0, sizeof(flags));
+		switch (dns_conf_servers[i].type) {
+		case DNS_SERVER_UDP: {
+			struct client_dns_server_flag_udp *flag_udp = &flags.udp;
+			flag_udp->ttl = dns_conf_servers[i].ttl;
+		} break;
+		case DNS_SERVER_HTTPS: {
+			struct client_dns_server_flag_https *flag_http = &flags.https;
+			flag_http->spi_len = dns_client_spki_decode(dns_conf_servers[i].spki, (unsigned char *)flag_http->spki);
+			safe_strncpy(flag_http->hostname, dns_conf_servers[i].hostname, sizeof(flag_http->hostname));
+			safe_strncpy(flag_http->path, dns_conf_servers[i].path, sizeof(flag_http->path));
+			safe_strncpy(flag_http->httphost, dns_conf_servers[i].httphost, sizeof(flag_http->httphost));
+			safe_strncpy(flag_http->tls_host_verify, dns_conf_servers[i].tls_host_verify,
+						 sizeof(flag_http->tls_host_verify));
+			flag_http->skip_check_cert = dns_conf_servers[i].skip_check_cert;
+		} break;
+		case DNS_SERVER_TLS: {
+			struct client_dns_server_flag_tls *flag_tls = &flags.tls;
+			flag_tls->spi_len = dns_client_spki_decode(dns_conf_servers[i].spki, (unsigned char *)flag_tls->spki);
+			safe_strncpy(flag_tls->hostname, dns_conf_servers[i].hostname, sizeof(flag_tls->hostname));
+			safe_strncpy(flag_tls->tls_host_verify, dns_conf_servers[i].tls_host_verify,
+						 sizeof(flag_tls->tls_host_verify));
+			flag_tls->skip_check_cert = dns_conf_servers[i].skip_check_cert;
+
+		} break;
+		case DNS_SERVER_TCP:
+			break;
+		default:
+			return -1;
+			break;
+		}
+
+		flags.type = dns_conf_servers[i].type;
+		flags.server_flag = dns_conf_servers[i].server_flag;
+		flags.result_flag = dns_conf_servers[i].result_flag;
+		ret = dns_client_add_server(dns_conf_servers[i].server, dns_conf_servers[i].port, dns_conf_servers[i].type,
+									&flags);
+		if (ret != 0) {
+			tlog(TLOG_ERROR, "add server failed, %s:%d", dns_conf_servers[i].server, dns_conf_servers[i].port);
+			return -1;
+		}
+	}
+
+	hash_for_each(dns_group_table.group, i, group, node)
+	{
+		ret = dns_client_add_group(group->group_name);
+		if (ret != 0) {
+			tlog(TLOG_ERROR, "add group failed, %s", group->group_name);
+			return -1;
+		}
+
+		for (j = 0; j < group->server_num; j++) {
+			server = group->servers[j];
+			if (server == NULL) {
+				continue;
+			}
+			ret = dns_client_add_to_group(group->group_name, server->server, server->port, server->type);
+			if (ret != 0) {
+				tlog(TLOG_ERROR, "add server %s to group %s failed", server->server, group->group_name);
+				return -1;
+			}
+		}
+	}
+
+	return 0;
+}
+
+static int _smartdns_set_ecs_ip(void)
+{
+	int ret = 0;
+	if (dns_conf_ipv4_ecs.enable) {
+		ret |= dns_client_set_ecs(dns_conf_ipv4_ecs.ip, dns_conf_ipv4_ecs.subnet);
+	}
+
+	if (dns_conf_ipv6_ecs.enable) {
+		ret |= dns_client_set_ecs(dns_conf_ipv6_ecs.ip, dns_conf_ipv6_ecs.subnet);
+	}
+
+	return ret;
+}
+
+static int _smartdns_init_ssl(void)
+{
+#if OPENSSL_API_COMPAT < 0x10100000L
+	SSL_load_error_strings();
+	SSL_library_init();
+	OpenSSL_add_all_algorithms();
+	SSL_CRYPTO_thread_setup();
+#endif
+	return 0;
+}
+
+static int _smartdns_destroy_ssl(void)
+{
+#if OPENSSL_API_COMPAT < 0x10100000L
+	SSL_CRYPTO_thread_cleanup();
+	ERR_free_strings();
+	EVP_cleanup();
+#endif
+	return 0;
+}
+
+static int _smartdns_init(void)
+{
+	int ret;
+	char *logfile = SMARTDNS_LOG_FILE;
+
+	if (dns_conf_log_file[0] != 0) {
+		logfile = dns_conf_log_file;
+	}
+
+	ret = tlog_init(logfile, dns_conf_log_size, dns_conf_log_num, 0, 0);
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "start tlog failed.\n");
+		goto errout;
+	}
+
+	tlog_setlogscreen(verbose_screen);
+	tlog_setlevel(dns_conf_log_level);
+
+	tlog(TLOG_NOTICE, "smartdns starting...(Copyright (C) Nick Peng <pymumu@gmail.com>, build:%s %s)", __DATE__,
+		 __TIME__);
+
+	if (_smartdns_init_ssl() != 0) {
+		tlog(TLOG_ERROR, "init ssl failed.");
+		goto errout;
+	}
+
+	if (dns_conf_server_num <= 0) {
+		if (_smartdns_load_from_resolv() != 0) {
+			tlog(TLOG_ERROR, "load dns from resolv failed.");
+			goto errout;
+		}
+	}
+
+	ret = fast_ping_init();
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "start ping failed.\n");
+		goto errout;
+	}
+
+	ret = dns_server_init();
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "start dns server failed.\n");
+		goto errout;
+	}
+
+	ret = dns_client_init();
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "start dns client failed.\n");
+		goto errout;
+	}
+	ret = _smartdns_add_servers();
+	if (ret != 0) {
+		tlog(TLOG_ERROR, "add servers failed.");
+		goto errout;
+	}
+
+	ret = _smartdns_set_ecs_ip();
+	if (ret != 0) {
+		tlog(TLOG_WARN, "set ecs ip address failed.");
+	}
+
+	return 0;
+errout:
+
+	return -1;
+}
+
+static int _smartdns_run(void)
+{
+	return dns_server_run();
+}
+
+static void _smartdns_exit(void)
+{
+	dns_server_exit();
+	dns_client_exit();
+	fast_ping_exit();
+	_smartdns_destroy_ssl();
+	tlog_exit();
+	dns_server_load_exit();
+}
+
+static void _sig_exit(int signo)
+{
+	dns_server_stop();
+}
+
+static void _sig_error_exit(int signo, siginfo_t *siginfo, void *ct)
+{
+	unsigned long PC = 0;
+	ucontext_t *context = ct;
+#if defined(__i386__)
+	int *pgregs = (int *)(&(context->uc_mcontext.gregs));
+	PC = pgregs[REG_EIP];
+#elif defined(__x86_64__)
+	int *pgregs = (int *)(&(context->uc_mcontext.gregs));
+	PC = pgregs[REG_RIP];
+#elif defined(__arm__)
+	PC = context->uc_mcontext.arm_pc;
+#elif defined(__aarch64__)
+	PC = context->uc_mcontext.pc;
+#elif defined(__mips__)
+	PC = context->uc_mcontext.pc;
+#endif
+	tlog(TLOG_FATAL,
+		 "process exit with signal %d, code = %d, errno = %d, pid = %d, self = %d, pc = %#lx, addr = %#lx, build(%s "
+		 "%s)\n",
+		 signo, siginfo->si_code, siginfo->si_errno, siginfo->si_pid, getpid(), PC, (unsigned long)siginfo->si_addr,
+		 __DATE__, __TIME__);
+
+	sleep(1);
+	_exit(0);
+}
+
+static int sig_list[] = {SIGSEGV, SIGABRT, SIGBUS, SIGILL, SIGFPE};
+
+static int sig_num = sizeof(sig_list) / sizeof(int);
+
+static void _reg_signal(void)
+{
+	struct sigaction act, old;
+	int i = 0;
+	act.sa_sigaction = _sig_error_exit;
+	sigemptyset(&act.sa_mask);
+	act.sa_flags = SA_RESTART | SA_SIGINFO;
+
+	for (i = 0; i < sig_num; i++) {
+		sigaction(sig_list[i], &act, &old);
+	}
+}
+
+int main(int argc, char *argv[])
+{
+	int ret;
+	int is_forground = 0;
+	int opt;
+	char config_file[MAX_LINE_LEN];
+	char pid_file[MAX_LINE_LEN];
+	int signal_ignore = 0;
+
+	safe_strncpy(config_file, SMARTDNS_CONF_FILE, MAX_LINE_LEN);
+	safe_strncpy(pid_file, SMARTDNS_PID_FILE, MAX_LINE_LEN);
+
+	while ((opt = getopt(argc, argv, "fhc:p:Svx")) != -1) {
+		switch (opt) {
+		case 'f':
+			is_forground = 1;
+			break;
+		case 'c':
+			snprintf(config_file, sizeof(config_file), "%s", optarg);
+			break;
+		case 'p':
+			snprintf(pid_file, sizeof(pid_file), "%s", optarg);
+			break;
+		case 'S':
+			signal_ignore = 1;
+			break;
+		case 'x':
+			verbose_screen = 1;
+			break;
+		case 'v':
+			_show_version();
+			return 0;
+			break;
+		case 'h':
+			_help();
+			return 1;
+		}
+	}
+
+	if (is_forground == 0) {
+		if (daemon(0, 0) < 0) {
+			fprintf(stderr, "run daemon process failed, %s\n", strerror(errno));
+			return 1;
+		}
+	}
+
+	if (signal_ignore == 0) {
+		_reg_signal();
+	}
+
+	if (create_pid_file(pid_file) != 0) {
+		goto errout;
+	}
+
+	if (dns_server_load_conf(config_file) != 0) {
+		fprintf(stderr, "load config failed.\n");
+		goto errout;
+	}
+
+	ret = _smartdns_init();
+	if (ret != 0) {
+		usleep(100000);
+		goto errout;
+	}
+
+	signal(SIGINT, _sig_exit);
+	signal(SIGPIPE, SIG_IGN);
+	atexit(_smartdns_exit);
+
+	return _smartdns_run();
+
+errout:
+
+	return 1;
+}
diff --git a/release/src/router/smartdns/src/util.c b/release/src/router/smartdns/src/util.c
index f26ec779d5..8d0c39a1c1 100644
--- a/release/src/router/smartdns/src/util.c
+++ b/release/src/router/smartdns/src/util.c
@@ -24,20 +24,20 @@
 #include <arpa/inet.h>
 #include <errno.h>
 #include <fcntl.h>
-#include <linux/netlink.h>
+#include <inttypes.h>
 #include <linux/capability.h>
+#include <linux/netlink.h>
+#include <netinet/tcp.h>
 #include <openssl/crypto.h>
 #include <openssl/ssl.h>
 #include <pthread.h>
-#include <netinet/tcp.h>
 #include <stdlib.h>
 #include <string.h>
+#include <sys/prctl.h>
 #include <sys/stat.h>
 #include <sys/types.h>
 #include <time.h>
 #include <unistd.h>
-#include <inttypes.h>
-#include <sys/prctl.h>
 
 #define TMP_BUFF_LEN_32 32
 
@@ -285,14 +285,14 @@ int parse_ip(const char *value, char *ip, int *port)
 	return 0;
 }
 
-static int _check_is_ipv4(const char *ip) 
+static int _check_is_ipv4(const char *ip)
 {
 	const char *ptr = ip;
 	char c = 0;
 	int dot_num = 0;
 	int dig_num = 0;
 
-	while ( (c = *ptr++) != '\0') {
+	while ((c = *ptr++) != '\0') {
 		if (c == '.') {
 			dot_num++;
 			dig_num = 0;
@@ -326,7 +326,7 @@ static int _check_is_ipv6(const char *ip)
 	int colon_num = 0;
 	int dig_num = 0;
 
-	while ( (c = *ptr++) != '\0') {
+	while ((c = *ptr++) != '\0') {
 		if (c == '[' || c == ']') {
 			continue;
 		}
@@ -420,7 +420,7 @@ int parse_uri(char *value, char *scheme, char *host, int *port, char *path)
 
 	if (path) {
 		strncpy(path, process_ptr, PATH_MAX);
-	} 
+	}
 	return 0;
 }
 
@@ -456,8 +456,8 @@ char *reverse_string(char *output, const char *input, int len, int to_lower_case
 		if (to_lower_case) {
 			if (*output >= 'A' && *output <= 'Z') {
 				/* To lower case */
-         		*output = *output + 32;
-      		}
+				*output = *output + 32;
+			}
 		}
 		output++;
 		len--;
@@ -502,7 +502,8 @@ static int _ipset_support_timeout(const char *ipsetname)
 	return -1;
 }
 
-static int _ipset_operate(const char *ipsetname, const unsigned char addr[], int addr_len, unsigned long timeout, int operate)
+static int _ipset_operate(const char *ipsetname, const unsigned char addr[], int addr_len, unsigned long timeout,
+						  int operate)
 {
 	struct nlmsghdr *netlink_head;
 	struct ipset_netlink_msg *netlink_msg;
@@ -560,7 +561,9 @@ static int _ipset_operate(const char *ipsetname, const unsigned char addr[], int
 	netlink_head->nlmsg_len += NETLINK_ALIGN(sizeof(struct ipset_netlink_attr));
 	nested[1]->type = NLA_F_NESTED | IPSET_ATTR_IP;
 
-	_ipset_add_attr(netlink_head, (af == AF_INET ? IPSET_ATTR_IPADDR_IPV4 : IPSET_ATTR_IPADDR_IPV6) | NLA_F_NET_BYTEORDER, addr_len, addr);
+	_ipset_add_attr(netlink_head,
+					(af == AF_INET ? IPSET_ATTR_IPADDR_IPV4 : IPSET_ATTR_IPADDR_IPV6) | NLA_F_NET_BYTEORDER, addr_len,
+					addr);
 	nested[1]->len = (void *)buffer + NETLINK_ALIGN(netlink_head->nlmsg_len) - (void *)nested[1];
 
 	if (timeout > 0 && _ipset_support_timeout(ipsetname) == 0) {
@@ -687,6 +690,7 @@ int create_pid_file(const char *pid_file)
 	return -1;
 }
 
+#if OPENSSL_API_COMPAT < 0x10100000
 #define THREAD_STACK_SIZE (16 * 1024)
 static pthread_mutex_t *lock_cs;
 static long *lock_count;
@@ -743,6 +747,7 @@ void SSL_CRYPTO_thread_cleanup(void)
 	OPENSSL_free(lock_cs);
 	OPENSSL_free(lock_count);
 }
+#endif
 
 #define SERVER_NAME_LEN 256
 #define TLS_HEADER_LEN 5
@@ -923,20 +928,20 @@ static int parse_server_name_extension(const char *data, size_t data_len, char *
 	return -2;
 }
 
-void get_compiled_time(struct tm *tm) 
-{ 
-    char s_month[5];
-    int month, day, year;
+void get_compiled_time(struct tm *tm)
+{
+	char s_month[5];
+	int month, day, year;
 	int hour, min, sec;
-    static const char *month_names = "JanFebMarAprMayJunJulAugSepOctNovDec";
+	static const char *month_names = "JanFebMarAprMayJunJulAugSepOctNovDec";
 
-    sscanf(__DATE__, "%5s %d %d", s_month, &day, &year);
-    month = (strstr(month_names, s_month) - month_names) / 3;
+	sscanf(__DATE__, "%5s %d %d", s_month, &day, &year);
+	month = (strstr(month_names, s_month) - month_names) / 3;
 	sscanf(__TIME__, "%d:%d:%d", &hour, &min, &sec);
-    tm->tm_year = year - 1900;
-    tm->tm_mon = month;
-    tm->tm_mday = day;
-    tm->tm_isdst = -1;
+	tm->tm_year = year - 1900;
+	tm->tm_mon = month;
+	tm->tm_mday = day;
+	tm->tm_isdst = -1;
 	tm->tm_hour = hour;
 	tm->tm_min = min;
 	tm->tm_sec = sec;
@@ -956,7 +961,7 @@ int has_network_raw_cap(void)
 int set_sock_keepalive(int fd, int keepidle, int keepinterval, int keepcnt)
 {
 	const int yes = 1;
-	if (setsockopt(fd, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes))!= 0) {
+	if (setsockopt(fd, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) != 0) {
 		return -1;
 	}
 
@@ -964,5 +969,19 @@ int set_sock_keepalive(int fd, int keepidle, int keepinterval, int keepcnt)
 	setsockopt(fd, IPPROTO_TCP, TCP_KEEPIDLE, &keepinterval, sizeof(keepinterval));
 	setsockopt(fd, IPPROTO_TCP, TCP_KEEPIDLE, &keepcnt, sizeof(keepcnt));
 
+	return 0;
+}
+
+int set_sock_lingertime(int fd, int time)
+{
+	struct linger l;
+
+	l.l_onoff = 1;
+	l.l_linger = 0;
+
+	if (setsockopt(fd, SOL_SOCKET, SO_LINGER, (const char *)&l, sizeof(l)) != 0) {
+		return -1;
+	}
+
 	return 0;
 }
\ No newline at end of file
diff --git a/release/src/router/smartdns/src/util.h b/release/src/router/smartdns/src/util.h
index 95cc9d2aec..1c581ae04e 100644
--- a/release/src/router/smartdns/src/util.h
+++ b/release/src/router/smartdns/src/util.h
@@ -19,23 +19,27 @@
 #ifndef SMART_DNS_UTIL_H
 #define SMART_DNS_UTIL_H
 
+#include "stringutil.h"
 #include <netdb.h>
 #include <time.h>
-#include "stringutil.h"
 
 #ifdef __cplusplus
 extern "C" {
 #endif /*__cplusplus */
 
+#ifndef TCP_FASTOPEN
+#define TCP_FASTOPEN 23
+#endif
+
 #ifndef TCP_FASTOPEN_CONNECT
 #define TCP_FASTOPEN_CONNECT 30
 #endif
 #ifndef TCP_THIN_LINEAR_TIMEOUTS
-#define TCP_THIN_LINEAR_TIMEOUTS 16 
+#define TCP_THIN_LINEAR_TIMEOUTS 16
 #endif
 
 #ifndef TCP_THIN_DUPACK
-#define TCP_THIN_DUPACK		 17 
+#define TCP_THIN_DUPACK 17
 #endif
 
 #define PORT_NOT_DEFINED -1
@@ -98,6 +102,8 @@ int has_network_raw_cap(void);
 
 int set_sock_keepalive(int fd, int keepidle, int keepinterval, int keepcnt);
 
