Acceptable Use Policy for Norid’s registry system

If no limits are set there is liable to be a flood of requests that could result in total congestion of the EPP channel. This could block the registrar's ability to create, update or delete objects.
Limits are therefore required.

The limits set in this document are liable to change as we gain more experience with the registry system.

Basic principles

Limits are applied to:

1. DAS and whois
2. Check, info and poll commands
3. Create command

Each registrar receive a daily automatically generated report containing detailed information about the registrar's objects that can be used to verify that the registrar’s records are consistent with Norid's. The availability of these reports will reduce the need to use whois and info.

The check and info commands require more system resources than DAS and whois. Registrars should therefore preferably use the DAS and whois (within the existing limits), as opposed to check and info. In line with the above, the check and info limits have been set lower than the DAS
and whois limits.

The create command should not be used as a way to circumvent the limits on check by constantly trying to register already existing domains.

Acceptable Use Policy

1. DAS
   1. Limit: 8000 per day per registrar.
      Action: Automatic lockout till midnight if daily limit is exceeded.  
   2. Limit: 240 per minute per registrar (insofar as is consistent with limit 1.1).
      Action: Automatic lockout for a period of 300 seconds if minute limit is exceeded.
2. WHOIS
   1. Limit: 3000 per day per registrar.
      Action: Automatic lockout till midnight if daily limit is exceeded.  
   2. Limit: 60 per minute per registrar (insofar as is consistent with limit 2.1).
      Action: Automatic lockout for a period of 30 seconds if minute limit is exceeded.
3. CHECK
   The following host and domain check limits will apply:
   1. Limit: 500 - 5000 per day per registrar
       
      Action: No automatic sanction. The event is however recorded and necessary manuell sanctions may be enforced. Registrars with many registered objects will have a higher limit that registrars with fewer registered objects.
4. INFO
   The following host, contact and domain info average limits will apply:
   1. Limit: 500 - 5000 per day per registrar
       
      Action: No automatic sanction. The event is however recorded and necessary manuell sanctions may be enforced. Registrars with many registered objects will have a higher limit that registrars with fewer registered objects. 
5. POLL
   The following poll and poll ack average limits will apply:
   1. Limit: 500 - 5000 per day per registrar (if there are messages in the poll queue, the registrar needs to be able to read and delete several polls in a short space of time) 
      
      Action: No automatic sanction. The event is however recorded and necessary manuell sanctions may be enforced. Registrars with many registered objects will have a higher limit that registrars with fewer registered objects.
6. CREATE
   1. Limit: No more than 4 create on any single existing delegation (domain name) within a 24 hours period.  
      Action: None automatically if limit is exceeded. The event is however recorded and prevailing actions may be enforced manually by Norid.  

Rate limitations for the RDAP service are described here.

Definition of not acceptable usage

It is not acceptable to use the registry system, or knowingly or recklessly permit others to use the registry system:

1. So as to interfere with the use of the registry system by other registrars or authorized users
2. In a manner which does, or is designed to, harass or cause a denial-of-service to any other user of the registry system
3. In a manner which causes or is likely to cause an interruption or degradation of, interference with, or disproportionate burden on the operations of the registry system, regardless of whether such interruption, degradation, interference or burden is the result of the registrar’s actions or those of a third party over which the registrar has no control. If, in Norid's reasonable opinion, a registrar is using the registry system in such an unacceptable manner Norid will take such steps as it deems appropriate to stop the unacceptable use including, but not limited to, suspending, restricting or terminating the registrar’s access to or use of some or all of Norid's registry system.