waterfall-help

[marsh solstice]

Here's the most recent log from Start up to Shut Down https://hasteb.in/ruqixure.md

[marble kelp]

wow

you are running an outdated ProtocolLib

also lots of unecessary plugins (VilalgerOptimizer, SAML, ProtocolSupport and ViaVersion?!?)

ClearLag...

[marsh solstice]

ViaVersion is because we allow players to join on old client version...

[hardy marsh]

yes...

[marble kelp]

viaversion does the exact opposite

[hardy marsh]

they need viabackwards

but the point is dont use via AND protocolsupport

[marble kelp]

please learn what the plugins you install actually do

[marsh solstice]

Players joining on old clients isn't the issue at hand.

[marble kelp]

I mean... it very much might be

you have an issue with packets

[marsh solstice]

This isn't my server, I'm just an Admin stepping in trying to fix it.

[marble kelp]

protcol hacking plugins mangly packets

[hardy marsh]

you have two different protocol hack plugins lol

im surprised it doesn't just crash immediately

[eternal cairn]

@frank coral pls fix

[marble kelp]

I mean, ProtocolSupport + ViaVersion might work (one for backwards and one for forwards compatibility)

using ViaVersion is just really pointless in this case

[hardy marsh]

yeah why though

[marble kelp]

but yeah, the error is ProtocolLob

*Lib

always update plugins when you update the server...

[marsh solstice]

Using ViaVersion was what allowed us to have players join in 1.16.3 when the server is still on 1.16.1

Either way, that's not the issue at hand

[hardy marsh]

1.16.1 is not supported anyways

[marble kelp]

oh, you are running an outdated version too

I thought you were running 1.16.3? at least that was your first message...

that's what I get for trusting users smh

[marsh solstice]

The server is still running 1.16.1... the issue is updating to 16.3

It's not a trust issue mate, you just didn't read what I wrote.

[hardy marsh]

well if you need multi version compatibility, as we've said, choose Viaversion + Viabackwards OR ProtocolSupport

[marble kelp]

" <X​1G​ra​nt​> Updating from 1.16.1 to 1.16.3"

[hardy marsh]

you dont need two plugins that do the same thing

also you should read what we write

lol

[marsh solstice]

Correct, meaning its running 1.16.1 and updating to 1.16.3

I am reading what you are writing... lol

[marble kelp]

well your server doesn't look updated to 1.16.3 to me

[marsh solstice]

Because it isn't.... We are updating to 1.16.3

[hardy marsh]

It's not a trust issue mate, you just didn't read what I wrote.

lol

[marsh solstice]

He didn't.

[marble kelp]

well come back once you use a supported version and a sane setup if the error still occurs

[marsh solstice]

I said " Updating to 1.16.1 to 1.16.3" someone he thought we were already running 1.16.3...

Paper is already updated to 1.16.3

[eternal cairn]

Drop the protocol hack plugins, and update to a dev build of ProtocolLib, and come back to #paper-help if you have issues

[marsh solstice]

But players can't login because of the error I posted that started this conversatino.

[marble kelp]

your log is not 1.16.3

why are you claiming that its 1.16.3

[marsh solstice]

Bruh

I'm stepping in after another Admin was working on it.

[hardy marsh]

well if you need multi version compatibility, as we've said, choose Viaversion + Viabackwards OR ProtocolSupport
first step is this

stop using two plugins that do the same thing

[marsh solstice]

Ok

[hardy marsh]

and use 1.16.3

[marsh solstice]

Got it.

Thanks

He reverted to the 1.16.1 build because players couldn't join with the errors I'm trying to resolve now. Ill update ProtocolLib. I appreciate the help.

[hardy marsh]

some plugins using internal classes will need updates from 1.16.1->.2/.3

[marble kelp]

if the error occurs on 1.16.3 then we will need the 1.16.3 logs, lol

[hardy marsh]

but at this point any plugin that isnt garbage will have an update

[marsh solstice]

Yea, ofc Phoenix my bad for grabbing the wrong logs.

He didn't mention he reverted already before he had to dip. Ill check for the logs he generated when he was working on it.

[eternal cairn]

Drop the protocol hack plugins, and update to a dev build of ProtocolLib, and come back to #paper-help not here if you have issues

[marble kelp]

but yeah, if ProtocolLib wasn't updated then it's highly likely that it was that

well Proxi the error occured in the proxy server so this is the right channel 👀

[eternal cairn]

the errors cause is a botched setup on paper however

[gaunt breach]

anyone seen this before ?

im getting cloned every time i take damage

[tidal musk]

Hello, I have a major question to ask about waterfall (bungee). I know that people can sneak behind the back door and hack into other staff accounts and spam bots caused by bungee. I am leaning to ask if anyone here know the best ways to secure bungee to prevent hackers/spam bots?

firewall

bungeeguard

not using bungee and using velocity + modern forwarding

ah I see ty.

[royal hawk]

@gaunt breach output of /bungee please. Also; do you use plugins like TAB or SkinsRestorer? Both are known to cause issues

[fossil pewter]

I've been running into issues with a containerized waterfall instance, for some reason, the host of my game server container is invalid to waterfall/bungeecord, i was wondering if this is plain correct or an issue with my setup?

they are on the same docker subnet

and the proxy depends on the game server so the container is created before waterfall has a chance to check, which means that the host should exist

######### Proxy ##########
  # https://hub.docker.com/derkades/paper 
  mc_proxy:
    container_name: mc_proxy
    networks: 
      - default
    depends_on: 
      - mc_hku
    image: derkades/waterfall
    stdin_open: true
    volumes: ['/srv/minecraft/proxy:/data']
    restart: 'unless-stopped'
    ports: 
    - '25565:25565'
    environment:
      MEM_LIMIT: "256M"
  ##########################

  ########## HKU ###########
  # https://hub.docker.com/derkades/paper 
  mc_hku:   # HKU
    container_name: mc_hku
    networks: 
      - default
    user: 'www-data'
    image: derkades/paper:1.16
    stdin_open: true
    volumes: ['/srv/minecraft/hku:/data']
    restart: 'unless-stopped'
    # ports: 
    # - '25566:25565'```

internal port for the game server is 25565

my surprise was when i did expose the game server port to localhost (address: localhost:25565), it was a valid host but it still couldn't connect me to the server

[fathom sparrow]

internal game port is supposed to be different

isn’t it?

[fossil pewter]

not with docker

i can run infinitely many servers on the same port because the ports are only seen within their own container unless exposed

and the container_name is supposed to be like a hostname/dns record, it's treated like a separate machine, like a vm but a container doesn't have a whole os running, just the software

same thing like if you're running 3 machines, on the machine itself the games can be running on the same ports, because the machines have different internal IP addresses

but the problem is that bungee doesn't see the host

oh i just remembered i had this issue before, and i could fix it by using the IP my server uses on my local network but I would still like to use the container names as hosts

saves exposing the ports

[royal hawk]

You can still do that

Just adjust your resolv or your hosts file

[surreal bison]

getting this by join waterfall ip

[fossil pewter]

docker should add the hosts automatically without manual intervention @royal hawk

like

with other applications i can just use the container names to connect to the services

[reef fulcrum]

disable netty dns in waterfall.yml

[royal hawk]

Ah. Netty DNS resolver could the the issue?

Yea

[fossil pewter]

ohhh

sick

[reef fulcrum]

Beyond that, ree at bungees logic

[fossil pewter]

thank youuu

[royal hawk]

@surreal bison output of /bungee please

Use the console if you absolutely can’t join

[fossil pewter]

testing now

[surreal bison]

@surreal bison output of /bungee please
@royal hawk its come nothing

[reef fulcrum]

on the proxy...

[fossil pewter]

disabling netty resolver did not solve the issue sadly

[surreal bison]

yes on proxy or /bungee on the lobby server?

[reef fulcrum]

It's a proxy command

You run it on the proxy

[surreal bison]

ok yeah that is the proxy server

but no output

[reef fulcrum]

You're on your own then

if you can't even get the bungee command to tell you the info

[surreal bison]

i must install bungee and waterfall?

[reef fulcrum]

bungee and waterfall are the same thing...

[surreal bison]

ok

yeah /bungee not work

[reef fulcrum]

They both use the bungee command coz we're not here to just change commands on people

I mean, that command should 100% work

So, you'll need to work out why it doesn't

[surreal bison]

thats my proxy server with newest waterfall build so thats right or not?

[reef fulcrum]

i mean, that looks right

[surreal bison]

than i dont know why not work in console

[fossil pewter]

for future reference, bungee can see the game server when it's exposed and connect to through network IP

[reef fulcrum]

I know

[fossil pewter]

(10.0 is just my router's way of saying 192.168)

[reef fulcrum]

It's an issue with how bungee parses DNS

[fossil pewter]

i'm sure this has been encountered numerous times before, did md_5 put out a statement or anything about this?

like wontfix or something

[reef fulcrum]

🤷‍♂️

[fossil pewter]

OH

https://github.com/SpigotMC/BungeeCord/issues/2667

??

