BungeeGuard (or sth. similar) with Waterfall and Fabric
Hi everybody,
i'm doing my first steps with a mc proxy-network and chose waterfall. Since it's said that these networks aren't very secure so i stumbled across BungeeGuard. It works on waterfall and generated the token but since i'm using fabric servers in my network it seems there's no counterpart for these.
Is there another solution for my problem or a successor for BungeeGuard which fits my needs?
Greetings,
Merlin
31 Replies
Thanks for asking your question!
Once you have finished, please close your thread.
Make sure to provide as much helpful information as possible such as logs/what you tried and what your exact issue is
command to close
/close
!close
!solved
Requested by freakadings#0
Use firewall if possible
BungeeGuard should work on waterfall since it's bungee based if can't access the firewall of your server (host operating system or entire network)
hi, yes it works on the waterfall-server, but i cant insert the token on the fabric-servers, since it's not working there.
i'm running everything within a "craftycontroller" docker-container
https://www.curseforge.com/minecraft/mc-mods/fabricproxy-lite
https://www.curseforge.com/minecraft/mc-mods/fabric-forwarding
Found these 2 cool projects that help inserting the token into fabric servers. Let me know if it worked.
when using fabricproxy, there's this config-file. do you think the secret is the "token" which is created on the waterfall-server?
yes
They said that in the documentation of the mod
What proxy are you running?
Waterfall-1.20-536
via fabricproxy-lite it doesn't work,
when using fabricproxy the fabric server wont boot
i think my combination of waterfall & fabric doesn't work with proxyguard :/
If you're running on waterfall proxy set velocity to false
Velocity is yet another proxy that is not fully compatible with bungee plugins and is a whole different platform
Let me know if it worked
the lite version doesn't even has it. I think the lite only works with velocitys "modern forwarding"
Yeah the lite is modern / bungeeguard only. Try if it works otherwise switch to the normal fabric proxy mod that allows you to change the velocity value. That way you can check if it let's you connect or not.
Make sure velocity is set to false since your proxy is waterfall
i did but fabricproxy-lite doesn't have the option.
I'll try the normal fabricproxy again.
ok, so i can join now, but i don't think that the protection works.
for testing i have 3 servers running:
Waterfall (proxy)
test_1
test_2
on test_1 i inserted the token, waterfall created and i can join
on test_2 nothing is configured and i can also join.
ah wait, let me check something
Is bungeeguard installed on waterfall?
Since waterfall doesn't have it built in
yes, elsewise it wouldn't generate the token
Its weird test2 works since bungeeguard should block it
nope i can still join direct to test_2
yes
Can you try with velocity proxy?
It has bungeeguard built in
are you sure? i thought velocity has it's own protection-system
It does (modern and bungeeguard modes) both support secret tokens tokens
The only question is which versions you want to have support for in the backend servers
Modern forwarding only allows 1.17 and higher if im not mistaken.
Bungeeguard for 1.12 and higher and legacy (no secret token) pretty much all versions (recommended 1.8 or higher)
okay so i'm trying to set up a velocity server and i think i configured it correctly but i'm getting this message:
Have you set velocity back to true in your fabric proxy config file?
yes
but i think i cant even connect to the velocity server. It's not trying to forward me to the lobby yet
That's really weird
I'll let you know if I found anything else
I am also trying to figure this out but on a forge server
It's a pain really
Why do you need bungeeguard btw, since you have accesss to the system's / network firewall
?
It's just extra unneeded protection
Still nice if it works tho
For people who can't manage the firewall on their system because of different reasons
i don't think i really "need" it, since the structure in my network should be pretty save on it's own, but i thought it would be nice to have.
It is indeed nice to have, but only for networks/systems that don't support/allow you to manage the firewall rules. Firewalls are much more trustworthy for securing your servers than just tokens that can be bruteforced.
Having both is unneded, unless you're firewall configuration isn't setup correctly
I'll still look into it since it's still important to have bungeeguard for VPS's/minecraft server hosting providers that don't let you manage your firewall.
Will let it know in this post if I found anything that works
this would be great 🙂
ah, do you know a mod for bungee/waterfall that allows to create objects which allow a player to switch to another server?
like portals or signs or sth. like this
yes actually I do have it in my own minecraft server
it's installed on the proxy let me search for the name in the plugins folder
ok nvm
it's for paper/bukkit/spigot backend server which have support for bungee-based server forwarding
the plugin is called simple portals
thanks a lot 🙂