+int set_sock_lingertime(int fd, int time);
+
 #ifdef __cplusplus
 }
 #endif /*__cplusplus */
diff --git a/release/src/router/smartdns/systemd/smartdns.service.in b/release/src/router/smartdns/systemd/smartdns.service.in
new file mode 100644
index 0000000000..052d9ea052
--- /dev/null
+++ b/release/src/router/smartdns/systemd/smartdns.service.in
@@ -0,0 +1,18 @@
+[Unit]
+Description=smart dns server
+After=network.target 
+StartLimitBurst=0
+StartLimitIntervalSec=60
+
+[Service]
+Type=forking
+PIDFile=@RUNSTATEDIR@/smartdns.pid
+EnvironmentFile=@SYSCONFDIR@/default/smartdns
+ExecStart=@SBINDIR@/smartdns -p @RUNSTATEDIR@/smartdns.pid $SMART_DNS_OPTS 
+KillMode=process
+Restart=always
+RestartSec=2
+
+[Install]
+WantedBy=multi-user.target
+Alias=smartdns.service
diff --git a/release/src/router/softcenter/Makefile b/release/src/router/softcenter/Makefile
index 3e3018fe6d..832aa729e3 100644
--- a/release/src/router/softcenter/Makefile
+++ b/release/src/router/softcenter/Makefile
@@ -24,8 +24,10 @@ install:
 	install -d $(INSTALLDIR)/usr/bin
 	install -d $(INSTALLDIR)/usr/share
 	install -d $(INSTALLDIR)/usr/lib
+ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3 XWR3100))
 ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3))
 	install -d $(INSTALLDIR)/mcu
+endif
 	install -d $(INSTALLDIR)/rom/cfe/
 endif
 	install -d $(INSTALLDIR)/rom/etc
@@ -38,6 +40,7 @@ else
 	install -d $(INSTALLDIR)/www/js
 	install -d $(INSTALLDIR)/www/res
 endif
+	install -d $(INSTALLDIR)/rom/etc/softcenter
 	install -d $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -d $(INSTALLDIR)/rom/etc/softcenter/res
 	install -d $(INSTALLDIR)/rom/etc/softcenter/res/layer
@@ -50,20 +53,19 @@ endif
 	install -d $(INSTALLDIR)/rom/etc/softcenter/scripts
 	install -d $(INSTALLDIR)/rom/etc/softcenter/perp/.boot
 	install -d $(INSTALLDIR)/rom/etc/softcenter/perp/.control
-ifeq ($(BUILD_NAME), $(filter $(BUILD_NAME), GT-AC2900 GT-AC5300))
+ifeq ($(BUILD_NAME), $(filter $(BUILD_NAME), GT-AC2900 GT-AC5300 TUF-AX3000))
 	install -d $(INSTALLDIR)/rom/etc/softcenter/ROG/res
-	install -d $(INSTALLDIR)/rom/etc/softcenter/ROG/webs
-else ifeq  ($(BUILD_NAME), $(filter $(BUILD_NAME), TUF-AX3000))
-	install -d $(INSTALLDIR)/rom/etc/softcenter/TUF/res
-	install -d $(INSTALLDIR)/rom/etc/softcenter/TUF/webs
 endif
 # softcenter
+	install -m 0755 softcenter/automount.sh $(INSTALLDIR)/rom/etc/softcenter
 	install -m 0755 softcenter/bin/base64_encode $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/jq $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/softcenter.sh $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/softcenter-mount.sh $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/softcenter-net.sh $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/softcenter-wan.sh $(INSTALLDIR)/rom/etc/softcenter/bin
+	install -m 0755 softcenter/bin/softcenter-services.sh $(INSTALLDIR)/rom/etc/softcenter/bin
+	install -m 0755 softcenter/bin/softcenter-unmount.sh $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/perpboot $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/perpctl $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/perpd $(INSTALLDIR)/rom/etc/softcenter/bin
@@ -74,7 +76,11 @@ endif
 	install -m 0755 softcenter/bin/sissylog $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/tinylog $(INSTALLDIR)/rom/etc/softcenter/bin
 	install -m 0755 softcenter/bin/versioncmp $(INSTALLDIR)/rom/etc/softcenter/bin
+	install -m 0755 softcenter/res/sc1CN.json $(INSTALLDIR)/rom/etc/softcenter/res
+	install -m 0755 softcenter/res/sc1EN.json $(INSTALLDIR)/rom/etc/softcenter/res
+	install -m 0755 softcenter/res/sc1TW.json $(INSTALLDIR)/rom/etc/softcenter/res
 	install -m 0755 softcenter/res/icon-default.png $(INSTALLDIR)/rom/etc/softcenter/res
+	install -m 0755 softcenter/res/merlinr.png $(INSTALLDIR)/rom/etc/softcenter/res
 	install -m 0755 softcenter/res/upgrade.png $(INSTALLDIR)/rom/etc/softcenter/res
 	install -m 0755 softcenter/res/softcenter.js $(INSTALLDIR)/rom/etc/softcenter/res
 	install -m 0755 softcenter/res/softcenter.css $(INSTALLDIR)/rom/etc/softcenter/res
@@ -96,19 +102,13 @@ endif
 	install -m 0755 softcenter/perp/.control/perpd.pid $(INSTALLDIR)/rom/etc/softcenter/perp/.control
 	install -m 0755 softcenter/scripts/base.sh $(INSTALLDIR)/rom/etc/softcenter/scripts
 	install -m 0755 softcenter/scripts/ks_app_install.sh $(INSTALLDIR)/rom/etc/softcenter/scripts
-	install -m 0755 softcenter/scripts/ks_tar_intall.sh $(INSTALLDIR)/rom/etc/softcenter/scripts
+	install -m 0755 softcenter/scripts/ks_tar_install.sh $(INSTALLDIR)/rom/etc/softcenter/scripts
 	#install -m 0755 softcenter/scripts/pluginbase.sh $(INSTALLDIR)/rom/etc/softcenter/scripts
 ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3C))	
 	install -m 0755 mtd $(INSTALLDIR)/sbin
 endif
-ifeq ($(BUILD_NAME), $(filter $(BUILD_NAME), GT-AC2900 GT-AC5300))
+ifeq ($(BUILD_NAME), $(filter $(BUILD_NAME), GT-AC2900 GT-AC5300 TUF-AX3000))
 	install -m 0755 softcenter/ROG/res/softcenter.css $(INSTALLDIR)/rom/etc/softcenter/ROG/res
-	install -m 0755 softcenter/ROG/webs/Main_Soft_center.asp $(INSTALLDIR)/rom/etc/softcenter/ROG/webs
-	install -m 0755 softcenter/ROG/webs/Main_Soft_setting.asp $(INSTALLDIR)/rom/etc/softcenter/ROG/webs
-else ifeq  ($(BUILD_NAME), $(filter $(BUILD_NAME), TUF-AX3000))
-	install -m 0755 softcenter/TUF/res/softcenter.css $(INSTALLDIR)/rom/etc/softcenter/TUF/res
-	install -m 0755 softcenter/TUF/webs/Main_Soft_center.asp $(INSTALLDIR)/rom/etc/softcenter/TUF/webs
-	install -m 0755 softcenter/TUF/webs/Main_Soft_setting.asp $(INSTALLDIR)/rom/etc/softcenter/TUF/webs
 endif
 	install -m 0755 jffsinit.sh $(INSTALLDIR)/usr/sbin
 ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3))
@@ -118,14 +118,16 @@ ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), K3))
 	install -m 0644 mcu/app.1.1.116.hex $(INSTALLDIR)/mcu
 	install -m 0755 phi_speed $(INSTALLDIR)/usr/sbin
 	install -m 0755 libwlcr.so $(INSTALLDIR)/usr/share
-	install -m 0644 cfe.bin $(INSTALLDIR)/rom/cfe/
 	install -m 0755 uhmi $(INSTALLDIR)/usr/sbin
 	install -m 0755 weather $(INSTALLDIR)/usr/sbin
 	install -m 0755 wl_cr $(INSTALLDIR)/usr/sbin
+	install -m 0644 cfe.bin $(INSTALLDIR)/rom/cfe/
+endif
+ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), XWR3100))
+	install -m 0644 xwr.bin $(INSTALLDIR)/rom/cfe/
 endif
 	install -m 0755 plugin.sh $(INSTALLDIR)/usr/sbin
 	install -m 0755 helper.sh $(INSTALLDIR)/usr/sbin
-
 ifeq ($(HND_ROUTER), y)
 	install -m 0755 i18n.js $(INSTALLDIR)/www/www/js
 	install -m 0755 scCN.json $(INSTALLDIR)/www/www/res
@@ -138,6 +140,9 @@ else
 	install -m 0755 scEN.json $(INSTALLDIR)/www/res
 	install -m 0755 scTW.json $(INSTALLDIR)/www/res
 	install -m 0755 Softcenter.asp $(INSTALLDIR)/www
+ifeq ($(MERLINR_NAME), $(filter $(MERLINR_NAME), SBRAC1900P SBRAC3200P))
+	install -m 0755 key.asp $(INSTALLDIR)/www
+endif
 endif
 ifeq ($(or $(RTCONFIG_LANTIQ),$(RTCONFIG_QCA),$(RTCONFIG_RALINK)),y)
 	install -m 0755 sysinfo/lantiq/Tools_Sysinfo.asp $(INSTALLDIR)/www/
diff --git a/release/src/router/softcenter/Softcenter.asp b/release/src/router/softcenter/Softcenter.asp
index 1ea0d28cdd..175ad21841 100644
--- a/release/src/router/softcenter/Softcenter.asp
+++ b/release/src/router/softcenter/Softcenter.asp
@@ -31,7 +31,7 @@
 </style>
 <script>
 var sc_disk='<% nvram_get("sc_disk"); %>';
-
+var sctype;
 var partitions_array = [];
 function show_partition(){
 require(['/require/modules/diskList.js?hash=' + Math.random().toString()], function(diskList){
@@ -45,12 +45,13 @@ for(var j=0; j < usbDevicesList[i].partition.length; j++){
 partitions_array.push(usbDevicesList[i].partition[j].mountPoint);
 var accessableSize = simpleNum(usbDevicesList[i].partition[j].size-usbDevicesList[i].partition[j].used);
 var totalSize = simpleNum(usbDevicesList[i].partition[j].size);
+sctype=usbDevicesList[i].partition[j].format || "";
 if(usbDevicesList[i].partition[j].status == "unmounted")
 continue;
-if(usbDevicesList[i].partition[j].partName==sc_disk)
-code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" selected="selected">'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB)</option>';
+if((usbDevicesList[i].partition[j].partName==sc_disk)&&((usbDevicesList[i].partition[j].format.indexOf("ext") != -1)||(usbDevicesList[i].partition[j].format.indexOf("tntfs") != -1)))
+code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" selected="selected">'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB ' + sctype + ')</option>';
 else
-code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" >'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB)</option>';
+code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" >'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB ' + sctype + ')</option>';
 mounted_partition++;
 }
 }
@@ -67,7 +68,12 @@ function init() {
 function applyRule() {
 if(document.getElementById("usb_disk_id").value==0)
 {
-alert("无法启用，请插入U盘或移动硬盘");
+alert(dict['No Disk']);
+return;
+}
+if((sctype == "tfat")||(sctype =="fat"))
+{
+alert(dict['Unsupportfat']);
 return;
 }
 document.form.submit();
@@ -127,7 +133,7 @@ document.form.sc_mount.value = "0";
 										<div class="formfontdesc" style="padding-top:5px;margin-top:0px;float: left;" id="cmdDesc" sclang>jffs extended settings</div>
 										<div style="color:#FC0;padding-top:5px;margin-top:25px;margin-left:0px;float: left;" id="NoteBox" >
                                                                                         <li style="margin-top:5px;" sclang>This function must be enabled when JFFS is less than 50MB.</li>
-                                                                                        <li style="margin-top:5px;" sclang>Support EXT/FAT/NTFS partitions(BLUECAVE unsupport FAT).</li>
+                                                                                        <li style="margin-top:5px;" sclang>Support EXT/NTFS partitions.</li>
                                                                                         <li style="margin-top:5px;" sclang>No less than 1GB of free space.</li>
                                                                                         <li style="margin-top:5px;" sclang>Must unmount the current partition before mounting other partitions.</li>
 										</div>
diff --git a/release/src/router/softcenter/Softcenter_mount.asp b/release/src/router/softcenter/Softcenter_mount.asp
deleted file mode 100644
index b1f57bf9d4..0000000000
--- a/release/src/router/softcenter/Softcenter_mount.asp
+++ /dev/null
@@ -1,179 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta HTTP-EQUIV="Pragma" CONTENT="no-cache"/>
-<meta HTTP-EQUIV="Expires" CONTENT="-1"/>
-<link rel="shortcut icon" href="images/favicon.png"/>
-<link rel="icon" href="images/favicon.png"/>
-<title sclang>jffs extended settings</title>
-<link rel="stylesheet" type="text/css" href="index_style.css"/>
-<link rel="stylesheet" type="text/css" href="form_style.css"/>
-<link rel="stylesheet" type="text/css" href="usp_style.css"/>
-<link rel="stylesheet" type="text/css" href="ParentalControl.css">
-<link rel="stylesheet" type="text/css" href="css/icon.css">
-<link rel="stylesheet" type="text/css" href="css/element.css">
-<link rel="stylesheet" type="text/css" href="/device-map/device-map.css">
-<link rel="stylesheet" type="text/css" href="/calendar/fullcalendar.css">
-<script type="text/javascript" src="/state.js"></script>
-<script type="text/javascript" src="/popup.js"></script>
-<script type="text/javascript" src="/help.js"></script>
-<script type="text/javascript" src="/validator.js"></script>
-<script type="text/javascript" src="/js/jquery.js"></script>
-<script type="text/javascript" src="/general.js"></script>
-<script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
-<script type="text/javascript" src="/client_function.js"></script>
-<script type="text/javascript" src="/calendar/jquery-ui.js"></script>
-<script type="text/javascript" src="/js/i18n.js"></script>
-<style>
-
-</style>
-<script>
-var sc_disk='<% nvram_get("sc_disk"); %>';
-
-var partitions_array = [];
-function show_partition(){
-require(['/require/modules/diskList.js?hash=' + Math.random().toString()], function(diskList){
-var code="";
-var free=dict['Free'];
-var mounted_partition = 0;
-partitions_array = [];
-var usbDevicesList = diskList.list();
-for(var i=0; i < usbDevicesList.length; i++){
-for(var j=0; j < usbDevicesList[i].partition.length; j++){
-partitions_array.push(usbDevicesList[i].partition[j].mountPoint);
-var accessableSize = simpleNum(usbDevicesList[i].partition[j].size-usbDevicesList[i].partition[j].used);
-var totalSize = simpleNum(usbDevicesList[i].partition[j].size);
-if(usbDevicesList[i].partition[j].status == "unmounted")
-continue;
-if(usbDevicesList[i].partition[j].partName==sc_disk)
-code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" selected="selected">'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB)</option>';
-else
-code +='<option value="'+ usbDevicesList[i].partition[j].partName+'" >'+ usbDevicesList[i].partition[j].partName+'(' + free +':'+accessableSize+' GB)</option>';
-mounted_partition++;
-}
-}
-if(mounted_partition == 0)
-code +='<option value="0" sclang>No Disk</option>';
-document.getElementById("usb_disk_id").innerHTML = code;
-});
-}
-function init() {
-	show_menu();
-	sc_load_lang("sc");
-	show_partition();
-}
-function applyRule() {
-if(document.getElementById("usb_disk_id").value==0)
-{
-alert("无法启用，请插入U盘或移动硬盘");
-return;
-}
-document.form.submit();
-}
-function reload_Soft_Center(){
-location.href = "/Softcenter.asp";
-}
-
-
-$(document).ready(function () {
-$('#radio_sc_mount').iphoneSwitch(document.form.sc_mount.value,
-function(){
-document.form.sc_mount.value = "1";
-},
-function(){
-document.form.sc_mount.value = "0";
-}
-);
-});
-</script>
-</head>
-<body onload="init();">
-	<div id="TopBanner"></div>
-	<div id="Loading" class="popup_bg"></div>
-	<iframe name="hidden_frame" id="hidden_frame" src="" width="0" height="0" frameborder="0"></iframe>
-	<form method="post" name="form" id="ruleForm" action="/start_apply.htm" target="hidden_frame">
-	<input type="hidden" name="current_page" value="Softcenter_mount.asp"/>
-	<input type="hidden" name="next_page" value="Softcenter_mount.asp"/>
-	<input type="hidden" name="group_id" value=""/>
-	<input type="hidden" name="modified" value="0"/>
-	<input type="hidden" name="action_mode" value="toolscript"/>
-	<input type="hidden" name="action_script" value="jffsinit.sh"/>
-	<input type="hidden" name="action_wait" value=""/>
-	<input type="hidden" name="first_time" value=""/>
-	<input type="hidden" name="preferred_lang" id="preferred_lang" value="<% nvram_get("preferred_lang"); %>"/>
-	<input type="hidden" name="firmver" value="<% nvram_get("firmver"); %>"/>
-	<input type="hidden" name="sc_mount" value="<% nvram_get("sc_mount"); %>">
-	<input type="hidden" name="sc_disk" value="<% nvram_get("sc_disk"); %>">
-	<table class="content" align="center" cellpadding="0" cellspacing="0">
-		<tr>
-			<td width="17">&nbsp;</td>
-			<td valign="top" width="202">
-				<div id="mainMenu"></div>
-				<div id="subMenu"></div>
-			</td>
-			<td valign="top">
-				<div id="tabMenu" class="submenuBlock"></div>
-				<table width="98%" border="0" align="left" cellpadding="0" cellspacing="0">
-					<tr>
-						<td align="left" valign="top">
-							<table width="760px" border="0" cellpadding="5" cellspacing="0" bordercolor="#6b8fa3" class="FormTitle" id="FormTitle">
-								<tr>
-									<td bgcolor="#4D595D" colspan="3" valign="top">
-										<div>&nbsp;</div>
-										<div style="float:left;" class="formfonttitle" sclang>jffs extended settings</div>
-										<div style="float:right; width:15px; height:25px;margin-top:10px"><img id="return_btn" onclick="reload_Soft_Center();" align="right" style="cursor:pointer;position:absolute;margin-left:-30px;margin-top:-25px;" title="返回软件中心" src="/images/backprev.png" onMouseOver="this.src='/images/backprevclick.png'" onMouseOut="this.src='/images/backprev.png'"></img></div>
-										<div style="margin-left:5px;margin-top:10px;margin-bottom:10px"><img src="/images/New_ui/export/line_export.png"></div>
-										<div class="formfontdesc" style="padding-top:5px;margin-top:0px;float: left;" id="cmdDesc" sclang>jffs extended settings</div>
-										<div style="color:#FC0;padding-top:5px;margin-top:25px;margin-left:0px;float: left;" id="NoteBox" >
-                                                                                        <li style="margin-top:5px;" sclang>Support EXT/FAT/NTFS partitions.</li>
-                                                                                        <li style="margin-top:5px;" sclang>No less than 1GB of free space.</li>
-                                                                                        <li style="margin-top:5px;" sclang>Must unmount the current partition before mounting other partitions.</li>
-										</div>
-										<table style="margin:10px 0px 0px 0px;" width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable" id="routing_table">
-											<thead>
-											<tr>
-												<td colspan="2" sclang>Setting</td>
-											</tr>
-											</thead>
-											<tr >
-											<th width="30%" style="border-top: 0 none;" sclang>Enable</th>
-											<td style="border-top: 0 none;">
-											<div align="center" class="left" style="width:94px; float:left; cursor:pointer;" id="radio_sc_mount"></div>
-											</td>
-											</tr>
-<tr>
-<th sclang>Select a partition to mount</th>
-<td>
-<select id="usb_disk_id" name="sc_disk" class="input_option input_25_table">
-<option value="0" sclang>No Disk</option>
-</select>
-</td>
-</tr>
-
-                                    	</table>
-										<div class="apply_gen">
-											<input class="button_gen" onclick="applyRule()" type="button" value="Apply"/ sclang>
-											<input type="button" onClick="location.href=location.href" value="Refresh" class="button_gen" sclang>
-										</div>
-										<div style="margin-left:5px;margin-top:10px;margin-bottom:10px"><img src="/images/New_ui/export/line_export.png"></div>
-										<div class="scBottom">
-											webui by： <i>paldier</i><br/>
-										</div>
-
-									</td>
-								</tr>
-							</table>
-						</td>
-						<td width="10" align="center" valign="top"></td>
-					</tr>
-				</table>
-			</td>
-		</tr>
-	</table>
-	</form>
-	</td>
-	<div id="footer"></div>
-</body>
-</html>
diff --git a/release/src/router/softcenter/jffsinit.sh b/release/src/router/softcenter/jffsinit.sh
index 5ce25f16a0..d3c1630d7c 100644
--- a/release/src/router/softcenter/jffsinit.sh
+++ b/release/src/router/softcenter/jffsinit.sh
@@ -3,12 +3,13 @@
 
 SPACE_AVAL=$(df|grep jffs | awk '{print $2}')
 MODEL=`nvram get productid`
-
-if [ $SPACE_AVAL -gt 51200 -a "$(nvram get sc_mount)" == 0 ];then
-if [ ! -d /jffs/softcenter ]; then
-	mkdir -p /jffs/softcenter
-	cp -rf /rom/etc/softcenter/* /jffs/softcenter/
+if [ "$MODEL" == "GT-AC5300" ] || [ "$MODEL" == "GT-AX11000" ] || [ "$MODEL" == "GT-AC2900" ] || [ "$(nvram get merlinr_rog)" == "1" ];then
+	ROG=1
+elif [ "$MODEL" == "TUF-AX3000" ] || [ "$(nvram get merlinr_tuf)" == "1" ] ;then
+	TUF=1
 fi
+
+if [ $SPACE_AVAL -gt 40960 -a "$(nvram get sc_mount)" == 0 ];then
 mkdir -p /jffs/softcenter/init.d
 mkdir -p /jffs/softcenter/bin
 mkdir -p /jffs/softcenter/etc
@@ -23,33 +24,30 @@ else
 if [ "$(nvram get sc_mount)" == 1 ];then
 	mdisk=`nvram get sc_disk`
 	usb_disk="/tmp/mnt/$mdisk"
-	if [ "$MODEL" == "BLUECAVE" ];then
-		[ -n "$(mount |grep $usb_disk |grep tfat)" ] && logger "Unsupport TFAT!" && exit 1
-	fi
+	[ -n "$(mount |grep $usb_disk |grep tfat)" ] && logger "Unsupport TFAT!" && exit 1
 	if [ ! -e "$usb_disk" ]; then
 		nvram set sc_mount="0"
 		nvram commit
 		logger "USB flash drive not detected!/没有找到可用的USB磁盘!" 
 		exit 1
 	else
-		if [ ! -f "/jffs/softcenter/webs/Main_Soft_center.asp" ] ;then
-			mkdir -p /jffs/softcenter
-			mkdir -p $usb_disk/bin
-			mkdir -p $usb_disk/res
-			mkdir -p $usb_disk/webs
-			mkdir -p $usb_disk/scripts
-			mkdir -p $usb_disk/lib
-			mkdir -p /jffs/softcenter/etc
-			mkdir -p /jffs/softcenter/init.d
-			mkdir -p /jffs/softcenter/configs
-			mkdir -p /jffs/softcenter/ss
-			mkdir -p /jffs/softcenter/perp
-			ln -sf $usb_disk/bin /jffs/softcenter/bin
-			ln -sf $usb_disk/res /jffs/softcenter/res
-			ln -sf $usb_disk/webs /jffs/softcenter/webs
-			ln -sf $usb_disk/scripts /jffs/softcenter/scripts
-			ln -sf $usb_disk/lib /jffs/softcenter/lib
-		fi
+		mkdir -p /jffs/softcenter
+		mkdir -p $usb_disk/bin
+		mkdir -p $usb_disk/res
+		mkdir -p $usb_disk/webs
+		mkdir -p $usb_disk/scripts
+		mkdir -p $usb_disk/lib
+		mkdir -p /jffs/softcenter/etc
+		mkdir -p /jffs/softcenter/init.d
+		mkdir -p /jffs/softcenter/configs
+		mkdir -p /jffs/softcenter/ss
+		mkdir -p /jffs/softcenter/perp
+		ln -sf $usb_disk/bin /jffs/softcenter/
+		ln -sf $usb_disk/res /jffs/softcenter/
+		ln -sf $usb_disk/webs /jffs/softcenter/
+		ln -sf $usb_disk/scripts /jffs/softcenter/
+		ln -sf $usb_disk/lib /jffs/softcenter/
+		cd $usb_disk && touch .sc_installed
 	fi
 else
 	logger "Not enough free space for JFFS!/当前jffs分区剩余空间不足!"
@@ -62,8 +60,15 @@ cp -rf /rom/etc/softcenter/res/* /jffs/softcenter/res/
 cp -rf /rom/etc/softcenter/webs/* /jffs/softcenter/webs/
 cp -rf /rom/etc/softcenter/bin/* /jffs/softcenter/bin/
 cp -rf /rom/etc/softcenter/perp /jffs/softcenter/
-ln -sf /jffs/softcenter/bin/base64_encode /jffs/softcenter/bin/base64_decode
-ln -sf /jffs/softcenter/scripts/ks_app_install.sh /jffs/softcenter/scripts/ks_app_remove.sh
+cp -rf /rom/etc/softcenter/automount.sh /jffs/softcenter/
+if [ "$ROG" == "1" ]; then
+	cp -rf /rom/etc/softcenter/ROG/res/* /jffs/softcenter/res/
+elif [ "$TUF" == "1" ]; then
+	cp -rf /rom/etc/softcenter/ROG/res/* /jffs/softcenter/res/
+	sed -i 's/3e030d/3e2902/g;s/91071f/92650F/g;s/680516/D0982C/g;s/cf0a2c/c58813/g;s/700618/74500b/g;s/530412/92650F/g' /jffs/softcenter/res/*.css >/dev/null 2>&1
+fi
+[ ! -L "/jffs/softcenter/bin/base64_decode" ] && cd /jffs/softcenter/bin && ln -sf base64_encode base64_decode
+[ ! -L "/jffs/softcenter/scripts/ks_app_remove.sh" ] && cd /jffs/softcenter/scripts && ln -sf ks_app_install.sh ks_app_remove.sh
 chmod 755 /jffs/softcenter/scripts/*.sh
 chmod 755 /jffs/softcenter/configs/*.sh
 chmod 755 /jffs/softcenter/bin/*
@@ -71,8 +76,13 @@ chmod 755 /jffs/softcenter/init.d/*
 chmod 755 /jffs/softcenter/perp/*
 chmod 755 /jffs/softcenter/perp/.boot/*
 chmod 755 /jffs/softcenter/perp/.control/*
-echo 1.2.0 > /jffs/softcenter/.soft_ver
+chmod 755 /jffs/softcenter/automount.sh
+echo 1.2.7 > /jffs/softcenter/.soft_ver
+dbus set softcenter_api="1.1"
+dbus set softcenter_version=`cat /jffs/softcenter/.soft_ver`
 dbus set softcenter_firmware_version=`nvram get extendno|cut -d "_" -f2|cut -d "-" -f1|cut -c2-6`
+nvram set sc_installed=1
+nvram commit
 ARCH=`uname -m`
 KVER=`uname -r`
 if [ "$ARCH" == "armv7l" ]; then
@@ -81,41 +91,25 @@ if [ "$ARCH" == "armv7l" ]; then
 	else
 		dbus set softcenter_arch="$ARCH"
 	fi
+elif [ "$KVER" == "3.10.14" ];then
+	dbus set softcenter_arch="mipsle"
 else
-	if [ "$KVER" == "3.10.14" ];then
-		dbus set softcenter_arch="mipsle"
-	else
-		dbus set softcenter_arch="$ARCH"
-	fi
+	dbus set softcenter_arch="$ARCH"
 fi
 
