#waterfall-help
1 messages ยท Page 24 of 1
Using the "server" as a sender just shoves it down a players connection
so that wont work oof
i think i will go back to my good old custom udp packets, but thats for tomorrow ๐ฅฑ 
Hi, using lastest waterfall i often get this error on the console (players can't connect) when the player joins to the lobby. I also tried disabling all plugins in the lobby. https://pastebin.com/ZWVCed4n, Bungee plugins (LiteBans, BuyCraft, PowerFulPerms, SkinRestorer, MultiLobby, RedisBungee)
on the lobby the player gets disconnected with the "Error while read(...): Connection reset by peer"
your server sent an invalid packet
it's a bit weird, i removed all the plugins from the server, some config can be causing it?
or it could be also an error with some bungee plugin
Is there a bungeecord support discord? trying to find help with it
More than likely you're connecting directly to the server and not via the proxy
everyone i talk to just says talk to the bungee dev or enable the ip_forward 
its definitely connecting to the correct port, ive compared them between my panel instance and config more times then my eyes can handle
I mean, your client
client port is correct too
You're connecting directly to a server and not the proxy
Does the proxy log the login attempt?
If you don't think so, it means that you're not connecting to the proxy
so the IP my client is connect to is a direct copy paste from the bungee config
You mean, you copied it from the servers section?
if so, that's wrong; You wanna connect to the listener
Yes
ok here's my current scenario. bungeecord is installed, my query port is 25565, host is same, priorities is set to that instance. i have another server on the same network i want to get a build off of and pasted onto the other instance, its port is 25581. i have a domain pointed at the 25565 port, and not at the 25581. in my mind, i should be simply able to connect using bungee with the ip and the port.
query is irrelevant
but i cant with the 25581, the 25565 works fine and the domain i pointed at it connects fine
open the config for bungee, what's the host in the listener section?
listeners:
- query_port: 25565
motd:
tab_list: GLOBAL_PING
query_enabled: false
forced_hosts:
pvp.md-5.net: pvp
ping_passthrough: false
bind_local_address: true
host: 0.0.0.0:25565
max_players: 500
tab_size: 60
force_default_server: true
proxy_protocol: false
priorities:- Minecraft02
connection_throttle: 4000
groups:
Owner: - admin
log_pings: true
ip_forward: true
- Minecraft02
im assuming its in here
25565
yes IP:port
You can't do that
You connect to the proxy and then use /server to jump over to the other server
what, i was able to before
Also, noting that using bungee won't make the paste copy over magically
You'd need to share the schematics folder between the two
yes i know how to schematic things
i know how to do all that
i dont know server management bullshit
i was able to direct connect before to port
after i had a domain point to it, it cant
Yes, before you enabled bungee mode
If you're not actually intending to use bungee, yea
Bungee is only really for servers wanting to allow players to jump between instances
if you're just spinning a server up to grab a schematic, no need to bother with bungee
thats not why i need it
my friends wants it so he can jump between instances
i just think its garbage and gets in the way
just save the ips and ports into client
Oh, in that case if he wants to be able to jump between instances, you'll need to throw it behind the proxy
What you /can/ do is use forced hosts to connect directly to servers, however
god i hate server lingo
forced hosts is basically just a host > server mapping
So, you can create a subdomain, connect to that and bungee will throw you to the server it's mapped to
okay so, the fact i got the custom domain working is a miracle, ive never done any server management BS and is not my forte, i have no idea how to process what you said, probably cause ive been trying to fix this stuff for last 2 hours and am too burnt out to think straight, but because it seems ill need to use bungee, on the host server 25565, how do i get the /server option working on it
i wasnt the one that set up the original bungee network, so went into this blind on it
rn im just trying to fix stuff that broke from setting up custom domain
nevermind, just deleting its existence
With the PostLoginEvent - making a kick plugin that references a database.
Since the event is non-blocking, and I need the getPlayer() method from ProxiedPlayer to check a permission (luckPerms), is there a way to stop a connecting player from being sent on to the MC server until my database check is completed?
I'm trying to stop the spamming of player Connect/Disconnect messages in the lobby server...
why post login...?
oh didn't realize which channel this was
not familiar with the bungee events
like, on the bukkit side there's an async pre login
There is a PreLogin with waterfall too
figures
The PreLoginEvent has the player name. Which is good for the database lookup.
But does not have the hasPermission("") method on it. Which was easy to use to check a LuckPerm permission.
i mean, don't use need to get the LP user or whatever anyway
Cool cool. I just didn't know if there was a way to block the initial connection somehow. Thanks ๐
Oh, hmm. Let's see....
Hmm, I think without integrating my plugin with LuckPerms I don't think there is a way to check the permissions of a player because I think they only come through with ProxiedPlayer like in the PostLoginEvent, and by that time they are proxied and on their way to whatever downstream server. So I might just have to deal with it. It's a subscriber server so shouldn't be too much spam, just wanted to try. ๐
Hi, is there a good way to add/remove/edit servers from config.yml without completly restarting waterfall?
it can be dangerous i think
thats one of the main bonuses of waterfall/travertine
nah it works fine
i just did it the other day actually
ok i will try it later when some more players go to sleep
"unsupported", but; should work fine
There are some quirks around it, but that's more bungee limitations (god darned bungee...)
