⚡ VeloCity-Security – Ultimate Velocity Proxy Protection ⚡

VeloCity-Security ⚡ is a powerful, modular security plugin for Velocity proxies. It provides comprehensive protection against bot networks, DDoS attacks, connection floods, and network exploits. All modules are lightweight, independent, and fully configurable – activate only the features you actually need. ⚡

⚠️ Tip: Updates are released regularly. Check all configurations carefully and decide which modules are useful for your server.

⚡ Modules & Features ⚡

⚡ DDoS Manager (Layer 4 & Layer 7) ⚡

• Detects suspicious connections during the handshake.
• Blocks IPs that exceed the maximum connections per second.
• Temporary bans are stored in .yml files and prevent even ping requests.
• Automatically cleans up old data to optimize memory usage.

⚡ IP Limiter ⚡

• Limits the number of players per IP (default: 3).
• Protects against multi-accounts, bot swarms, and shared proxy IPs.
• Players exceeding the limit are automatically kicked.

⚡ Rate Limiter ⚡

• Limits login attempts per second per IP.
• Prevents join floods and brute-force attacks.
• Thresholds are configurable (default: 10 connections/sec).

⚡ ProxyPingCheckManager ⚡

• Monitors all incoming ping requests before normal players are affected.
• Detects ping floods, ultra-fast pings (≤ 5ms), and proxy-bot patterns.
• Temporarily blocks IPs showing suspicious behavior.
• Normal players are not kicked directly, only suspicious connections are filtered.

⚡ AntiVPN ⚡

• Detects and blocks VPN connections.
• Prevents bypassing country or IP restrictions.

⚡ Reconnect Protection ⚡

• Players are kicked immediately on first login and must reconnect.
• Stops bots that connect only once and logs player UUIDs.

⚡ NameManager ⚡

• Blocks specific usernames (e.g., mcstorm, botnet).
• Fully configurable via NameManager.yml.

⚡ CountryManager ⚡

• Allows or blocks players based on their country.
• Default blocked countries: Russia, Israel.
• Displays the player’s country code in the kick message.

⚡ FastChat Protection ⚡

• Detects players sending messages too fast or repeating identical messages.
• Protects against bot spamming and automated chat floods.

⚡ Anti-Exploit & Server Protection ⚡

• CPUSpammerManager: detects players artificially spiking CPU usage.
• CPUManager: monitors server resources for suspicious activity.
• UnexpectedPacketManager: blocks unexpected network packets.
• NullPingManager: detects manipulated ping.
• HandShakeManager: monitors handshakes for early bot detection.

⚡ UUIDCheckerManager ⚡

• Asynchronously checks player UUIDs against Mojang’s API.
• Blocks players with fake or invalid UUIDs.
• Fully configurable via UUIDCheckerManager.yml.
• Resource-efficient with caching and a thread pool.

⚙️ Advantages of VeloCity-Security ⚙️

• Modular & independent – enable only the modules you need.
• YAML-based configuration, automatically generated on first startup.
• Performance-optimized using ConcurrentMap and scheduled cleanup tasks.
• Transparent ban management with temporary bans and logging included.
• Clear separation between Layer 4 & Layer 7 protection.
• Lightweight & efficient – minimal impact on server performance.
• Blocks unwanted players, bots, VPNs, and malicious IPs directly at login.

Monitoring & Commands

/velocitysecurity notification [on/off] – Monitor how many connections have been blocked.

/velocitysecurity iptables <IP-Address> <Duration>

/velocitysecurity kick <Player>

Duration formats:

• m → minutes
• h → hours
• d → days

DISCORD: https://discord.gg/s6Z6wNyCMT