[reef fulcrum]

yea, that would be it

[fossil pewter]

seems like md_5 doesn't wanna fix it

[reef fulcrum]

Well, _ is technically invalid

[fossil pewter]

yea

[reef fulcrum]

DNS names can contain only alphabetical characters (A-Z), numeric characters (0-9), the minus sign (-), and the period (.)

[surreal bison]

This server is running Waterfall version git:Waterfall-Bootstrap:1.16-R0.4-SNAPSHOT:c1ac7d5:377 by md_5
That is right?

[reef fulcrum]

yes

[surreal bison]

ok hmm

[fossil pewter]

https://github.com/SpigotMC/BungeeCord/issues/2667#issuecomment-509395448

[reef fulcrum]

step 1 of debugging issues

replicate without plugins

[fossil pewter]

ill just name the containers without underscores

[surreal bison]

that is the line what i get when type /bungee

[fossil pewter]

:/

[marble kelp]

why would you use invalid domains in the first place?

[reef fulcrum]

docker is fun

[surreal bison]

than maybe the issue on the proxy is the one server what i have call all time im not whitelistet and on proxy maybe they show me this with the exeption error

[fossil pewter]

yesssssss

[reef fulcrum]

kick packets aren't sent in the login phase, which is where your exception is coming from

Once again, replicate without plugins.

[fossil pewter]

@acoustic adder using underscores is very common in docker

[marble kelp]

sounds like a dumb thing to do

[reef fulcrum]

dumb but the norm

[surreal bison]

i have no plugins when you mean me

[reef fulcrum]

You have no plugins on the proxy and on the server?

[surreal bison]

yes

thats both new created

[fossil pewter]

before recently i was forced to, to make sure there weren't two containers with the same name, i'd prefix the containers with the stack they belonged to

[reef fulcrum]

both new created

[fossil pewter]

but i recently separated all my stacks into separate compose files so

[reef fulcrum]

You did enable bungeecord mode properly?

[surreal bison]

spigot.yml bungee: true

[fossil pewter]

i can just give them epic names

[surreal bison]

and on paper.yml bungee online mode: true

[marble kelp]

if the "norm" is violating the standards then I would think a long time about whether or not I want to really use such programs

[fossil pewter]

i mean there's not really a good alternative

docker is just

docker

[reef fulcrum]

It's not really a docker issue

[surreal bison]

maybe this is wrong?

[marble kelp]

yeah, just don't use underscroes in domains?!?

[fossil pewter]

docker doesn't care about URI standards because the container names aren't domains

[reef fulcrum]

More, people blindly following what others do because 🤷‍♂️

[marble kelp]

I'm sure docker lets you configure that

[reef fulcrum]

Docker doesn't set container names, that's up to the creators

(of the container instances)

[marble kelp]

if it looks like a domain and is treated like a domain then it for sure is a domain

[fossil pewter]

thats what i meant, container names aren't URIs, and valid in most other circumstances

they're host entries

like localhost

[reef fulcrum]

Which is a hostname

and should follow the spec...

[marble kelp]

never seen a host name with underscores 👀

[fossil pewter]

i mean if you dont use docker you wont

[reef fulcrum]

you can use hyphens

[fossil pewter]

that's a good alternative and will be using that in the future

[marble kelp]

maybe I just don't configure my docker in non-standard ways?

[fossil pewter]

fair

[surreal bison]

maybe found no the problem with the package. Lobby servers ip is localhost but everytime i tried change server.properities after restart get again localhost so must writing my hoster to fix it

[twin solstice]

any idea why a server wouldn't be receiving the right UUIDs & IP addresses?

ip-forwarding is on, bungeecord is set to true

[delicate phoenix]

Online mode?

Check mc auth server status, they announced some downtimes lately.

[reef fulcrum]

the UUID/IP is passed from the proxy in the handshake packet

if it's missing that, errr...

Well,if it was missing that it would fail, are you proxying the proxy or something?

[twin solstice]

@reef fulcrum only tcpshield > travertine > backend server in vrack

users don't get the online mode UUID & get the IP address of the proxy server (192.168.1.1)

proxy gets the user's IP just fine oddly enough

https://owo.whats-th.is/8cYgZJ1.png

even luckperms on the proxy, gets it just fine

[reef fulcrum]

Where was that message from?

[twin solstice]

proxy's console

https://owo.whats-th.is/5yabstD.png meanwhile on the hub

[reef fulcrum]

o.O

[twin solstice]

i'm fucking clueless yes

[reef fulcrum]

what plugins are on the server? are you sure something on the proxy isn't meddling with the handshake too?

as, that's odd

[twin solstice]

even tried 0 plugins

[reef fulcrum]

with bungee mode, it shouldn't even let you connect without that

[twin solstice]

nvm got it

[delicate phoenix]

What was the issue?

[meager citrus]

Hi guys, don't you know how could I fix this please?

[proper prawn]

not use a plugin that does that?

[eternal cairn]

velocity doesnt have that issue :')

[marble kelp]

what does velocity do? kick the player?

[proper prawn]

this channel should be renamed to use-velocity-if-any-issues

[delicate phoenix]

Even better:

Buy-some-mcmarket-skidded-tavertine-fork-if-any-issues

[marble kelp]

eww

[green palm]

What was the issue?
Wondering this myself

[proper prawn]

who the hell cares?

[cold mantle]

Velocity is a fork of Travertine? If so, buy me in!

[eternal cairn]

no lol

it's its own proxy

velocity 1.1.0 works for 1.7-1.16.3 tho

1.0 works on 1.8-1.16.3

[cold mantle]

So it's not a fork but supports 1.7?

[eternal cairn]

yes

written by @unreal stag, who could definitely sell you more, as he originally started Waterfall, and writes Velocity

[delicate phoenix]

I wonder when we'll see a velocity fork on mcmarket for 90$, advertised as performance boosted bungee

[cold mantle]

Perfect, time to learn its internals and make my own fork aswell.

I have seen some claim that, Simon.

[twin solstice]

uh

my client had a fork with an ip whitelist built in

[eternal cairn]

i mean ngl it's definitely already sold there

[twin solstice]

morale of the story is

don't fuck with server software forks

[eternal cairn]

but no need forking velocity, he's happy to take in anything that doesn't fit as a plugin

[twin solstice]

i shall now cry myself to sleep

[delicate phoenix]

my client had a fork with an ip whitelist built in
Do you run a hosting or?

[cold mantle]

Michael, I have already fucked up my 1.8.8 fork by changing how Passengers work and lazily copy 1.16's method.

[twin solstice]

Do you run a hosting or? :Gigamonka:

sysadmin for a wide variety of servers

[delicate phoenix]

Oh, makes sense 👍

[cold mantle]

Not bad, Proximyst

[spiral crater]

https://gyazo.com/9e2ab12831c56437d421ea447800b7f2
https://gyazo.com/ef75b7faacce3802e77a531d64884b4e
https://gyazo.com/e9a3bd8eda71e41a102f2e4e32eb55ec

someone please take a look

5gb bungee crashing due to out of memory

im not sure what is wrong

[marble kelp]

can you sort by retained heap on suspect 1?

or is that the third screenshot?

but from the looks of it: something is creating 4GB of server config objects? Oo

[spiral crater]

idk im not sure how to find out

is there a way to see what is creating them

[marble kelp]

looking at the code that is creating and touching these objects at that location would be what I would try first

I guess you could get better results if you have a debugger attached to directly go to the object or something like that? not sure, never tried that one before

[meager citrus]

Wait should I use velocity if I have this issue?

but I don't need 1.7 support, so don't know

but wanna solve this issue

Do you think it's better opinion than normal bungee proxy?

[marble kelp]

1. don't ping people

2. velocity is a completely different proxy software which is not compatible with bungee/waterfall plugins

it claims to have improved speed, stability and security though

if only have really simple proxy plugins and can find velocity alternatives for them then it might be worth a try

[crude pike]

@PhanaticD Maybe some plugin is trashing packetQueue

Check how many instances of PluginMessage do you have

[meager citrus]

So normal plugins don't work there? :/

And don't you have another idea how to solve my problem phoenix? How to kick players after they quit? Maybe isn't plugin for it? Or some option somewhere,

[eternal cairn]

velocity has """normal""" plugins too...

chances are, what you need is available on it already

[meager citrus]

Hm, so I could test it

And if isn't? Do you have any alternatives?

[eternal cairn]

alternatives to what?

[meager citrus]

if plugins won't work on Velocity, if you have alternative to solve mentioned message that's happening to players

BTW it's also maybe due I'm using securednetwork, but author of it doesn't think it's caused by his plugin

[eternal cairn]

only one way to find out..

[unreal stag]

@delicate phoenix the sad part is that some of these forks have already started doing that

[delicate phoenix]

Really?