So I use BungeeTablistsPLus
I seen the dev on Github respond to an issue similar to mine saying he wont support it cause they were using waterfall not bungee so i thought i'd ask here to see if theres a workaround
Tab list looks like this on direct connect/connect from saved servers https://i.hhservers.co.uk/uploads/5dfb1c87a65405.42072751.png
but tab list looks like this when using /server servername from hub or using portal
Is there anything configurable in Waterfall that would stop this?
did you disable entity metadata rewriting?
apparently so!
disable_entity_metadata_rewrite: true
That would basically be why
Ahhh i see, now to remember why i disabled it ๐
No idea why/how it causes it, one of those things which needs looking into
No worries, thats great thank you so much for the help!
early release of some protocol support stuff?
yeah i have a bunch of them on the hub server actually
idk why tbh, all the servers are on 1.12.2
More a "did you jump to waterfall to gain access to newer version support before bungee did and where told to disable that"
XDDDDDD oof! yeah i think i got it around 1.14 release
I'll just yeet them and set that setting to false and hopefully that fixes things :3
I'm sure you'll hear from me again if not ๐
Thank you so much ๐
I'm back! ๐
Think I realise why I turned it off now
https://gist.github.com/HHServers/4c71d43532d19d920c3c9f296b7b31b2
Running "All The Mods" modpack - players keep getting disconnected every now and then
Any way around that or do i just have to tolerate the tab list ๐
Yea, that would be a good reason for that lol
hey, I'm attempting (and failing currently) to connect from Paper (hub server) 1.12.2 to a forge 1.12.2 modpack server. Now, I believe I've done everything correct however when I attempt to connect to the forge server from the hub server the Waterfall console just spits out the info message [username/ip] <-> serverConnector [servername] has connected
then instantly repeats the same message but with disconnected as the last word.
Bungee is in online mode, the two connected servers are in offline as usual
Any ideas?
No errors are given in game or on any of the two server consoles either
do you have forge support enabled in the bungee config?
Yes
did you try connecting to the forge server directly (e.g. via a forced host) instead of trying to switch?
Nope, how would I do that.
there are settings for forced hosts in bungee's config.yml
but you could also just set the default server to the forge one if it's just for a test
iirc there were issues in the past when trying to connect from "vanilla" -> forge via bungee
Boils down to the mods in play
I wonder if running a plain forge server with no mods for the lobby server would be any use
then again that won't work... for what I want
do you really need a lobby for the modded server?
Some mods really hate the server switch, others can work but require you to disable metadata rewriting, some mods work fine, some mods literally just have no chance
I'm going to have a few servers hooked to it
(if so then you could probably also use a separate lobby for forge and connect normal clients to the normal one with something like this: https://github.com/Phoenix616/VersionConnector )
Might just remove the lobby :L
Is the waterfall support 1.15.1 version?
yes...
Try removing plugins from the server or something
Something apparently mangled the packet
I doubt it, but potentially
Project Travertine build #118: SUCCESS in 1 min 48 sec: https://papermc.io/ci/job/Travertine/118/
Project Waterfall build #309: SUCCESS in 3 min 21 sec: https://papermc.io/ci/job/Waterfall/309/
My problem fix, thanks
Anyone know what I've done wrong here?
'hub' has bungeecord: true, online-mode: false
Priority is set to 'hub', ip_forward: true, force_default_server: true
this makes 0 sense wat
[14:50:36 WARN]: Error pinging remote server
io.netty.channel.AbstractChannel$AnnotatedConnectException: finishConnect(..) failed: Connection refused: localhost/127.0.0.1:25566
Caused by: java.net.ConnectException: finishConnect(..) failed: Connection refused
connection refused to localhost?
tf
are you sure you have a server running on that ip and port?
Yea, so it turns out I was using the servers public IP as the IP:Port to bind bungee didn't like that
I set the IP to 0.0.0.0 on the hub server and it now works
My new issue is, I've given myself 'Admin' in the config.yml, yet I can't perform any commands?
it's usually suggested to use a permissions plugin like LuckPerms
I am also using LuckPerms, I though the config would have overridden LP
Okay, and for just allowing all bungeecord it would be bungeecord.*, right?
probably
does the minus mean that it's negated?
I tried with context of just server:bungee first, but didn't work so I removed it. So I removed that permission. bungeecord.command.list is now a global permission
still not working though
well this really depends on how you setup your plugin, there are ways for the permissions to bnot be shared with the bungee and stuff so you have to make sure that you are actually setting the permissions at the correct place
start by using /lpb on the bungee if you don't already
also one config option makes it so that only bungee specific permissions apply there so if you have that enabled then you need to use the bungee context
well obviously if you haven't setup your permissions yet
do it from the console xD
I mean my perms are working fine on the servers, just bungee that's not working. https://i.imgur.com/9U5ghcH.png
is that the output of /lpb ?
ya, sorry it's clipped at the very top
hm
that's the output of /lpb listgroups
just showing you examples that I've got it working fine on all servers, except the proxy.
sync'd with mariadb
well takea look at the config of the bungee luckperms and see whether or not its turned on to only use bungee specific permissions
and either turn that off if it is turned on or use the bungee context
Okay will do, thank you.
is there a way to make it so i don't get this error? the testing server is the same mc version as me and it's even #1 on the priority list yet it's still not working - also i shouldn't even be getting that message since i've changed it in spigot.yml
what waterfall version are you on
nvm yeah i just had to update it lol
how do u even find your waterfall version cuz you can't do /version with it or anything
it mentions it in startup
you'll do /bungee
ah
or that
ok so that's been solved, but how do i make it so it can transfer me to the 1.15 server if the 1.14 one needs to be at the top of the priority list
cuz rn it just says this
do i need a separate plugin to detect what version i'm on or something
separate plugin, yes
What are the benefits of using waterfall proxy over other proxys?
Same principle as paper is to spigot; We take bungee and give it some TLC; Pros are that it's based on bungee so you get the existing ecosystem with our improvements, con is that it's based on bungee
what does it adds and what are the improvements
Hello, how do I configure waterfall to connect players to another server if the default server is full?
