vania-janet/multiturn-rag-retrieval-data huggingface dataset:
When VPN service is configured on Tier-1 Logical Router, ensure that the floating IP is correctly advertised between Tier-0 and Tier-1 Logical Routers.

For more information about VPN service, see [VMware Documentation](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-A8B113EC-3D53-41A5-919E-78F1A3705F58.html).





 Network Address Translation 

Network Address Translation (NAT) is supported on Tier-0 and Tier-1 Logical Routers.

The following types of NAT are supported.



* Source NAT (SNAT) translates a source IP address of outbound packets so that packets are shown as originating from a different network.
* Destination NAT (DNAT) translates the destination IP address of inbound packets so that packets are delivered to a target address into another network.



You can also disable SNAT or DNAT for an IP address or a range of addresses. If an address has multiple NAT rules, the rule with the highest priority is applied.

When configuring NSX-T NAT in IBM Cloud VPC, you can use the public /32 floating IP addresses as the public NAT IP addresses in both Tier-0 and Tier-1 Logical Routers. You can have multiple NAT IPs, if needed. When NAT is configured on Tier-1 Logical Router, ensure that the floating IP is correctly advertised between Tier-0 and Tier-1 Logical Routers.

For more information about NAT in NSX-T, see [VMware Documentation](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-7AD2C384-4303-4D6C-A44A-DEF45AA18A92.html).





 Firewall 

You can configure East-West and North-South firewall policies in your NSX-T platform.

Gateway firewall represents rules that are applied to the perimeter firewall for North-South traffic connected to IBM Cloud VPC.
* As a security or gateway appliance on the gateway cluster. In this case, Juniper vSRX works like a gateway appliance, which you can set without having to configure any devices. Juniper vSRX protects all clusters in the same pod and data center. With this deployment, you route all traffic in the same pod and data center to protect a broader portion of the system.

You cannot install Juniper vSRX and FortiGate Virtual Appliance on the same gateway cluster.



Juniper vSRX is built on the Junos® operating system (Junos OS™) and delivers networking and security features similar to ones on the software releases for SRX Series Services Gateways.

Juniper vSRX provides a complete Next-Generation Firewall (NGFW) solution. This solution includes the following.



* Core firewall
* VPN
* NAT
* Advanced Layer 4 through Layer 7 security services such as Application Security
* Intrusion detection and prevention (IPS)
* UTM features that include Enhanced Web Filtering and Anti-Virus



You can install multiple instances of Juniper vSRX on the management cluster. On a single gateway cluster, you can install only one instance of Juniper vSRX.

You can manage this service by using the J-Web interface link that is provided on the service details page on the IBM Cloud for VMware Solutions console.



 Technical specifications for Juniper vSRX 

For more information about resource requirements and capacity checking for some services, see [Resource requirements for services](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservicesvc_addingservices-resource-requirements).

The following components are ordered and included in the Juniper vSRX service:



 Virtual machines 



* vSRX is deployed as a pair of VMs configured for High Availability.
* Each VM is configured with 6 CPUs, 16 GB of memory, and 16 GB of storage. When installed on a cluster with 25 Gb uplink speed, each VM is configured with 10 CPUs, 16 GB of memory, and 16 GB of storage.







 High availability
[Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) 
 Organization vDC Distributed Firewall: View Rules ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) 
 Organization vDC Gateway: Configure BGP Routing ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) !
[Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) 
 Organization vDC Gateway: Convert to Advanced Networking ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) 
 Organization vDC Gateway: Distributed Routing ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/11f96f96f8f4b60cf6f3fa4d904856a2c4528bc2/icons/checkmark-icon.svg) 
 Organization vDC Gateway: View !
[Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) 
 VLAN Protection ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) 
 Multi-VLAN Support ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/d4c3786f8c60e7b8960682eaca5d28a1d2d8a237/icons/checkmark-icon.svg) !
[Basic System Configuration Guide, 17.2.0](https://public.dhe.ibm.com/cloud/bluemix/network/vra/18_basic_system_configuration_5600.pdf) This guide describes the architecture of the products that run on the AT&T Vyatta Network Operating System. It includes basic system concepts and describes how to use the CLI of the router, perform basic system management and monitoring tasks, manage user accounts, access system logs, and hot-plug interfaces. 
 [BFD Configuration Guide, 17.2.0](https://public.dhe.ibm.com/cloud/bluemix/network/vra/18_bfd_configuration_5600.pdf) This guide describes how to run Bidirectional Forwarding Detection (BFD) on AT&T products that run on the AT&T Vyatta Network Operating System. 
 [BGP Configuration Guide, 17.2.0](https://public.dhe.ibm.com/cloud/bluemix/network/vra/18_bgp_configuration_5600.pdf) This guide describes how to configure Border Gateway Protocol (BGP) on AT&T products that run on the AT&T Vyatta Network Operating System. 
 [Bridging Configuration Guide, 17.2.0](https://public.dhe.ibm.com/cloud/bluemix/network/vra/18_bridging_configuration_5600.pdf) This guide describes how to configure layer 2 bridging on AT&T products that run on the AT&T Vyatta Network Operating System. 
 [DMVPN Configuration Guide, 17.2.0](https://public.dhe.ibm.com/cloud/bluemix/network/vra/18_dmvpn_configuration_5600.pdf) This guide describes how to configure Dynamic Multipoint Virtual Private Network (DMVPN) on AT&T products that run on the AT&T Vyatta Network Operating System.
For more information on using Terraform, see [DNS Services resources](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-dns-resources) and [DNS Services data sources](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-dns-data-sources).