I just looked it up on mcmarket, and i didn't sew one.

[unreal stag]

Yes, go look in the Velocity Discord, I found some

This is why I’m starting to put them into Tuinity

[cold mantle]

Tux, I just built Velocity and then ran it. Can say I love it but still have to learn how that works given it does not support BungeeCord and have to rewrite my plugin for it, any hints to start somewhere? And I have noticed that by default it does not support 1.7.

[gaunt breach]

Is Travertines Perfromance worse that Waterfalls

[eternal cairn]

there are builds on the page, onium

it links to the jenkins which you can use for 1.1.0 builds (with 1.7 support)

the documentation should be enough to start, https://jd.velocitypowered.com/1.1.0/ iirc for 1.1 jds

[green palm]

Is Travertines Perfromance worse that Waterfalls
yes thought that said Velocity

[delicate phoenix]

Yes, go look in the Velocity Discord, I found some
I see, what the, 90$?

[gaunt breach]

@gaunt breach output of /bungee please. Also; do you use plugins like TAB or SkinsRestorer? Both are known to cause issues
@royal hawk no i don't and my /bungee output is
This server is running Waterfall version git:Waterfall-Bootstrap:1.16-R0.4-SNAPSHOT:f7d11c8:376 by md_5

[cold mantle]

Proximyst, I got the git version (few hours ago) and am using it... Sure, let me download it ffom there then!

[unreal stag]

@cold mantle checkout the dev/1.1.0 branch and build that or download the 1.1.0 builds from Jenkins - those do have 1.7 support

[spiral crater]

@crude pike after taking a look at that, i think it might be premiumvanish

@green palm how is the performance worse? this is the first ive ever heard that

[green palm]

hmm, i have no idea, but i read that as "is travertines performance worse than velocity"

[unreal stag]

@spiral crater performance will probably be more the same, probably a tiny bit better for 1.7 clients. But Velocity 1.1.0 still handily beats Waterfall and Travertine performance-wise.

[spiral crater]

oh i thought waterfall and travertine were being compared

which is what the guy asked xd

[reef fulcrum]

Phanatic, your dumps 100% point to the plugin message relay

bungee is fucking awesome and does this thing where if you send a message to all servers, it will queue up those messages; Now, ofc, plugin devs are 10/10 and go to read/understand the docs, and so they shoot messages around the entire network with this "ALL" target, which just queues them all up on the proxy until it can send them

[pseudo pasture]

Anyone any idea what could cause this https://hasteb.in/apefovum.css it's my first time seeing it

[marble kelp]

people trying to send dumb shit to the server

[pseudo pasture]

any idea how I could fix it

pretty sure my server just crashed because of it

[marble kelp]

drop the traffic from teh offending IIs in your firewall e.g. with something like fail2ban

[pseudo pasture]

i'm using a shared host

[marble kelp]

then the answer is probably: use velocity

(or don't use shared hosting)

or ask your host to defend against such attacks

[pseudo pasture]

alright thanks

[nimble zenith]

I have admin on config file

But any command is not working

why

[reef fulcrum]

what command?

Do you have a permissions plugin installed on there?

[nimble zenith]

server

oh yes

luckperms but i didnt edit it

am I need?

[reef fulcrum]

permission plugins will override what's in the config

You'll need to set the perms up in LP

[nimble zenith]

hmm so I am

if I give full permission to me, will it work?

[reef fulcrum]

yes

[nimble zenith]

okay thanks sir

and I have a question too, am I need another plugin to secure my server? I have IP Whitelist

[reef fulcrum]

Use bungeeguard

IP whitelist plugins are honestly generally flawed in how their implemented

[nimble zenith]

will bungeeguard work with waterfall? and am I need to delete ip whitelist?

[reef fulcrum]

Yes, and I would

[nimble zenith]

okay

why I might need multiple proxy? can you say me a reason? I don't need but I wonder

[reef fulcrum]

load balancing

[nimble zenith]

how can I find more information about this topic? what can I type?

[reef fulcrum]

aka, multiple proxies pointing to the same network of servers

the proxy can only handle a few dozen hundred connections before it stalls out essentially, so, you just spread them across proxies

[nimble zenith]

hm okay

what port proxy should have

and the main spigot server

i made it 25565 for proxy, and 25566 for spigot

[reef fulcrum]

doesn't matter for spigot so long as ports match up, 65 being the default port makes sense to use that one for clients to connect

[nimble zenith]

if i have multiple proxies, then what I must do, which one should be 25565

[leaden igloo]

Having an issue with one of my players not being able to chat on one of my servers, but can chat on all of the other servers part of the network. Permissions appear all fine; to my knowledge, none of the plugins should be interfering with it - tried googling it extensively, but it doesn't come up with anything besides parent/child restricted accounts/disabled chat - but he's able to chat on other servers part of the waterfall network/other different servers.

[delicate phoenix]

Are you using any chat formatting/modifying plugin?

Anything as little as some factions id placheholder for as an example.

[leaden igloo]

I am - venturechat. Even setting him to different ranks (that can chat) do not work. He's not muted, no background punishments that may be preventing chat, no neglected permissions preventing it.

[delicate phoenix]

There's your issue. Turn off venture, and see if they can chat with that in that specific server.

If yes, than please contact venture, and report the issue.

[leaden igloo]

Yep, it's not venturechat - had already tested that. 😀 Only thing I've not done, is remove each plugin and then re-add one by one.

Just not sure why the identical server, exact permission setup, plugins, configuration, does not have the same issue. 🙁

[delicate phoenix]

Are you sure you don't have any other plugin that modiefyes the chat?

Please check config files, I have found weird chat modifying plugins.

[leaden igloo]

https://i.imgur.com/q7yfl79.png

[delicate phoenix]

For as an example, redprotect, an antigrief/protection tool have messed with whitelist and chat without I even knowing

[leaden igloo]

Essentials (with /mute), UltraPunishments (Also with mutes), Skript can manage chat, but no chat events are there - CoreProtect to my knowledge does not handle/manage chat besides logging.

[delicate phoenix]

It must be a plugin issue, copy your files to your local masine, and try removing plugins 1:1.

No other choiches left sadly.

I would suggest to check the perrmisons with luckoperms verbose, but since you are using ultraperms, we can't do that.

[leaden igloo]

I'm using Luckperms - just UltraPunishment for ban/mutes/warns.

[still notch]

@leaden igloo Are the player messages shown in the logs? And are there any errors?

[leaden igloo]

Let me check.

[still notch]

You should prob' use luckperms' verbose feature to see if this isn't a permission issue

[leaden igloo]

What would I be looking for when running that? Turn it on & have them say something?

[still notch]

Yep

And it should show you every permission related to the chat

[leaden igloo]

Will get back to you as soon as I'm able to test with the player.

[still notch]

sure, @ me when it's done ^^

[leaden igloo]

@still notch Tested - he doesn't appear in verbose when trying to chat.

[still notch]

weird

Anything in the console/logs?

[winged bridge]

Does waterfall link the minecraft chat?

[still notch]

@winged bridge I don't think so, but you can use plugins like BungeeChat to link your chats

[winged bridge]

i would like a plugin that DOESN'T have local chat

i want it all linked

[still notch]

@winged bridge You can force global chat in the plugin's config file

[winged bridge]

:O really?

[still notch]

Yep, just checked on github: # Global chat information. GlobalChat { aliases=[ g ] default=false enabled=true ]

[winged bridge]

:O

So you can disable local chat as well?

[still notch]

Yeah, i guess: LocalChat { aliases=[ l ] enabled=true # This causes BungeeChat to still log transparently passed messages logTransparentLocal=false # List of servers we want to pass local chat through to passThruServerList {

Just change enabled=true to false in the LocalChat part, then set default=true in GlobalChat part

[winged bridge]

ok i will try it thanks

Ok thank you

[still notch]

🙂

[winged bridge]

😄

[digital wadi]

can anyone tell me what values they have for waterfall running 16.3 servers

remote_ping_cache: -1
network_compression_threshold: 256
timeout: 30000
remote_ping_timeout: 5000
connection_throttle: 4000

thank you!

[marble kelp]

default?

[digital wadi]

just looking for stable values, idk if those are default or not ill need to compare with whats on the forums, just having network issues where players can connect but as soon as they attempt to run a command they get disconnected immediately with no trace

[zealous siren]

Is it possible to add bungeecord.command.server without giving access to all servers?

[marble kelp]

were you they guy who just asked that in #md_5 on irc.spi.gt?

[zealous siren]

just read your reply

I'll give it a shot lol

neither of them worked :/

[marble kelp]

did you set the restricted option?

[zealous siren]

bungeecord.command.server.<lobby>
bungeecord.server.<lobby>

[marble kelp]

also did you make sure that you didn't have all permissions when testing it?

