#waterfall-help
1 messages · Page 48 of 1
yes but only with forge 1.12.2 and older
How can I prevent this ping attack on waterfall? https://i.gyazo.com/824278b63d855128a2e1c952e84a5256.mp4
I've got pinglimiter installed and that doesn't seem to work
Logs? A flood type attack can’t easily be subervted
Hi guys!! Does waterfall protect against netty exploits?
waterfall protects against some stuff, but, it's not a netty exploit, it's a "stuff exposed to the internet has to process network connections", any real improvements which don't involve leaking memory would require restructuring the network logic in a way which would break some plugins
ah gotcha thank you! :D
helo
Well it can... One way is to implement a SYNPROXY...
Or you could rate limit new connections.
Hello, I'm getting an error from Waterfall, the error is ReadTimeout Exception : null
Any suggestions?
It sounds like...a network error of some sort but not sure tbh
It is a network error that basically says; that connection took too long to respond
Hmm that's so weird ok
I've restarted both servers, waterfall and the backend so that's weird
@tough island right but bungeecord operates on a higher level and it will still have to respond to all potential valid networking requests, if it doesn’t then you kind of defeat the purpose
As for rate limits
Sure you can also use those but then again; the more valid players you expect the less good of an option it is
For limiting new connections over a certain address; yes plausible and potentially very useful. However not quite the best idea given how a few voting sites ping networks or; form experience; certain groups of users behind NAT (over shared address spaces or ipv6 bridges) will definitely trigger those limits
best stategy involves mutli layer, e.g. using things like haproxy or load balancing proxy instances, etc
I didn't set up firewall and throttle setup. What I have to do to allow my friends joining in my server?
hello can someone help me i have this problem
java -Xms4G -Xmx4G -jar paper.jar
Invalid initial heap size: -Xms4G
The specified size exceeds the maximum representable size.
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.
you need a 64 bit JVM
can you give me i dont know
.g adoptopenjdk
DM me
(DiscordBot) https://adoptopenjdk.net/
grab java from there, grab the 64 bit version for windows
hotspot
no
ok
ignore forced hosts
what you set the IP to, depends on your setup, leave it as 0.0.0.0 unless you're using a shared host generally
I will remove all server and waterfall
and setup them again
I think I have only that way now
as for how do you allow your friends, if you're home hosting, you'll need to configure your router to port forward, not all ISPs support this nor do we support router config
I did all processes. before I setup waterfall, there was no error...
Im using paper 1.12. But the waterfall version is 1.16. Is there a problem with this?
How can i recognize which plugins use for bungee and not? Like, luckperms need to use it? and why...
query_port means what?
is it OK when it's number set same with "host"?
i solved it
When I have nothing in the config.yml forced hosts, whenever I start the Proxy it automatically restores the default (pvp.md5.net: pvp) to the config. I won't be using forced hosts anyway, but is this meant to happen?
that's basically just how the defaults work, it's basically a non-issue, just leave it
How do I make people connect to the lobby server at every startup
and is there login plugin?
it seems that Userlogin plugin doesn't support waterfall
set force_default_server: false to true
Hey! Whats the cause of this error? https://pastebin.com/K9mB07z4
Waterfall itself or a plugin?
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Are you using & or §?
&... is it §?
No, it should be &...
Then that's weird...
:D
Just going to "bump" my question in case someone knows.
plugins
Ohh, so sad that the plugin doesn't appear on the stacktrace ;-;
you can put a Thread.dumpStack in setCancelled
Does waterfall work with Mojang vanilla?
without ip/uuid forwarding or a fork of vanillacord, yes
do i have to bungeecord true on my lobby server?
if you want UUIDs and IPs to be passed through, yes
you want that set on all servers
how do i make a waterfall server
use the bungee install guide
okay
logs please
and if i use localhost it says "if you with to use ip forwarding, please enable it in your BungeeCord config as well", even though it is enabled in the bungeecord config
also: If you have a proxy you need to connect to that instead of the server directly
wait
i am big dumb
oen sec
i forgot to change the bungeecord port to 25565
🤦
or am i not supposed to
nope im just dum dum
ok yeah it works now
how do i hide such messages?