I couldn't find anything on this on the internet.
you can write a plugin for that
I thought that this is one of the features of waterfall, that the proxy fills servers one by one
no
that can be easily done by a plugin though (and has been done countless times, just search for player balancing or something like that)
Well seems like I was wrong then. Thanks.
there should be an option to ignore empty packets iirc
there's any "timings report" like command for waterfall/bungeecord?
nope
:C thank you
No idea if there is a spark release for the proxy, otherwise it's a case of warmroast/using visualvm/yourkit or something
proxy is threaded, so; timings won't really fit there
spark's jar works both on server and a proxy
there's not really a way from preventing people from disconnecting with this error is there? Could not connect to a default or fallback server, please try again later: io.netty.channel.ConnectTimeoutException
It works for most people but there are a few that have this issue and it's only happened once I got a new host - even though it's still kinda close to where the old one was
What's the proper way to make async integration with redis on waterfall?
what I've done so far:
always get this NativeIoException : readAddress(..) failed: Connection reset by peer
a couple seconds after a player joins
Nothing to do with it being called async
"Connection reset by peer" means that the connection was closed by the redis server or something
(You probably also wanna be using a pool vs opening new connections all the time)
Yea
(You'll wanna keep using try-with-resources so that you close it and return it back to the pool)
That's also seperate to the connection reset thing, you'll probably wanna look into that one more
well I found a fix about that with tcp-keepalive on the redis server, I changed it to 60 as the tutorial said and since then the problem was nowhere to be seen.
guys i'd like to use redis bungee but i own a cracked server, i know authmebungee isn't supported with redis so what replacement could i use?
I wonder if this is the RedisBungee Discord ๐ค
Oh, it's not!
@rain pier Pro bono support as the original RedisBungee author: RedisBungee only supports offline mode on a best-effort basis. And I'm not sure if Chunkr is willing to support offline mode completely.
wrong channel?
oh lol sorry
so i have bungee set to false and online mode set to true, im still getting this BS
so enable it
i specifically dont want it fucking with the server, my friends wants it for his instances, all it does it cause problems so im trying to leave it off of mine
? you want to use bungee but disable bungee support? wat?
my friend has a server, we uses bungee to go between instances, i have my own instance, but i dont want it on the bungee network because it fucks with my ip forwarding
so i have it set to false, and online set to true, assuming that would make it not effect my instance at all
instances have different ports
i cannot completely remove it because he uses it
you can't both be on the network and not be on the network
what are you talking about, i shouldnt need bungee to connect to a port 
you don't
but then you can't use bungee to "go between instances"
your server will be entirely separated
so i need an entirely separate IP? that seems to be false, i can direct connect to the main IP and its off the bungee network, but on the same server, its only a specific port
your only way for this to work is to have all servers in offline mode and disable ip forwarding everywhere
which tbh is just stupid
just properly setup ip forwading and forced hosts
so either i have to deal with bungees dumb bullshit or convince him to remove it?
then both of you can just connect through the bungee and land on your own servers
you can't have a properly authenticated server on a network without connecting through the network
^
i have everything properly set up, its literally a single port thats getting this error, i have other instances working completely fine with the same settings, i just copy paste them over, changed the port numbers so they match
what is your issue? just the message?
are you sure you are connecting to the bungee and not to the server directly?
because you can't connect to the server directly if you have bungeecord enabled in your spigot.yml
I explained already I have it disabled and am connecting to it directly.
if you had it disabled then that message wouldn't show
so you clearly have bungeecord set to true on that server
maybe if you werent programmed to just say set it to false could actually help
maybe if you wouldn't call people that try to help you names then they would actually help
you literally said to do something that I reiterated several times I have already done, thats not helping, you for some reason replied without even reading what i said 
no need to use insults though
On my survival server how come my player data got cleared, along with luck perms?
When i setup a waterfall server, then added a forced host
would more suggest that you didn't enable bungee mode on the servers
Hello, I've just setup my first waterfall server. I'm migrating from a regular Spigot installation and since the new server needs to run in offline mode, there seems to be a disconnect between my old profile and the new one. In other words, people will lose their inventory when they log on to the new server
Any advice? I'm pretty new to MC servers so I might have missed something obvious
bungee mode in spigot.yml, enable ip_forward in waterfall itself
withtab_list: GLOBAL_PING in bungeecord config what other options are there other than GLOBAL_PING?
tab_list
Default: GLOBAL_PING
Type: String
Description: The tab list has a choice of 3 options.
GLOBAL_PING: This shows all players connected to the proxy, complete with ping.
GLOBAL: As above, but without updating their ping.
SERVER: This shows the local players on the server you are connected to.
Note - BungeeCord 1.8+ versions currently do not have working GLOBAL or GLOBAL_PING options due to 1.8+ having a new tab list. You may use the plugin GlobalTablist or BungeeTabListPlus to have this feature in 1.8+
https://www.spigotmc.org/wiki/bungeecord-configuration-guide/
@tidal musk
The home of Spigot a high performance, no lag customized CraftBukkit Minecraft server API, and BungeeCord, the cloud server proxy.
ah right thanks EDok
is there a way to block players from connecting to a server on bungee if they do not have sufficient perms
like the could do /server lobby but not /server admin-sexy-time
is that what
i put it into restricted mode but idk how to add the permission
i have this - bungeecord.command.server.adminsexytime
( อกยฐ อส อกยฐ)
shhhhh
motd: and i oop
address: 172.18.0.1:25567
restricted: true```
im using bungee with paper oh god
Paper is irrelevant here
You can configure the perms in config.yml, or, be sane and use a perms plugin
how do i add perms to let a player on a restricted world
You mean, restricted server?
yea
Iirc, bungee.server.servername
i have this bungeecord.command.server.adminsexytime
That's not it
Refer to the docs I guess
ok
If I'm running two waterfall proxies, from paper how would I know which a player connected from
Ez option would be to throw something into their profile on the proxy, akin to what bungeeguard does
assuming that you can't rely on the IPs being unique
Yeah, can a players username or uuid be altered when connecting to the proxy?
If you're using RedisBungee you can use a plugin channel to get the information you need, else you'll have to inject a profile property or something
The proxy goes to look up their details from mojangs server during authentication
UUID is set by the proxy either directly or from the response that mojang gives
I run 6 proxies, I have a plugin that staff can do /info <player> which displays which proxy they are in etc
It's running offline mode
wiz can't do that i think
Prob electro or someone higher ๐คท
how can i connect to forge server with ip forwding enable?