[zealous siren]

if i set perm bungeecord.command.server it allows my to access all server

[reef fulcrum]

that gives you access to the command

[zealous siren]

i remove that perm, then set the bungeecord.command.server.<lobby>

[reef fulcrum]

you need to set the servers to restricted, and then it will check the perm

[zealous siren]

ok

thats makes sense ty

[tawny nimbus]

https://pastebin.com/0j3Z8pVV My bungee isnt working atm pls help

[green palm]

you put Vault on your proxy

[royal hawk]

Vault is a plugin for bukkit spigot or paper but not bungee

Bungee is not a server software

It’s a proxy

Via and Luckperms as well as that staff plugin there are designed to (also) run on bungeecord

[tawny nimbus]

so just remove vault?

[royal hawk]

Yea but this shouldn’t hinder your bungee working

[tawny nimbus]

ye I did it and it still isnt up, it was running last night idk what changed tbh

[royal hawk]

Aside form that error the log didn’t show any other issues

[tawny nimbus]

https://pastebin.com/0YqYhpa2 Heres a new one?

[reef fulcrum]

define "not working"

[tawny nimbus]

its a hosting issue :/

ty

[slow ermine]

quick question

if i restart bungee server will it disconnect people that are in other server?

[reef fulcrum]

if by "other server" you mean another bungee server, no, why would it?

[slow ermine]

hmmm,well when i restart my bungee,it disconnect poeple that are on survival and my skyblock

nvm

[meager citrus]

Hi guys, I now discovered it happens when someone join server and before he is joined there (he see void mainly due to for ex. bigger view distance), then he is "joined to server" even if he left... and then he can't join, he is stuck there.

Any idea to solve it? Tried Velocity, but still doesn't support my plugins :/

[reef fulcrum]

99.9999% of the time, that's caused by plugins

[cerulean temple]

alright

i cant join

my server

[16:21:30 INFO]: Senghow[/69.420.69.420:51520] logged in with entity id 45 at ([SHub]-1017.4848057869897, 30.0, 428.50078734119126)
[16:21:31 INFO]: Senghow lost connection: Internal Exception: java.io.IOException: Error while write(...): Broken pipe
[16:21:31 INFO]: Senghow left the game.

a

[fast tulip]

b

[cerulean temple]

hi

im here now

yay skul man is here

[proper prawn]

A pipe broke! You need to call a plumber to fix it See if this works without plugins

[cerulean temple]

yeah yeah

it doesnt owrk

[reef fulcrum]

broken pipe means that the connection was closed in an unexpected manner

Go check your logs on the proxy, etc

[fast tulip]

A pipe broke! You need to call a plumber to fix it See if this works without plugins
It doesn’t, they tried on the ViaVersion Discord

[cerulean temple]

[16:23:16 WARN]: [/ipees|Senghow] -> UpstreamBridge - read timed out
[16:23:16 INFO]: [Senghow] disconnected with: ReadTimeoutException : null
[16:23:16 INFO]: [/ipees|Senghow] -> UpstreamBridge has disconnected
[16:23:16 INFO]: [/ipees|Senghow] <-> DownstreamBridge <-> [hub] has disconnected
[16:24:05 INFO]: [/ipees] <-> InitialHandler has pinged

[reef fulcrum]

UpstreamBridge - read timed out

So, the connection timed out

You'd need to work out why

.895

[marble kelp]

https://github.com/PaperMC/Paper/issues/895#issuecomment-372175216

[reef fulcrum]

Not the exact same issue, but, it's similar enough that most of the advice there is going to be applicable

[cerulean temple]

a

[proper prawn]

first thing to do is to check the internet

[cerulean temple]

yes i have wifi

duh

1 gbit connectin

connection*

[proper prawn]

ethernet is better i meant if its good on both sides

[reef fulcrum]

Cool, but that doesn't mean shit if you're having latency issues for some reason, etc, etc

[cerulean temple]

pretty sure my wifi isnt high on drugs

[fast tulip]

What about the server’s wifi (if you use a host)

[cerulean temple]

like i said

1 gbit connectin

hetzner

[reef fulcrum]

Okay, so, heres the deal

I gave you a list of stuff to go check

if you're just gonna be dismissive/argumentive over step 1, you're on your own

[cerulean temple]

ic

[fast tulip]

1gbit != wifi will never act up

[cerulean temple]

sad

i still get

same eror

[fossil plover]

Hey everyone!

Today we were hosting an event and we started to receive lots of PreLoginEvents from lots of different addresses, taking down our bungee

https://images-ext-2.discordapp.net/external/UoWEb5JpLKjOQTRFksrfMcewR3cJaGgISvQ7SJkboxI/%3Fwidth%3D961%26height%3D646/https/media.discordapp.net/attachments/285614235701084161/759471977593044992/unknown.png

https://images-ext-2.discordapp.net/external/Y_tROpqpI-kRRJeuGIu1zV3roymrvC8jHGwrQww62Nk/%3Fwidth%3D914%26height%3D667/https/media.discordapp.net/attachments/285614235701084161/759471025305026580/unknown.png

https://images-ext-1.discordapp.net/external/sWLa9IlBSmY99_g7BAhajq2Eb_xKpGaSypL-tYlHygA/%3Fwidth%3D961%26height%3D445/https/media.discordapp.net/attachments/285614235701084161/759465118387273808/unknown.png

Any idea how to mitigate/fix the issue?

[reef fulcrum]

Shamefully, there is a level of "the proxies sole job is to accept and process those connections", I would work out why those events are taking so long as that will only propagate the issue much more than it needs to be

[fossil plover]

We are sure this is an attack on the bungee, we believe they are using cpu expensive payload that makes the bungee start timing out other connections

We are using one of the latest versions of travertine btw

[reef fulcrum]

I don't see how a CPU expensive payload would apply there

It's literally saying that the plugins listening to events are taking too long

[eternal cairn]

bungee timings wen

[reef fulcrum]

There is also that issue with "a proxies job is to accept connections", there are some things which can be done to try to improve it, but, at the end of the day, it's where the weakest link is; Configure your firewall

never

[eternal cairn]

😠

[reef fulcrum]

Timings doesn't work with threaded environments

[eternal cairn]

make it 😠

[reef fulcrum]

Nor does the entire concept of timings work in general

use a profiler

[fossil plover]

It's literally saying that the plugins listening to events are taking too long
@reef fulcrum Are you saying that one of our plugins is causing the issue?

Again, this is affecting the whole bungee instance

[reef fulcrum]

It's definetly not helping the issue at all if plugins are stalling

[fossil plover]

We don't believe we have any plugin that would stall this event

[reef fulcrum]

This all happens on the event loop for the networking stuff, so those events taking seconds to process will impact the proxy

use a profiler

[fossil plover]

Any suggestions for profilers?

[reef fulcrum]

ideally something like yourkit or visualvm that attaches, but, there is spark if you need a plugin variant

[mint remnant]

The issue is we are not really able to replicate this, since this is an attack that went on for a few moments on the afternoon, and is no longer (and has never before been) an issue

i'll get spark loaded and if i see it happen again try to profile it, but i'm sure this is an exploit being used to take down the proxy rather than a plugin issue

either way, thanks for the help

[reef fulcrum]

The issue is that exploits aren't easy to deal with

All those clients have done is sent a handshake to the server and a login request, which contains the username, as seen in there

There is not much going on there, but, when you deal with multiple dozens of connections at once, especially when you have stuff like the event calls taking too long, that heavily compounds the light work

Recommend looking into limiting how fast connections in general can happen to the server with a firewall, iptables afaik can do it if you've got access to the OS

[mint remnant]

What i wonder is, would it be possible to mitigate this by enforcing limits/thresholds on new logins or server list pings (because i've seen those used for attacks in the past too)? I'd rather have players who are faced with a "Sorry can't process your login right now, try later" than literally timing out everyone online

[reef fulcrum]

The issue for that one is how far we have to allow connections to go in the first place

That's better off being done at a different level to the proxy who's job is already to handle a few dozen things as is

DDoS attacks aim on the weakest link

The weakest link used to be the connections to the servers, now with DDoS mitigation services, that's no longer a weak link, it's cheaper to get bots to do the job, which means that the next weakest link is the target, in this case, it's the software which has to deal with the logic to ensure that players can join in the first place

[mint remnant]

This seems like a very specific layer 7 attack, i do not see how any layer before the bungee is going to be able to differentiate this traffic from legit players

a firewall rule can not be made to ignore "minecraft login packets past this threshold" because they're all just TCP packets, it can't filter what they are

[reef fulcrum]

There is 0 signs that there is mallicious traffic being sent

the only real thing you can do at a higher level is aim to reduce the impact to the lower levels

[mint remnant]

We already have several layers of ddos protection and firewalls, wich are all being bypassed, because this specific attack is not sending "that many" packets

[reef fulcrum]

This is more the number of connections than the size/amount of data being sent per connection

Firewalls/DDoS protection services generally don't do well at mitigating this type of stuff, there was that DDoS protection service, but, afaik they're somewhat also having issues trying to resolve these ones

[mint remnant]

you can see the logs however, we're looking at 5 connections per second at most?

