computer protocol that allows a network user to access or provide a network service that the underlying network does not support or provide directly