So what does always_handle_packets do?
many packets, handle them!

Off the top of my head, not a setting
Is some field somewhere that control if packet ID limitations should be in place
apparently not
grep sez dat that is not a thing
Yea, no longer exists
what is that repo

is that like travertine for bungee?
it's worse than travertine
So it basically just redirects all packets no matter what to tho backend minecraft server?!
iirc, that's more used at a certain phase or something
Probs some level of "because forge"
Hi guys, sorry for the question, it may sounds dumb...
I just get back to Minecraft after a long long time and wishing to start a 1.14 Paper server
I only find 1.14.4 Paper Server download, can I just it for the version 1.14?
If not, where can I download a version for 1.14?
Thanks!
Use the API, #announcements pin
Sorry ><
I think that question should be in #paper-help
Do you know that every once a while, MC servers (proxy or not) gets crashed by malicious players using crash clients? Will PaperMC ever try to fix those crashing client exploits? If PaperMC fix it, I think they won't be able ever to crash server again, people are forking Waterfall just to implement anti crash methods...
- this is an open source project, people are more than welcome to contribute pre
- my health is horrible, meaning that I don't really have all that much energy to put towards tryna resolve an issue people seem to be willing to provide little help/info around
- these forks are often just bad and introduce their own weaknesses, e.g. opening up easy resource leaks
If you are able to correctly fork Waterfall like I did, you are able to block all crashes.
Hardest part is finding what specific crash method players are using.
motd: **********
tab_list: GLOBAL_PING
query_enabled: true
proxy_protocol: false
forced_hosts:
play.server.com: lobby
ping_passthrough: true
priorities:
- lobby
bind_local_address: true
host: **********
max_players: 150
tab_size: 60
force_default_server: true```
I've set it up so that a player is always directed to the lobby no matter what server they logged off on. However, in the server selection screen it only shows the player count from the lobby server and not globally.
I want it to show all players globally but it's not doing that which is weird because I have GLOBAL_PING
What does ping-passthrough mean anyway
It means "Don't let bungee handle the pinging, send it to the default server"
And thank you very much. This was bugging me
and the default server doesn't know everyone on the proxy
thanks
np
What is waterfall?
bungeecord fork
ok
Hey
I'm hosting 2 servers 1 with waterfall and one with paper
and the paper one is connected to the waterfall one
and when i join the waterfall one it says it's in online mode even though it's not
did you set online-mode=false in your paper's server.properties?
Bungee.yml
Online : false
Server.properti
Onlinemode : false?
bungee.yml should be online mode true
?paste your config files I guess
Please paste all your code/errors/startup logs at http://hasteb.in/
why is everyone bots?
Cuz they are bot ๐คท
why tho
do you have a problem with that
I'm not asking you why you are human...
you're totally a person who's talking through the bot tho
are you implying that a bot can't be a person? :(
config.yml: https://hasteb.in/holuboxi.yaml
TIL 3 Waterfall instances can handle a LOT of usersbots:
you realise you can just return any number there, right? xD
you can just inspect element tbh
I know, but I also know they are getting botted to hell.
wait, Steven, your waterfall and lobby server are listening on the same IP and port? Oo
nope
it says the same adressn under the listeners[0].host and servers.lobby.address though
then i've messed up the config lol
I guess that's why you are seeing that error, your proxy just tries to connect to itself
thanks for the help ๐
i'm very new to the bungeecord type of things
Ehm
Huys
Guys
nvm
Actually
Could not connect to a default or fallback server, please try again later:
io.netty.AbstractChannel$AnnotatedConnectException
Help?
oh nvm
or?
should turn on slow mode so this guy has time to think about his issues before random interjections every 15 seconds
lol
๐ ๐ ๐ ๐ ๐

Is there a link or somewhere I can find out how to set up for waterfall? I already have servers set up I just want to connect them to the same proxy
Are most bungeecord plugins compatible with waterfall since its just a bungee fork?
I'm thinking about things like Luckperms, PremiumVanish, ViaVersion etc
yes
So I should be able to just remove my bungee .jar and replace it with a waterfall .jar, no?
After taking a backup ofc
yes
does paper run on java 9+?
does waterfall run on java 5
and if so can I have help installing java 5 it on windows 10
The radical Kickapoo video from THE PICK OF DESTINY...featuring MEAT LOAF!
(DiscordBot) TENACIOUS D - Kickapoo - length 4m 24s - 287,251 likes, 7,900 dislikes (97.3%) - 55,846,789 views - NewLine on 2006.11.30
lol thumb
Hello, Can anyone help me please?
For some reason Bungee and my Spigot server don't communicate
This is all i get
first: your minecraft servers should not be listening on a public port if they are on the same machine as the proxy
also your indentation in the proxy config.yml is messed up (not sure if that's just pastebin beeing dumb though, something like hastebin is usually recommended)
Aye itโs pastebin messing it up. The raw bit itโs fine. Alrighty Iโll change it to localhost
does waterfall resolve UUIDs for players regardless of what uuid a client might send?
define resolve
No, you need to do that yourself.
Well yes.
Just make sure they donโt bypass the proxy
Actually I'm thinking if it checks if the UUID is valid I guess.
With hacked clients you could just provide any UUID you like giving players access to whatever plugin relies on UUID.
I mean if you bypass the proxy right?
the proxy checks the authentication of the client the same way the vanilla server does
it can't spoof the UUID
what about offline mode?
yes
okay thanks
Are you able to add another server to the bungee config and make it work without a restart?
tag me if you answer
Soooo it still didn't work
https://hastebin.com/bebifuhiso.properties
https://hastebin.com/iqojatobem.yml
https://hastebin.com/qopevewuga.yml
Still get no login server found
@Sโlyโ thre are some plugins that try to do that but I had issues with that in the past, especially when using other plugins that aren#t compatible with dynamically added servers
@Vโidโkoโl can you provide the log too?