[reef fulcrum]

There was the flood of connections opening before that

[mint remnant]

all from different ips

[reef fulcrum]

chances are that was how many connections it took before the entire network system just started chugging

[mint remnant]

those are legitimate players however

this was after a restart where many people were rejoining the server

[reef fulcrum]

At that rate? That suggests more that you overloaded the system than an attack

The proxy is not really good at dealing with large numbers of connections opening at once due to all the work it has to do to process those connections, e.g. contacting mojangs servers

[mint remnant]

this has never happened before, we've had x3 times the players we had today, this is not an overload

[reef fulcrum]

More just looks like you need to look into load balancing than anything

[mint remnant]

it was way too specific to be an issue of performance, really

[reef fulcrum]

But, if these are "legit players", your entire story of "these are people using an exploit" goes out the window

[mint remnant]

there are many connections of legit players before the attack

there is a very specific point in time where the attack starts and all server becomes unresponsive, a few seconds after, you're timed out

[reef fulcrum]

We can't see the difference between legit and unlegit

[mint remnant]

it is the same time where yellow text starts appearing on console

[reef fulcrum]

I can't even see where the first warning messages connection was opened as it's not in the screenshot

[mint remnant]

i'm aware the software can't tell, what i'm saying is it should probably be limited regardless and just have the least bad of the outcomes, that is, not letting players (who may be legit) in

rather than timing out everyone online

[reef fulcrum]

I have very little interest in adding rate limiting to the proxy given that it would just appear like a "connection refused" rather than a pretty "try again" message

There is an event which I added to waterfall which would make it easy for a plugin to deal with that if they really want to

[mint remnant]

what is such event?

[reef fulcrum]

if you don't mind the connection refused messages, doing it with the firewall instead of in the software would be a much better option

ConnectionInitEvent, which is the waterfall one and will let you do stuff off the event threads if you want to, bungee also added ClientConnectEvent, which they take pride on their naming of that event but is done on the network event loop

[mint remnant]

thanks for the info i'll try to look into options, we've also found https://www.spigotmc.org/resources/pinglimiter-protection-against-layer-7-attacks-bungee-waterfall.72596/updates wich could help, issue is we won't be ever able to find out if it works, we'll only know if it doesn't work which... would be bad to find out

[reef fulcrum]

That's irreelvant for your issue

I mean, those two rando things might potentially help, but, at the same point, I could take advantage of that to take your server down

[mint remnant]

well the idea is that by adding this the bot used to take the server down would need to be more sophisticated

[reef fulcrum]

It won't

Those events will still be fired up to that point

best case is it's a plugin making it 20x worse and that hits in at the right spot that it makes it better

[mint remnant]

:/

[reef fulcrum]

worse case, the bots make the trivial changes to work around that, or, take advantage of that to take your server down in more fun ways

[mint remnant]

the pre login events will simply get cancelled by the plugin, is it just too late to do so?

[reef fulcrum]

https://github.com/Futurixel/PingLimiter/blob/master/src/fr/futurixel/zencraft/proxy/pinglimiter/PingLimiter.java#L110 and they literally flood the scheduler with tasks in the event that that type of stuff happens... nice

You're literally at the point where the prelogin event is taking 5 seconds on the network threads, that means that the connections are being allowed to at least that point; a plugin like that /might/ help in some respects, but, it has its own potential to cause its own set of issues

[slow ermine]

do i just replace the bungeecord.jar to waterfall.jar to change it?After that will i need to redo the setting ?

[proper prawn]

yeah just replace the jar

[tidal musk]

I started to getting "OutOfDirectMemoryError" when try to connect to the proxy after some hours of running. I can fix it temporally by restarting server, but after some hours, it'll happen again, and I didn't found fix for it.

[reef fulcrum]

We can't really help debug that, something is leaking memory somewhere

[tidal musk]

It's randomly happening, that it'll disconnect all players and I can only restart it, don't know what is causing it.

[reef fulcrum]

the actual full error might give some picture of what's trying to allocate that memory, but, as for what's actually taking up that memory, we can't see

[tidal musk]

I don't know if it'll help

[reef fulcrum]

how many players? are you having a flood attack?

[tidal musk]

8 now

are you having a flood attack?
I assume, no

[reef fulcrum]

I have no idea, there is defo something funky as there is no way I can see that stalling on 8 players, but, something is eating native memory

best guess would be replicate without plugins, otherwise, need to get into proper debugging which is "fun"

[tidal musk]

It actually doesn't matter how many players, it is happening constantly after approx. 24h, it can happen, when on the server is like 2 or 15 players, same issue happen again

[reef fulcrum]

The issue is that all I can see is that it's listening to a ping from the client, the number of threads processing those requests is consistent, so, they shouldn't ever expand beyond like 128MB iirc given the default netty thread count of 8, you're eating almost a gig in native memory

You can add -Dio.netty.leakDetectionLevel=advanced to try to help picking up any leaks that might be in waterfall, but, that doesn't cover direct memory as a whole, nor is this something that I see often enough to remember, hence the err over plugins; That might help stuff, but, beyond that, we'd need means to reproduce it; There are debugging steps to take, but, we can't really help with those

https://dzone.com/articles/troubleshooting-problems-with-native-off-heap-memo

[marble kelp]

Project Waterfall build #378: SUCCESS in 3 min 33 sec: https://papermc.io/ci/job/Waterfall/378/

Project Waterfall build #379: SUCCESS in 3 min 8 sec: https://papermc.io/ci/job/Waterfall/379/

[wanton blaze]

I had been getting the "Don't know how to turn {...} into component error" a few weeks ago. I switched from bungee to waterfall and that seemed to fix the issue... until now. Started getting it again.

[reef fulcrum]

It's a bungee chat issue afawk, we have no means of reproducing it so debugging it is basically a no-go

current understanding is that mojang changed how something works and bungee doesn't reflect that properly

[acoustic jewel]

When a player joins, they leave and rejoin. It says that he is already connected, but can still join. Does anyone know of that?

[vagrant stone]

I have bungee enabled in sponge config, I have forge enabled in waterfalls config yet I am getting this error on the Sponge server [Netty Epoll Server IO #1/ERROR] [FML]: NetworkDispatcher exception

It is saying I am timing out

[royal hawk]

Do you have forwarding enabled?

[vagrant stone]

Yes

Should I not?

[royal hawk]

Do you have both

modules.bungeecord and
bungeecord.ip-forwarding

Set to true in the sponge config?

[vagrant stone]

Yes I do

[royal hawk]

Is there an error in the bungeecord console ? If you have error logs please upload them and share the link here

.paste

[marble kelp]

Please paste large logs to a pastebin: https://paste.gg

[vagrant stone]

.... [16:41:20 WARN] [ViaBackwards]: Ignoring outgoing plugin message with channel: legacy:fml|hs
.... [16:41:20 WARN] [ViaBackwards]: Ignoring outgoing plugin message with channel: legacy:fml|hs

This is all I get in the console

and

.... [16:41:18 INFO]: [Korgen0|/REDACTED] <-> ServerConnector [REDACTED] has connected

[royal hawk]

Uh so idk how to say this

But Via doesn’t work with mods

It runs on sponge yes

But it will defer mods

[vagrant stone]

No its running on the proxy

And I am connecting on 1.12.2

The correct version

For the sponge server

[royal hawk]

Yes.

Since this is legacy it will discard the forge data

Remove Via from the proxy and try again

If it then works please install Via on the servers that are not forge based instead

[vagrant stone]

Alright I'll try that later

When less people are online my server

Thnaks

Thanks*

[spiral crater]

@mint remnant this may help you

    iptables -I INPUT -p tcp --dport 25565 -m state --state NEW -m recent --set
    iptables -I INPUT -p tcp --dport 25565 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j REJECT

    iptables -N MCLIMIT
    iptables -A INPUT -p tcp --dport 25565 -m state --state NEW -j MCLIMIT
    iptables -A MCLIMIT -m limit --limit 10/s --limit-burst 20 -j ACCEPT
    iptables -A MCLIMIT -j LOG --log-prefix "MCLIMIT: "
    iptables -A MCLIMIT -j REJECT

first two rules make a IP only able to make 5 new connections per 10 seconds

second set makes only 10 new connections allowed per second from any IP, burstable to 20

[tidal musk]

Hello I have two questions to ask.

1. When i setup bungee and have the config direct set to /hub (It said unknown command, I believe I must be doing something wrong?) I have to set to that on priorities. I am looking for a way so players can type /hub to spawn back to the hub.
   priorities:

• hub

2. When a player is on a different server then try logging off then logging back on takes them back to the hub and I am looking for a way to prevent them so that when they log back on they will be on the same server instead of the hub. force_default_server is set to false as default so shouldn't that not force them to the hub when they log back in?
   forced_hosts:
   exampledomain.com: hub

[proper prawn]

I am looking for a way so players can type /hub to spawn back to the hub.
use a plugin for that

[tidal musk]

ah I see hmm, and as for other question feel free to (@) to notify me! Thanks.