-dbus set softcenter_api=`cat /jffs/softcenter/.soft_ver`
-if [ "$MODEL" == "GT-AC5300" ] || [ "$MODEL" == "GT-AC2900" ];then
-	cp -rf /rom/etc/softcenter/ROG/webs/* /jffs/softcenter/webs/
-	cp -rf /rom/etc/softcenter/ROG/res/* /jffs/softcenter/res/
-elif [ "$MODEL" == "TUF-AX3000" ] ;then
-	cp -rf /rom/etc/softcenter/TUF/webs/* /jffs/softcenter/webs/
-	cp -rf /rom/etc/softcenter/TUF/res/* /jffs/softcenter/res/
+if [ -z "$(dbus get softcenter_server_tcode)" ]; then
+	modelname=`nvram get modelname`
+	if [ "$modelname" == "K3" -o "$modelname" == "XWR3100" ]; then
+		dbus set softcenter_server_tcode=CN
+	elif [ "$modelname" == "SBRAC1900P" -o "$modelname" == "SBR-AC1900P" -o "$modelname" == "SBRAC3200P" -o "$modelname" == "SBR-AC3200P" -o "$modelname" == "R7900P" -o "$modelname" == "R8000P" -o "$modelname" == "R7000P" ]; then
+		dbus set softcenter_server_tcode=ALI
+	else
+		dbus set softcenter_server_tcode=`nvram get territory_code |cut -c 1-2`
+		[ -z "$(dbus get softcenter_server_tcode)" ] && dbus set softcenter_server_tcode=GB
+	fi
 fi
-nvram set sc_installed=1
-nvram commit
-# creat wan-start file
 mkdir -p /jffs/scripts
 
-	if [ -z "$(dbus get softcenter_server_tcode)" ]; then
-		modelname=`nvram get modelname`
-		if [ "$modelname" == "K3" ]; then
-			dbus set softcenter_server_tcode=CN
-		elif [ "$modelname" == "SBRAC1900P" -o "$modelname" == "SBR-AC1900P" -o "$modelname" == "SBRAC3200P" -o "$modelname" == "SBR-AC3200P" -o "$modelname" == "R7900P" -o "$modelname" == "R8000P" ]; then
-			dbus set softcenter_server_tcode=ALI
-		elif [ "$modelname" == "GTAC2900" -o "$modelname" == "GTAC5300" -o "$modelname" == "RTAC86U" -o "$modelname" == "RTAX86U" -o "$modelname" == "RTAX68U" -o "$modelname" == "RTAX58U" -o "$modelname" == "RTAX82U" -o "$modelname" == "TUFAX3000" -o "$modelname" == "RTACRH17" -o "$modelname" == "RTAX56U" ]; then
-			dbus set softcenter_server_tcode=CN1
-		else
-			dbus set softcenter_server_tcode=`nvram get territory_code |cut -c 1-2`
-			[ -z "$(dbus get softcenter_server_tcode)" ] && dbus set softcenter_server_tcode=GB
-		fi
-	fi
-
 # creat profile file
 if [ ! -f /jffs/configs/profile.add ]; then
 cat > /jffs/configs/profile.add <<EOF
@@ -128,5 +122,3 @@ export PERP_BASE=/softcenter/perp
 EOF
 fi
 