For more information on using VPEs in Terraform, see [ibm_is_virtual_endpoint_gateway_ip](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/is_virtual_endpoint_gateway_ip).
](https://cloud.ibm.com/apidocs/vpc/latest)Virtual Private Cloud Service SDK[Virtual Private Cloud (Beta)](https://cloud.ibm.com/apidocs/vpc-beta)Virtual Private Cloud (Beta) Service BetaPlatform[Case Management](https://cloud.ibm.com/apidocs/support-center/case-management)Case Management Platform SDK[Catalog Management](https://cloud.ibm.com/apidocs/resource-catalog/private-catalog)Catalog Management SDK[Context-based restrictions](https://cloud.ibm.com/apidocs/context-based-restrictions)Context-based restrictions Platform SDK[Enterprise Billing Units](https://cloud.ibm.com/apidocs/enterprise-apis/billing-unit)Enterprise Billing Units SDK[Enterprise Management API](https://cloud.ibm.com/apidocs/enterprise-apis/enterprise)Enterprise Management API SDK[Enterprise Usage Reports](https://cloud.ibm.com/apidocs/enterprise-apis/resource-usage-reports)Enterprise Usage Reports SDK[Global Catalog](https://cloud.ibm.com/apidocs/resource-catalog/global-catalog)Global Catalog
[Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) 
 IPSec VPN ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) 
 Juniper vSRX !
[Brocade Vyatta Network OS BGP Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-bgp.pdf) This guide describes how to configure BGP on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS BFD Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-bfd.pdf) This guide describes how to run BFD on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS ALG Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-alg.pdf) This guide describes the ALGs available on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS Release Notes, 5.2R5](https://public.dhe.ibm.com/cloud/bluemix/network/vra/Brocade_Vyatta_Network_OS_Release_Notes_5.2R5.pdf) These release notes are for Brocade Vyatta Network OS Release 5.2R5.
Cross-zone high availability Multizone region 
 Cross-region high availability Deploy in multiple regions 
 Backup and recovery Install your own software 
 Developer tools Continuous Delivery or <br>Install your own software 
 Endpoint protection Install your own software 
 Event queues Event Streams or <br>Install your own software 
 Databases Hyper Protect DBaaS for MongoDB or <br>Hyper Protect DBaaS for PostgreSQL or <br>Install your own software 







 Next steps 



* Learn about some important [VPC concepts](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-concepts).
* Explore more detailed views of the VPC reference architecture based on compute type:



* [Virtual Servers for VPC](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-detailed-vsi)
* [Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-detailed-openshift)
[Brocade Vyatta Network OS IPv6 Support Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-ipv6support.pdf) This guide describes IPv6 support on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS IGMP and MLD Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-igmp-mld.pdf) This guide describes how to configure IGMP and MLD on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS Bridging Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-bridging.pdf) This guide describes how to configure Layer 2 bridging on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide). 
 [Brocade Vyatta Network OS BGP Configuration Guide, 5.2R1](https://public.dhe.ibm.com/cloud/bluemix/network/vra/vyatta-network-os-5.2r1-bgp.pdf) This guide describes how to configure BGP on Brocade products that run on the Brocade Vyatta Network OS (referred to as a virtual router, vRouter, or router in the guide).
[Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) 
 Provider Network: View ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) 
 Provider vDC: View ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) 
 Quota Policy Capabilities: View ![Available](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) !
[Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) 
 Virtual Server for VPC ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/checkmark-icon.svg) 
 Watson Assistant !
[Global IP addresses](https://cloud.ibm.com/docs/subnets?topic=subnets-about-subnets-and-ipsglobal-ip-addresses) Provide flexibility to shift workloads between servers, even across geographically disparate data centers. 
 [Load balancing](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-getting-started) Distributes processing and communications evenly across multiple servers within a data center so that a single device does not carry an entire load. 
 [Virtual Router Appliance](https://cloud.ibm.com/docs/virtual-router-appliance?topic=virtual-router-appliance-getting-started) Selectively routes private and public network traffic through a full-featured enterprise router with firewall, traffic shaping, policy-based routing, VPN, and a host of other features. 
 [IPSec VPN](https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-setup-ipsec-vpnsetup-ipsec-vpn) A suite of protocols designed to authenticate and encrypt all IP traffic between two locations by using a tunnel mode that provides an encrypted site-to-site network. 
 [IBM Cloud Direct Link](https://cloud.ibm.com/docs/direct-link?topic=direct-link-get-started-with-ibm-cloud-direct-linkget-started-with-ibm-cloud-direct-link) Leverages a Cloud Exchange provider to deliver connectivity to IBM Cloud infrastructure locations. 
 [Gateway Appliances](https://cloud.ibm.com/docs/gateway-appliance?topic=gateway-appliance-getting-started) Enhances control over network traffic, accelerates your network’s performance, and improves your network security. 
 [Hardware Firewalls](https://cloud.ibm.com/docs/hardware-firewall-dedicated?topic=hardware-firewall-dedicated-getting-started) Prevent unwanted traffic from hitting your servers, reduce your attack surface, and allow your server resources to be dedicated for their intended use.
Isolated recovery environment network architecture 