- Find them on SpigotMC or another reputable plugin site (such as the upcoming Hangar) 2. Read the description especially the requirements and notices 3. Drop the .jar file you download in the plugins folder of your server or proxy
do i put the plugins in the
in the plugins folder
plugins folder of waterfall
your-server-directory/plugins/
plz recommand plugin that adds the bungeecord command on the backend server
What server do you want to put the plugin on?
whats the permission for the /server command? im op and cant use it
.g bungeecord commands
(DiscordBot) https://www.spigotmc.org/wiki/bungeecord-commands/
The home of Spigot a high performance, no lag customized CraftBukkit Minecraft server API, and BungeeCord, the cloud server proxy.
it still doesnt work even if i have the permission bungeecord.command.server
That pretty much means you're doing it wrong
If you have a perm plugin, configure the perms in there, for luck perms, note that the bungee version uses /lpb
ohhhhhhhhh
wait shoudlnt they sync between the backend and the bungee
since im using mysql
if you configured it properly it should
bruh it was reset
now i feel like an idiot
ok now it works
that the bungee luckperms is in sync
In the plugins folder in your waterfall server
i did but it didnt work
Gonna yell at the plugin author then
i got a bunch of those
Welp, Essentials is not a proxy plugin
leafberries, some plugins go on the proxy, some go on the backend servers
a few can run on both
whats a proxy plugin
but mostly, plugins designed for the backend servers don't run on the proxy
a plugin which runs on the proxy
ok
I was just asked if it was possible to connect two proxies which each other so that you're able to switch between them
Sounds like XY problem. Why does someone want to switch between 2 proxies?
One main proxy and one test proxy
And idk, I'm just forwarding the question :D
who's the asker? where are they?
Proxy IN proxy is the only way to do that but is blocked explictly because of the potential for bugs
there is no sane reason to do so and it's dumb, if you want a test bungee, have a seperate subdomain for it or something
Yeah that's what we have right now anyway
I assume connecting a client to a different proxy on the same machine via a command is also not possible for various (security) reasons
The client does not support moving across networks
you'd need to magically find some way to redirect the connection to the proxy and deal with all of the state implications of it
Just, don't
how to stop cheaters to pulling so much data from server because when there is no cheat my server can hold approx 100 person but sometimes cant even hold 50person (no tps problem only ping problem) can you add something like mbps limitation each player?:/ is it hard to do 😦
using something like iptables, yes
hmm hashlimit?
think that's it
ok thank you i will search for it
i just google that stuff and follow whatever guide comes up 🤷♂️
I just searched before this topic it makes immediate disconnection to user
what if user goes to big loads of chunk :/
oh, apparently, traffic control, not iptables
hmm
I mean, you're gonna stuff up the network queue anyways
besides it being bungeecord, any way to diagnose performance issues?
i'd assume just spark / yourkit profiling
pretty much, yea
do I have to get bungeecord before getting waterfall?
No
No, but, read the bungee install guide
omg so much documentation for limiting each ip to 1Mbps 😦 i drowned in information any help?
Hey,
A good new year !
A question, how works Waterfall for DNS resolution of the server hostname in config.yml ?
My network are in Docker and ip adresse change after each reboot
disable async dns in waterfall.yml and it will use java's DNS stack which should support stuff like docker, etc
What i thought, i will take the test. Thanks
should be noted
waterfall / bungeecord caches the server's IP for ever
so if your server reboots, ,it'll still point to the old IP even though you use hostnames
non-netty DNS seems to cache for like 1 minute locally, outside of that, that's on java, which has its own set of configs for it
no it's bungee specific
sec
it seems its becuase bungee store the socketaddress on the actual ServerInfo object
which will only ever resolve once
oh, yea
had me going for an hour or something before i got information about that
very annoying
would be nice to get a waterfall patch for that
It's all impl detail is the issue
Only concern I got is performance of server switches not kicking itself due to lookups, then again, 99% of people use IPs in there, so, generally a non-issue
we just wrote a plugin that clears it every few seconds or so
I can't say that I can get to it, or understand the total implications of SoecketAddress, but, if somebody wanted to turn that to actually be able to lookup if needed, no issues there
Just make it store the string, only issue is that you then gotta make set/get act sane for that thing
besides it being bungeecord, any way to diagnose performance issues?
i'd assume just spark / yourkit profiling
quite frankly
i have no idea what i'm looking at in spark, does not help that i cannot focus on one thread like paper
it's all netty 
Yea, that's why I pretty much always suggest proper tools
Issue is that it's pretty hard to quanity stuff
It's not like with paper where you cna say "this is a tick, it should be max of 40ms or whatever, where is this time going"
yes
bad config file
Have some patience, nobody owes you support
I mean
I'm dizzy
But
YOur listener section is fucked beyond all belief
create a new config and try again
that's not the config that was loaded there.
