AS210667 Tunnels

Terms of Service

Version 2026-10-15.4

These terms apply to your use of the AS210667 Tunnels service (the "Service"), operated by AS210667 ("we", "us"). By requesting or using a tunnel, you agree to them. If you don't agree, don't use the Service.

1. What the Service is

The Service gives licensed radio amateurs one or more public IPv4 addresses, delivered to their equipment over a WireGuard tunnel. Traffic is routed, not translated. Your device uses the public address directly, and inbound traffic on all ports and protocols is passed to it. We don't firewall or block any ports.

DDoS mitigation. All traffic to and from the Service's addresses is routed through Tempest.net's DDoS mitigation network. To protect the network, it may drop, rate-limit or otherwise filter traffic it identifies as an attack, and that can occasionally affect legitimate traffic, especially high-rate UDP.

The Service is experimental and provided free of charge on a best-effort basis, by an amateur for amateurs. Features, addresses, capacity and availability may change, be interrupted or be withdrawn at any time, without notice.

2. Eligibility

  • The Service is for licensed radio amateurs. You must hold a valid amateur radio licence and give us your own callsign when you request a tunnel.
  • We may check your callsign against public licensing databases, and may ask for proof of licence. Any licence document or other proof you submit is used only to verify your eligibility, and is deleted automatically and immediately once verification is complete, whether or not your request is approved. We keep only a record that your licence was verified, and when. We never keep a copy of the document itself.
  • If your licence lapses or is revoked, you must tell us and stop using the Service.

3. Accounts

  • Requests are approved or declined at our discretion. We don't have to give a reason.
  • You must give accurate details when you request a tunnel, and keep your e-mail address up to date.
  • You're responsible for everything that happens under your account and on your tunnels. Keep your password and WireGuard private keys secret.
  • Tunnels are for you and devices you control. You may not resell, sublet or share access to the Service or its addresses with third parties without our written permission.

4. Amateur radio use and 44Net

  • The Service is intended for amateur radio and related experimentation, such as nodes, gateways, reflectors, packet, APRS, SDR and remote station control. It's non-commercial: you may not use it for any business or paid service.
  • We intend to move the Service onto AMPRNet (44Net) address space. When your addresses come from 44Net, your use must also follow the ARDC Terms of Service & Acceptable Use Agreement and any acceptable-use rules set by ARDC, which limit 44Net to amateur radio purposes.
  • When we renumber, your tunnel's address will change. We'll give you notice where we can, and you agree to update your configuration.

5. Acceptable use

You must not use the Service, or let anyone else use it, to:

  • break any law that applies to you or to us, including laws on computer misuse, fraud, privacy, copyright or harassment;
  • send unsolicited bulk e-mail or other spam, or host anything advertised by spam;
  • scan, probe, attack or try to gain unauthorised access to any network or system, or launch or take part in denial-of-service attacks;
  • distribute malware or run botnet or command-and-control infrastructure;
  • run phishing, fraud or impersonation sites;
  • run open proxies, open mail relays, open DNS resolvers or Tor exit nodes, unless we've agreed in writing;
  • distribute illegal content, or content that infringes other people's rights;
  • cause our addresses to be blocklisted, or otherwise harm the reputation of our network;
  • interfere with the Service, other users, or our infrastructure, or use an unreasonable share of capacity.

6. Your responsibilities

  • Your device is fully exposed to the internet. Apart from upstream DDoS mitigation, we don't filter inbound traffic. DDoS mitigation is not a firewall. You're responsible for securing your devices, including running a firewall and keeping software up to date.
  • Traffic from your assigned addresses is attributed to you. If abuse comes from your address, we'll treat it as coming from you, whether or not your device was compromised.
  • You must deal promptly with abuse complaints we pass on to you.

7. Abuse, suspension and termination

  • We may suspend or remove any tunnel or account at any time, without notice, if we believe these terms have been broken, if we receive an abuse complaint, or to protect the Service, our network or others.
  • We may change or reclaim the addresses assigned to you at any time.
  • You can stop using the Service at any time. Contact us and we'll remove your account and tunnels.

8. Data we keep

To run the Service we store:

  • the details you give us (name, e-mail address, callsign, reasons for requests). Proof-of-licence documents are not kept. They're deleted immediately after verification (see section 2);
  • the IP address each request was made from, and which version of these terms you accepted, and when;
  • your tunnel configuration and keys, and basic tunnel status (the public IP and port you connect from, the time of the last handshake, and byte counters);
  • standard web server logs for this site.

We don't inspect or record the content of your traffic. We may look at traffic metadata to investigate abuse or operational problems. Our DDoS mitigation provider, Tempest.net, processes your traffic as it passes through their network, and analyses traffic patterns and packet headers to detect attacks, under their own privacy terms. We use your e-mail address only for messages about the Service. We don't sell your data. We may disclose information where we're legally required to, or where it's needed to deal with abuse of the Service. Account data is deleted when your account is removed. Logs are kept only as long as operationally necessary.

9. No warranty

The Service is provided "as is" and "as available", without warranties of any kind. We don't guarantee that it'll be available, uninterrupted, secure, error-free, or suitable for any purpose, or that any address will stay assigned to you or stay off blocklists.

10. Limitation of liability

As far as the law allows, we aren't liable for any loss or damage arising from your use of, or inability to use, the Service. That includes loss of data, revenue, business or goodwill, and damage caused by traffic reaching your devices. Nothing in these terms limits liability that can't be limited by law.

You agree to indemnify us against claims arising from your breach of these terms or from traffic sent from your assigned addresses.

11. Changes to these terms

We may update these terms at any time. The version in force is always published on this page. If you keep using the Service after a change, you accept the updated terms. For significant changes we'll try to let you know by e-mail.

12. Governing law

These terms are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction.

13. Contact

Questions or abuse reports: m7smi@m7smi.ovh