Admincraft•5d ago

Domain checking with Velocity

Can I do something like SNI inspection for http with Velocity and or maybe Traefik? I basically just wanna block connecting with the IP and only accept ones with the right domain :ratJAM: I get that Minecraft doesn't use tls or anything like that just something to achieve the same thing

Solution:

I found this https://github.com/itzg/mc-router

GitHub

GitHub - itzg/mc-router: Routes Minecraft client connections to bac...

Routes Minecraft client connections to backend servers based upon the requested server address - itzg/mc-router

Jump to solution

7 Replies

Tamz•5d ago

velocity CTD might do that

EmilyOP•5d ago

checking it out rn couldn't see it just skimming through their features list :( Running a whole different server is also a bit inconvenient cus im using docker.. Obviously I could make my own image but it might be more effort than im willing to put in right now :CatCry: Someone on reddit recommended tcpshield, but I don't really wanna rely on an outside service either

ProGamingDk•5d ago

remove try list and make a forced host ig? or make the server in try list just kick people and tell em to use the correct domain etc

Solution

Emily•5d ago

I found this https://github.com/itzg/mc-router

GitHub

GitHub - itzg/mc-router: Routes Minecraft client connections to bac...

Routes Minecraft client connections to backend servers based upon the requested server address - itzg/mc-router

EmilyOP•5d ago

which I think might actually just be perfect i can just run it as a sidecar :parrotdance: I'll try this out and if it works for what I need I'll mark my own message as the answer :chad:

EmilyOP•5d ago

Yeah this works absolutely perfectly for what I want

EmilyOP•5d ago

services:
  mc:
    image: itzg/minecraft-server
    environment:
      EULA: "TRUE"
    volumes:
      - ./mc-data:/data
    networks:
      - mc-net
  router:
    image: itzg/mc-router
    depends_on:
      - mc
    environment:
      MAPPING: mc.domain.tld=mc:25565
    ports:
      - name: mc
        target: 25565
        published: 25565
        protocol: tcp
    networks:
      - mc-net
networks:
  mc-net: {}

services:
  mc:
    image: itzg/minecraft-server
    environment:
      EULA: "TRUE"
    volumes:
      - ./mc-data:/data
    networks:
      - mc-net
  router:
    image: itzg/mc-router
    depends_on:
      - mc
    environment:
      MAPPING: mc.domain.tld=mc:25565
    ports:
      - name: mc
        target: 25565
        published: 25565
        protocol: tcp
    networks:
      - mc-net
networks:
  mc-net: {}

Gaming

Programming

Domain checking with Velocity

Did you find this page helpful?