-
-
diff --git a/release/src/router/softcenter/scCN.json b/release/src/router/softcenter/scCN.json
index 3ceedf75b0..db11f7a79b 100644
--- a/release/src/router/softcenter/scCN.json
+++ b/release/src/router/softcenter/scCN.json
@@ -13,7 +13,7 @@
   "Plug in a USB flash drive to enable softcenter.": "部分插件需要插入U盘或移动硬盘才能启用.",
   "Enable/Disable softcenter in jffs extended settings.": "在jffs扩展设置里开启软件中心.",
   "jffs extended settings": "jffs扩展设置",
-  "Support EXT/FAT/NTFS partitions(BLUECAVE unsupport FAT).": "支持EXT/FAT/NTFS分区(BLUECAVE/K3C不支持FAT).",
+  "Support EXT/NTFS partitions.": "支持EXT/NTFS分区.",
   "No less than 1GB of free space.": "剩余空间不得小于1G.",
   "Must unmount the current partition before mounting other partitions.": "更换挂载分区必须先禁用再切换新分区.",
   "Select a partition to mount": "设置挂载分区",
@@ -25,5 +25,6 @@
   "Apply": "应用设置",
   "Refresh": "刷新状态",
   "Free": "空闲",
+  "Unsupportfat": "不支持FAT",
   "Softcenter - Offline installation": "软件中心 - 离线安装"
 }
diff --git a/release/src/router/softcenter/scEN.json b/release/src/router/softcenter/scEN.json
index b53d8486b6..943e4f9072 100644
--- a/release/src/router/softcenter/scEN.json
+++ b/release/src/router/softcenter/scEN.json
@@ -13,8 +13,8 @@
   "Plug in a USB flash drive to enable softcenter.": "Plug in a USB flash drive to enable softcenter.",
   "Enable/Disable softcenter in jffs extended settings.": "Enable/Disable softcenter in jffs extended settings.",
   "jffs extended settings": "jffs extended settings",
-  "Support EXT/FAT/NTFS partitions.": "Support EXT/FAT/NTFS partitions.",
-  "No less than 1GB of free space(BLUECAVE unsupport FAT).": "No less than 1GB of free space(BLUECAVE unsupport FAT).",
+  "Support EXT/NTFS partitions.": "Support EXT/NTFS partitions.",
+  "No less than 1GB of free space.": "No less than 1GB of free space.",
   "Must unmount the current partition before mounting other partitions.": "Must unmount the current partition before mounting other partitions.",
   "Select a partition to mount": "Select a partition to mount",
   "This function must be enabled when JFFS is less than 50MB.": "This function must be enabled when JFFS is less than 50MB.",
@@ -25,5 +25,6 @@
   "Apply": "Apply",
   "Refresh": "Refresh",
   "Free": "Free",
+  "Unsupportfat": "Unsupport fat",
   "Softcenter - Offline installation": "Software Center - Offline installation"
 }
diff --git a/release/src/router/softcenter/scTW.json b/release/src/router/softcenter/scTW.json
index 698ca76050..1c5627c20e 100644
--- a/release/src/router/softcenter/scTW.json
+++ b/release/src/router/softcenter/scTW.json
@@ -13,7 +13,7 @@
   "Plug in a USB flash drive to enable softcenter.": "插入USB存儲設備來啟用軟體中心.",
   "Enable/Disable softcenter in jffs extended settings.": "在jffs擴展設置裡開啟軟體中心.",
   "jffs extended settings": "jffs擴展設置",
-  "Support EXT/FAT/NTFS partitions(BLUECAVE unsupport FAT).": "支持EXT/FAT/NTFS分區(BLUECAVE不支持FAT).",
+  "Support EXT/NTFS partitions.": "支持EXT/NTFS分區.",
   "No less than 1GB of free space.": "可用空間不能少於1GB.",
   "Must unmount the current partition before mounting other partitions.": "更換掛載分區前必須先卸載當前分區.",
   "Select a partition to mount": "設置掛載分區",
@@ -25,5 +25,6 @@
   "Apply": "應用",
   "Refresh": "刷新",
   "Free": "可用",
+  "Unsupportfat": "不支持FAT",
   "Softcenter - Offline installation": "軟體中心 - 離線安裝"
 }
diff --git a/release/src/router/softcenter/softcenter/ROG/res/softcenter.css b/release/src/router/softcenter/softcenter/ROG/res/softcenter.css
index 77aba868b6..dce826f432 100644
--- a/release/src/router/softcenter/softcenter/ROG/res/softcenter.css
+++ b/release/src/router/softcenter/softcenter/ROG/res/softcenter.css
@@ -2,7 +2,7 @@
 .KoolshareBottom {
 	width: 230px;
 	height: 100px;
-	background: url(/res/koolshare.png) 0px 3px no-repeat;
+	background: url(/res/merlinr.png) 0px 3px no-repeat;
 	text-align: left;
 	padding-left:150px;
 	padding-top:8px;
@@ -19,7 +19,6 @@
 	font-size:13px;
 	font-family: Lucida Console;
 	background-image:none;
-	background-color: transparent;
 	background-color: #3e030d;
 	border:1px solid #91071f;
 	color:#FFFFFF;
@@ -69,8 +68,52 @@
 	width: 740px;
 	margin: 1px 0;
 }
-
+.show-install-btn, .show-uninstall-btn {
+	border: 1px solid #680516;
+	background: none;
+	color: #fff;
+	padding: 10px 20px;
+	border-radius: 5px 5px 0px 0px;
+}
+.active {
+	background: #680516;
+	border: 1px solid #680516;
+}
+#log_content1 {
+	width:99%;
+	font-family:'Lucida Console';
+	font-size:12px;
+	background:transparent;
+	border:1px solid #91071f;
+	color:#FFFFFF;
+}
+#IconContainer {
+	border: 1px solid #680516;
+}
+.ks_btn {
+	border: 1px solid #222;
+	font-size:10pt;
+	color: #fff;
+	padding: 5px 5px 5px 5px;
+	border-radius: 5px 5px 5px 5px;
+	width:14%;
+	vertical-align: middle;
+	background: linear-gradient(to bottom, #91071f  0%, #700618 100%);
+}
+.ks_btn:hover {
+	border: 1px solid #222;
+	font-size:10pt;
+	color: #fff;
+	padding: 5px 5px 5px 5px;
+	border-radius: 5px 5px 5px 5px;
+	width:14%;
+	vertical-align: middle;
+	background: linear-gradient(to bottom, #cf0a2c  0%, #91071f 100%);
+}
 [bgcolor="#4D595D"]{
+	background: rgba(0, 0, 0, 0.3);
+}
+[bgcolor="#444f53"]{
 	background: rgba(0, 0, 0, 0.5);
 }
 .submenuBlock{
@@ -80,7 +123,7 @@
 }
 .tab{
 	cursor:pointer;
-	background: rgb(83,4,18);
+	background: #530412;
 	color: White;
 	float: left;
 	height: 30px;
@@ -106,3 +149,4 @@
 	font-size: 12px;
 	border-radius: 5px 5px 0px 0px;
 }
+
diff --git a/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_center.asp b/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_center.asp
deleted file mode 100644
index b9d78938c4..0000000000
--- a/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_center.asp
+++ /dev/null
@@ -1,777 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="X-UA-Compatible" content="IE=Edge">
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">
-<meta HTTP-EQUIV="Expires" CONTENT="-1">
-<link rel="shortcut icon" href="images/favicon.png">
-<link rel="icon" href="images/favicon.png">
-<title>Merlin software center</title>
-<link rel="stylesheet" type="text/css" href="index_style.css"/>
-<link rel="stylesheet" type="text/css" href="form_style.css"/>
-<link rel="stylesheet" type="text/css" href="/res/softcenter.css"/>
-<link rel="stylesheet" type="text/css" href="/res/layer/theme/default/layer.css"/>
-<script language="JavaScript" type="text/javascript" src="/state.js"></script>
-<script language="JavaScript" type="text/javascript" src="/help.js"></script>
-<script language="JavaScript" type="text/javascript" src="/general.js"></script>
-<script language="JavaScript" type="text/javascript" src="/popup.js"></script>
-<script language="JavaScript" type="text/javascript" src="/client_function.js"></script>
-<script language="JavaScript" type="text/javascript" src="/validator.js"></script>
-<script type="text/javascript" src="/js/jquery.js"></script>
-<script type="text/javascript" src="/general.js"></script>
-<script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
-<script type="text/javascript" src="/form.js"></script>
-<script type="text/javascript" src="/res/softcenter.js"></script>
-<style>
-.cloud_main_radius_left {
-	-webkit-border-radius: 10px 0 0 10px;
-	-moz-border-radius: 10px 0 0 10px;
-	border-radius: 10px 0 0 10px;
-}
-.cloud_main_radius_right {
-	-webkit-border-radius: 0 10px 10px 0;
-	-moz-border-radius: 0 10px 10px 0;
-	border-radius: 0 10px 10px 0;
-}
-.cloud_main_radius {
-	-webkit-border-radius: 10px;
-	-moz-border-radius: 10px;
-	border-radius: 10px;
-}
-/* 软件中心icon新样式 by acelan */
- dl, dt, dd {
-	padding:0;
-	margin:0;
-}
-input[type=button]:focus {
-	outline: none;
-}
-.icon {
-	float:left;
-	position:relative;
-	margin: 10px 0px 30px 0px;
-}
-.icon-title {
-	line-height: 3em;
-	text-align:center;
-}
-.icon-pic {
-	margin: 10px 30px 0px 30px;
-}
-.icon-pic img {
-	border:0;
-	width: 60px;
-	height: 60px;
-	margin:2px;
-}
-.icon-desc {
-	position: absolute;
-	left: 0;
-	top: 0;
-	height: 105%;
-	visibility: hidden;
-	font-size:0;
-	width: 119px;
-	border-radius: 8px;
-	font-size: 16px;
-	opacity: 0;
-	background-color:#000;
-	margin:5px;
-	text-overflow:ellipsis;
-	transition: opacity .5s ease-in;
-}
-.icon-desc .text {
-	font-size: 12px;
-	line-height: 1.4em;
-	display: block;
-	height: 100%;
-	padding: 10px;
-	box-sizing: border-box;
-}
-.icon:hover .icon-desc {
-	opacity: .8;
-	visibility: visible;
-}
-.icon-desc .opt {
-	position: absolute;
-	bottom: 0;
-	height: 18px;
-	width: 100%;
-}
-.install-status-0 .icon-desc .opt {
-	height: 100%;
-}
-.icon-desc .install-btn,
-.icon-desc .uninstall-btn,
-.icon-desc .update-btn{
-	background: #fff;
-	color:#333;
-	cursor:pointer;
-	text-align: center;
-	font-size: 13px;
-	padding-bottom: 5px;
-	margin-left: 10px;
-	margin-right: 10px;
-	display: block;
-	width: 100%;
-	height: 18px;
-	border-radius: 0px 0px 5px 5px;
-	border: 0px;
-	position: absolute;
-	bottom: 0;
-	left: -10px;
-}
-.icon-desc .uninstall-btn {
-	display: none;
-}
-.icon-desc .update-btn {
-	display: none;
-	border-radius: 0px 0px 0px 5px;
-	width:60%;
-	border-right: 1px solid #000;
-}
-.show-install-btn,
-.show-uninstall-btn{
-	border: 1px solid #91071f;
-	background: none;
-	color: #fff;
-	padding: 10px 20px;
-	border-radius: 5px 5px 0px 0px;
-	border: 1px solid #680516;
-}
-.active {
-	background: #91071f;
-	border: 1px solid #91071f;
-	background: linear-gradient(to bottom, #680516  0%, #680516 100%); /* W3C */
-	border: 1px solid #680516;
-}
-#IconContainer {
-	border:1px solid #680516;
-}
-.install-status-1 .uninstall-btn {
-	display: block;
-}
-.install-status-1 .install-btn {
-	display: none;
-}
-.update-btn {
-	display: none;
-}
-.install-status-1 .update-btn {
-	display: none;
-}
-.install-status-4 .uninstall-btn {
-	display: block;
-}
-.install-status-4 .install-btn {
-	display: none;
-}
-.install-status-4 .update-btn {
-	display: none;
-}
-.install-status-2 .uninstall-btn {
-	display: block;
-	width: 40%;
-	border-radius: 0px 0px 5px 0px;
-	right: -10px;
-	left: auto;
-	border-left: 1px solid #000;
-}
-.install-status-2 .install-btn {
-	display: none;
-}
-.install-status-2 .update-btn {
-	display: block;
-}
-.install-status-1 {
-	display: none;
-}
-.install-status-2 {
-	display: none;
-}
-.install-status-0 {
-	display: block;
-}
-.install-status-4 {
-	display: none;
-}
-.install-view .install-status-1 {
-	display: block;
-}
-.install-view .install-status-2 {
-	display: block;
-}
-.install-view .install-status-0 {
-	display: none;
-}
-.install-view .install-status-4 {
-	display: block;
-}
-.cloud_main_radius h2 {
-	border-bottom:1px #AAA dashed;
-}
-.cloud_main_radius h3,
-.cloud_main_radius h4 {
-	font-size:12px;
-	color:#FC0;
-	font-weight:normal;
-	font-style: normal;
-}
-.cloud_main_radius h5 {
-	color:#FFF;
-	font-weight:normal;
-	font-style: normal;
-}
-</style>
-<script>
-var db_softcenter_ = {};
-var scarch = "mips";
-var model = '<% nvram_get("model"); %>';
-var modelname = '<% nvram_get("modelname"); %>';
-var TIMEOUT_SECONDS = 18;
-var softInfo = null;
-var syncRemoteSuccess = 0; //判断是否进入页面后已经成功进行远端同步
-var currState = {
-	"installing": false,
-	"lastChangeTick": 0,
-	"lastStatus": "-1",
-	"module": ""
-};
-function checkField(o, f, d) {
-	if (typeof o[f] == "undefined") {
-		o[f] = d;
-	}
-	return o[f];
-}
-function appPostScript(moduleInfo, script) {
-	if (currState.installing) {
-		console.log("current is in installing state");
-		return;
-	}
-	//Current page must has prefix of "Module_"
-	var data = {"action_script":script, "action_mode":" Refresh "};
-	//currState.name = moduleInfo.name;
-	//TODO auto choose for home_url
-	data["softcenter_home_url"] = db_softcenter_["softcenter_home_url"];
-	data["softcenter_installing_todo"] = moduleInfo.name;
-	if (script == "ks_app_install.sh") {
-		data["softcenter_installing_tar_url"] = moduleInfo.tar_url;
-		data["softcenter_installing_md5"] = moduleInfo.md5;
-		data["softcenter_installing_version"] = moduleInfo.version;
-		//Update title for this module
-		data[moduleInfo.name + "_title"] = moduleInfo.title;
-
-	}
-	$.ajax({
-		type: "POST",
-                url: "/applydb.cgi?p=softcenter_",
-                dataType: "text",
-                data: data,
-                success: function() {
-			var d = new Date();
-			//持续更新
-			currState.lastChangeTick = d / 1000 + TIMEOUT_SECONDS;
-			currState.installing = true;
-			showInstallStatus(true);
-		},
-		error: function() {
-			currState.installing = false;
-		}
-	});
-}
-function appInstallModule(moduleInfo) {
-	appPostScript(moduleInfo, "ks_app_install.sh");
-}
-function appUninstallModule(moduleInfo) {
-	if (!window.confirm('确定卸载吗')) {
-		return;
-	}
-	appPostScript(moduleInfo, "ks_app_remove.sh");
-}
-function initInstallStatus() {
-	var o = db_softcenter_;
-	var base = "softcenter_installing_";
-	if (o[base + "status"]) {
-		//状态不是0/1/7,则当前正处于安装状态,实时更新安装信息
-		if ((o[base + "status"] != "0") && (o[base + "status"] != "1") && (o[base + "status"] != "7")) {
-			var d = new Date();
-			currState.lastChangeTick = d / 1000 + TIMEOUT_SECONDS;
-			currState.lastStatus = o[base + "status"];
-			currState.installing = true;
-			//currState.name = o[base+"module"];
-			showInstallStatus(true);
-		}
-	}
-}
-function showInstallStatus(isInit) {
-	$.ajax({
-		type: "GET",
-        	url: "dbconf?p=softcenter_installing_",
-        	dataType: "script",
-        	success: function(xhr) {
-            		var o = db_softcenter_installing_;
-			var base = "softcenter_installing_";
-			console.log("status: " + o[base + "status"]);
-			if (isInit) {
-				currState.lastStatus = o[base + "status"];
-			}
-			var d = new Date();
-			var curr = d.getTime() / 1000;
-			curr_module = checkField(o, "softcenter_installing_module", "");
-			if (o[base + "status"] != currState.lastStatus) {
-				currState.lastStatus = o[base + "status"];
-				showInstallInfo(curr_module, currState.lastStatus);
-				// Install ok now
-				if (currState.lastStatus == "1" || currState.lastStatus == "7" || currState.lastStatus == "13") {
-					currState.installing = false;
-					setTimeout("window.location.reload()", 1000);
-					return;
-				} else if (currState.lastStatus == "0") {
-					currState.installing = false;
-				}
-			}
-			if (currState.lastChangeTick > curr) {
-				setTimeout("showInstallStatus()", 400);
-			} else {
-				currState.installing = false;
-				$("#appInstallInfo").html("等待超时,可尝试手动刷新");
-				//showInstallInfo("", currState.lastStatus);
-			}
-		}
-	})
-}
-function showInstallInfo(module, scode) {
-		var code = parseInt(scode);
-		var s = module.capitalizeFirstLetter();
-		var infos = [
-			"操作失败",
-			"已安装",
-			"将被安装到jffs分区...",
-			"正在下载中...请耐心等待...",
-			"正在安装中...",
-			"安装成功！请5秒后刷新本页面！...",
-			"卸载中......",
-			"卸载成功！",
-			"没有检测到在线版本号！",
-			"正在下载更新......",
-			"正在安装更新...",
-			"安装更新成功，5秒后刷新本页！ ",
-			"下载文件校验不一致！",
-			"然而并没有更新！",
-			"正在检查是否有更新~",
-			"检测更新错误！"
-		];
-		document.getElementById("install_status").style.display = "";
-		$("#appInstallInfo").html(s + infos[code]);
-	}
-	//切换安装未安装面板
-function toggleAppPanel(showInstall) {
-		$('.show-install-btn').removeClass('active');
-		$('.show-uninstall-btn').removeClass('active');
-		$(showInstall ? '.show-install-btn' : '.show-uninstall-btn').addClass('active');
-		$('#IconContainer')[showInstall ? 'addClass' : 'removeClass']('install-view');
-	}
-	/**
-	 * 渲染apps，安装和未安装按照class hook进行显示隐藏，存在同一个面板中
-	 */
-function renderView(apps) {
-	// set apps to global variable of softInfo
-	softInfo = apps;
-	//console.log(softInfo);
-	//简单模板函数
-	function _format(source, opts) {
-			var source = source.valueOf(),
-				data = Array.prototype.slice.call(arguments, 1),
-				toString = Object.prototype.toString;
-			if (data.length) {
-				data = data.length == 1 ?
-					(opts !== null && (/\[object Array\]|\[object Object\]/.test(toString.call(opts))) ? opts : data) : data;
-				return source.replace(/#\{(.+?)\}/g, function(match, key) {
-					var replacer = data[key];
-					// chrome 下 typeof /a/ == 'function'
-					if ('[object Function]' == toString.call(replacer)) {
-						replacer = replacer(key);
-					}
-					return ('undefined' == typeof replacer ? '' : replacer);
-				});
-			}
-			return source;
-		}
-		//app 模板
-	var tpl = ['',
-		'<dl class="icon install-status-#{install}" data-name="#{name}">',
-		'<dd class="icon-pic">',
-		//当图标娶不到的时候，使用默认图标，如果已经是默认图标且娶不到，就狗带了，不管
-		'<img src="#{icon}" onerror="this.src.indexOf(\'icon-default.png\')===-1 && (this.src=\'/res/icon-default.png\');" alt="图标出走了～"/>',
-		'<img class="update-btn" style="position: absolute;width:20px;height:20px;margin-top:-66px;margin-left:44px;" src="/res/upgrade.png"',
-		'</dd>',
-		'<dt class="icon-title">#{title}</dt>',
-		'<dd class="icon-desc">',
-		'<a class="text" href="/#{home_url}" #{target}>',
-		'#{description}',
-		'</a>',
-		'<div class="opt">',
-		'<a type="button" class="install-btn" data-name="#{name}">安装</a>',
-		'<a type="button" class="update-btn" data-name="#{name}">更新</a>',
-		'<a type="button" class="uninstall-btn" data-name="#{name}">卸载</a>',
-		'</div>',
-		'</dd>',
-		'</dl>'
-	].join('');
-	var installCount = 0;
-	var uninstallCount = 0;
-	var html = $.map(apps, function(app, name) {
-		parseInt(app.install, 10) ? installCount++ : uninstallCount++;
-		return _format(tpl, app);
-	});
-	$('#IconContainer').html(html.join(''));
-	//更新安装数
-	$('.show-install-btn').val('已安装(' + installCount + ')');
-	$('.show-uninstall-btn').val('未安装(' + uninstallCount + ')');
-}
-function getRemoteData() {
-	var remoteURL = db_softcenter_["softcenter_home_url"] + '/' + scarch + '/softcenter/app.json.js';
-	return $.ajax({
-		url: remoteURL,
-		method: 'GET',
-		dataType: 'jsonp',
-		timeout: 5000
-	});
-}
-function softceterInitData(data) {
-	var remoteData = data;
-	$("#spnOnlineVersion").html(remoteData.version);
-	if (remoteData.version != db_softcenter_["softcenter_version"]) {
-		$("#updateBtn").show();
-		$("#updateBtn").click(function() {
-			var moduleInfo = {
-				"name": "softcenter",
-				"md5": remoteData.md5,
-				"tar_url": remoteData.tar_url,
-				"version": remoteData.version
-			};
-			appPostScript(moduleInfo, "ks_app_install.sh");
-		});
-	}
-}
-
-function init(cb) {
-		//设置默认值
-		function _setDefault(source, defaults) {
-				$.map(defaults, function(value, key) {
-					if (!source[key]) {
-						source[key] = value;
-					}
-				});
-			}
-		//把本地数据平面化转换成以app为对象
-		function _formatLocalData(localData) {
-				var result = {};
-				$.map(db_softcenter_, function(item, key) {
-					key = key.split('_');
-					if ('module' === key[1]) {
-						var name = key[2];
-						var prop = key.slice(3).join("_");
-						if (!result[name]) {
-							result[name] = {};
-							result[name].name = name;
-						}
-						if (prop) {
-							result[name][prop] = item;
-						}
-					}
-				});
-				for (var field in result) {
-					if (!result[field].install){
-						delete(result[field]);
-					}
-				}
-				//console.log(result)
-				return result;
-			}
-		//将本地和远程进行一次对比合并
-		function _mergeData(remoteData) {
-			var result = {};
-			var localData = _formatLocalData(db_softcenter_);
-			$.each(remoteData, function(i, app) {
-				var name = app.name;
-				var oldApp = localData[name] || {};
-				var install = (parseInt(oldApp.install, 10) === 1 && app.version !== oldApp.version) ? 2 : oldApp.install || "0";
-				result[name] = $.extend(oldApp, app);
-				result[name].install = install;
-			});
-			$.map(localData, function(app, name) {
-				if (!result[name]) {
-					result[name] = app;
-				}
-			});
-			//设置默认值和设置icon的路径
-			$.map(result, function(item, name) {
-				_setDefault(item, {
-					home_url: "Module_" + name + ".asp",
-					title: name.capitalizeFirstLetter(),
-					tar_url: "{0}/{0}.tar.gz".format(name),
-					install: "0",
-					description: "暂无",
-					new_version: false
-				});
-				// icon 规则:
-				// 如果已安装的插件,那图标必定在 /koolshare/res 目录, 通过 /res/icon-{name}.png 请求路径得到图标
-                		// 如果是未安装的插件,则必定在 https://sc.paldier.com/{name}/{name}/icon-{name}.png
-				// TODO 如果因为一些错误导致没有图标, 有可能显示一张默认图标吗?
-		                item.icon = parseInt(item.install, 10) !== 0 ? ('/res/icon-' + item.name + '.png') : ('https://sc.paldier.com' + new Array(3).join('/softcenter') + '/res/icon-' + item.name + '.png');
-			});
-			return result;
-		};
-		if (syncRemoteSuccess) {
-			cb();
-			return;
-		} else {
-			getRemoteData()
-				.done(function(remoteData) {
-					//远端更新成功
-					syncRemoteSuccess = 1;
-					softceterInitData(remoteData);
-					remoteData = remoteData.apps || [];
-					renderView(_mergeData(remoteData));
-					cb();
-				})
-				.fail(function() {
-					//如果没有更新成功，比如没网络，就用空数据merge本地
-					renderView(_mergeData({}));
-					cb();
-				});
-		}
-		notice_show();
-	}
-	//初始化整个界面展现，包括安装未安装的获取
-	//当初始化过程获取软件列表失败时候，用本地的模块进行渲染
-	//只要一次获取成功，以后不在重新获取，知道页面刷新重入
-$(function() {
-	//梅林要求用这个函数来显示左测菜单
-	show_menu(menu_hook);
-	$.ajax({
-		type: "GET",
-		url: "/dbconf?p=softcenter",
-		dataType: "script",
-		success: function(response) {
-			db_softcenter_ = db_softcenter;
-			if(typeof db_softcenter_["softcenter_server_tcode"] == "undefined") {
-				db_softcenter_["softcenter_home_url"] = "http://update.wifi.com.cn";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "CN") {
-			        db_softcenter_["softcenter_home_url"] = "http://update.wifi.com.cn";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "GB") {
-			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "CN1") {
-			        db_softcenter_["softcenter_home_url"] = "http://123.56.45.194";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "ALI") {
-			        db_softcenter_["softcenter_home_url"] = "http://121.40.153.145";
-			}
-			else
-			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
-			if(db_softcenter_["softcenter_arch"] == "mips")
-				scarch="mips";
-			else if (db_softcenter_["softcenter_arch"] == "armv7l")
-				scarch="arm";
-			else if (db_softcenter_["softcenter_arch"] == "aarch64")
-				scarch="arm64";
-			else if (db_softcenter_["softcenter_arch"] == "mipsle")
-				scarch="mipsle";
-			else if (db_softcenter_["softcenter_arch"] == "x86")
-				scarch="x86";
-			else
-				scarch="mips";
-			if (!db_softcenter_["softcenter_version"]) {
-				db_softcenter_["softcenter_version"] = "0.0";
-			}
-			$("#spnCurrVersion").html(db_softcenter_["softcenter_version"]);
-			var jff2_scripts="<% nvram_get("jffs2_scripts"); %>";
-			if(jff2_scripts != 1){
-				$('#software_center_message').html('<h2><font color="#FF9900">错误！</font></h2><h2>软件中心不可用！因为你没有开启Enable JFFS custom scripts and configs选项！</h2><h2>请前往【系统管理】-<a href="Advanced_System_Content.asp"><u><em>【系统设置】</em></u></a>开启此选项再使用软件中心！！</h2>')
-			}else{
-				init(function() {
-					toggleAppPanel(1);
-					//一刷新界面是否就正在插件在安装.
-					initInstallStatus();
-				});
-				//挂接tab切换安装状态事件
-				$('.show-install-btn').click(function() {
-					init(function() {
-						toggleAppPanel(1);
-					});
-				});
-				$('.show-uninstall-btn').click(function() {
-					init(function() {
-						toggleAppPanel(0);
-					});
-				});
-				//挂接安装或者卸载事件
-				$('#IconContainer').on('click', '.install-btn', function() {
-					var name = $(this).data('name');
-					console.log('install', name);
-					appInstallModule(softInfo[name]);
-				});
-				$('#IconContainer').on('click', '.uninstall-btn', function() {
-					var name = $(this).data('name');
-					console.log('uninstall', name);
-					appUninstallModule(softInfo[name]);
-				});
-				$('#IconContainer').on('click', '.update-btn', function() {
-					var name = $(this).data('name');
-					console.log('update', name);
-					appInstallModule(softInfo[name]);
-				});
-			}
-		}
-	});
-});
-function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
-	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
-}
-function notice_show(){
-	if (typeof modelname != "undefined"){
-	$("#modelid").html("Software Center " + modelname );
-	}
-	else {
-	$("#modelid").html("Software Center " + model );
-	}
-	var pushurl = 'https://sc.paldier.com/' + scarch + '/softcenter/push_message.json.js';
-	$.ajax({
-		url: pushurl,
-		type: 'GET',
-		dataType: 'jsonp',
-		success: function(res) {
-			$("#push_titile").html(res.title);
-			$("#push_content1").html(res.content1);
-			if (res.content2) {
-				document.getElementById("push_content2_li").style.display = "";
-				$("#push_content2").html(res.content2);
-			}
-			if (res.content3) {
-				document.getElementById("push_content3_li").style.display = "";
-				$("#push_content3").html(res.content3);
-			}
-			if (res.content4) {
-				document.getElementById("push_content4_li").style.display = "";
-				$("#push_content4").html(res.content4);
-			}
-		}
-	});
-}
-</script>
-</head>
-<body>
-	<div id="TopBanner"></div>
-	<div id="Loading" class="popup_bg"></div>
-	<table class="content" align="center" cellpadding="0" cellspacing="0">
-		<tr>
-			<td width="17">&nbsp;</td>
-			<td valign="top" width="202">
-				<div id="mainMenu"></div>
-				<div id="subMenu"></div>
-			</td>
-			<td valign="top">
-				<div id="tabMenu" class="submenuBlock"></div>
-					<table width="98%" border="0" align="left" cellpadding="0" cellspacing="0">
-						<tr>
-							<td bgcolor="#4D595D" align="left" valign="top">
-								<div>
-									<table width="760px" border="0" cellpadding="5" cellspacing="0" bordercolor="#6b8fa3" class="FormTitle" id="FormTitle">
-										<tr>
-											<td colspan="3" valign="top">
-												<div>&nbsp;</div>
-												<div id="modelid" class="formfonttitle"></div>
-												<div style="margin:10px 0 10px 5px;" class="splitLine"></div>
-													<table width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable">
-													</table>
-													<table width="100%" height="150px" style="border-collapse:collapse;">
-														<tr>
-															<td colspan="5" class="cloud_main_radius">
-																<div style="padding:10px;width:95%;font-style:italic;font-size:14px;">
-																	<br/><br/>
-																	<table width="100%">
-																		<tr>
-																			<td>
-																				<ul style="margin-top:-50px;padding-left:15px;">
-																					<li style="margin-top:-5px;">
-																						<h2 id="push_titile"><em>软件中心</em></h2>
-																					</li>
-																					<li style="margin-top:-5px;">
-																						<h4 id="push_content1" ><font color='#1E90FF'>交流反馈:&nbsp;&nbsp;</font><a href='https://github.com/paldier/softcenter' target='_blank'><em>1.软件中心GitHub项目</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://t.me/merlinsc' target='_blank'><em>2.加入telegram群</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://www.right.com.cn/forum/forum-173-1.html' target='_blank'><em>3.恩山论坛插件版块</em></a></h4>
-																					</li>
-																					<li id="push_content2_li" style="margin-top:-5px;">
-                                                                                    <h4 id="push_content2">如果你看到这个页面说明主服务器连接不上,如果获取不到在线版本说明节点服务器连接不上！</h4>
-																					</li>
-																					<li id="push_content3_li" style="margin-top:-5px;display: none;">
-																						<h4 id="push_content3"></h4>
-																					</li>
-																					<li id="push_content4_li" style="margin-top:-5px;display: none;">
-																						<h4 id="push_content4"></h4>
-																					</li>
-																					<li style="margin-top:-5px;">
-																						<h5>当前版本：<span id="spnCurrVersion"></span> 在线版本：<span id="spnOnlineVersion"></span>
-																						<input type="button" id="updateBtn" value="更新" style="display:none" /></h5>
-																					</li>
-																				</ul>
-																			</td>
-																		</tr>
-																	</table>
-																</div>
-															</td>
-														</tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-														<tr id="install_status" style="display: none;" width="235px">
-															<td>
-																<div style="padding:10px;width:95%;font-size:14px;" id="appInstallInfo">
-																</div>
-															</td>
-															<td class="cloud_main_radius_right">
-															</td>
-														 </tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-														<tr width="235px">
-															<td colspan="4" cellpadding="0" cellspacing="0" style="padding:0">
-																<input class="show-install-btn" type="button" value="已安装"/>
-																<input class="show-uninstall-btn" type="button" value="未安装"/>
-															</td>
-														</tr>
-														<tr width="100%">
-															<td colspan="4" id="IconContainer">
-																<div id="software_center_message" style="text-align:center; line-height: 4em;">更新中...</div>
-															</td>
-														</tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-													</table>
-												<div class="KoolshareBottom">论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>koolshare.cn</u></i> </a>
-													<br/>Github项目： <a href="https://github.com/koolshare/rogsoft" target="_blank"> <i><u>github.com/koolshare</u></i> </a>
-													<br/>Shell & Web by： <a href="mailto:sadoneli@gmail.com"> <i>sadoneli</i> </a>, <i>Xiaobao</i>
-													<br/>修改版 by： <i>paldier</i>
-													<br/>Github项目： <a href="https://github.com/paldier/softcenter" target="_blank"> <i><u>https://github.com/paldier</u></i> </a>
-												</div>
-											</td>
-										</tr>
-								</table>
-							</div>
-						</td>
-					</tr>
-				</table>
-			</td>
-			<td width="10" align="center" valign="top"></td>
-		</tr>
-	</table>
-<div id="footer"></div>
-</body>
-</html>
-
diff --git a/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_setting.asp b/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_setting.asp
deleted file mode 100644
index 7b55eafd42..0000000000
--- a/release/src/router/softcenter/softcenter/ROG/webs/Main_Soft_setting.asp
+++ /dev/null
@@ -1,217 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta HTTP-EQUIV="Pragma" CONTENT="no-cache"/>
-<meta HTTP-EQUIV="Expires" CONTENT="-1"/>
-<link rel="shortcut icon" href="images/favicon.png"/>
-<link rel="icon" href="images/favicon.png"/>
-<title>软件中心 - 离线安装</title>
-<link rel="stylesheet" type="text/css" href="index_style.css"/>
-<link rel="stylesheet" type="text/css" href="form_style.css"/>
-<link rel="stylesheet" type="text/css" href="usp_style.css"/>
-<link rel="stylesheet" type="text/css" href="ParentalControl.css">
-<link rel="stylesheet" type="text/css" href="css/icon.css">
-<link rel="stylesheet" type="text/css" href="css/element.css">
-<link rel="stylesheet" type="text/css" href="/res/softcenter.css">
-<script type="text/javascript" src="/state.js"></script>
-<script type="text/javascript" src="/popup.js"></script>
-<script type="text/javascript" src="/help.js"></script>
-<script type="text/javascript" src="/validator.js"></script>
-<script type="text/javascript" src="/js/jquery.js"></script>
-<script type="text/javascript" src="/general.js"></script>
-<script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
-<script type="text/javascript" src="/dbconf?p=adm_&v=<% uptime(); %>"></script>
-<script type="text/javascript" src="/res/softcenter.js"></script>
-<script language="JavaScript" type="text/javascript" src="/client_function.js"></script>
-<script>
-function init(menu_hook) {
-	show_menu();
-}
-function onSubmitCtrl(o, s) {
-	document.form.action_mode.value = s;
-	showLoading(7);
-	document.form.submit();
-}
-function reload_Soft_Center(){
-location.href = "/Main_Soft_center.asp";
-}
-function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
-	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
-}
-function upload_software() {
-	var fullPath = document.getElementById('ss_file').value;
-	if(!fullPath) {
-		return;
-	}
-	var startIndex = (fullPath.indexOf('\\') >= 0 ? fullPath.lastIndexOf('\\') : fullPath.lastIndexOf('/'));
-	var filename = fullPath.substring(startIndex);
-	if (filename.indexOf('\\') === 0 || filename.indexOf('/') === 0) {
-		filename = filename.substring(1);
-	}
-	if (/.*[\u0391-\uffe5]+.*$/.test(filename)) {
-		alert("错误：文件名中包含中文字符或符号！\n请更改文件名后重试！！");
-		isok=0;
-		return false;
-	}else{
-		if(filename.indexOf('tar.gz') != -1 ){
-			document.getElementById('file_info').style.display = "none";
-			document.getElementById('loadingicon').style.display = "block";
-			document.form.soft_name.value = filename;
-			document.form.enctype = "multipart/form-data";
-			document.form.encoding = "multipart/form-data";
-			document.form.action="ssupload.cgi?a=/tmp/"+filename;
-			console.log(filename);
-			document.form.submit();
-		}else{
-			console.log(filename);
-			alert("错误：离线安装包后缀错误！需要.tar.gz后缀！\n\n如果你是mac os x系统，safari浏览器下载tar.gz文件后被自动解压导致无法安装的，请关闭此项设置：safari的偏好设置-通用-下载后打开安全的文件。或者换用chrome浏览器，重新下载离线安装包文件！");
-			isok=0;
-			return false;
-		}
-	}
-}
-function upload_ok(isok) {
-	var info = E('file_info');
-	if(isok==1){
-		info.innerHTML="上传完成";
-		checkCmdRet();
-		setTimeout("start_install();", 100);
-		setTimeout("checkCmdRet();", 600);
-	} else {
-		info.innerHTML="上传失败";
-	}
-	info.style.display = "block";
-	E('loadingicon').style.display = "none";
-}
-function start_install() {
-	document.form.action_mode.value = ' Refresh ';
-	document.form.action = "/applydb.cgi?p=soft";
-    document.form.action_script.value = "ks_tar_intall.sh";
-	document.form.enctype = "";
-	document.form.encoding = "";
-	document.form.submit();
-}
-var _responseLen;
-var noChange = 0;
-function checkCmdRet(){
-	$.ajax({
-		url: '/cmdRet_check.htm',
-		dataType: 'html',
-		
-		error: function(xhr){
-			setTimeout("checkCmdRet();", 1000);
-			},
-		success: function(response){
-			var retArea = E("log_content1");
-			if(response.search("XU6J03M6") != -1){
-				retArea.value = response.replace("XU6J03M6", " ");
-				retArea.scrollTop = retArea.scrollHeight;
-				return false;
-			}
-			
-			if(_responseLen == response.length){
-				noChange++;
-			}else{
-				noChange = 0;
-			}
-			if(noChange > 500){
-				return false;
-			}else{
-				setTimeout("checkCmdRet();", 250);
-			}
-			
-			retArea.value = response;
-			retArea.scrollTop = retArea.scrollHeight;
-			_responseLen = response.length;
-		}
-	});
-}
-</script>
-</head>
-<body onload="init();">
-	<div id="TopBanner"></div>
-	<div id="Loading" class="popup_bg"></div>
-	<iframe name="hidden_frame" id="hidden_frame" src="" width="0" height="0" frameborder="0"></iframe>
-	<form method="POST" name="form" action="" target="hidden_frame">
-	<input type="hidden" name="current_page" value="Main_Soft_setting.asp"/>
-	<input type="hidden" name="next_page" value="Main_Soft_setting.asp"/>
-	<input type="hidden" name="group_id" value=""/>
-	<input type="hidden" name="modified" value="0"/>
-	<input type="hidden" name="action_mode" value=""/>
-	<input type="hidden" name="action_script" value=""/>
-	<input type="hidden" name="action_wait" value=""/>
-	<input type="hidden" name="first_time" value=""/>
-	<input type="hidden" name="preferred_lang" id="preferred_lang" value="<% nvram_get("preferred_lang"); %>"/>
-	<input type="hidden" name="firmver" value="<% nvram_get("firmver"); %>"/>
-	<input type="hidden" id="soft_name" name="soft_name" value=""/>
-	<table class="content" align="center" cellpadding="0" cellspacing="0">
-		<tr>
-			<td width="17">&nbsp;</td>
-			<td valign="top" width="202">
-				<div id="mainMenu"></div>
-				<div id="subMenu"></div>
-			</td>
-			<td valign="top">
-				<div id="tabMenu" class="submenuBlock"></div>
-				<table width="98%" border="0" align="left" cellpadding="0" cellspacing="0">
-					<tr>
-						<td align="left" valign="top">
-							<table width="760px" border="0" cellpadding="5" cellspacing="0" bordercolor="#6b8fa3" class="FormTitle" id="FormTitle">
-								<tr>
-									<td bgcolor="#4D595D" colspan="3" valign="top">
-										<div>&nbsp;</div>
-										<div style="float:left;" class="formfonttitle">软件中心，离线安装页面</div>
-										<div style="float:right; width:15px; height:25px;margin-top:10px"><img id="return_btn" onclick="reload_Soft_Center();" align="right" style="cursor:pointer;position:absolute;margin-left:-30px;margin-top:-25px;" title="返回软件中心" src="/images/backprev.png" onMouseOver="this.src='/images/backprevclick.png'" onMouseOut="this.src='/images/backprev.png'"></img></div>
-										<div style="margin-left:5px;margin-top:10px;margin-bottom:10px"><img src="/images/New_ui/export/line_export.png"></div>
-										<div class="formfontdesc" style="padding-top:5px;margin-top:0px;float: left;" id="cmdDesc"></div>
-										<div style="padding-top:5px;margin-top:0px;float: left;" id="NoteBox" >
-											<li>通过本页面，你可以上传插件的离线安装包来安装插件; </li>
-											<li>离线安装会自动解压tar.gz后缀的压缩包，识别压缩包一级目录下的install.sh文件并执行； </li>
-											<li>建议开发者将插件版本号，md5等信息在install.sh文件内进行写入； </li>
-											<li>注意离线安装包对应的cpu架构，上传错误的安装包会无法运行； </li>
-										</div>
-										<div class="formfontdesc" id="cmdDesc"></div>
-										<table style="margin:10px 0px 0px 0px;" width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable" id="routing_table">
-											<thead>
-											<tr>
-												<td colspan="2">软件中心 - 高级设置</td>
-											</tr>
-											</thead>
-											<tr>
-												<th><a class="hintstyle" href="javascript:void(0);" onclick="openssHint(24)">离线安装插件</a></th>
-												<td>
-													<input type="button" id="upload_btn" class="button_gen" onclick="upload_software();" value="上传并安装"/>
-													<input style="color:#FFCC00;*color:#000;width: 200px;" id="ss_file" type="file" name="file"/>
-													<img id="loadingicon" style="margin-left:5px;margin-right:5px;display:none;" src="/images/InternetScan.gif">
-													<span id="file_info" style="display:none;">完成</span>
-												</td>
-											</tr>
-                                    	</table>
-                                    	<div id="log_content" style="margin-top:10px;display: block;">
-											<textarea cols="63" rows="15" wrap="off" readonly="readonly" id="log_content1" style="width:99%; font-family:'Lucida Console'; font-size:12px;background:transparent;border:1px solid #91071f;color:#FFFFFF;"></textarea>
-										</div>
-										<div class="KoolshareBottom">
-											<br/>论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>www.koolshare.cn</u></i> </a> <br/>
-											后台技术支持： <i>Xiaobao</i> <br/>
-											Shell, Web by： <i>Sadoneli</i><br/>
-											<br/>修改版 by： <i>paldier</i>
-										</div>
-									</td>
-								</tr>
-							</table>
-						</td>
-						<td width="10" align="center" valign="top"></td>
-					</tr>
-				</table>
-			</td>
-		</tr>
-	</table>
-	</form>
-	</td>
-	<div id="footer"></div>
-</body>
-</html>
-
diff --git a/release/src/router/softcenter/softcenter/TUF/res/softcenter.css b/release/src/router/softcenter/softcenter/TUF/res/softcenter.css
deleted file mode 100644