[reef fulcrum]

force hosts override that setting, given the whole "forced" nature

[tidal musk]

what do you mean Cat?

Do I need to set it to true?

[proper prawn]

w h a t

if you connect using a forced host, you connect to a server defined in the forced_hosts section

if force_default_server is off, then it should connect you to the last joined server

[tidal musk]

Yep that what I was saying. force_default_server was that to false as default so shouldn't they be connected to the last joined server?

[proper prawn]

if you connect using a forced host, you connect to a server defined in the forced_hosts section
regardless of force_default_server

you connect thru pvp.myserver.com, in the config it's a forced host should connect you to pvp, and it will connect you to pvp no matter what

you connect thru myserver.com, and if it's not a forced host, and force_default_server is off, then it will connect you to the last joined server

[tidal musk]

Yep but it doesn't.

My is set to false.

My guess is something interfering it or a bug?

[proper prawn]

check for proxy plugins first

[tidal musk]

None of my plugin should be interfering with it.

[proper prawn]

you never know

[reef fulcrum]

is "exampledomain.com" actually your server name? Well, what you've got configured there?

[tidal musk]

Nope that not my domain. It just an example lol

Hello Cat, May I send you the link of pastebin through DM?

[reef fulcrum]

What I mean is, is your domain in there pointing to the hub?

Coz, if so, once again, that will override that setting

(i mean, it's not even overriding that setting, it'd doing what you told it to)

[tidal musk]

Yeah it is.

oh do I need to remove it from pointing it?

[reef fulcrum]

yes

[tidal musk]

ah kk ty.

As this question when l1ttle mention i need a plugin for /hub to spawn back to a hub? https://discordapp.com/channels/289587909051416579/555462214606389275/760012473435684924 Is there any good recommendation plugin does it?

oh nvm I found one I believe.

[humble thistle]

How can i protect my network? How can i install firewall?¿

Or something more secure

[green palm]

search for guides on iptables or ufw

[delicate phoenix]

The most secure way is removing the internet acess of your box

[heady wave]

please update upstream of travertine

[marble kelp]

Project Travertine build #162: SUCCESS in 2 min 4 sec: https://papermc.io/ci/job/Travertine/162/

[sour gyro]

hello

i have a problem with waterfall

https://pastebin.com/MK1pwveK

i cant get in the server , its even down

[reef fulcrum]

.318

https://github.com/PaperMC/Waterfall/issues/318

[sour gyro]

im using the latest tho

[proper prawn]

see the issue cat sent

[sour gyro]

mhhm scoreboards

aint even using a scoreboard

anyone knows some famous plugins that uses scoreboard

also it happens rarely like once a day but the time it happens is different

[tidal musk]

Hello, I was wondering if WaterFall bungee have a setting that will put people back to spawn point from (/spawn) when they log out of the hub and rejoin the hub?

[bold swan]

The proxy itself doesn't have a setting for that but EssentialsSpawn does if you have that on the hub

[tidal musk]

ah I see. ty.

[tidal musk]

hi

https://hatebin.com/urnqpwqgmu

[delicate phoenix]

Hello!

[marble kelp]

m​ih​ai​: you either have the same team on two servers or have a plugin adding duplicate teams

[meager citrus]

Guys, don't you know someone how to solve issue with "Already connected to this proxy?" Something that can kick players when they leave, to prevent it? Can't use Velocity, there aren't all my plugins supported yet

[reef fulcrum]

Find out what plugins causing it

[meager citrus]

Hopefully it will be due to plugins

[reef fulcrum]

in my many years of dealing with people expecting magical fixes for that issue, 90% of the time it's been attributed to plugins, 10% of the time I never heard from them again

This is literally a "nobody can debug this for you", we don't know what you're running on there and what it all does

[formal shore]

did geyser mc and paper mc partner up?

[green palm]

no

[native panther]

Why would ip-forwarding be disabled by default? Just curious because you'd want the real IP & UUID to be forward to the backend servers, right? This is just one of those shower thoughts 😂

[grave wedge]

Because backend server might not support that and bail out on garbage in hostname field

[reef fulcrum]

backend servers do do that unless configured for forwarding, part of it might just be the aspects of getting a lazy testing setup, as well as maintaining compat with the protocol by default

You have to configure all that anyways, so I hardly consider it much of a "out of the way" thing to configure

[high dagger]

hey

i am having a weird issue with waterfall

i dont know if its my server instability or not but im unable to return to the lobby if i am on the vanilla 1.16.3 server

this is what it spits on the waterfall screen

this is what i get in game

all the other servers work extremely fine

[tidal musk]

some plugin broke your proxy

[high dagger]

uh

the whole 1.16.3 is broke

[eternal cairn]

no thats a plugin

[high dagger]

🤧

[royal hawk]

@high dagger a plugin youre using wasn’t updated to deal with 1.16 yet

[heady wave]

anyone know how i can prevent this? I have travertine latest build.

[unreal stag]

stop using query

or use firewall rules

[heady wave]

i've disabled it in the config

[unreal stag]

restart your proxy then

[lilac light]

./server not working?

for only 1 player

saying him that he doesnt hav eperm

[eternal cairn]

youve gotta restart it for it to take effect

.paste the config

[marble kelp]

Please paste large logs to a pastebin: https://paste.gg

[eternal cairn]

probably just isnt reading the right config then i'd say

[unreal stag]

“playerbalancer” is being dumb

[night wigeon]

Hello, i am having some trouble trying to find why doesn't my networks functions, and i'd like to know if, even if the proxy doesn't manage to send the player to a server, does something happens in the logs when a player tries to connect? Just so that i know if it's a network problem

[half briar]

Hey there, I was wondering if there is any docs or diagrams about how waterfall works

[reef fulcrum]

not really, at it's simpliest it's a dumb proxy with some "smart" hacks to coax it to work

inspecting source is the best bet, as it's really all down to the tricks to coax it to work

velocity would also be a better source review as they do stuff in a less convoluted way

e.g. no entity metadata bs

[quaint bolt]

Enabled Waterfall version git:Waterfall-Bootstrap:1.16-R0.4-SNAPSHOT:691ffb1:379 why is the sha hash wrong? Apparently 379 IS the latest build, but I needed the website to know that. master is on 27e2885

[tidal musk]

it's the hash of patched git repository

...'s HEAD

[quaint bolt]

oh, that makes sense, ty

[frosty finch]

running latest waterfall
someone attacked my server today and now it reports back, that mojangs auth servers arent aviable and no one can login
restarting the waterfall proxy didnt solved the problem, i had to restart all servers
https://pastebin.com/J7biGAz6

[unreal stag]

@frosty finch looks like someone flooded your server to prevent people from authenticating, you will probably have to change IPs and consider using a rate limit on logins.

[frosty finch]

is there a plugin for limiting those rates?

[unreal stag]

do some searching

I am not your personal Google

[frosty finch]

i did, havent found anything yet, but thanks for the hint, i appreciate that

[delicate phoenix]

Hello!

I've seen an old video, where mineplex had an animated motd icon, as well as animated lines. I found a plugin for this purpose, but it's abandoned.

My question is, that why doesn't animated motd exists nowdays? Mojang blocked it? Is it to hard to make work? It was an exploit?

[reef fulcrum]

Because mojang fixed it

[delicate phoenix]

Fixed it? I tought it was a feature, not a bug.

[reef fulcrum]

It was a bug

[delicate phoenix]

It would be amazing to see animated motd icons again

Oh

[reef fulcrum]

You're not supposed to be able to keep sending that data to the client

it's supposed to be a one shot and close

[delicate phoenix]

Oh, makes sense.

Thanks!

[tender axle]

What's the server that Waterfall uses for force_default_server?

[reef fulcrum]

it uses the priorities list vs joining the last server they where on

[tender axle]

thanks!

[cold haven]

am i using .flags for waterfall as well ?

.flags

[marble kelp]

Optimized & Recommended JVM Startup Flags: https://mcflags.emc.gs

[cold haven]

is there a tutorial for all the options on waterfall >?

[reef fulcrum]

on the paper docs, yea

[tender axle]

@cold haven waterfall flags are pinned

Fucking weird shits going on. If a player uses /server build from anarchy, it says you are already connected to this server. if said player uses the command in superflat, it takes em to anarchy. ive restarted waterfall, and checked my config.

how do i troubleshoot this?

oh and i can somehow go between worlds just fine somehow

but 2 other ops cant

[reef fulcrum]

did you /greload or something?

