textfiles/internet/farnet

			FARNet Usage Policy

January 23, 1990 
		
			FOR IMMEDIATE RELEASE			


FOR MORE INFORMATION:
Richard Mandelbaum
(716) 275-2916

San Diego, CA, January 9, 1990 - In a move towards the establishment of a more
coordinated national research and education network environment, the Federation
of American Research Networks (FARNet) has adopted the first in a series of
guidelines, or FARNet Position Papers (FPP). The two documents approved at the
just-concluded San Diego conference address the following: FPP Development and
Approval Process (FPP #1) and Guidelines on Acceptable Use and Connection (FPP
#2). 

	FARNet is an organization currently consisting of twenty-five regional
and state networks, who provide access from local networks to the national
research and education network community (the Internet). The purpose of the
Federation is the advancement of science and education through the aiding of
communication among research and educational organizations. The Federation
endorses the coordination and interconnection of regional and backbone networks
to encourage the formation of a unified network environment, thus providing
enhanced access to scientific and educational resources, both nationally and
internationally. 

	During the past three years, networks serving the needs of research,
education, and science have experienced explosive growth. The growth has
occurred at the campus, local, regional, national, and international levels.
Technical and financial investments by both the public and private sectors have
been considerable. Utilization of these networks has become essential to large
segments of the American research and academic communities, and continues to
grow at a startling rate, over 500% in the last 18 months! Guidelines for the
orderly development and interconnection of these varied facilities are
essential for the integrity of the networks and continued provision of high
quality services to educators, researchers, scholars, and administrators. For
this reason, the FARNet Guidelines on Acceptable Use and Connection were
unanimously approved. 

	In summary, the Guidelines govern inter-regional traffic and recommend
that traffic between the FARnet-Member networks be restricted to research or
academic purposes, or to direct administrative support of such efforts.
(Intra-regional traffic is governed by the guidelines set by each regional.)
The position was adopted because the networks represented by the members of
FARNet are, in many instances, at least partially funded by grants from state
or federal agencies. Activities that are beyond the scope of research or
academia are not considered acceptable. For example, Richard Mandelbaum,
FARNet's Chairperson, summarizes from the Guidelines, "It is not acceptable to
send invoices between two commercial entities on different regional networks
across a national backbone." 

	Future FARNet Position Papers are to include such issues as network
design and engineering, international interaction, commercialization of
services, network management models, value-added services, and methods of more
accurately addressing the information movement needs of researchers, scholars
and educators. (For further information, contact  Richard Mandelbaum (716)
275-2916.) 


-------


FARnet Position Paper #2:



FARNET GUIDELINES ON ACCEPTABLE USE 
AND CONNECTION



1.0 Introduction

During the past three years national regional and local networks have
experienced exponential growth.  The technical and financial commitments
made by the private and public sectors have been varied and
considerable.  Use of these networks is now considered essential by
large segments of the American research and academic communities.  

Mechanisms for management have been ad hoc and inconsistent.  Currently
there are no published guidelines nor an associated method of
adjudication addressing the use of network resources.  Furthermore,
inconsistencies exist among regionals about what is considered
acceptable use of national networks.  Without effective management of
the use of the network, there exists potential for severe economic and
political problems.  Regional networks and the national backbones
receive a considerable amount of federal funding.  This subsidy requires
accountability, a means to demonstrate that the federal funds are being
properly applied.  Given the strategic importance that the networks have
assumed for national research and development, it is vital that the
integrity of the resource be maintained.  


2.0 Intent

The intent of this document is to suggest policies and mechanisms for
determining appropriate use of and connection to networking resources.
The networking environment model is assumed to be a three-tiered
hierarchy consisting of a set of national backbone nets (such as NSFnet
and NSN), campus and corporate networks (such as a campus-wide
university network or a corporate site LAN) and, connecting these
components, mid-level networks that offer sites in states or geographic
regions access to national nets.  It should be noted that mid-level
networks may in turn be made up of several layers of state and regional
networks.  