index a3698c00ab..0000000000
--- a/release/src/router/softcenter/softcenter/TUF/res/softcenter.css
+++ /dev/null
@@ -1,108 +0,0 @@
-/*  For software center  */
-.KoolshareBottom {
-	width: 230px;
-	height: 100px;
-	background: url(/res/koolshare.png) 0px 3px no-repeat;
-	text-align: left;
-	padding-left:150px;
-	padding-top:8px;
-	margin-top:20px;
-	float:right;
-}
-
-.input_ss_table{
-	margin-left:2px;
-	padding-left:0.4em;
-	height:21px;
-	width:158.2px;
-	line-height:23px \9;	/*IE*/
-	font-size:13px;
-	font-family: Lucida Console;
-	background-image:none;
-	background-color: transparent;
-	background-color: #92650F;
-	border:1px solid  #fcb33a;
-	color:#FFFFFF;
-}
-
-.FormTitle i {
-    color: #FC0;
-    font-style: normal;
-}
-.FormTitle em {
-    color: #00ffe4;
-    font-style: normal;
-}
-.FormTitle b {
-    color: #1cfe16;
-    font-style: normal;
-	font-weight:normal;
-}
-.FormTitle_firefox i {
-    color: #FC0;
-    font-style: normal;
-}
-.FormTitle_firefox em {
-    color: #00ffe4;
-    font-style: normal;
-}
-.FormTitle_firefox b {
-    color: #1cfe16;
-    font-style: normal;
-	font-weight:normal;
-}
-.SimpleNote { padding:5px 10px;}
-.NoteButton { padding:5px 10px; margin:10px 0}
-#NoteBox { padding:10px}
-.FormTable h2,#NoteBox h2 { font-size:16px; border-bottom:1px #AAA dashed; height:26px; color:#1cfe16; margin-top:20px;}
-.FormTable h3,#NoteBox h3,
-.FormTable h4,#NoteBox h4 { color:#FC0;}
-.IE8HACK{
-	display: none \9;
-}
-.splitLine{
-	background: #CEC1C7;
-	background: -webkit-linear-gradient(#CEC1C7 0%, #CEC1C7 20%, #766D71 80%, #766D71 100%);
-	background: -o-linear-gradient(#CEC1C7 0%, #CEC1C7 20%, #766D71 80%, #766D71 100%);
-	background: linear-gradient(#CEC1C7 0%, #CEC1C7 20%, #766D71 80%,#766D71 100%);
-	height: 2px;
-	width: 740px;
-	margin: 1px 0;
-}
-
-[bgcolor="#4D595D"]{
-	background: rgba(0, 0, 0, 0.5);
-}
-.submenuBlock{
-	width:735px;
-	margin-top:-140px;
-	margin-bottom: -3px;
-}
-.tab{
-	cursor:pointer;
-	background: #92650F;
-	color: White;
-	float: left;
-	height: 30px;
-	margin-left: -3px;
-	margin-right: 2px;
-	text-align:center;
-	text-decoration: none;
-	font-family: Verdana;
-	font-size: 12px;
-	border-radius: 5px 5px 0px 0px;
-}
-.tabClicked{
-	cursor:pointer;
-	background: rgba(0, 0, 0, 0.5);
-	color: White;
-	float: left;
-	height: 30px;
-	margin-left: -3px;
-	margin-right: 2px;
-	text-align:center;
-	text-decoration: none;
-	font-family: Verdana;
-	font-size: 12px;
-	border-radius: 5px 5px 0px 0px;
-}
diff --git a/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_center.asp b/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_center.asp
deleted file mode 100644
index 35b3bf5698..0000000000
--- a/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_center.asp
+++ /dev/null
@@ -1,784 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="X-UA-Compatible" content="IE=Edge">
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">
-<meta HTTP-EQUIV="Expires" CONTENT="-1">
-<link rel="shortcut icon" href="images/favicon.png">
-<link rel="icon" href="images/favicon.png">
-<title>Merlin software center</title>
-<link rel="stylesheet" type="text/css" href="index_style.css"/>
-<link rel="stylesheet" type="text/css" href="form_style.css"/>
-<link rel="stylesheet" type="text/css" href="/res/softcenter.css"/>
-<link rel="stylesheet" type="text/css" href="/res/layer/theme/default/layer.css"/>
-<script language="JavaScript" type="text/javascript" src="/state.js"></script>
-<script language="JavaScript" type="text/javascript" src="/help.js"></script>
-<script language="JavaScript" type="text/javascript" src="/general.js"></script>
-<script language="JavaScript" type="text/javascript" src="/popup.js"></script>
-<script language="JavaScript" type="text/javascript" src="/client_function.js"></script>
-<script language="JavaScript" type="text/javascript" src="/validator.js"></script>
-<script type="text/javascript" src="/js/jquery.js"></script>
-<script type="text/javascript" src="/general.js"></script>
-<script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
-<script type="text/javascript" src="/form.js"></script>
-<script type="text/javascript" src="/res/softcenter.js"></script>
-<style>
-.cloud_main_radius_left {
-	-webkit-border-radius: 10px 0 0 10px;
-	-moz-border-radius: 10px 0 0 10px;
-	border-radius: 10px 0 0 10px;
-}
-.cloud_main_radius_right {
-	-webkit-border-radius: 0 10px 10px 0;
-	-moz-border-radius: 0 10px 10px 0;
-	border-radius: 0 10px 10px 0;
-}
-.cloud_main_radius {
-	-webkit-border-radius: 10px;
-	-moz-border-radius: 10px;
-	border-radius: 10px;
-}
-/* 软件中心icon新样式 by acelan */
- dl, dt, dd {
-	padding:0;
-	margin:0;
-}
-input[type=button]:focus {
-	outline: none;
-}
-.icon {
-	float:left;
-	position:relative;
-	margin: 10px 0px 30px 0px;
-}
-.icon-title {
-	line-height: 3em;
-	text-align:center;
-}
-.icon-pic {
-	margin: 10px 30px 0px 30px;
-}
-.icon-pic img {
-	border:0;
-	width: 60px;
-	height: 60px;
-	margin:2px;
-}
-.icon-desc {
-	position: absolute;
-	left: 0;
-	top: 0;
-	height: 105%;
-	visibility: hidden;
-	font-size:0;
-	width: 119px;
-	border-radius: 8px;
-	font-size: 16px;
-	opacity: 0;
-	background-color:#000;
-	margin:5px;
-	text-overflow:ellipsis;
-	transition: opacity .5s ease-in;
-}
-.icon-desc .text {
-	font-size: 12px;
-	line-height: 1.4em;
-	display: block;
-	height: 100%;
-	padding: 10px;
-	box-sizing: border-box;
-}
-.icon:hover .icon-desc {
-	opacity: .8;
-	visibility: visible;
-}
-.icon-desc .opt {
-	position: absolute;
-	bottom: 0;
-	height: 18px;
-	width: 100%;
-}
-.install-status-0 .icon-desc .opt {
-	height: 100%;
-}
-.icon-desc .install-btn,
-.icon-desc .uninstall-btn,
-.icon-desc .update-btn{
-	background: #fff;
-	color:#333;
-	cursor:pointer;
-	text-align: center;
-	font-size: 13px;
-	padding-bottom: 5px;
-	margin-left: 10px;
-	margin-right: 10px;
-	display: block;
-	width: 100%;
-	height: 18px;
-	border-radius: 0px 0px 5px 5px;
-	border: 0px;
-	position: absolute;
-	bottom: 0;
-	left: -10px;
-}
-.icon-desc .uninstall-btn {
-	display: none;
-}
-.icon-desc .update-btn {
-	display: none;
-	border-radius: 0px 0px 0px 5px;
-	width:60%;
-	border-right: 1px solid #000;
-}
-.show-install-btn,
-.show-uninstall-btn{
-	border: 1px solid #91071f;
-	background: none;
-	color: #fff;
-	padding: 10px 20px;
-	border-radius: 5px 5px 0px 0px;
-	border: 1px solid #92650F;
-}
-.active {
-	background: #91071f;
-	border: 1px solid #91071f;
-	background: linear-gradient(to bottom, #92650F  0%, #92650F 100%); /* W3C */
-	border: 1px solid #92650F;
-}
-#IconContainer {
-	border:1px solid #92650F;
-}
-.install-status-1 .uninstall-btn {
-	display: block;
-}
-.install-status-1 .install-btn {
-	display: none;
-}
-.update-btn {
-	display: none;
-}
-.install-status-1 .update-btn {
-	display: none;
-}
-.install-status-4 .uninstall-btn {
-	display: block;
-}
-.install-status-4 .install-btn {
-	display: none;
-}
-.install-status-4 .update-btn {
-	display: none;
-}
-.install-status-2 .uninstall-btn {
-	display: block;
-	width: 40%;
-	border-radius: 0px 0px 5px 0px;
-	right: -10px;
-	left: auto;
-	border-left: 1px solid #000;
-}
-.install-status-2 .install-btn {
-	display: none;
-}
-.install-status-2 .update-btn {
-	display: block;
-}
-.install-status-1 {
-	display: none;
-}
-.install-status-2 {
-	display: none;
-}
-.install-status-0 {
-	display: block;
-}
-.install-status-4 {
-	display: none;
-}
-.install-view .install-status-1 {
-	display: block;
-}
-.install-view .install-status-2 {
-	display: block;
-}
-.install-view .install-status-0 {
-	display: none;
-}
-.install-view .install-status-4 {
-	display: block;
-}
-.cloud_main_radius h2 {
-	border-bottom:1px #AAA dashed;
-}
-.cloud_main_radius h3,
-.cloud_main_radius h4 {
-	font-size:12px;
-	color:#FC0;
-	font-weight:normal;
-	font-style: normal;
-}
-.cloud_main_radius h5 {
-	color:#FFF;
-	font-weight:normal;
-	font-style: normal;
-}
-</style>
-<script>
-var db_softcenter_ = {};
-var scarch = "mips";
-var model = '<% nvram_get("model"); %>';
-var modelname = '<% nvram_get("modelname"); %>';
-var TIMEOUT_SECONDS = 18;
-var softInfo = null;
-var syncRemoteSuccess = 0; //判断是否进入页面后已经成功进行远端同步
-var currState = {
-	"installing": false,
-	"lastChangeTick": 0,
-	"lastStatus": "-1",
-	"module": ""
-};
-function checkField(o, f, d) {
-	if (typeof o[f] == "undefined") {
-		o[f] = d;
-	}
-	return o[f];
-}
-function appPostScript(moduleInfo, script) {
-	if (currState.installing) {
-		console.log("current is in installing state");
-		return;
-	}
-	//Current page must has prefix of "Module_"
-	var data = {"action_script":script, "action_mode":" Refresh "};
-	//currState.name = moduleInfo.name;
-	//TODO auto choose for home_url
-	data["softcenter_home_url"] = db_softcenter_["softcenter_home_url"];
-	data["softcenter_installing_todo"] = moduleInfo.name;
-	if (script == "ks_app_install.sh") {
-		data["softcenter_installing_tar_url"] = moduleInfo.tar_url;
-		data["softcenter_installing_md5"] = moduleInfo.md5;
-		data["softcenter_installing_version"] = moduleInfo.version;
-		//Update title for this module
-		data[moduleInfo.name + "_title"] = moduleInfo.title;
-
-	}
-	$.ajax({
-		type: "POST",
-                url: "/applydb.cgi?p=softcenter_",
-                dataType: "text",
-                data: data,
-                success: function() {
-			var d = new Date();
-			//持续更新
-			currState.lastChangeTick = d / 1000 + TIMEOUT_SECONDS;
-			currState.installing = true;
-			showInstallStatus(true);
-		},
-		error: function() {
-			currState.installing = false;
-		}
-	});
-}
-function appInstallModule(moduleInfo) {
-	appPostScript(moduleInfo, "ks_app_install.sh");
-}
-function appUninstallModule(moduleInfo) {
-	if (!window.confirm('确定卸载吗')) {
-		return;
-	}
-	appPostScript(moduleInfo, "ks_app_remove.sh");
-}
-function initInstallStatus() {
-	var o = db_softcenter_;
-	var base = "softcenter_installing_";
-	if (o[base + "status"]) {
-		//状态不是0/1/7,则当前正处于安装状态,实时更新安装信息
-		if ((o[base + "status"] != "0") && (o[base + "status"] != "1") && (o[base + "status"] != "7")) {
-			var d = new Date();
-			currState.lastChangeTick = d / 1000 + TIMEOUT_SECONDS;
-			currState.lastStatus = o[base + "status"];
-			currState.installing = true;
-			//currState.name = o[base+"module"];
-			showInstallStatus(true);
-		}
-	}
-}
-function showInstallStatus(isInit) {
-	$.ajax({
-		type: "GET",
-        	url: "dbconf?p=softcenter_installing_",
-        	dataType: "script",
-        	success: function(xhr) {
-            		var o = db_softcenter_installing_;
-			var base = "softcenter_installing_";
-			console.log("status: " + o[base + "status"]);
-			if (isInit) {
-				currState.lastStatus = o[base + "status"];
-			}
-			var d = new Date();
-			var curr = d.getTime() / 1000;
-			curr_module = checkField(o, "softcenter_installing_module", "");
-			if (o[base + "status"] != currState.lastStatus) {
-				currState.lastStatus = o[base + "status"];
-				showInstallInfo(curr_module, currState.lastStatus);
-				// Install ok now
-				if (currState.lastStatus == "1" || currState.lastStatus == "7" || currState.lastStatus == "13") {
-					currState.installing = false;
-					setTimeout("window.location.reload()", 1000);
-					return;
-				} else if (currState.lastStatus == "0") {
-					currState.installing = false;
-				}
-			}
-			if (currState.lastChangeTick > curr) {
-				setTimeout("showInstallStatus()", 400);
-			} else {
-				currState.installing = false;
-				$("#appInstallInfo").html("等待超时,可尝试手动刷新");
-				//showInstallInfo("", currState.lastStatus);
-			}
-		}
-	})
-}
-function showInstallInfo(module, scode) {
-		var code = parseInt(scode);
-		var s = module.capitalizeFirstLetter();
-		var infos = [
-			"操作失败",
-			"已安装",
-			"将被安装到jffs分区...",
-			"正在下载中...请耐心等待...",
-			"正在安装中...",
-			"安装成功！请5秒后刷新本页面！...",
-			"卸载中......",
-			"卸载成功！",
-			"没有检测到在线版本号！",
-			"正在下载更新......",
-			"正在安装更新...",
-			"安装更新成功，5秒后刷新本页！ ",
-			"下载文件校验不一致！",
-			"然而并没有更新！",
-			"正在检查是否有更新~",
-			"检测更新错误！"
-		];
-		document.getElementById("install_status").style.display = "";
-		$("#appInstallInfo").html(s + infos[code]);
-	}
-	//切换安装未安装面板
-function toggleAppPanel(showInstall) {
-		$('.show-install-btn').removeClass('active');
-		$('.show-uninstall-btn').removeClass('active');
-		$(showInstall ? '.show-install-btn' : '.show-uninstall-btn').addClass('active');
-		$('#IconContainer')[showInstall ? 'addClass' : 'removeClass']('install-view');
-	}
-	/**
-	 * 渲染apps，安装和未安装按照class hook进行显示隐藏，存在同一个面板中
-	 */
-function renderView(apps) {
-	// set apps to global variable of softInfo
-	softInfo = apps;
-	//console.log(softInfo);
-	//简单模板函数
-	function _format(source, opts) {
-			var source = source.valueOf(),
-				data = Array.prototype.slice.call(arguments, 1),
-				toString = Object.prototype.toString;
-			if (data.length) {
-				data = data.length == 1 ?
-					(opts !== null && (/\[object Array\]|\[object Object\]/.test(toString.call(opts))) ? opts : data) : data;
-				return source.replace(/#\{(.+?)\}/g, function(match, key) {
-					var replacer = data[key];
-					// chrome 下 typeof /a/ == 'function'
-					if ('[object Function]' == toString.call(replacer)) {
-						replacer = replacer(key);
-					}
-					return ('undefined' == typeof replacer ? '' : replacer);
-				});
-			}
-			return source;
-		}
-		//app 模板
-	var tpl = ['',
-		'<dl class="icon install-status-#{install}" data-name="#{name}">',
-		'<dd class="icon-pic">',
-		//当图标娶不到的时候，使用默认图标，如果已经是默认图标且娶不到，就狗带了，不管
-		'<img src="#{icon}" onerror="this.src.indexOf(\'icon-default.png\')===-1 && (this.src=\'/res/icon-default.png\');" alt="图标出走了～"/>',
-		'<img class="update-btn" style="position: absolute;width:20px;height:20px;margin-top:-66px;margin-left:44px;" src="/res/upgrade.png"',
-		'</dd>',
-		'<dt class="icon-title">#{title}</dt>',
-		'<dd class="icon-desc">',
-		'<a class="text" href="/#{home_url}" #{target}>',
-		'#{description}',
-		'</a>',
-		'<div class="opt">',
-		'<a type="button" class="install-btn" data-name="#{name}">安装</a>',
-		'<a type="button" class="update-btn" data-name="#{name}">更新</a>',
-		'<a type="button" class="uninstall-btn" data-name="#{name}">卸载</a>',
-		'</div>',
-		'</dd>',
-		'</dl>'
-	].join('');
-	var installCount = 0;
-	var uninstallCount = 0;
-	var html = $.map(apps, function(app, name) {
-		parseInt(app.install, 10) ? installCount++ : uninstallCount++;
-		return _format(tpl, app);
-	});
-	$('#IconContainer').html(html.join(''));
-	//更新安装数
-	$('.show-install-btn').val('已安装(' + installCount + ')');
-	$('.show-uninstall-btn').val('未安装(' + uninstallCount + ')');
-}
-function getRemoteData() {
-	var remoteURL = db_softcenter_["softcenter_home_url"] + '/' + scarch + '/softcenter/app.json.js';
-	return $.ajax({
-		url: remoteURL,
-		method: 'GET',
-		dataType: 'jsonp',
-		timeout: 5000
-	});
-}
-function softceterInitData(data) {
-	var remoteData = data;
-	$("#spnOnlineVersion").html(remoteData.version);
-	if (remoteData.version != db_softcenter_["softcenter_version"]) {
-		$("#updateBtn").show();
-		$("#updateBtn").click(function() {
-			var moduleInfo = {
-				"name": "softcenter",
-				"md5": remoteData.md5,
-				"tar_url": remoteData.tar_url,
-				"version": remoteData.version
-			};
-			appPostScript(moduleInfo, "ks_app_install.sh");
-		});
-	}
-}
-
-function init(cb) {
-		//设置默认值
-		function _setDefault(source, defaults) {
-				$.map(defaults, function(value, key) {
-					if (!source[key]) {
-						source[key] = value;
-					}
-				});
-			}
-		//把本地数据平面化转换成以app为对象
-		function _formatLocalData(localData) {
-				var result = {};
-				$.map(db_softcenter_, function(item, key) {
-					key = key.split('_');
-					if ('module' === key[1]) {
-						var name = key[2];
-						var prop = key.slice(3).join("_");
-						if (!result[name]) {
-							result[name] = {};
-							result[name].name = name;
-						}
-						if (prop) {
-							result[name][prop] = item;
-						}
-					}
-				});
-				for (var field in result) {
-					if (!result[field].install){
-						delete(result[field]);
-					}
-				}
-				//console.log(result)
-				return result;
-			}
-		//将本地和远程进行一次对比合并
-		function _mergeData(remoteData) {
-			var result = {};
-			var localData = _formatLocalData(db_softcenter_);
-			$.each(remoteData, function(i, app) {
-				var name = app.name;
-				var oldApp = localData[name] || {};
-				var install = (parseInt(oldApp.install, 10) === 1 && app.version !== oldApp.version) ? 2 : oldApp.install || "0";
-				result[name] = $.extend(oldApp, app);
-				result[name].install = install;
-			});
-			$.map(localData, function(app, name) {
-				if (!result[name]) {
-					result[name] = app;
-				}
-			});
-			//设置默认值和设置icon的路径
-			$.map(result, function(item, name) {
-				_setDefault(item, {
-					home_url: "Module_" + name + ".asp",
-					title: name.capitalizeFirstLetter(),
-					tar_url: "{0}/{0}.tar.gz".format(name),
-					install: "0",
-					description: "暂无",
-					new_version: false
-				});
-				// icon 规则:
-				// 如果已安装的插件,那图标必定在 /koolshare/res 目录, 通过 /res/icon-{name}.png 请求路径得到图标
-                		// 如果是未安装的插件,则必定在 https://sc.paldier.com/{name}/{name}/icon-{name}.png
-				// TODO 如果因为一些错误导致没有图标, 有可能显示一张默认图标吗?
-		                item.icon = parseInt(item.install, 10) !== 0 ? ('/res/icon-' + item.name + '.png') : ('https://sc.paldier.com' + new Array(3).join('/softcenter') + '/res/icon-' + item.name + '.png');
-			});
-			return result;
-		};
-		if (syncRemoteSuccess) {
-			cb();
-			return;
-		} else {
-			getRemoteData()
-				.done(function(remoteData) {
-					//远端更新成功
-					syncRemoteSuccess = 1;
-					softceterInitData(remoteData);
-					remoteData = remoteData.apps || [];
-					renderView(_mergeData(remoteData));
-					cb();
-				})
-				.fail(function() {
-					//如果没有更新成功，比如没网络，就用空数据merge本地
-					renderView(_mergeData({}));
-					cb();
-				});
-		}
-		notice_show();
-	}
-	//初始化整个界面展现，包括安装未安装的获取
-	//当初始化过程获取软件列表失败时候，用本地的模块进行渲染
-	//只要一次获取成功，以后不在重新获取，知道页面刷新重入
-$(function() {
-	//梅林要求用这个函数来显示左测菜单
-	show_menu(menu_hook);
-	$.ajax({
-		type: "GET",
-		url: "/dbconf?p=softcenter",
-		dataType: "script",
-		success: function(response) {
-			db_softcenter_ = db_softcenter;
-			if(db_softcenter_["softcenter_server_tcode"] == "CN") {
-			        db_softcenter_["softcenter_home_url"] = "http://update.wifi.com.cn";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "GB") {
-			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "CN1") {
-			        db_softcenter_["softcenter_home_url"] = "https://sc.softcenter.site";
-			}
-			else if(db_softcenter_["softcenter_server_tcode"] == "ALI") {
-			        db_softcenter_["softcenter_home_url"] = "https://wufan.softcenter.site";
-			}
-			else
-			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
-			if(db_softcenter_["softcenter_arch"] == "mips")//for grx500
-				scarch="mips";
-			else if (db_softcenter_["softcenter_arch"] == "armv7l")//for bcm4709
-				scarch="arm";
-			else if (db_softcenter_["softcenter_arch"] == "armng")//for bcm6750/ipq4019
-				scarch="armng";
-			else if (db_softcenter_["softcenter_arch"] == "aarch64")//for bcm4908/bcm6710
-				scarch="arm64";
-			else if (db_softcenter_["softcenter_arch"] == "mipsle")//for mtk7621
-				scarch="mipsle";
-			else if (db_softcenter_["softcenter_arch"] == "x86")//for grx750
-				scarch="x86";
-			else
-				scarch="mips";
-			if (!db_softcenter_["softcenter_version"]) {
-				db_softcenter_["softcenter_version"] = "0.0";
-			}
-			$("#spnCurrVersion").html(db_softcenter_["softcenter_version"]);
-			var jff2_scripts="<% nvram_get("jffs2_scripts"); %>";
-			if(jff2_scripts != 1){
-				$('#software_center_message').html('<h2><font color="#FF9900">错误！</font></h2><h2>软件中心不可用！因为你没有开启Enable JFFS custom scripts and configs选项！</h2><h2>请前往【系统管理】-<a href="Advanced_System_Content.asp"><u><em>【系统设置】</em></u></a>开启此选项再使用软件中心！！</h2>')
-			}else{
-				init(function() {
-					toggleAppPanel(1);
-					//一刷新界面是否就正在插件在安装.
-					initInstallStatus();
-				});
-				//挂接tab切换安装状态事件
-				$('.show-install-btn').click(function() {
-					init(function() {
-						toggleAppPanel(1);
-					});
-				});
-				$('.show-uninstall-btn').click(function() {
-					init(function() {
-						toggleAppPanel(0);
-					});
-				});
-				//挂接安装或者卸载事件
-				$('#IconContainer').on('click', '.install-btn', function() {
-					var name = $(this).data('name');
-					console.log('install', name);
-					appInstallModule(softInfo[name]);
-				});
-				$('#IconContainer').on('click', '.uninstall-btn', function() {
-					var name = $(this).data('name');
-					console.log('uninstall', name);
-					appUninstallModule(softInfo[name]);
-				});
-				$('#IconContainer').on('click', '.update-btn', function() {
-					var name = $(this).data('name');
-					console.log('update', name);
-					appInstallModule(softInfo[name]);
-				});
-			}
-		}
-	});
-});
-function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
-	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
-}
-function notice_show(){
-	if (typeof modelname != "undefined"){
-	$("#modelid").html("Software Center " + modelname );
-	}
-	else {
-	$("#modelid").html("Software Center " + model );
-	}
-	var pushlog;
-	switch ("<% nvram_get("preferred_lang"); %>") {
-	case "EN":
-		pushlog="push_message_en.json.js";
-		break
-	default:
-		pushlog="push_message.json.js";
-	}
-	var pushurl = 'https://sc.paldier.com/' + scarch + '/softcenter/' + pushlog;
-	$.ajax({
-		url: pushurl,
-		type: 'GET',
-		dataType: 'jsonp',
-		success: function(res) {
-			$("#push_titile").html(res.title);
-			$("#push_content1").html(res.content1);
-			if (res.content2) {
-				document.getElementById("push_content2_li").style.display = "";
-				$("#push_content2").html(res.content2);
-			}
-			if (res.content3) {
-				document.getElementById("push_content3_li").style.display = "";
-				$("#push_content3").html(res.content3);
-			}
-			if (res.content4) {
-				document.getElementById("push_content4_li").style.display = "";
-				$("#push_content4").html(res.content4);
-			}
-		}
-	});
-}
-</script>
-</head>
-<body>
-	<div id="TopBanner"></div>
-	<div id="Loading" class="popup_bg"></div>
-	<table class="content" align="center" cellpadding="0" cellspacing="0">
-		<tr>
-			<td width="17">&nbsp;</td>
-			<td valign="top" width="202">
-				<div id="mainMenu"></div>
-				<div id="subMenu"></div>
-			</td>
-			<td valign="top">
-				<div id="tabMenu" class="submenuBlock"></div>
-					<table width="98%" border="0" align="left" cellpadding="0" cellspacing="0">
-						<tr>
-							<td bgcolor="#4D595D" align="left" valign="top">
-								<div>
-									<table width="760px" border="0" cellpadding="5" cellspacing="0" bordercolor="#6b8fa3" class="FormTitle" id="FormTitle">
-										<tr>
-											<td colspan="3" valign="top">
-												<div>&nbsp;</div>
-												<div id="modelid" class="formfonttitle"></div>
-												<div style="margin:10px 0 10px 5px;" class="splitLine"></div>
-													<table width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable">
-													</table>
-													<table width="100%" height="150px" style="border-collapse:collapse;">
-														<tr>
-															<td colspan="5" class="cloud_main_radius">
-																<div style="padding:10px;width:95%;font-style:italic;font-size:14px;">
-																	<br/><br/>
-																	<table width="100%">
-																		<tr>
-																			<td>
-																				<ul style="margin-top:-50px;padding-left:15px;">
-																					<li style="margin-top:-5px;">
-																						<h2 id="push_titile"><em>软件中心</em></h2>
-																					</li>
-																					<li style="margin-top:-5px;">
-																						<h4 id="push_content1" ><font color='#1E90FF'>交流反馈:&nbsp;&nbsp;</font><a href='https://github.com/paldier/softcenter' target='_blank'><em>1.软件中心GitHub项目</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://t.me/merlinchat' target='_blank'><em>2.加入telegram群</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://www.right.com.cn/forum/forum-173-1.html' target='_blank'><em>3.恩山论坛插件版块</em></a></h4>
-																					</li>
-																					<li id="push_content2_li" style="margin-top:-5px;">
-                                                                                    <h4 id="push_content2">如果你看到这个页面说明主服务器连接不上,如果获取不到在线版本说明节点服务器连接不上！</h4>
-																					</li>
-																					<li id="push_content3_li" style="margin-top:-5px;display: none;">
-																						<h4 id="push_content3"></h4>
-																					</li>
-																					<li id="push_content4_li" style="margin-top:-5px;display: none;">
-																						<h4 id="push_content4"></h4>
-																					</li>
-																					<li style="margin-top:-5px;">
-																						<h5><font color='#1E90FF'>当前版本：</font><span id="spnCurrVersion"></span>&nbsp;&nbsp;<font color='#1E90FF'>在线版本：</font><span id="spnOnlineVersion"></span>
-																						<input type="button" id="updateBtn" value="更新" style="display:none" /></h5>
-																					</li>
-																				</ul>
-																			</td>
-																		</tr>
-																	</table>
-																</div>
-															</td>
-														</tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-														<tr id="install_status" style="display: none;" width="235px">
-															<td>
-																<div style="padding:10px;width:95%;font-size:14px;" id="appInstallInfo">
-																</div>
-															</td>
-															<td class="cloud_main_radius_right">
-															</td>
-														 </tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-														<tr width="235px">
-															<td colspan="4" cellpadding="0" cellspacing="0" style="padding:0">
-																<input class="show-install-btn" type="button" value="已安装"/>
-																<input class="show-uninstall-btn" type="button" value="未安装"/>
-															</td>
-														</tr>
-														<tr width="100%">
-															<td colspan="4" id="IconContainer">
-																<div id="software_center_message" style="text-align:center; line-height: 4em;">更新中...</div>
-															</td>
-														</tr>
-														<tr height="10px">
-															<td colspan="3"></td>
-														</tr>
-													</table>
-												<div class="KoolshareBottom">论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>koolshare.cn</u></i> </a>
-													<br/>Github项目： <a href="https://github.com/koolshare/rogsoft" target="_blank"> <i><u>github.com/koolshare</u></i> </a>
-													<br/>Shell & Web by： <a href="mailto:sadoneli@gmail.com"> <i>sadoneli</i> </a>, <i>Xiaobao</i>
-													<br/>修改版 by： <i>paldier</i>
-													<br/>Github项目： <a href="https://github.com/paldier/softcenter" target="_blank"> <i><u>https://github.com/paldier</u></i> </a>
-												</div>
-											</td>
-										</tr>
-								</table>
-							</div>
-						</td>
-					</tr>
-				</table>
-			</td>
-			<td width="10" align="center" valign="top"></td>
-		</tr>
-	</table>
-<div id="footer"></div>
-</body>
-</html>
-
diff --git a/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_setting.asp b/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_setting.asp
deleted file mode 100644
index 70a59ff89f..0000000000
--- a/release/src/router/softcenter/softcenter/TUF/webs/Main_Soft_setting.asp
+++ /dev/null
@@ -1,217 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta HTTP-EQUIV="Pragma" CONTENT="no-cache"/>
-<meta HTTP-EQUIV="Expires" CONTENT="-1"/>
-<link rel="shortcut icon" href="images/favicon.png"/>
-<link rel="icon" href="images/favicon.png"/>
-<title>软件中心 - 离线安装</title>
-<link rel="stylesheet" type="text/css" href="index_style.css"/>
-<link rel="stylesheet" type="text/css" href="form_style.css"/>
-<link rel="stylesheet" type="text/css" href="usp_style.css"/>
-<link rel="stylesheet" type="text/css" href="ParentalControl.css">
-<link rel="stylesheet" type="text/css" href="css/icon.css">
-<link rel="stylesheet" type="text/css" href="css/element.css">
-<link rel="stylesheet" type="text/css" href="/res/softcenter.css">
-<script type="text/javascript" src="/state.js"></script>
-<script type="text/javascript" src="/popup.js"></script>
-<script type="text/javascript" src="/help.js"></script>
-<script type="text/javascript" src="/validator.js"></script>
-<script type="text/javascript" src="/js/jquery.js"></script>
-<script type="text/javascript" src="/general.js"></script>
-<script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
-<script type="text/javascript" src="/dbconf?p=adm_&v=<% uptime(); %>"></script>
-<script type="text/javascript" src="/res/softcenter.js"></script>
-<script language="JavaScript" type="text/javascript" src="/client_function.js"></script>
-<script>
-function init(menu_hook) {
-	show_menu();
-}
-function onSubmitCtrl(o, s) {
-	document.form.action_mode.value = s;
-	showLoading(7);
-	document.form.submit();
-}
-function reload_Soft_Center(){
-location.href = "/Main_Soft_center.asp";
-}
-function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
-	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
-}
-function upload_software() {
-	var fullPath = document.getElementById('ss_file').value;
-	if(!fullPath) {
-		return;
-	}
-	var startIndex = (fullPath.indexOf('\\') >= 0 ? fullPath.lastIndexOf('\\') : fullPath.lastIndexOf('/'));
-	var filename = fullPath.substring(startIndex);
-	if (filename.indexOf('\\') === 0 || filename.indexOf('/') === 0) {
-		filename = filename.substring(1);
-	}
-	if (/.*[\u0391-\uffe5]+.*$/.test(filename)) {
-		alert("错误：文件名中包含中文字符或符号！\n请更改文件名后重试！！");
-		isok=0;
-		return false;
-	}else{
-		if(filename.indexOf('tar.gz') != -1 ){
-			document.getElementById('file_info').style.display = "none";
-			document.getElementById('loadingicon').style.display = "block";
-			document.form.soft_name.value = filename;
-			document.form.enctype = "multipart/form-data";
-			document.form.encoding = "multipart/form-data";
-			document.form.action="ssupload.cgi?a=/tmp/"+filename;
-			console.log(filename);
-			document.form.submit();
-		}else{
-			console.log(filename);
-			alert("错误：离线安装包后缀错误！需要.tar.gz后缀！\n\n如果你是mac os x系统，safari浏览器下载tar.gz文件后被自动解压导致无法安装的，请关闭此项设置：safari的偏好设置-通用-下载后打开安全的文件。或者换用chrome浏览器，重新下载离线安装包文件！");
-			isok=0;
-			return false;
-		}
-	}
-}
-function upload_ok(isok) {
-	var info = E('file_info');
-	if(isok==1){
-		info.innerHTML="上传完成";
-		checkCmdRet();
-		setTimeout("start_install();", 100);
-		setTimeout("checkCmdRet();", 600);
-	} else {
-		info.innerHTML="上传失败";
-	}
-	info.style.display = "block";
-	E('loadingicon').style.display = "none";
-}
-function start_install() {
-	document.form.action_mode.value = ' Refresh ';
-	document.form.action = "/applydb.cgi?p=soft";
-    document.form.action_script.value = "ks_tar_intall.sh";
-	document.form.enctype = "";
-	document.form.encoding = "";
-	document.form.submit();
-}
-var _responseLen;
-var noChange = 0;
-function checkCmdRet(){
-	$.ajax({
-		url: '/cmdRet_check.htm',
-		dataType: 'html',
-		
-		error: function(xhr){
-			setTimeout("checkCmdRet();", 1000);
-			},
-		success: function(response){
-			var retArea = E("log_content1");
-			if(response.search("XU6J03M6") != -1){
-				retArea.value = response.replace("XU6J03M6", " ");
-				retArea.scrollTop = retArea.scrollHeight;
-				return false;
-			}
-			
-			if(_responseLen == response.length){
-				noChange++;
-			}else{
-				noChange = 0;
-			}
-			if(noChange > 500){
-				return false;
-			}else{
-				setTimeout("checkCmdRet();", 250);
-			}
-			
-			retArea.value = response;
-			retArea.scrollTop = retArea.scrollHeight;
-			_responseLen = response.length;
-		}
-	});
-}
-</script>
-</head>
-<body onload="init();">
-	<div id="TopBanner"></div>
-	<div id="Loading" class="popup_bg"></div>
-	<iframe name="hidden_frame" id="hidden_frame" src="" width="0" height="0" frameborder="0"></iframe>
-	<form method="POST" name="form" action="" target="hidden_frame">
-	<input type="hidden" name="current_page" value="Main_Soft_setting.asp"/>
-	<input type="hidden" name="next_page" value="Main_Soft_setting.asp"/>
-	<input type="hidden" name="group_id" value=""/>
-	<input type="hidden" name="modified" value="0"/>
-	<input type="hidden" name="action_mode" value=""/>
-	<input type="hidden" name="action_script" value=""/>
-	<input type="hidden" name="action_wait" value=""/>
-	<input type="hidden" name="first_time" value=""/>
-	<input type="hidden" name="preferred_lang" id="preferred_lang" value="<% nvram_get("preferred_lang"); %>"/>
-	<input type="hidden" name="firmver" value="<% nvram_get("firmver"); %>"/>
-	<input type="hidden" id="soft_name" name="soft_name" value=""/>
-	<table class="content" align="center" cellpadding="0" cellspacing="0">
-		<tr>
-			<td width="17">&nbsp;</td>
-			<td valign="top" width="202">
-				<div id="mainMenu"></div>
-				<div id="subMenu"></div>
-			</td>
-			<td valign="top">
-				<div id="tabMenu" class="submenuBlock"></div>
-				<table width="98%" border="0" align="left" cellpadding="0" cellspacing="0">
-					<tr>
-						<td align="left" valign="top">
-							<table width="760px" border="0" cellpadding="5" cellspacing="0" bordercolor="#6b8fa3" class="FormTitle" id="FormTitle">
-								<tr>
-									<td bgcolor="#4D595D" colspan="3" valign="top">
-										<div>&nbsp;</div>
-										<div style="float:left;" class="formfonttitle">软件中心，离线安装页面</div>
-										<div style="float:right; width:15px; height:25px;margin-top:10px"><img id="return_btn" onclick="reload_Soft_Center();" align="right" style="cursor:pointer;position:absolute;margin-left:-30px;margin-top:-25px;" title="返回软件中心" src="/images/backprev.png" onMouseOver="this.src='/images/backprevclick.png'" onMouseOut="this.src='/images/backprev.png'"></img></div>
-										<div style="margin:30px 0 10px 5px;" class="splitLine"></div>
-										<div class="formfontdesc" style="padding-top:5px;margin-top:0px;float: left;" id="cmdDesc"></div>
-										<div style="padding-top:5px;margin-top:0px;float: left;" id="NoteBox" >
-											<li>通过本页面，你可以上传插件的离线安装包来安装插件; </li>
-											<li>离线安装会自动解压tar.gz后缀的压缩包，识别压缩包一级目录下的install.sh文件并执行； </li>
-											<li>建议开发者将插件版本号，md5等信息在install.sh文件内进行写入； </li>
-											<li>注意离线安装包对应的cpu架构，上传错误的安装包会无法运行； </li>
-										</div>
-										<div class="formfontdesc" id="cmdDesc"></div>
-										<table style="margin:10px 0px 0px 0px;" width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable" id="routing_table">
-											<thead>
-											<tr>
-												<td colspan="2">软件中心 - 高级设置</td>
-											</tr>
-											</thead>
-											<tr>
-												<th><a class="hintstyle" href="javascript:void(0);" onclick="openssHint(24)">离线安装插件</a></th>
-												<td>
-													<input type="button" id="upload_btn" class="button_gen" onclick="upload_software();" value="上传并安装"/>
-													<input style="color:#FFCC00;*color:#000;width: 200px;" id="ss_file" type="file" name="file"/>
-													<img id="loadingicon" style="margin-left:5px;margin-right:5px;display:none;" src="/images/InternetScan.gif">
-													<span id="file_info" style="display:none;">完成</span>
-												</td>
-											</tr>
-                                    	</table>
-                                    	<div id="log_content" style="margin-top:10px;display: block;">
-											<textarea cols="63" rows="15" wrap="off" readonly="readonly" id="log_content1" style="width:99%; font-family:'Lucida Console'; font-size:12px;background:transparent;border:1px solid #92650F;color:#FFFFFF;"></textarea>
-										</div>
-										<div class="KoolshareBottom">
-											<br/>论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>www.koolshare.cn</u></i> </a> <br/>
-											后台技术支持： <i>Xiaobao</i> <br/>
-											Shell, Web by： <i>Sadoneli</i><br/>
-											<br/>修改版 by： <i>paldier</i>
-										</div>
-									</td>
-								</tr>
-							</table>
-						</td>
-						<td width="10" align="center" valign="top"></td>
-					</tr>
-				</table>
-			</td>
-		</tr>
-	</table>
-	</form>
-	</td>
-	<div id="footer"></div>
-</body>
-</html>
-
diff --git a/release/src/router/softcenter/softcenter/automount.sh b/release/src/router/softcenter/softcenter/automount.sh
new file mode 100644
index 0000000000..adea87def9
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/automount.sh
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+mdisk=`nvram get sc_disk`
+cd /tmp/mnt
+if [ ! -d "$mdisk" ]; then
+	list_disk=`ls /tmp/mnt`
+	for cur_disk in $list_disk do
+		if [ -f "$cur_disk/.sc_installed" ]; then
+			ln -sf $cur_disk $mdisk
+		fi
+	done
+fi
+
diff --git a/release/src/router/softcenter/softcenter/bin/softcenter-services.sh b/release/src/router/softcenter/softcenter/bin/softcenter-services.sh
new file mode 100644
index 0000000000..0742079348
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/bin/softcenter-services.sh
@@ -0,0 +1,30 @@
+#!/bin/sh
+
+source /jffs/softcenter/scripts/base.sh
+ACTION=$1
+
+if [ $# -lt 1 ]; then
+    printf "Usage: $0 {start|stop|restart|reconfigure|check|kill}\n" >&2
+    exit 1
+fi
+
+for i in $(find /jffs/softcenter/init.d/ -name 'V*' | sort) ;
+do
+    case "$i" in
+        V* | *.sh )
+            # Source shell script for speed.
+            trap "" INT QUIT TSTP EXIT
+            #set $1
+            logger -t "SOFTCENTER" "plugin_service_log_1 $i"
+            if [ -r "$i" ]; then
+            $i $ACTION
+            fi
+            ;;
+        *)
+            # No sh extension, so fork subprocess.
+            logger -t "SOFTCENTER" "plugin_service_start_2 $i"
+            . $i $ACTION
+            ;;
+    esac
+done
+
diff --git a/release/src/router/softcenter/softcenter/bin/softcenter-unmount.sh b/release/src/router/softcenter/softcenter/bin/softcenter-unmount.sh
new file mode 100644
index 0000000000..7fe3a6a881
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/bin/softcenter-unmount.sh
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+source /jffs/softcenter/scripts/base.sh
+
+ACTION=$1
+
+
+for i in $(find /jffs/softcenter/init.d/ -name 'U*' | sort -n ) ;
+do
+    case "$i" in
+        U* | *.sh )
+            # Source shell script for speed.
+            trap "" INT QUIT TSTP EXIT
+            #set $1
+            logger -t "SOFTCENTER" "plugin_mount_start_1 $i"
+            if [ -r "$i" ]; then
+            $i $ACTION
+            fi
+            ;;
+        *)
+            # No sh extension, so fork subprocess.
+            logger -t "SOFTCENTER" "plugin_mount_start_2 $i"
+            . $i $ACTION
+            ;;
+    esac
+done
diff --git a/release/src/router/softcenter/softcenter/bin/softcenter.sh b/release/src/router/softcenter/softcenter/bin/softcenter.sh
index 0b4e037e60..f0ef3ed932 100644
--- a/release/src/router/softcenter/softcenter/bin/softcenter.sh
+++ b/release/src/router/softcenter/softcenter/bin/softcenter.sh
@@ -2,51 +2,8 @@
 