*the logs
please provide a log where you actually try to connect to the server...
its there. thats all the logs
23:56:12 [INFO] [/5.70.224.156:34672] <-> InitialHandler has connected
thats when i clicked join
That's not a message i recognise, best guess is "replicate without plugins"
I mean, that's a point
Even if not, that's literally not our software, nor a version we'd care about if it was
(Doesn't really look like it is, but; am going back to the plugin thing)
That plugin screaming about mysql is an interesting one
Yeah its a plugin thing works fine with no plugins. SQL one was sorted after a reboot.
@cold notch Don't have an AntiBot installed.
@keen thicket
--are u using leymooo bungeecord?--
Nah, using waterfall. put on the standard BungeeCord to see it the error was repeating on that and it was. so was a plugin issue.
ahh ic
But is it possible to change this stuff? To something like idk Prougecord?
https://cdn.discordapp.com/attachments/630891904346882048/660953043654803504/unknown.png
config.yml - custom_server_name:
someone had an ip-grabbing exploit
im not the admin so i dont have any info but i just had to share
that tells us literally nothing and solves no issues at all
im aware
its just kinda crazy
also it doesnt tell you nothing.. it tells you that theres an active exploit
no it doesn't even tell us that
it tells us that someone thinks they saw something that they believe to be an exploit
do you know how often people think there's forceops or something? and 99% of the time it's just people not firewalling their proxy
how could they have done that without it being a real exploit
dm me if u dont want to spam the chat
i don't even know what "they" did
when i entered their render distance they immediately posted my ip in chat
Sounds like a server admin didn't firewall properly.
Allowing a "hacker" to sign in as an owner/op, give themselves access to a /ip equivalent on the server and terrorizing people.
i'll tell the admin, should i just ss that?
Ya, he def needs to look at his firewall and ensure "bungeecord: true" is set inside the spigot.yml
And if he's really concerned about a sideload attack, he should look into BungeeGuard to ensure that only his bungees connect to his servers.
thanks! i'll tell them
dont think that has anything to do with what's sent to the client
either way it's a vulnerability. I don't know what more info I can provide
hi
So it must be something new...๐ค ๐ค ๐ค
how would i remove forced hosts?
using empty square brackets breaks the config
please.
@rose badger idk if that person have op or "admin" in bungeeconfig but what i do is
permissions:
default: null
admin: null
and see if it still happen or if u use essential maybe remove perm for /seen
ยฏ_(ใ)_/ยฏ
have not seen that ip exploit my self
{} for an empty map, not []
@cold notch Thanks i'll try it
I just switched from bungee to waterfall. ./server command does not work. How do we switch worlds?
Using luckperm paper essx... Trying set perm: bungeecord.command.server.x true for y in context global all my conf files are imported from working setup but the data is fresh
what doed this module do?
^^
Hi, Does someone know if this is related to Waterfall or it's some retarded plugin messing up
Im unable to access although im not online with any IP
That's a plugin
Hello, I've been playing with waterfall and have it working then both the proxy and the server are on the same network. I have a question, is it possible to have the proxy on AWS and then redirect players to my own server (not on aws). Any information would be appreciated (or links to guides on this). Many thanks
The reason behind this is that I want players to connect on domaina.com and be pushed to domainb.com, so that when players try to DDOS domaina.com they will be hitting AWS and not me
You can't "redirect",you can host the proxy on another network, however
so I should be able to send players from the AWS proxy to my own network,
can this be done through domain names as the server has DDNS?
sorry for the newb qs
yes, just worth noting that they'd still be connected through AWS, so; All you're doing is moving the attack surface, but yea, you can use a domainname in the servers list
okay thanks, the current problem I do have is that when I change the IP in the settings to the domain name and the port it cannot connect, when I put the local IP (instead of the domain name) it does work. these are the settings which doesn't work:
lobby:
motd: '&1Just another Waterfall - Forced Host'
address: server.domain:25566
restricted: false
[13:16:48 INFO]: [Wooozer] disconnected with: Could not connect to a default or fallback server, please try again later: io.netty.channel.ConnectTimeoutException
[13:16:48 INFO]: [/x.x.x.x:51955|Wooozer] -> UpstreamBridge has disconnected
but when the local IP for the mc server is entered it does work, and I can reach the server directly through the domain name and port, but the connection is refused as it doesn't go through the proxy
not really large enough to buy a appliance, wanted to use AWS shield as its quite cheap (free)
TCP SHIELD is free
why cant they just list the price on their website ๐ค
Message him on telegram; @sferg
I restarted my skyblock server and now i cannot connect to it anymore, every time i try to join it i get error messages in my bungee console https://pastebin.com/mMF4XtqW
No errors in the skyblock console:
[16:16:44 INFO]: UUID of player MrCeasar is ...
[16:16:44 INFO]: is leader = false
[16:16:44 INFO]: MrCeasar[/MYIP:50414] logged in with entity id 175 at ([ASkyBlock]-38.39946556413711, 129.0, 0.512040279379914)
[16:16:44 INFO]: [+] MrCeasar
[16:16:44 INFO]: MrCeasar lost connection: Disconnected
[16:16:44 INFO]: [-] MrCeasar
stop the server and delete scoreboard.dat
And where would this be located?
Just a restart worked aswell
Any chance you know what could cause this?
You havea plugin that derp'd with the scoreboards
just thinking.. has paper messed up with async chunks or its still as bad as it is with players falling through the maps etc?
wrong channel. not that that was ever a paper issue, it happened in vanilla too
Hi just a quick question
the last number in blue is the Waterfall build identifier? so Im 299# and 10 builds behind?
My new years lesson. Server names cannot be numerical
why not
Sorry for a universal question. I must not be using Google right...