/server literally just grabs the server from the config and sends you there, so 🤷‍♂️

[tender axle]

nope

im restarting

every time im restarting

i have never in my life used greload

heres my config

https://hastebin.com/adinonebid.php

all servers are on the same machine

[reef fulcrum]

When you /server, it just connects you to that server, outside of some plugin or it somehow managing to hit the priorities system because of some oddball failure, 🤷‍♂️

best guess would be check the logs, and if you have plugins, try without them

[tender axle]

imma turn off all plugins and try

ok it is a plugin

imma try enabling geyser first

[cold haven]

do i have to setup iptables for waterfall ?

[proper prawn]

yes

[tender axle]

yes

[proper prawn]

why do u think you dont need to

[tender axle]

i... i disabled all plugins, enabled em one by one to the point where im back to all plugins enabled and its working

what the fuck

what

edit: viaversion wasnt installed on the build server and my both builders were on 1.16.1

what the fuck was the cause of my issue? like what

maybe the trick was to do 15 restarts

[cold haven]

how can i make waterfall redirect you to the default server if one other servers closes ?

do i need a plugin ?

[reef fulcrum]

yes, one was literally just shoved in #755916528901161031, there's also stuff like MoveMeNow

[cold haven]

i just want something that disconnects you

[cold haven]

can i use the ufw firewall instead of ip tables ?

[proper prawn]

you just need a properly configured firewall

[cold haven]

that basically has the ports opened

?

[reef fulcrum]

You need to ensure that your backend servers aren't accessible

be that binding them all to localhost or some interface (in the case of docker), or, firewall (or, some plugin if you really must...)

[tender axle]

bungeeguard + iptables was what you recommended last time to me

but ufw should work as well right?

[reef fulcrum]

ufw is literally an iptables wrapper

[tender axle]

cool. thanks!

[meager citrus]

I tried to remove my plugins and it's still happening https://discordapp.com/channels/289587909051416579/555462214606389275/760536054272491540

[tender axle]

@meager citrus all of em?

also, please share your config.yml

And make sure if youre using something like via version its installed on all servers

And if youre not, make sure all servers are the same version of minecraft

[meager citrus]

I have it on all servers except bungee

https://pastebin.com/4A0CqY1M

[unreal stag]

online_mode: false

of course that's why you're getting it

[amber pine]

Hey, i set up a waterfall server. The lobby is running 1.16 with viaversion and viabackwards. It works fine, now i want that people with mods can join my forge server (1.15.2) over the lobby server. They can join with 1.15.2 on the lobby, but then cant join the forge server. The error in the console is this:

[14:36:39 ERROR]: [StaticRed] <-> ServerConnector [modded-1] - encountered exception: net.md_5.bungee.util.QuietException: Unexpected packet received during server login process!
1bc7017b227472616e736c617465223a

I set forge-support to true in the config.yml

[unreal stag]

@amber pine Forge past 1.12.2 is not supported by any proxy. There’s some experimental work I’ve heard of but it is only for Velocity.

[marble kelp]

best is to just connect people directly to the forge server instead of going through the lobby

[delicate phoenix]

Hello!

I just made a fresh tavertine server, and getting this issue:

[/172.18.0.1:54888] <-> InitialHandler - encountered exception: net.md_5.bungee.util.QuietException: Unexpected packet received during login process! 0100000397030000

[green palm]

have you tried velocity?

[delicate phoenix]

No plugins on tavertine, no plugins on the backend

Nope, I would like to use waterfall

[marble kelp]

do you have any plugins or mods installed?

[delicate phoenix]

No

[marble kelp]

so just a plain paper server and a plain travertine sproxy?

[delicate phoenix]

Yes.

[dull dock]

Why would you not use velocity if you have no need for plugins

Velocity is just as simple and better, it just doesn't have plugin support yet

[tidal musk]

you worded it quite badly, lol

[green palm]

it has plugin support

but yes, i understand what you're getting at

[tidal musk]

more like it does not have very large plugin ecosystem yet

[dull dock]

Yeah Im a little tired

Velocity is perfect for your usecase. While not many developers focus on it yet, it doesn't really matter for you since you are pure vanilla

Better?

[tidal musk]

no

[dull dock]

Then you write it

[tidal musk]

i did

_>

[acoustic jewel]

I don't know if that will help you, but Waterfall can still crash or overflood or whatever. https://pastebin.com/tZxww53N

It was kind of a dose, but only on the bungee. After I tried the so-called "Aegis" all problems were solved. But I hope that there are other solutions because I don't want to use this fork.

[tender axle]

@meager citrus when do you face the "Youre already connected to this server" error?

[reef fulcrum]

Nini, see the pins and configure a proper firewall

Those forks generally don't fix shit other than on the surface and create their own types of issues

Also,

connection timed out: sessionserver.mojang.com/143.204.212.175:443
That's nothing to do with waterfall at all, that's basically network level issues, overloaded?

[acoustic jewel]

yeah maybe overloaded by some exploid or something i try the pins configure now lets see. thanks for helping

[austere dagger]

Anyone know how to get command names to auto complete? I set up tab completion for command arguments just fine, but can't seem to figure out how to get the actual /command to autocomplete

[reef fulcrum]

unless you disabled tab completion on the server, it works fine

[austere dagger]

I've tried both true and false for disable_modern_tab_limiter and doesn't make a difference. Not seeing any other settings related to tab completion in waterfall.yml or config.yml

[reef fulcrum]

you want that on true, otherwise it breaks tab completion on modern clients

/command to autocomplete relies on the server sending those commands

the proxy hijacks the command definition packet to add its commands

[austere dagger]

Even the default commands /server, /glist, etc don't auto complete

[reef fulcrum]

can you run them?

[austere dagger]

Yep

I just cant do /ser (tab) and have it fill to /server

[reef fulcrum]

can you complete /version? do you have plugins on the proxy?

[austere dagger]

Yeah all paper/spigot commands auto complete

One plugin on the proxy which is the one I just started to develop to do a basic /hub and /servers command. So nothing canceling events

[meager citrus]

https://discordapp.com/channels/289587909051416579/555462214606389275/762149482024271874 @tender axle when someone join server when it's loading and then disconnect / is kicked for AFK, tried to remove plugis from bungee and sub servers and sitll was happening

[green palm]

#paper-help

[sage ginkgo]

I'm using Waterfall.

[young rampart]

Those timings are from paper not from waterfall. Waterfall is a proxy not a server

[sage ginkgo]

o.

There we go.

[tender axle]

kicked for afk?

wtf?

[lament flume]

Hmm, way to make the player list on ping hover like without proxy?

[reef fulcrum]

use a plugin, basically

[jaunty crag]

Anything in particular the netty update helped with?

[reef fulcrum]

there was a few changes which looked mildly interesting for us

Nothing super OMG< WE GOTTA though

[mortal reef]

hello, why is this drop in tps due? thanks
https://timings.aikar.co/?id=4a88eedfaa184d14b237a2aef751692f

[severe badger]

Wrong channel & outdated

[mortal reef]

ah sorry, what is the channel?

[severe badger]

#paper-help if you fixed the latter

[mortal reef]

what should i fix? I do not understand

[marble kelp]

update to a supported version

[mortal reef]

but what is the supported version?

you mean paper?

[severe badger]

1.16.3 is

[mortal reef]

ahhh ok, can't I get support if I'm not on that version?

[severe badger]

Correct

[vast gorge]

what does this error mean. im on the latest build of paper and waterfall as of 10 minutes ago. I didnt change anything, just restarted my server and this happened

if i need to give more info lmk what you need

there is no error thrown on my paper server just in the waterfall console

[marble kelp]

you have a plugin creating duplicate scoreboards

[bold parcel]

I ran into that issue when using a scoreboard plugin alongside OldCombatFixer or whatever - the code they used to stop player collisions also used the scoreboard and I guess it would create duplicates?

[red whale]

Hmm my players can't connect on my Proxy since I update it : https://hastebin.com/itoxosofog.properties

[reef fulcrum]

That's a plugin thing

Some plugin cancelled the connect event, but, didn't give it a server to send you to

.318

.g papermc/waterfall 318

[marble kelp]

(DiscordBot) https://github.com/PaperMC/Waterfall/issues/318 -- Issue #318 · PaperMC/Waterfall: "Proxy does not handle duplicate scoreboard teams across connections #318. Open. superkarli9 opened this issue on Nov 30, 2018 · 18 comments. Open ..."

[reef fulcrum]

^ for the scoreboard one

[red whale]

Yes I found the issue thank you !

[twin solstice]

any way to disable DNS caching and make it resolve DNS everytime someone tries to join a server?

ratelimits or anything should be an issue, I run an internal DNS server inside of a VLAN

[reef fulcrum]

Unless netty has a system property for the cache, no

[twin solstice]

f

[amber pine]

Is it possible to connect a 1.12.2 forge server to a waterfall proxy?