 # this scripts used for .asusrouer to start softcenter
 source /jffs/softcenter/scripts/base.sh
-sh /jffs/softcenter/perp/perp.sh start
 nvram set jffs2_scripts=1
 nvram commit
+dbus set softcenter_firmware_version=`nvram get extendno|cut -d "_" -f2|cut -d "-" -f1|cut -c2-6`
 
-#============================================
-# check start up scripts 
-if [ ! -f "/jffs/scripts/wan-start" ];then
-	cat > /jffs/scripts/wan-start <<-EOF
-	#!/bin/sh
-	/jffs/softcenter/bin/softcenter-wan.sh start
-	EOF
-	chmod +x /jffs/scripts/wan-start
-else
-	STARTCOMAND1=`cat /jffs/scripts/wan-start | grep -c "/jffs/softcenter/bin/softcenter-wan.sh start"`
-	[ "$STARTCOMAND1" -gt "1" ] && sed -i '/softcenter-wan.sh/d' /jffs/scripts/wan-start && sed -i '1a /jffs/softcenter/bin/softcenter-wan.sh start' /jffs/scripts/wan-start
-	[ "$STARTCOMAND1" == "0" ] && sed -i '1a /jffs/softcenter/bin/softcenter-wan.sh start' /jffs/scripts/wan-start
-fi
-
-if [ -f "/jffs/scripts/service-start" ];then
-	STARTCOMAND=`cat /jffs/scripts/service-start | grep -c "watchdog"`
-	[ "$STARTCOMAND" -gt "1" ] && sed -i '/watchdog/d' /jffs/scripts/service-start && reboot
-fi
-
-if [ ! -f "/jffs/scripts/nat-start" ];then
-	cat > /jffs/scripts/nat-start <<-EOF
-	#!/bin/sh
-	/jffs/softcenter/bin/softcenter-net.sh start_nat
-	EOF
-	chmod +x /jffs/scripts/nat-start
-else
-	STARTCOMAND2=`cat /jffs/scripts/nat-start | grep -c "/jffs/softcenter/bin/softcenter-net.sh start"`
-	[ "$STARTCOMAND2" -gt "1" ] && sed -i '/softcenter-net.sh/d' /jffs/scripts/nat-start && sed -i '1a /jffs/softcenter/bin/softcenter-net.sh start_nat' /jffs/scripts/nat-start
-	[ "$STARTCOMAND2" == "0" ] && sed -i '1a /jffs/softcenter/bin/softcenter-net.sh start_nat' /jffs/scripts/nat-start
-fi
-
-if [ ! -f "/jffs/scripts/post-mount" ];then
-	cat > /jffs/scripts/post-mount <<-EOF
-	#!/bin/sh
-	/jffs/softcenter/bin/softcenter-mount.sh start
-	EOF
-	chmod +x /jffs/scripts/post-mount
-else
-	STARTCOMAND3=`cat /jffs/scripts/post-mount | grep -c "/jffs/softcenter/bin/softcenter-mount.sh start"`
-	[ "$STARTCOMAND3" -gt "1" ] && sed -i '/softcenter-mount.sh/d' /jffs/scripts/post-mount && sed -i '1a /jffs/softcenter/bin/softcenter-mount.sh start' /jffs/scripts/post-mount
-	[ "$STARTCOMAND3" == "0" ] && sed -i '1a /jffs/softcenter/bin/softcenter-mount.sh start' /jffs/scripts/post-mount
-fi
-#============================================
 