Is a proxy similar to a router? (Roughly worded)
Such as me running 5 web servers, but all addresses hit the primary, and it then redirects to the correct port INTERNALLY?
Basic goal is to make sure I only need to open port 80 for all web servers, and port 25565 will cover all MC servers referenced via Waterfall.
yes
Hi happy new year to all, but new year same problems.
i'm trying to connect to a paper server via waterfall, but i have the "could not connect to default or fallback server" message. Because these are 2 different machines i've opened the port in the paper side server, but it still says could not connect. Someone can help me?
Only thing we can advise is check that you have the server ip/port set in the config properly, the server is running, you can ping the box from your other machine and double check firewall, etc
the problem i was having, was that i named the new server "15" and bungee did not like that. i made it "fudge" instead and things work. either my name was too short or because it was numerical it caused an issue.
yaml checkers come up saying "good syntax"
but thanks for the tip
on the plus side, i now know what that weird not an apostrophe on my keyboard is for. the ancients invented it just for yaml.
well it is good syntax
more like bungee's configurationadapter does not handle it correctly
it simply expects a string
while yaml reader gives it an integer
more like bungee's configurationadapter does not handle it correctly
i have shitty internet woo, ignore any duplicated messages (:
syntax is good, semantics is not
it is a syntactically correct number, but a string is expected
yah i think its just easier to use words only in future
is there a list of waterfall approved plugins?
no
๐
quick question; is there a way to exclude vanished players from the server playercount with a waterfall setup?
vanished players are hidden from the count with straight paper
but with waterfall, it seems to forget to discount vanished players
@reef fulcrum i can ping the box from my pc and from the other machine, i can enter the server if i try to connect straight to the machine ip.
But if i try to connect via bungeecord i go "could not connect" error.
are your servers offline and the portal online?
if you can ping the box but can't connect to a running service on it, only real thing is check your firewall
well as i said firewall is ok, because if i connect straight to the ip (not via bungee) the server works
checked and flushed too with iptables -F
what exactly is the "can't connect" message?
check the actual logs, might actually have some info
actual logs?
For the proxy, ye
nothing shown in the log
....:(
as long as you love me
While not necessarily a question about Waterfall, what's the difference between a module & plugin?
nothing, really
Is there any config to change the proxy closed message?
How long cal I keep my proxy online for without it needing a restart? Tag me when answered
Forever?
another question
How long can I keep my paperserver online for without it needing a restart?
just curious
forever?
How long can I keep my electronic cat online for without it needing a restart?
He cant kick people when he asleep unless he ate his phone and play on it in his dream
tf
So you would say wiz needs a restart every day then?
Hello i'm having issues connecting to my hub
i have online mode set to false, and bungeecord enabled in the config. I have the forced host, and servers setup in config. It lets me connect to my other two servers though
yea guy just joined so no benefit of the doubt for him
clearly just a spam account
Our Waterfall is currently being attacked, causing error messages similar to this one: https://github.com/PaperMC/Waterfall/issues/234
Any idea if there's a quick solution to this?
had the same thing happen to my network, dont know how to fix it either. found this tho: https://www.spigotmc.org/resources/2ls-exploitfixer-advanced-server-anticrash.62842/
To fix BungeeCord invalid packets exceptions (OutOfBounds, DecoderException, HTTP packets, etc...) use this BungeeCord fork: https://2l-studios.com/projects/flamecord/FlameCord.jar (Forked Travertine)
ยฏ_(ใ)_/ยฏ
@upbeat ember Cheers, thanks
Yo guys, one question - how to diasble mc versions like 1.8, 1.9 on bungeecord waterfall
I mean I only wanted to 1.12.X - 1.14.X
Some config? Plugins?
that's not handled by waterfall
waterfall is a proxy, it only supports whatever version(s) your backend server does
plugins like viaversion handle multiple versions
Alright
So.. I have 1.14.4 version
paper
I do have protocollib
so in what way i could change the minecraft versions?
so what
again, you need a plugin that actually translates between protocols
bungee/waterfall etc are just proxies
versions are blocked by default
So how people can join my server 1.18 while is 1.14.4
if your backend server is 1.14 that's the only version the proxy "supports"
I want to enable only 1.12.x-1.14.x join
you
u cannot join with 1.12 via bungeecord if your server is on 1.14!
^^^^
i literally just fucking went over this
protocolsupport or viabackward
go read up on whatever plugin you're using then
/ping <player> error, waterfall#309
pong
21:39:41 [INFO] [219.239.142.253] sent wrong Handshake packet. Junk??)
21:39:41 [INFO] [219.239.142.253] sent wrong Handshake packet. Junk??)
21:39:41 [INFO] [219.239.142.253] sent wrong Handshake packet. Junk??)
21:39:41 [INFO] [219.239.142.253] sent wrong Handshake packet. Junk??)
21:39:41 [INFO] [219.239.142.253] sent wrong Handshake packet. Junk??)
What can I do?
Well, that's not waterfall
i booted 'em
roasted
They can fuck off if he's tryna have the same convo in two channels
Damnnn cat are you wiz in disguise?
anyone got fix for this ddos https://hastebin.com/raw/rokixiqoqa
Some level of "start firewalling IPs"
Basically, there are things that I need to do to try and shivvy up that logic a bit more to avoid the extremly costly overheads of throwing exceptions
That should help a lot
Several dozen people have also forked travertine with their own stuff here and there, but literally nobody has gone to open a PR or something
prs
forks 
(and the one jar I did look at was... if ipv6 catches on, that'll be fun)
and really is the cost of an exception exploitable? mfw
yea my servers down now from the attack
good lord
the packets are easy to flood, and java stack trace gen ain't super cheap, pretty sure that the logger also might play a part in all of that
3600 ips 
you mean the one PR'd against bungee?