In these solution architectures, a sandbox is defined as an isolated network environment where copies of backups can be accessed or used to start virtual machines (VMs). They are isolated from the production environment so that duplicate IP addresses caused by VMs with the same IP addresses do not clash or recovered VMs interact with production VMs.

While Veeam® DataLabs enables the sandbox concept, it is not yet enabled for VMware NSX-T™ environments as it does not enable the mapping of NSX-T segments to isolated segments. Therefore, these solution architectures enable a sandbox with the use of both Veeam and VMware NSX-T technologies:



* Veeam vPower NFS service - Allows starting of VMs directly from the backup files.
* Veeam data integration API - Enables the mounting of the backup files in a file system.
* NSX-T overlay segments - Enables VMs to be connected to virtual networks abstracted from physical networks.
* NSX-T T1 - Provides routing and gateway firewall capabilities.
* NSX-T distributed firewall - Distributed firewall enables firewall capability on east-west traffic on VMs.



The isolated recovery environment also uses vSRX appliances that are hosted on a gateway cluster along with a management VM to provide an air-gaped environment. In normal operation, the only inbound traffic is limited to accessing the VMs in the DMZ zone.

Zoom

![Isolated recovery environment network overview](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/vmwaresolutions/images/veeam-cr-sa-sb-ire.svg)

Figure 1. Isolated recovery environment network overview

The previous diagram shows the networks that are associated with a consolidated cluster of the vCenter Server® instance that is used for an isolated recovery environment. The customer order is:



* A private network only vCenter Server® instance with gateway cluster and Juniper® vSRX firewalls.
* The Veeam service on a bare metal server.
Power Systems Virtual Server 99.999% Network Performance > 90% in 99.9% of the time [Understanding high availability and disaster recovery](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-ha-dr) 







 Networking services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud networking services in a high availability configuration.



Table 3. Service level objectives (SLOs) for the IBM Cloud networking services

 Networking service Availability target High availability guidance 

 IBM Cloud VPC (Gen 2) 99.999% [Understanding high availability and disaster recovery](https://cloud.ibm.com/docs/vpc?topic=vpc-ha-dr-vpc) 
 Virtual Private Network (VPN) for VPC 99.999% [Connecting to your on-premises network](https://cloud.ibm.com/docs/vpc?topic=vpc-vpn-onprem-example) 
 Application Load Balancer for VPC 99.999% [High Availability mode](https://cloud.ibm.com/docs/vpc?topic=vpc-nlb-vs-elbnlb-ha-mode) 
 Network Load Balancer for VPC 99.999% [High Availability mode](https://cloud.ibm.com/docs/vpc?topic=vpc-nlb-vs-elbnlb-ha-mode) 
 Virtual Private Endpoint (VPE) for VPC 99.999% [Endpoints available](https://cloud.ibm.com/docs/vpc?topic=vpc-service-endpoints-for-vpc) 
 IBM Cloud service endpoints 99.999% [Secure access to services using service endpoints](https://cloud.ibm.com/docs/account?topic=account-service-endpoints-overview) 







 Storage services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud storage services in a high availability configuration.



Table 4. Service level objectives (SLOs) for the IBM Cloud storage services

 Storage service Availability target Performance target Performance detail Data durability target High availability guidance
[Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) 
 NSX gateway NAT ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) 
 Software L2 bridging to physical environment ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) !