This document specifically addresses traffic that is exchanged among
mid-level networks that are members of FARnet, whether across a national
backbone or on a publicly subsidized direct regional connection.  It
does not preclude additional requirements that a national backbone might
establish.  This document may also serve as a basis for acceptable use
policies within a mid-level network.  


3.0 Definition of Terms

Appropriate use refers to whether the use of the network is consistent
with the guidelines for each network that the traffic traverses.  This
applies both to standard applications (e.g., electronic mail, file
transfers, and remote login) and nonstandard uses (chat, experimental
protocols, etc) Acceptable connection refers to the specific authority
and terms by which a user accesses the network.  Issues that are
addressed here include restrictions on access (for security purposes),
resale of connectivity, etc.  Acceptable use and acceptable connection,
while related, are separate issues.  It is possible for acceptable
connections to be used for unacceptable use, and for acceptable use to
be performed on an unacceptable connection.  


4.0 Acceptable Use Policy

Given both the volatile nature of the technology employed and the demand
that users make of the network, determining acceptable use is a dynamic
and iterative process.  In evaluating whether a particular use of the
network is appropriate, several factors should be considered:  

   Traffic between mid-levels should be restricted to research or
   academic purposes, or to direct administrative support of such
   efforts.  Organizations whose connection to the internet is sponsored
   by a FRICC agency can use the network in support of the sponsored
   activities.  Traffic whose content is solely commercial is not
   acceptable.  Malicious use is not acceptable.  Use should be
   consistent with guiding ethical statements and accepted community
   standards.  Use of the internet in a manner that precludes or
   significantly hampers the use by others should not be allowed.

Each mid-level network should establish a regional acceptable use policy
that permits, at a minimum, the transit of any traffic that is
acceptable to an attached national backbone.  Mid-level networks may
establish additional requirements as are appropriate to the regional
mission.  

FARnet recommends that each regional accept traffic from other regionals
if the use was determined to be acceptable under these guidelines by the
originating network.  

Decisions made by mid-level networks or backbone providers regarding
specific instances of acceptable and unacceptable use should be widely
circulated to encourage consistency.  FARnet can and will act as a
vehicle for the distribution and maintenance of such information.  Each
mid-level network should designate an individual to participate in the
exchange of this information.  

5.0 Acceptable connection

Mid-level networks should insure that the connections made to them are
consistent with the effective use and protection of a shared resource.
The mid-levels should know what networks are connected and what use is
being made of the network.  Mid-level networks should instruct members
on current guidelines for acceptable use.  Access to the internet should
be protected through the use of prudent security measures.  Unauthorized
connections to the internet should not be permitted.  "Third party"
connections (such as internet access being provided by research parks or
through resale by a mid-level subscriber) should be done only with the
approval of the mid-level networks.  Connections which create routing
patterns that are inconsistent with the effective and shared use of the
network should not be established.  


6.0 Adjudication

Mid-level networks should distribute this statement to member
institutions and request members to inform their communities about these
issues.  

Responsibility for the determination of whether a proposed use of the
network is acceptable begins with the initiating user.  If the user is
uncertain, the associated connecting authority or mid-level should be
contacted.  

Mid-level networks should consult with backbone providers and FARnet as
needed to determine if an intended use of a backbone is consistent with
the policies of the provider.  The results of these deliberations should
be distributed among the mid-level networks to encourage consistent
policy.  FARnet should be active in implementing this process.  

If disagreements arise among mid-level networks concerning their direct
connections, FARnet should attempt to act as a reconciliatory agent.  


7.0 Enforcement

In instances where particular traffic is determined to be an abuse, the
mid-level network that originated the traffic will be held responsible
for both admonishing the perpetrator and preventing further abuse.  It
is assumed that the mid- level network will, in turn, place similar
responsibilities upon its members.  

Mid-level networks should make a good faith effort to enforce the
decisions that emerge from the adjudication process undertaken by
FARnet.