@spiral crater Were you able to get it solved?
if that PR gets pulled, I will actually be surprised
i ended up just using regex to get a list then blocking them in iptables
not a real fix
I'd say that I'll try and look at it this weekend, but, hahahahahaaaa
(obviously you need to modify the failregex for your usecase xD)
I honestly cannot see that getting pulled
Hell no
ill check it out
Way too breaking of a patch
Project Travertine build #119: SUCCESS in 1 min 45 sec: https://papermc.io/ci/job/Travertine/119/
Project Waterfall build #310: SUCCESS in 3 min 35 sec: https://papermc.io/ci/job/Waterfall/310/
seems like an interesting PR
hm?
o i looked at the wrong thing nevermind
I might need to add a system property to revert part of that
why
debuging purposes
Project Travertine build #120: SUCCESS in 1 min 33 sec: https://papermc.io/ci/job/Travertine/120/
Project Waterfall build #311: SUCCESS in 3 min 9 sec: https://papermc.io/ci/job/Waterfall/311/
Iโm already using bungeecord, can I just swap the jars or do I need to redo the config etc
It should just be a drop-in replacement
๐
why is it called waterfall?
I see :)
... which leads nobody nowhere!
it's my preferred pronoun
.rekt
โ You have the REKT to remain silent
Because a waterfall has a source and it sorta lowkey spreads out at the bottom of it into a river (proxy server and then the other servers behind it) idk why thatโs what I think of when I wonder why it was named that. Lol
@spiral crater Did you sort out your issue? If not, PM me. Glad I'm not the only one being DDoS'd -- seems to be going around atm.
Get TCP Shield for your server.
I use it on my server and have thousands of users per day joining without issues and it has no flaws
^^^work great for me too
not thousand player but yea no problem so far
I started Waterfall originally so I am the authority on the name. A bungee cord is used to secure something and absorb shock. There's bungee jumping, where you jump down whilst connected to a bungee cord. Guess what, a waterfall has water falling down from a high distance, just like a bungee jumper falls from a high distance. The difference is that the water will continue flowing downstream whereas the bungee jumper will eventually come to a halt once all the kinetic energy is depleted.
^ pin
How to fix an issue:
I can connect to a localhost lobby, but trying to connect to external server the ping gets very high and it just kicks me
(Connecting normally to that IP works fine)
Anyone?
Check the connection betwee the proxy and the external server?
Making a dirrect connection to external server (not lobby -> external server) works without issues
So that's very strange
Lobby:
motd: '&1Just another Waterfall - Forced Host'
address: localhost:25566
restricted: false
Survival:
motd: '&1Just another Waterfall - Forced Host'
address: 51.83.120.33:25565
restricted: false```
Why it doesn't work when I want to firstly connect the player to Lobby?
What do you mean, "a direct connection"
priorities:
- Survival
force_default_server: true```
If it is "Lobby", and Lobby rederects to Survival, then ping is high and nothing works
What's the logs show about the kick?
Timeout suggests that something somewhere didn't send traffic in a while
ByteArrayDataOutput out = ByteStreams.newDataOutput();
out.writeUTF("Connect");
out.writeUTF(server);
p.sendPluginMessage(Main.getInstance(), "BungeeCord", out.toByteArray());
}``` I'm sending players with this method, if it has some meaning
Even if I try sending players from lobby to server with /send, it still timeouts
shouldn't have any impact unless you're sending them at some weird timing and breaking the proxy somehow
Tried changing priority to Lobby and made greload
Everything works
So that's even more strange
using greload
greload just pulls in the config
Literally does nothing else beyond firing an event for plugins to listen to
nothing wrong with using greload
Okay
But the problem still remains, what could cause this issue and why after greload it's not there?
Do you have plugins on the proxy?
2, SkinsRestorer and Motd changer
Best advice is try without them
greload literally does nothing that would impact connections
Okay
Then a question, how to make that WaterFall would not even check invalid packets
I get 7 layer ddos, 2000 lenght packets to the server
Literally impossible
It needs to read packets to process them, it can't just magically know that a packet is bad without looking at it
I made a change to paper last night that should help mitigate some issues
(But, it's on your end to deal with the bad connections in the first place, we just try to stop them killing the proxy)
Isn't there a way to check for packet lenght and cancel if it's above something?
Yes, but no
I know a method with iptables, but that doesn't work well
How the heck are we to know that that packet is invalid from it's length?
There is connection packets with 2000 lenght?
For certain phases, you can start making stupid assumptions, e.g. a packet in the handshake will never be so large; But, you've still gotta deal with that connection somehow
Tryna apply stupid assumptions across the board just creates a mess
Oh god, just wait till you see chunk packets
I have this problem for a long time, so yea, I know
But can't find an iptables rule that could save me from this
pheonix posted a fail2ban config earlier that would help
ServerConnector [Lobby] - encountered exception: net.md_5.bungee.util.QuietException: Unexpected packet received during server login process! I see one error that I don't know
Your server sent a bad packet
Tried without plugins
Is there any change that this could be an issue with host anti-ddos service?
I mean, greload would have no impact on that, but, maybe ๐คทโโ๏ธ
Whats the best way to check whats causing CPU spikes for waterfall?
putting spark in your plugins
s/spark/warmroast
Correction, <DiscordBot> <11Cโalโlaโhaโn> putting warmroast in your plugins
runs
ur warm roast
spark is objectively better 
Didnt know i could use spark for bungee, thanks :)
Do the servers within "config.yml" have to be on the LAN/Local Host as im unable to point to a server on a different subnet
Ah okay. I have pointed bungee to the server with "externalip:25566" and im unable to connect through the proxy. If i point bungee to "internalip:25566" then it works and if I connect directly to the server on "externalip:25566" I can reach it (but I do get kicked as expected for not going through the proxy)
any ideas on where I could have messed up?