diff --git a/release/src/router/softcenter/softcenter/res/sc1CN.json b/release/src/router/softcenter/softcenter/res/sc1CN.json
new file mode 100644
index 0000000000..ef1876fb2d
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/res/sc1CN.json
@@ -0,0 +1,21 @@
+{
+  "Software Center": "软件中心",
+  "Software Center, Offline installation": "软件中心，离线安装页面",
+  "On this page, you can upload the plugin's offline installation package for manual installation;": "通过本页面，你可以上传插件的离线安装包来安装插件;",
+  "Offline installation will automatically decompress the tar.gz suffix archived package, then find out the install.sh file in the first level folder of the archived package and execute it;": "离线安装会自动解压tar.gz后缀的压缩包，识别压缩包一级目录下的install.sh文件并执行;",
+  "It is recommended to write the plugin version, md5 and other information to the install.sh file;": "建议开发者将插件版本号，md5等信息在install.sh文件内进行写入;",
+  "Note : You should choose offline installation package of the supported CPU architectures to install, otherwise it will not run;": "注意离线安装包对应的cpu架构，上传错误的安装包会无法运行;",
+  "Offline installation": "离线安装",
+  "Upload": "上传并安装",
+  "Done": "完成",
+  "Install": "安装",
+  "Update": "更新",
+  "Uninstall": "卸载",
+  "Installed": "已安装",
+  "Online": "未安装",
+  "Current version:": "当前版本:",
+  "Latest version:": "在线版本:",
+  "loading...": "更新中...",
+  "Softcenter - Offline installation": "软件中心 - 离线安装"
+}
+
diff --git a/release/src/router/softcenter/softcenter/res/sc1EN.json b/release/src/router/softcenter/softcenter/res/sc1EN.json
new file mode 100644
index 0000000000..01076aa037
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/res/sc1EN.json
@@ -0,0 +1,21 @@
+{
+  "Software Center": "Software Center",
+  "Software Center, Offline installation": "Software Center, Offline installation",
+  "On this page, you can upload the plugin's offline installation package for manual installation;": "On this page, you can upload the plugin's offline installation package for manual installation;",
+  "Offline installation will automatically decompress the tar.gz suffix archived package, then find out the install.sh file in the first level folder of the archived package and execute it;": "Offline installation will automatically decompress the tar.gz suffix archived package, then find out the install.sh file in the first level folder of the archived package and execute it;",
+  "It is recommended to write the plugin version, md5 and other information to the install.sh file;": "It is recommended to write the plugin version, md5 and other information to the install.sh file;",
+  "Note : You should choose offline installation package of the supported CPU architectures to install, otherwise it will not run;": "Note : You should choose offline installation package of the supported CPU architectures to install, otherwise it will not run;",
+  "Offline installation": "Offline installation",
+  "Upload": "Upload",
+  "Done": "Done",
+  "Install": "Install",
+  "Update": "Update",
+  "Uninstall": "Uninstall",
+  "Installed": "Installed",
+  "Online": "Online",
+  "Current version:": "Current version:",
+  "Latest version:": "Latest version:",
+  "loading...": "loading...",
+  "Softcenter - Offline installation": "Software Center - Offline installation"
+}
+
diff --git a/release/src/router/softcenter/softcenter/res/sc1TW.json b/release/src/router/softcenter/softcenter/res/sc1TW.json
new file mode 100644
index 0000000000..3102f5a57e
--- /dev/null
+++ b/release/src/router/softcenter/softcenter/res/sc1TW.json
@@ -0,0 +1,21 @@
+{
+  "Software Center": "軟體中心",
+  "Software Center, Offline installation": "軟體中心，離線安裝",
+  "On this page, you can upload the plugin's offline installation package for manual installation;": "通過本頁面，你可以上載插件的離線安裝包來安裝插件;",
+  "Offline installation will automatically decompress the tar.gz suffix archived package, then find out the install.sh file in the first level folder of the archived package and execute it;": "離線安裝會自動解壓tar.gz後綴的壓縮包，自動識別壓縮包一級目錄下的install.sh文件並執行;",
+  "It is recommended to write the plugin version, md5 and other information to the install.sh file;": "建議開發者將插件版本號，md5等信息寫入到install.sh文件內;",
+  "Note : You should choose offline installation package of the supported CPU architectures to install, otherwise it will not run;": "注意選擇正確cpu架構的離線安裝包，否則插件會無法運行;",
+  "Offline installation": "離線安裝",
+  "Upload": "上載並安裝",
+  "Done": "完成",
+  "Install": "安裝",
+  "Update": "更新",
+  "Uninstall": "卸載",
+  "Installed": "已安裝",
+  "Online": "未安裝",
+  "Current version:": "當前版本:",
+  "Latest version:": "在線版本:",
+  "loading...": "更新中...",
+  "Softcenter - Offline installation": "軟體中心 - 離線安裝"
+}
+
diff --git a/release/src/router/softcenter/softcenter/res/softcenter.css b/release/src/router/softcenter/softcenter/res/softcenter.css
index e00ed9f1f5..eec75934b3 100644
--- a/release/src/router/softcenter/softcenter/res/softcenter.css
+++ b/release/src/router/softcenter/softcenter/res/softcenter.css
@@ -68,3 +68,22 @@
 	width: 740px;
 	margin: 1px 0;
 }
+.show-install-btn, .show-uninstall-btn {
+	border: none;
+	background: #444;
+	color: #fff;
+	padding: 10px 20px;
+	border-radius: 5px 5px 0px 0px;
+}
+.active {
+	background: #444f53;
+	border: 1px solid #444f53;
+}
+#log_content1 {
+	width:99%;
+	font-family:'Lucida Console';
+	font-size:12px;
+	background:#475A5F;
+	color:#FFFFFF;
+}
+
diff --git a/release/src/router/softcenter/softcenter/scripts/ks_app_install.sh b/release/src/router/softcenter/softcenter/scripts/ks_app_install.sh
index eedc55df9f..e9103fe581 100644
--- a/release/src/router/softcenter/softcenter/scripts/ks_app_install.sh
+++ b/release/src/router/softcenter/softcenter/scripts/ks_app_install.sh
@@ -29,6 +29,8 @@ export PERP_BASE=/jffs/softcenter/perp
 #softcenter_installing_status=13	#然而并没有更新！
 #softcenter_installing_status=14	#正在检查是否有更新~
 #softcenter_installing_status=15	#检测更新错误！
+#softcenter_installing_status=16	#下载错误，代码：！
+#softcenter_installing_status=17	#卸载失败！请关闭插件后重试！
 
 softcenter_home_url=`dbus get softcenter_home_url`
 CURR_TICK=`date +%s`
@@ -56,10 +58,15 @@ fi
 if [ "$KVER" == "3.10.14" ];then
 	ARCH_SUFFIX="mipsle"
 fi
-VER_SUFFIX=_version
-MD5_SUFFIX=_md5
-INSTALL_SUFFIX=_install
-UNINSTALL_SUFFIX=_uninstall
+
+MODEL=$(nvram get productid)
+if [ "$MODEL" == "GT-AC5300" ] || [ "$MODEL" == "GT-AC2900" ] || [ "$MODEL" == "GT-AX11000" ] || [ "$(nvram get merlinr_rog)" == "1" ];then
+	ROG=1
+fi
+
+if [ "$(nvram get productid)" == "TUF-AX3000" ] || [ "$(nvram get merlinr_tuf)" == "1" ];then
+	TUF=1
+fi
 
 LOGGER() {
 #	echo $1
@@ -95,25 +102,21 @@ install_module() {
 	dbus save softcenter_installing_
 
 	URL_SPLIT="/"
-	#OLD_MD5=`dbus get softcenter_module_$softcenter_installing_module$MD5_SUFFIX`
-	OLD_VERSION=`dbus get softcenter_module_$softcenter_installing_module$VER_SUFFIX`
+	#OLD_MD5=`dbus get softcenter_module_${softcenter_installing_module}_md5`
+	OLD_VERSION=`dbus get softcenter_module_${softcenter_installing_module}_version`
 	if [ -z "$(dbus get softcenter_server_tcode)" ]; then
 		modelname=`nvram get modelname`
-		if [ "$modelname" == "K3" ]; then
+		if [ "$modelname" == "K3" ] || [ "$modelname" == "GTAC2900" ] || [ "$modelname" == "GTAC5300"  ] || [ "$modelname" == "RTAC86U" ] || [ "$modelname" == "RTAX86U" ] || [ "$modelname" == "RTAX68U" ] || [ "$modelname" == "RTAX82U" ] || [ "$modelname" == "TUFAX3000" ] || [ "$modelname" == "RTACRH17" ] || [ "$modelname" == "XWR3100" ]; then
 			dbus set softcenter_server_tcode=CN
-		elif [ "$modelname" == "SBRAC1900P" -o "$modelname" == "SBR-AC1900P" -o "$modelname" == "SBRAC3200P" -o "$modelname" == "SBR-AC3200P" -o "$modelname" == "R7900P" -o "$modelname" == "R8000P" ]; then
+		elif [ "$modelname" == "SBRAC1900P"  ] || [ "$modelname" == "SBR-AC1900P" ] || [ "$modelname" == "SBRAC3200P" ] || [ "$modelname" == "SBR-AC3200P" ] || [ "$modelname" == "R7900P" ] || [ "$modelname" == "R8000P" ] || [ "$modelname" == "R7000P" ]; then
 			dbus set softcenter_server_tcode=ALI
-		elif [ "$modelname" == "GTAC2900" -o "$modelname" == "GTAC5300" -o "$modelname" == "RTAC86U" -o "$modelname" == "RTAX86U" -o "$modelname" == "RTAX68U" -o "$modelname" == "RTAX58U" -o "$modelname" == "RTAX82U" -o "$modelname" == "TUFAX3000" -o "$modelname" == "RTACRH17" ]; then
-			dbus set softcenter_server_tcode=CN1
 		else
 			dbus set softcenter_server_tcode=`nvram get territory_code |cut -c 1-2`
 			[ -z "$(dbus get softcenter_server_tcode)" ] && dbus set softcenter_server_tcode=GB
 		fi
 	fi
 	eval `dbus export softcenter_server_tcode`
-	if [ "$softcenter_server_tcode" == "CN" ]; then
-		HOME_URL="http://update.wifi.com.cn/$ARCH_SUFFIX"
-	elif [ "$softcenter_server_tcode" == "CN1" ]; then
+	if [ "$softcenter_server_tcode" == "CN" ] || [ "$softcenter_server_tcode" == "CN1" ]; then
 		HOME_URL="https://sc.softcenter.site/$ARCH_SUFFIX"
 	elif [ "$softcenter_server_tcode" == "ALI" ]; then
 		HOME_URL="https://wufan.softcenter.site/$ARCH_SUFFIX"
@@ -121,8 +124,7 @@ install_module() {
 		HOME_URL="https://sc.paldier.com/$ARCH_SUFFIX"
 	fi
 
-	#HOME_URL=`dbus get softcenter_home_url`
-	TAR_URL=$HOME_URL$URL_SPLIT$softcenter_installing_tar_url
+	TAR_URL=${HOME_URL}${URL_SPLIT}${softcenter_installing_tar_url}
 	FNAME=`basename $softcenter_installing_tar_url`
 
 	if [ "$OLD_VERSION" = "" ]; then
@@ -130,7 +132,7 @@ install_module() {
 	fi
 
 	CMP=`versioncmp $softcenter_installing_version $OLD_VERSION`
-	if [ -f /jffs/softcenter/webs/Module_$softcenter_installing_module.sh -o "$softcenter_installing_todo" = "softcenter" ]; then
+	if [ -f "/jffs/softcenter/webs/Module_$softcenter_installing_module.sh" -o "$softcenter_installing_todo" = "softcenter" ]; then
 		CMP="-1"
 	fi
 	if [ "$CMP" = "-1" ]; then
@@ -140,17 +142,17 @@ install_module() {
 	rm -rf "/tmp/$softcenter_installing_module"
 	dbus set softcenter_installing_status="3"
 	sleep 1
-	wget --no-check-certificate --tries=1 --timeout=15 $TAR_URL
+	wget -t 2 -T 20 --dns-timeout=15 --no-check-certificate -q ${TAR_URL}
 	RETURN_CODE=$?
 
 	if [ "$RETURN_CODE" != "0" ]; then
-		dbus set softcenter_installing_status="12"
-		sleep 2
+		dbus set softcenter_installing_status="16"
+		sleep 3
 		dbus set softcenter_installing_status="0"
 		dbus set softcenter_installing_module=""
 		dbus set softcenter_installing_todo=""
 		LOGGER "wget $TAR_URL error, $RETURN_CODE"
-	exit 4
+		exit $RETURN_CODE
 	fi
 
 	md5sum_gz=$(md5sum /tmp/$FNAME | sed 's/ /\n/g'| sed -n 1p)
@@ -158,7 +160,7 @@ install_module() {
 		LOGGER "md5 not equal $md5sum_gz"
 		dbus set softcenter_installing_status="12"
 		rm -f $FNAME
-		sleep 2
+		sleep 3
 
 		dbus set softcenter_installing_status="0"
 		dbus set softcenter_installing_module=""
@@ -171,7 +173,7 @@ install_module() {
 		tar -zxf $FNAME
 		dbus set softcenter_installing_status="4"
 
-		if [ ! -f /tmp/$softcenter_installing_module/install.sh ]; then
+		if [ ! -f "/tmp/$softcenter_installing_module/install.sh" ]; then
 			dbus set softcenter_installing_status="0"
 			dbus set softcenter_installing_module=""
 			dbus set softcenter_installing_todo=""
@@ -183,26 +185,36 @@ install_module() {
 			exit 5
 		fi
 
-		if [ -f /tmp/$softcenter_installing_module/uninstall.sh ]; then
+		if [ -f "/tmp/$softcenter_installing_module/uninstall.sh" ]; then
 			chmod 755 /tmp/$softcenter_installing_module/uninstall.sh
-			mv /tmp/$softcenter_installing_module/uninstall.sh /jffs/softcenter/scripts/uninstall_$softcenter_installing_todo.sh
+			#mv /tmp/$softcenter_installing_module/uninstall.sh /jffs/softcenter/scripts/uninstall_$softcenter_installing_todo.sh
 		fi
 
+		if [ -d /tmp/${softcenter_installing_module}/ROG -a "$ROG" == "1" ]; then
+			cp -rf /tmp/${softcenter_installing_module}/ROG/* /tmp/${softcenter_installing_module}/
+		fi
+
+		if [ -d /tmp/${softcenter_installing_module}/ROG -a "$TUF" == "1" ]; then
+			# 骚红变橙色
+			find /tmp/${softcenter_installing_module}/ROG/ -name "*.asp" | xargs sed -i 's/3e030d/3e2902/g;s/91071f/92650F/g;s/680516/D0982C/g;s/cf0a2c/c58813/g;s/700618/74500b/g;s/530412/92650F/g'
+			find /tmp/${softcenter_installing_module}/ROG/ -name "*.css" | xargs sed -i 's/3e030d/3e2902/g;s/91071f/92650F/g;s/680516/D0982C/g;s/cf0a2c/c58813/g;s/700618/74500b/g;s/530412/92650F/g'
+			cp -rf /tmp/${softcenter_installing_module}/ROG/* /tmp/${softcenter_installing_module}/
+		fi
 		chmod a+x /tmp/$softcenter_installing_module/install.sh
 		sh /tmp/$softcenter_installing_module/install.sh
-		sleep 2
+		sleep 3
 
 		rm -f $FNAME
 		rm -rf "/tmp/$softcenter_installing_module"
 
 		if [ "$softcenter_installing_module" != "softcenter" ]; then
-			dbus set "softcenter_module_$softcenter_installing_module$MD5_SUFFIX=$softcenter_installing_md5"
-			dbus set "softcenter_module_$softcenter_installing_module$VER_SUFFIX=$softcenter_installing_version"
-			dbus set "softcenter_module_$softcenter_installing_module$INSTALL_SUFFIX=1"
-			dbus set "$softcenter_installing_module$VER_SUFFIX=$softcenter_installing_version"
+			dbus set softcenter_module_${softcenter_installing_module}_md5=${softcenter_installing_md5}
+			dbus set softcenter_module_${softcenter_installing_module}_version=${softcenter_installing_version}
+			dbus set softcenter_module_${softcenter_installing_module}_install=1
+			dbus set ${softcenter_installing_module}_version=${softcenter_installing_version}
 		else
-			dbus set softcenter_version=$softcenter_installing_version;
-			dbus set softcenter_md5=$softcenter_installing_md5
+			dbus set softcenter_version=${softcenter_installing_version};
+			dbus set softcenter_md5=${softcenter_installing_md5}
 		fi
 		dbus set softcenter_installing_module=""
 		dbus set softcenter_installing_todo=""
@@ -236,9 +248,12 @@ uninstall_module() {
 		exit 3
 	fi
 
-	ENABLED=`dbus get "$softcenter_installing_todo""_enable"`
+	local ENABLED=`dbus get ${softcenter_installing_todo}_enable`
 	if [ "$ENABLED" = "1" ]; then
-		LOGGER "please disable this module than try again"
+		LOGGER "please disable ${softcenter_installing_module} then try again"
+		dbus set softcenter_installing_status="17"
+		sleep 3
+		dbus set softcenter_installing_status="0"
 		exit 4
 	fi
 
@@ -248,11 +263,14 @@ uninstall_module() {
 	export softcenter_installing_status="6"
 	dbus save softcenter_installing_
 
-	dbus remove "softcenter_module_$softcenter_installing_module$MD5_SUFFIX"
-	dbus remove "softcenter_module_$softcenter_installing_module$VER_SUFFIX"
-	dbus remove "softcenter_module_$softcenter_installing_module$INSTALL_SUFFIX"
+	dbus remove softcenter_module_${softcenter_installing_module}_md5
+	dbus remove softcenter_module_${softcenter_installing_module}_version
+	dbus remove softcenter_module_${softcenter_installing_module}_install
+	dbus remove softcenter_module_${softcenter_installing_module}_description
+	dbus remove softcenter_module_${softcenter_installing_module}_name
+	dbus remove softcenter_module_${softcenter_installing_module}_title
 
-	txt=`dbus list $softcenter_installing_todo`
+	txt=`dbus list ${softcenter_installing_todo}`
 	printf "%s\n" "$txt" |
 	while IFS= read -r line; do
 		line2="${line%=*}"
@@ -267,21 +285,25 @@ uninstall_module() {
 	dbus set softcenter_installing_todo=""
 
 	#try to call uninstall script
-	if [ -f "/jffs/softcenter/scripts/$softcenter_installing_todo$UNINSTALL_SUFFIX.sh"]; then
- 		sh /jffs/softcenter/scripts/$softcenter_installing_todo$UNINSTALL_SUFFIX.sh
-	elif [ -f "/jffs/softcenter/scripts/uninstall_$softcenter_installing_todo.sh" ]; then
-		sh /jffs/softcenter/scripts/uninstall_$softcenter_installing_todo.sh
+	if [ -f "/jffs/softcenter/scripts/${softcenter_installing_todo}_uninstall.sh" ]; then
+ 		sh /jffs/softcenter/scripts/${softcenter_installing_todo}_uninstall.sh
+	elif [ -f "/jffs/softcenter/scripts/uninstall_${softcenter_installing_todo}.sh" ]; then
+		sh /jffs/softcenter/scripts/uninstall_${softcenter_installing_todo}.sh
 	else
-		rm -f /jffs/softcenter/webs/Module_$softcenter_installing_todo.asp
-        rm -f /jffs/softcenter/init.d/S*$softcenter_installing_todo.sh
+		if [ -n "${softcenter_installing_todo}" ]; then
+			rm -rf /jffs/softcenter/${softcenter_installing_todo}
+			rm -rf /jffs/softcenter/bin/${softcenter_installing_todo}
+			rm -rf /jffs/softcenter/init.d/*${softcenter_installing_todo}*
+			rm -rf /jffs/softcenter/scripts/${softcenter_installing_todo}*.sh
+			rm -rf /jffs/softcenter/res/icon-${softcenter_installing_todo}.png
+			rm -rf /jffs/softcenter/webs/Module_${softcenter_installing_todo}.asp
+		fi
 	fi
 }
 
 #LOGGER $BIN_NAME
 case $BIN_NAME in
 start)
-	sh /jffs/softcenter/perp/perp.sh stop
-	sh /jffs/softcenter/perp/perp.sh start
 	dbus set softcenter_installing_status=1
 	;;
 update)
@@ -301,4 +323,3 @@ ks_app_remove)
 	;;
 esac
 