If im trying to join the server from my proxy i get disconnected instantly and just stay in the lobby. Nothing in the proxy and on the forge

[reef fulcrum]

Yes, just, if you want IP forwarding, you need sponge

[marble kelp]

did you enable forge support? not sure if that's on by default in waterfall

[amber pine]

its on true already

So i cant use paper for this?

[reef fulcrum]

paper has nothing to do with forge

Sponge adds bungee forwarding support to forge

[amber pine]

ah just instead of forge spongeforge?

[reef fulcrum]

sponge is a mod

[amber pine]

ok makes it even more simpler

Didnt know of sponge really yet

Do i also need it as a plugin then?

[reef fulcrum]

forge and proxies in general is hit and miss due to mods

It's a mod...

[amber pine]

yeah i thought there may be a plugin version of it

Did install sponge now

Still the same problem im justing getting disconnected instantly nothing on the logs of the server or proxy

Is it maybe a problem im trying to join from a 1.16 server with viabackwards onto a 1.12.2 forge server?

[reef fulcrum]

as I said, forge support is hit and miss due to mods

[amber pine]

yeah ok, then i will make it a standalone server

[reef fulcrum]

without any form of log output, can't really say, could just be some mod blowing up

[amber pine]

https://hasteb.in/warupusu.css

Proxy side

and nothing, literally nothing on the forge side

[reef fulcrum]

Well, the cleanliness of that basically says that the server intentionally closed the connection

[steep blaze]

Is there anything I need to watch out for when switching from BungeeCord to Waterfall regarding events? Currently running into odd issues like the ProxyPingEvent not getting fired

[reef fulcrum]

No, there is one event where we fire it in places that bungee doesnt' for the sake of exposing it/consistency, but, otherwise, no

[blissful basalt]

Help in waterfall #379 mc version is 1.16.3
<Client Error message> The server you were previously on went down, you have been connected to a fallback server
<Waterfall log>
[18:42:57 INFO]: [MC] Registered player Hate_Game |
[18:42:57 INFO]: [MC] Refreshed UUID-Name lookup: d5654cbc-ffe1-4bca-922b-738be0b77765 |
[18:42:57 INFO]: [Hate_Game|/122.32.51.42:14214] <-> ServerConnector [towny] has connec|
ted |
[18:42:57 WARN]: [/122.32.51.42:14214|Hate_Game] <-> DownstreamBridge <-> [towny] - ove|
rflow in packet detected! Cannot receive string longer than Short.MAX_VALUE (got 121668|
characters) |
[18:42:57 INFO]: [Hate_Game] disconnected with: The server you were previously on went |
down, you have been connected to a fallback server |
[18:42:57 INFO]: [MC] Un-Registered player Hate_Game |
[18:42:57 INFO]: [/122.32.51.42:14214|Hate_Game] -> UpstreamBridge has disconnected |
[18:42:57 INFO]: [/122.32.51.42:14214|Hate_Game] <-> DownstreamBridge <-> [towny] has d|
isconnected

server keep kicking me in minecraft 1.16.3 no matter what the server version is
But when I connect my server with 1.15.2 version, I can flawlessly join my server
how to solve this?

[reef fulcrum]

Something sent a bad packet

[blissful basalt]

[18:42:57 WARN]: [/122.32.51.42:14214|Hate_Game] <-> DownstreamBridge <-> [towny] - overflow in packet detected! Cannot receive string longer than Short.MAX_VALUE (got 121668 characters)
I think this is cause but how to solve?

[reef fulcrum]

You need to work out what's causing it, we can't see anything useful here bar a bad packet

replicate without plugins, etc

[blissful basalt]

https://paste.gg/p/anonymous/40694c2d55174bc5bdc757e8fea8ad57

there is no plugin in waterfall, but error happens..

[reef fulcrum]

.g papermc/waterfall 318

[marble kelp]

(DiscordBot) https://github.com/PaperMC/Waterfall/issues/318 -- PaperMC/Waterfall: "Proxy does not handle duplicate scoreboard teams across connections #318. Open. superkarli9 opened this issue on Nov 30, 2018 · 18 comments. Open ..."

[rigid vale]

Can anyone help me with this?

I have it enabled on all server including the bungeecord server but it still shows this.

[reef fulcrum]

You need to connect to the proxy, not the actual servers

[proper prawn]

you did something wrong while configuring

[rigid vale]

Yea in the servers area

but cant figure out what exactly

[eternal cairn]

ain't waterfall either

show your config if you want help with it

[rigid vale]

gimmie a sec

https://pastebin.com/x7GhfUJ4

[reef fulcrum]

smp has an extra space before it

your forced hosts thing is also mangled, just, remove it, you don't need it anyways, force_default_server will do the "send to the lobby" thing

[rigid vale]

including host?

[reef fulcrum]

no

[rigid vale]

thanks for the help :)

sorry to be a pain, one last thing when i try to connect through the proxy i get this?

[reef fulcrum]

connection refused

[rigid vale]

yea ik its a dumb question

but still

[proper prawn]

proxy said "no"

no further information
cant reach the proxy

[reef fulcrum]

Basically, either you misconfigured it, e.g. wrong port, or, firewall or router said nope

No, connection refused means that the connection was explictly refused by something

[proper prawn]

im just simplifying it

[rigid vale]

Ok

k so its the port but i'm a little confused on how it works?

[reef fulcrum]

it's a port, applications use ports

25565 is the default port that MC uses

[rigid vale]

Yea but like how it's linked

[reef fulcrum]

So, you probably just want to make the proxy use that

[rigid vale]

from the proxy to the server

Alright

What would i have to change in the config?

[reef fulcrum]

the host

ip:port

[wanton blaze]

how can i make it so getting kicked on one server will always send players to another server instead of just disconnecting them?

[marble kelp]

requires a plugin

I wrote this very simple one a while ago: https://github.com/Minebench/KickInfo

[delicate phoenix]

.g bungeekick

[marble kelp]

(DiscordBot) https://www.spigotmc.org/resources/bungeekick.1310/ -- BungeeKick | SpigotMC - High Performance Minecraft: "BungeeKick works kind of like MoveMeNow. When players are kicked from a proxied server, they are pushed to the lobby instead of quitting the ..."

[delicate phoenix]

You can try that one too ^

[marble kelp]

does the same as mine just without titles 👀

[tidal musk]

people want big flashy text

[half briar]

How is auth handled when using waterfall? Since premium is disabled, I guess I'll have to use my own auth plugin, however how is this handled, shall I ask for credentials on every server they join or should it (can it be?) handled by waterfall?

[reef fulcrum]

The proxy deals with auth and passes the UUID and IP to the backend servers, can't MITM auth, so it's dealt with by the proxy

You just need to ensure that only your proxy can connect to the servers, firewall or bungeeguard

[mortal delta]

i have a question, i have been trying to activate this proxy option in cloudflare so my ip is hidden, but when i do that i cant connect to my server, is there a way to do it and still be able to connect?

[unreal stag]

no

[slim thunder]

No you should not proxy your server IP through cloudflare, it doesn't work for minecraft servers

Use TCPShield instead

[odd hatch]

In theory it does work with Cloudflare Spectrum but that's very expensive

[half briar]

Thank you zzzCat

[royal hawk]

Spectrum is horrible snakeoil

Don’t use it unless you can negotiate a fair price

[sour gyro]

how do I send my players to lobby when my spigot server crashes/closes

?

[reef fulcrum]

There are plugins for that type of stuff, scroll up people where talking about some plugins which do that kinda stuff, no idea if they cover your needs specifically, however

[sour gyro]

plugins?

i thought its in the waterfall config

[reef fulcrum]

it's not

We can't tell what caused a player to be booted

it would be pretty dumb if /kick just sent them to the lobby

[sour gyro]

https://www.spigotmc.org/resources/slingshot.40264/

how about this?

[reef fulcrum]

I mean, 2 second read of the description, yea, I guess?

[marble kelp]

mine is still better

runs

[royal hawk]

Can vouch

leaps

[quasi lark]

What exactly is waterfall?

[cosmic sleet]

Waterfall is a proxy that links multiple standalone mc servers together

[quasi lark]

Kinda like bungee cord? Is it a fork of paper that runs exactly the same except with these features?

[severe badger]

It's a fork of bungeecord with additional patches, fixes & enhancements

[cursive flicker]

Technically speaking, is there anything Velocity cannot do that Bungee/Waterfall can? Or any benefits to using Bungee/Waterfall instead other than plugin availability?

[reef fulcrum]

Not really, they're proxies, only real difference is in APIs, bungee generally goes out of scope because "pretty"

e.g. not having the proxy fuck around with scoreboards would make fixing shit like #318 much easier

[cursive flicker]

That's what I thought, I really appreciate it.

[unreal stag]

@cursive flicker Only difference really is in plugin availability. In general Velocity tends to be the superior technical solution but unfortunately too many people need to use legacy brain-damaged plugins.

[wet heart]

how do i enable ore obfuscator on paper/spigot i know its built in but i dont know how.