Is that all a single machine?
i plan to put the proxy in aws and then point to another IP
preferably without having a vpn tunnel between them
but atm they are both on the same server for testing
That would be why, the routing of the network probably doesn't allow routing back to the server
I think your right, I appreciate your time @reef fulcrum. Thank you
I'm getting an error when logging into my server through waterfall, the logs don't show any errors happening
https://cdn.discordapp.com/attachments/406632123030568962/662846303469961217/unknown.png
it doesn't happen if I join my server without waterfall
this is on the latest build, going into a 1.15.1 server
my 1.13.2 servers work fine
Something sent a bad packet
Any idea what I could do and why it only happens with waterfall?
Are you using mods? o.O
no, just running a paper server
best guess is try without plugins on the server
make sure that you're using the latest build
hmm, could it be that I need to update waterfall plugins?
The client itself often just ignores such things
yeah I'm definitely on latest build, i'll try running without plugins, but it just seems weird that the problem would only happen through waterfall, but I guess I don't really know much about it haha
ah, alright, that makes sense
just tried without any plugins and the problem persists
Issue with our server we need help with this
Please double-check your config.yml, there is a server that's in your priority list that is missing
Thank you
So I might be a bit of an idiot but I cannot for the life of me figure out how to get waterfall to accept 1.15.1.
I have honestly been at this for like 3 hours now. I'm trying to setup a waterfall server with vanilla+modded servers. The lobby is setup correct and I can connect to it. Now when I go to change servers to the modded server (Of which I can directly connect just fine) it connects then disconnects me. I have bungeecord enabled in sponge, and I have forge support true on waterfall. Any insight?
waterfall 311, paper 33, and spongeforge 2847
I can tell it's not setup right unless you're on a localhost. Your players should not have the 127.0 IP
i really dont even know how to address this
All I was trying to do was reset my map on survival server and update the server to paper#30
after wiping the map and adding the new jar file this happens when typing /server
Your bungee is interpreting MapData packets?
What kind of plugins are you running on your proxy?
none
thats the weird part
completely empty
welp
i deleted my waterfall-311 and reuploaded it
and now everything works
odd
weird question. Is it possible to create a Forge mod will allows ip-forwarding to work on say 1.15. If so is there any information about what ip-forwarding does?
Unfortunately sponge is 1.15 compliant as of yet
I just upgraded to the latest waterfall and paper, when i try to join my server now i get this error
Im not sure what to do about this
Something sent a bad packet
Would that be something wrong with my client or the server?
server
do you use viaversion or protocolsupport or protocollib
I use all 3
Basically, update your plugins and stuff
Your server tried to kick the player in an incorrect phase due to some exception
ok thanks
how can i make a waterfall proxy
i have a google cloud server and my actual server on normal paper
i want to hide ip of normal server
i was told i have to use waterfall and make a vps server
rofl
yes and no
Anyone know how to fix this type of attack? briefly I receive to my Waterfal some connection that overloaded the port 25565 sending it offline... consoles and other servers are not affected.
as far as I understand this attack forces the Bungeecord to perform many catch until it goes offline
fail2ban
@signal prism Use flamecord
.g flamecord
(DiscordBot) https://discordapp.com/invite/flame -- flamecord: "Competitive Overwatch, Esports, and Current Events. | 1098 members."
@elder smelt is free?
Yes
where can i download it?
irc never forgets
also forks are completely fine as long as they follow the license ;)
"fix the attack by hiding it" gg
setup fail2ban or something and blackhole the traffic
Project Waterfall build #312: SUCCESS in 3 min 0 sec: https://papermc.io/ci/job/Waterfall/312/
Project Travertine build #121: SUCCESS in 1 min 20 sec: https://papermc.io/ci/job/Travertine/121/
Hi, I'm hosting a test network environment on my second computer. When I connect, disconnect, then want to rejoin, I get this error here, being kicked 'error authenticating to minecraft.net' or something like that. I don't get this with BungeeCord.
https://hastebin.com/xinosodedu.bash
I've tried searching for this issue online but have found nothing unfortunately :(
disable the async dns feature in waterfall.yml
your OSes DNS settings are irrelevant with the async stuff
ah i was suggested to do it on github
thanks for the help mate :)
confirmed working. cheers.
uh
why does that breakage even happen
what does netty dns thingy do differently then?
i'm confused too. I haven't seen this issue on google.
Having a weird bug where the "Encrypting" stage of joining the server when a waterfall proxy is in front of it can take anywhere from 3-10 seconds. Any ideas?
Proxmox host w/ CentOS 7 LXC container running the proxy @unreal stag
CentOS is great for Minecraft with it's LTS ๐
Well, Proxmox is built on Debian, which also has LTS releases.
Yes indeed it is, but I didn't mean LTS releases, I just meant long term support.
But that's not your issue, just a matter of personal opinion/taste
It's also very light weight in it's default form which is pretty beneficial for both ease of maintenance and setup. ๐
I don't use it for many things, but for Minecraft it's great (imo)
The encrypting stage of login is roughly correlated to when it contacts the Mojang login servers
Edit waterfall.yml and disable async DNS
Okay.
Then restart Waterfall
use_netty_dns_resolver: true to false, yes?
yes
Cloudflare's public DNS resolver is very nice but could have some issues with some network setups due to the IPs it uses (1.0.0.1 and 1.1.1.1)
My brains been so burned out recently, just been working on the odd bits and bats here and there, but got some stuff on the backburner that I'll never remeber
I have been debating on removing that async resolved, tbh
what's the benefit of doing the resolve async
Was it ever benchmarked or anything to show any actual gains? if so, could probs replicate that, no idea if we're even taking advantage of the async stuff, tbh
try and remind myself
tbh setup a bot :>
sEtuP a BoT
.remind -d -w 126975485493248000 1m self hi
.remind -d -w 126975485493248000 1m self hi
I doubt I can do this
.$mgmt chan config #waterfall -c true
what channel is this bridged to
#waterfall
why is cat hacking
is someone sitting on -help
I wanted to enable commands for Korobi
No, just -help is not needed, we don't have a waterfall general channel
I see
god of course they do