-
diff --git a/release/src/router/softcenter/softcenter/scripts/ks_tar_intall.sh b/release/src/router/softcenter/softcenter/scripts/ks_tar_install.sh
similarity index 87%
rename from release/src/router/softcenter/softcenter/scripts/ks_tar_intall.sh
rename to release/src/router/softcenter/softcenter/scripts/ks_tar_install.sh
index e7937d7e44..429df0d864 100644
--- a/release/src/router/softcenter/softcenter/scripts/ks_tar_intall.sh
+++ b/release/src/router/softcenter/softcenter/scripts/ks_tar_install.sh
@@ -15,7 +15,23 @@ clean(){
 	dbus remove soft_name
 }
 
+detect_package(){
+	local TEST="$1"
+	local KEYWORDS="ss|ssr|shadowsocks|shadowsocksr|v2ray|trojan|clash|wireguard|koolss|brook"
+	local KEY_MATCH=$(echo "${TEST}" | grep -Eo "$KEYWORDS")
+	if [ -n "$KEY_MATCH" ]; then
+		echo_date =======================================================
+		echo_date "检测到离线安装包：${soft_name} 含非法关键词！！！"
+		echo_date "根据法律规定，软件中心将不会安装此插件！！！"
+		echo_date "删除相关文件并退出..."
+		echo_date =======================================================
+		clean
+		exit 1
+	fi
+}
 install_tar(){
+	#do the right thing
+	detect_package "$soft_name"
 	name=`echo "$soft_name"|sed 's/.tar.gz//g'|awk -F "_" '{print $1}'|awk -F "-" '{print $1}'`
 	INSTALL_SUFFIX=_install
 	VER_SUFFIX=_version
diff --git a/release/src/router/softcenter/softcenter/webs/Main_Soft_center.asp b/release/src/router/softcenter/softcenter/webs/Main_Soft_center.asp
index 6a1c4d602c..fdcd04810b 100644
--- a/release/src/router/softcenter/softcenter/webs/Main_Soft_center.asp
+++ b/release/src/router/softcenter/softcenter/webs/Main_Soft_center.asp
@@ -7,7 +7,7 @@
 <meta HTTP-EQUIV="Expires" CONTENT="-1">
 <link rel="shortcut icon" href="images/favicon.png">
 <link rel="icon" href="images/favicon.png">
-<title>Merlin software center</title>
+<title sclang>Software Center</title>
 <link rel="stylesheet" type="text/css" href="index_style.css"/>
 <link rel="stylesheet" type="text/css" href="form_style.css"/>
 <link rel="stylesheet" type="text/css" href="/res/softcenter.css"/>
@@ -23,6 +23,7 @@
 <script type="text/javascript" src="/switcherplugin/jquery.iphone-switch.js"></script>
 <script type="text/javascript" src="/form.js"></script>
 <script type="text/javascript" src="/res/softcenter.js"></script>
+<script type="text/javascript" src="/js/i18n.js"></script>
 <style>
 .cloud_main_radius_left {
 	-webkit-border-radius: 10px 0 0 10px;
@@ -131,17 +132,6 @@ input[type=button]:focus {
 	width:60%;
 	border-right: 1px solid #000;
 }
-.show-install-btn,
-.show-uninstall-btn{
-	border: none;
-	background: #444;
-	color: #fff;
-	padding: 10px 20px;
-	border-radius: 5px 5px 0px 0px;
-}
-.active {
-	background: #444f53;
-}
 .install-status-1 .uninstall-btn {
 	display: block;
 }
@@ -220,6 +210,7 @@ input[type=button]:focus {
 <script>
 var db_softcenter_ = {};
 var scarch = "mips";
+var giturl;
 var model = '<% nvram_get("model"); %>';
 var modelname = '<% nvram_get("modelname"); %>';
 var TIMEOUT_SECONDS = 18;
@@ -243,18 +234,21 @@ function appPostScript(moduleInfo, script) {
 		return;
 	}
 	//Current page must has prefix of "Module_"
-	var data = {"action_script":script, "action_mode":" Refresh "};
+	var data = {};
 	//currState.name = moduleInfo.name;
 	//TODO auto choose for home_url
 	data["softcenter_home_url"] = db_softcenter_["softcenter_home_url"];
 	data["softcenter_installing_todo"] = moduleInfo.name;
+	data["action_script"] = script;
 	if (script == "ks_app_install.sh") {
 		data["softcenter_installing_tar_url"] = moduleInfo.tar_url;
 		data["softcenter_installing_md5"] = moduleInfo.md5;
 		data["softcenter_installing_version"] = moduleInfo.version;
 		//Update title for this module
 		data[moduleInfo.name + "_title"] = moduleInfo.title;
-
+		data["action_mode"] = "ks_app_install";
+	} else if (script == "ks_app_remove.sh") {
+		data["action_mode"] = "ks_app_remove";
 	}
 	$.ajax({
 		type: "POST",
@@ -340,7 +334,7 @@ function showInstallInfo(module, scode) {
 		var infos = [
 			"操作失败",
 			"已安装",
-			"将被安装到jffs分区...",
+			"插件将被安装到jffs分区...",
 			"正在下载中...请耐心等待...",
 			"正在安装中...",
 			"安装成功！请5秒后刷新本页面！...",
@@ -353,7 +347,9 @@ function showInstallInfo(module, scode) {
 			"下载文件校验不一致！",
 			"然而并没有更新！",
 			"正在检查是否有更新~",
-			"检测更新错误！"
+			"检测更新错误！",
+			" wget下载错误，详情见系统日志！",
+			"卸载失败！请关闭插件后重试！"
 		];
 		document.getElementById("install_status").style.display = "";
 		$("#appInstallInfo").html(s + infos[code]);
@@ -405,9 +401,9 @@ function renderView(apps) {
 		'#{description}',
 		'</a>',
 		'<div class="opt">',
-		'<a type="button" class="install-btn" data-name="#{name}">安装</a>',
-		'<a type="button" class="update-btn" data-name="#{name}">更新</a>',
-		'<a type="button" class="uninstall-btn" data-name="#{name}">卸载</a>',
+		'<a type="button" class="install-btn" data-name="#{name}">' + dict["Install"] + '</a>',
+		'<a type="button" class="update-btn" data-name="#{name}">' + dict["Update"] + '</a>',
+		'<a type="button" class="uninstall-btn" data-name="#{name}">' + dict["Uninstall"] + '</a>',
 		'</div>',
 		'</dd>',
 		'</dl>'
@@ -420,8 +416,8 @@ function renderView(apps) {
 	});
 	$('#IconContainer').html(html.join(''));
 	//更新安装数
-	$('.show-install-btn').val('已安装(' + installCount + ')');
-	$('.show-uninstall-btn').val('未安装(' + uninstallCount + ')');
+	$('.show-install-btn').val(dict["Installed"] + '(' + installCount + ')');
+	$('.show-uninstall-btn').val(dict["Online"] + '(' + uninstallCount + ')');
 }
 function getRemoteData() {
 	var remoteURL = db_softcenter_["softcenter_home_url"] + '/' + scarch + '/softcenter/app.json.js';
@@ -434,7 +430,7 @@ function getRemoteData() {
 }
 function softceterInitData(data) {
 	var remoteData = data;
-	$("#spnOnlineVersion").html(remoteData.version);
+	$("#spnOnlineVersion").html("<em>" +remoteData.version + "</em>");
 	if (remoteData.version != db_softcenter_["softcenter_version"]) {
 		$("#updateBtn").show();
 		$("#updateBtn").click(function() {
@@ -521,6 +517,8 @@ function init(cb) {
 			cb();
 			return;
 		} else {
+			renderView(_mergeData({}));
+			cb();
 			getRemoteData()
 				.done(function(remoteData) {
 					//远端更新成功
@@ -532,8 +530,7 @@ function init(cb) {
 				})
 				.fail(function() {
 					//如果没有更新成功，比如没网络，就用空数据merge本地
-					renderView(_mergeData({}));
-					cb();
+					$("#spnOnlineVersion").html("<i>获取在线版本失败！请尝试重新刷新本页面，或者检查你的网络设置！</i>")
 				});
 		}
 		notice_show();
@@ -544,6 +541,7 @@ function init(cb) {
 $(function() {
 	//梅林要求用这个函数来显示左测菜单
 	show_menu(menu_hook);
+	sc_load_lang("sc1");
 	$.ajax({
 		type: "GET",
 		url: "/dbconf?p=softcenter",
@@ -551,7 +549,7 @@ $(function() {
 		success: function(response) {
 			db_softcenter_ = db_softcenter;
 			if(db_softcenter_["softcenter_server_tcode"] == "CN") {
-			        db_softcenter_["softcenter_home_url"] = "http://update.wifi.com.cn";
+			        db_softcenter_["softcenter_home_url"] = "https://sc.softcenter.site";
 			}
 			else if(db_softcenter_["softcenter_server_tcode"] == "GB") {
 			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
@@ -564,27 +562,33 @@ $(function() {
 			}
 			else
 			        db_softcenter_["softcenter_home_url"] = "https://sc.paldier.com";
-			if(db_softcenter_["softcenter_arch"] == "mips")//for grx500
+			if(db_softcenter_["softcenter_arch"] == "mips"){//for grx500
 				scarch="mips";
-			else if (db_softcenter_["softcenter_arch"] == "armv7l")//for bcm4709/qca4019
+				giturl="softcenter";
+			} else if (db_softcenter_["softcenter_arch"] == "armv7l"){//for bcm4709
 				scarch="arm";
-			else if (db_softcenter_["softcenter_arch"] == "armng")//for bcm6750
+				giturl="softcenterarm";
+			} else if (db_softcenter_["softcenter_arch"] == "armng"){//for bcm6750/ipq4019
 				scarch="armng";
-			else if (db_softcenter_["softcenter_arch"] == "aarch64")//for bcm4908
+				giturl="softcenterarmng";
+			} else if (db_softcenter_["softcenter_arch"] == "aarch64"){//for bcm4908/bcm6710
 				scarch="arm64";
-			else if (db_softcenter_["softcenter_arch"] == "mipsle")//for mtk7621
+				giturl="softcenterarm64";
+			} else if (db_softcenter_["softcenter_arch"] == "mipsle"){//for mtk7621
 				scarch="mipsle";
-			else if (db_softcenter_["softcenter_arch"] == "x86")//for grx750
-				scarch="x86";
-			else
+				giturl="softcentermipsle";
+			} else {
 				scarch="mips";
+				giturl="softcenter";
+			}
 			if (!db_softcenter_["softcenter_version"]) {
 				db_softcenter_["softcenter_version"] = "0.0";
 			}
-			$("#spnCurrVersion").html(db_softcenter_["softcenter_version"]);
+			$("#spnCurrVersion").html("<em>" + db_softcenter_["softcenter_version"] + "</em>");
+			$('#github').html('论坛技术支持： <a href="https://www.right.com.cn" target="_blank"> <i><u>right.com.cn</u></i> </a><br/>Github项目： <a href ="https://github.com/paldier/' + giturl +'" target="_blank"> <i><u>https://github.com/paldier</u></i> </a><br/>Shell & Web by： <i>sadoneli</i>, <i>Xiaobao</i>, <i>paldier</i>')
 			var jff2_scripts="<% nvram_get("jffs2_scripts"); %>";
 			if(jff2_scripts != 1){
-				$('#software_center_message').html('<h2><font color="#FF9900">错误！</font></h2><h2>软件中心不可用！因为你没有开启Enable JFFS custom scripts and configs选项！</h2><h2>请前往【系统管理】-<a href="Advanced_System_Content.asp"><u><em>【系统设置】</em></u></a>开启此选项再使用软件中心！！</h2>')
+				$('#software_center_message').html('<h1><font color="#FF9900">错误！</font></h1><h2>软件中心不可用！因为你没有开启Enable JFFS custom scripts and configs选项！</h2><h2>请前往【系统管理】-<a href="Advanced_System_Content.asp"><u><em>【系统设置】</em></u></a>开启此选项再使用软件中心！！</h2>')
 			}else{
 				init(function() {
 					toggleAppPanel(1);
@@ -623,7 +627,7 @@ $(function() {
 	});
 });
 function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
+	tabtitle[tabtitle.length -1] = new Array("",dict["Software Center"], dict["Offline installation"]);
 	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
 }
 function notice_show(){
@@ -693,30 +697,27 @@ function notice_show(){
 													<table width="100%" height="150px" style="border-collapse:collapse;">
 														<tr bgcolor="#444f53">
 															<td colspan="5" bgcolor="#444f53" class="cloud_main_radius">
-																<div style="padding:10px;width:95%;font-style:italic;font-size:14px;">
-																	<br/><br/>
+																<div style="width:95%;font-style:italic;font-size:14px;">
 																	<table width="100%">
 																		<tr>
 																			<td>
-																				<ul style="margin-top:-50px;padding-left:15px;">
-																					<li style="margin-top:-5px;">
-																						<h2 id="push_titile"><em>软件中心</em></h2>
-																					</li>
-																					<li style="margin-top:-5px;">
+																				<ul style="padding-left:25px;">
+																					<h2 id="push_titile"><em>软件中心&nbsp;-&nbsp;by&nbsp;MerlinR</em></h2>
+																					<li>
 																						<h4 id="push_content1" ><font color='#1E90FF'>交流反馈:&nbsp;&nbsp;</font><a href='https://github.com/paldier/softcenter' target='_blank'><em>1.软件中心GitHub项目</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://t.me/merlinchat' target='_blank'><em>2.加入telegram群</em></a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='https://www.right.com.cn/forum/forum-173-1.html' target='_blank'><em>3.恩山论坛插件版块</em></a></h4>
 																					</li>
-																					<li id="push_content2_li" style="margin-top:-5px;">
+																					<li id="push_content2_li">
                                                                                     <h4 id="push_content2">如果你看到这个页面说明主服务器连接不上,如果获取不到在线版本说明节点服务器连接不上！</h4>
 																					</li>
-																					<li id="push_content3_li" style="margin-top:-5px;display: none;">
+																					<li id="push_content3_li" style="display: none;">
 																						<h4 id="push_content3"></h4>
 																					</li>
-																					<li id="push_content4_li" style="margin-top:-5px;display: none;">
+																					<li id="push_content4_li" style="display: none;">
 																						<h4 id="push_content4"></h4>
 																					</li>
-																					<li style="margin-top:-5px;">
-																						<h5>当前版本：<span id="spnCurrVersion"></span> 在线版本：<span id="spnOnlineVersion"></span>
-																						<input type="button" id="updateBtn" value="更新" style="display:none" /></h5>
+																					<li>
+																						<h5><font color='#1E90FF' sclang>Current version:</font><span id="spnCurrVersion"></span>&nbsp;&nbsp;<font color='#1E90FF' sclang>Latest version:</font><span id="spnOnlineVersion"></span>
+																						<input sclang type="button" id="updateBtn" value="Update" style="display:none" /></h5>
 																					</li>
 																				</ul>
 																			</td>
@@ -741,24 +742,20 @@ function notice_show(){
 														</tr>
 														<tr width="235px">
 															<td colspan="4" cellpadding="0" cellspacing="0" style="padding:0">
-																<input class="show-install-btn" type="button" value="已安装"/>
-																<input class="show-uninstall-btn" type="button" value="未安装"/>
+																<input sclang class="show-install-btn" type="button" value="Installed"/>
+																<input sclang class="show-uninstall-btn" type="button" value="Online"/>
 															</td>
 														</tr>
 														<tr bgcolor="#444f53" width="235px">
 															<td colspan="4" id="IconContainer">
-																<div id="software_center_message" style="text-align:center; line-height: 4em;">更新中...</div>
+																<div id="software_center_message" style="text-align:center; line-height: 4em;" sclang>loading...</div>
 															</td>
 														</tr>
 														<tr height="10px">
 															<td colspan="3"></td>
 														</tr>
 													</table>
-												<div class="KoolshareBottom">论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>koolshare.cn</u></i> </a>
-													<br/>Github项目： <a href="https://github.com/koolshare/armsoft" target="_blank"> <i><u>github.com/koolshare</u></i> </a>
-													<br/>Shell & Web by： <a href="mailto:sadoneli@gmail.com"> <i>sadoneli</i> </a>, <i>Xiaobao</i>
-													<br/>修改版 by： <i>paldier</i>
-													<br/>Github项目： <a href="https://github.com/paldier/softcenter" target="_blank"> <i><u>https://github.com/paldier</u></i> </a>
+												<div class="KoolshareBottom" id="github">
 												</div>
 											</td>
 										</tr>
diff --git a/release/src/router/softcenter/softcenter/webs/Main_Soft_setting.asp b/release/src/router/softcenter/softcenter/webs/Main_Soft_setting.asp
index a01130514a..c983328305 100644
--- a/release/src/router/softcenter/softcenter/webs/Main_Soft_setting.asp
+++ b/release/src/router/softcenter/softcenter/webs/Main_Soft_setting.asp
@@ -7,7 +7,7 @@
 <meta HTTP-EQUIV="Expires" CONTENT="-1"/>
 <link rel="shortcut icon" href="images/favicon.png"/>
 <link rel="icon" href="images/favicon.png"/>
-<title>软件中心 - 离线安装</title>
+<title sclang>Softcenter - Offline installation</title>
 <link rel="stylesheet" type="text/css" href="index_style.css"/>
 <link rel="stylesheet" type="text/css" href="form_style.css"/>
 <link rel="stylesheet" type="text/css" href="usp_style.css"/>
@@ -25,9 +25,11 @@
 <script type="text/javascript" src="/dbconf?p=adm_&v=<% uptime(); %>"></script>
 <script type="text/javascript" src="/res/softcenter.js"></script>
 <script language="JavaScript" type="text/javascript" src="/client_function.js"></script>
+<script type="text/javascript" src="/js/i18n.js"></script>
 <script>
 function init(menu_hook) {
 	show_menu();
+	sc_load_lang("sc1");
 }
 function onSubmitCtrl(o, s) {
 	document.form.action_mode.value = s;
@@ -38,7 +40,7 @@ function reload_Soft_Center(){
 location.href = "/Main_Soft_center.asp";
 }
 function menu_hook(title, tab) {
-	tabtitle[tabtitle.length -1] = new Array("", "软件中心", "离线安装");
+	tabtitle[tabtitle.length -1] = new Array("", dict["Software Center"], dict["Offline installation"]);
 	tablink[tablink.length -1] = new Array("", "Main_Soft_center.asp", "Main_Soft_setting.asp");
 }
 function upload_software() {
@@ -89,7 +91,7 @@ function upload_ok(isok) {
 function start_install() {
 	document.form.action_mode.value = ' Refresh ';
 	document.form.action = "/applydb.cgi?p=soft";
-    document.form.action_script.value = "ks_tar_intall.sh";
+	document.form.action_script.value = "ks_tar_install.sh";
 	document.form.enctype = "";
 	document.form.encoding = "";
 	document.form.submit();
@@ -163,37 +165,36 @@ function checkCmdRet(){
 								<tr>
 									<td bgcolor="#4D595D" colspan="3" valign="top">
 										<div>&nbsp;</div>
-										<div style="float:left;" class="formfonttitle">软件中心，离线安装页面</div>
+										<div sclang style="float:left;" class="formfonttitle">Software Center, Offline installation</div>
 										<div style="float:right; width:15px; height:25px;margin-top:10px"><img id="return_btn" onclick="reload_Soft_Center();" align="right" style="cursor:pointer;position:absolute;margin-left:-30px;margin-top:-25px;" title="返回软件中心" src="/images/backprev.png" onMouseOver="this.src='/images/backprevclick.png'" onMouseOut="this.src='/images/backprev.png'"></img></div>
-										<div style="margin-left:5px;margin-top:10px;margin-bottom:10px"><img src="/images/New_ui/export/line_export.png"></div>
+										<div style="margin:30px 0 10px 5px;" class="splitLine"></div>
 										<div class="formfontdesc" style="padding-top:5px;margin-top:0px;float: left;" id="cmdDesc"></div>
 										<div style="padding-top:5px;margin-top:0px;float: left;" id="NoteBox" >
-											<li>通过本页面，你可以上传插件的离线安装包来安装插件; </li>
-											<li>离线安装会自动解压tar.gz后缀的压缩包，识别压缩包一级目录下的install.sh文件并执行； </li>
-											<li>建议开发者将插件版本号，md5等信息在install.sh文件内进行写入； </li>
-											<li>注意离线安装包对应的cpu架构，上传错误的安装包会无法运行； </li>
+											<li sclang>On this page, you can upload the plugin's offline installation package for manual installation;</li>
+											<li sclang>Offline installation will automatically decompress the tar.gz suffix archived package, then find out the install.sh file in the first level folder of the archived package and execute it;</li>
+											<li sclang>It is recommended to write the plugin version, md5 and other information to the install.sh file;</li>
+											<li sclang>Note : You should choose offline installation package of the supported CPU architectures to install, otherwise it will not run;</li>
 										</div>
 										<div class="formfontdesc" id="cmdDesc"></div>
 										<table style="margin:10px 0px 0px 0px;" width="100%" border="1" align="center" cellpadding="4" cellspacing="0" bordercolor="#6b8fa3" class="FormTable" id="routing_table">
 											<thead>
 											<tr>
-												<td colspan="2">软件中心 - 高级设置</td>
+												<td sclang colspan="2">Softcenter - Offline installation</td>
 											</tr>
 											</thead>
 											<tr>
-												<th><a class="hintstyle" href="javascript:void(0);" onclick="openssHint(24)">离线安装插件</a></th>
+												<th><a sclang class="hintstyle" href="javascript:void(0);" onclick="openssHint(24)">Offline installation</a></th>
 												<td>
-													<input type="button" id="upload_btn" class="button_gen" onclick="upload_software();" value="上传并安装"/>
+													<input sclang type="button" id="upload_btn" class="button_gen" onclick="upload_software();" value="Upload"/>
 													<input style="color:#FFCC00;*color:#000;width: 200px;" id="ss_file" type="file" name="file"/>
 													<img id="loadingicon" style="margin-left:5px;margin-right:5px;display:none;" src="/images/InternetScan.gif">
-													<span id="file_info" style="display:none;">完成</span>
+													<span sclang id="file_info" style="display:none;">Done</span>
 												</td>
 											</tr>
                                     	</table>
                                     	<div id="log_content" style="margin-top:10px;display: block;">
-											<textarea cols="63" rows="15" wrap="off" readonly="readonly" id="log_content1" style="width:99%; font-family:'Courier New', Courier, mono; font-size:11px;background:#475A5F;color:#FFFFFF;"></textarea>
+											<textarea cols="63" rows="40" wrap="off" readonly="readonly" id="log_content1"></textarea>
 										</div>
-										<div style="margin-left:5px;margin-top:10px;margin-bottom:10px"><img src="/images/New_ui/export/line_export.png"></div>
 										<div class="KoolshareBottom">
 											<br/>论坛技术支持： <a href="http://www.koolshare.cn" target="_blank"> <i><u>www.koolshare.cn</u></i> </a> <br/>
 											后台技术支持： <i>Xiaobao</i> <br/>
@@ -215,3 +216,4 @@ function checkCmdRet(){
 	<div id="footer"></div>
 </body>
 </html>
+