That error would be if you messed up the forced hosts section, leave it as default, or {} iirc for empty
its as it is
That error is literally from the forced_hosts section being an array and not a map
That's a map
There is no way that that is the config that was loaded in the last screenshot.
I keep getting
[11:38:50 INFO]: WiredOrange lost connection: You are sending too many packets, :(
It keeps kicking me
all I'm doing is walking
what is Travertine?
Waterfall + additional legacy support.
Hi, so I was setting up iptables and now I can't get into my network, any help?
thats #paper-help but negate the permission bukkit.command.plugins https://bukkit.gamepedia.com/CraftBukkit_Commands
The following are all the server commands either a server administrator or admin in-game can enter with CraftBukkit out-of-the-box. In addition to the original vanilla SMP commands there are 4 additional commands which are specific to CraftBukkit. CraftBukkit provides built-in permissions which can be used in a permissions manager. Defaults are ...
@restive hemlock
Can someone on the dev team change the link to download a updated verson?
*** Please check for a new build from https://papermc.io/ci/job/Waterfall/ ***
*** Should this build be outdated, you will get NO support for it. ***
*** Server will start in 10 seconds ***```
we don't have access to https://papermc.io/ci/job/Waterfall/
ouch, been too dead to remember where all the things are that they just get updated when people remind me of them
i get this but i have online-mode on in bungee config online mode off on the servers and bungeecord true in both of the spigot.ymls
Did you enable ip forwarding on your proxy
how would i config game_version?
so if i wanted to block a version would i put game_version: '1.14, 1.16'
It's just text which shows in the version info
No, you'd need a plugin to actually block versions
oh this?
Yes
the jenkins instance is now private, use the API or the normal download website https://papermc.io/downloads#Waterfall
Yea this was about the link in the startup message. It’s changed/fixed now
Will I be able to use my Bungeecord plugins that I have if I switch to waterfall?
yes
Awesome. I use Paper softwares so I guess it makes sense to switch to waterfall also. Awesome thanks
I just wanna make sure that way none of my plugins break
Hey does anyone know what all this NETTY.io stuff is. Ive had this before on my bungee but it happened very little so times. I switched to waterfall and my console/discord channels got spammed the hell out of it.
(theres a few more pages of it I just dont know what it all means)
netty is the networking library and 100% irrelevant to your issue
Alrighty ill just ignore it then.
Problem in a plugin seemingly named antileak
it appears antileak is calling hasPermission, which is legitimate
Has permission ->player, permission <| null
Where do I download Waterfall 1.8.8? I want to my my server from 1.8.8 to 1.16.4
waterfall supports 1.8-1.16 servers already
so I just download the latest one?
yes
How setup so player end up in lobby/hub when you close a server (I have set one in priorities)? and activate bungee on the the other servers, ip forward so on.
you'd need a plugin for that
oo thinks 🙂 any tips?
Is it true that waterfall/bungeecord leaks ips https://read-my-man.ga/W0g1L7wa4w.png
some retard was ddosing our server
even after multiple ip changes
it only stopped when we used openvpn (which we would rather not do)
We were already using a nginx tcp proxy
How is that supposed to happen? I couldn’t think of a reasonable way to squeeze bungeecord for the downstream addresses
Hello, changes something if i use optimized jvm code than the normal one? like is more optimized or?
doesnt it change users ips to local ones with port?
i think so
Let me guess - "super-optimized very fast no lag JDK fork" ?
that would be a terrible idea
Should I be useing Aikar's flags for my bungeecord server too?
check pins
bad packet ID, are mods in use!? Did not read all bytes from packet class net.md_5.bungee.protocol.packet.Handshake 0 Protocol HANDSHAKE Direction TO_SERVER
out of the logs of waterfall, no forge, only paper
are mods in use?
no, only plugins
replicate without plugins, something is mangling packets
the waterfall plugins?
i have big issue with bungeecord, i tried with differents bungee but change nothing, CPU usage so high like 300-500%
Use spark to profile the server and send the link it generates here
Also 100% -> 1 CPU core fully utilized. A bungeecord can take advantage of more than one but this still seems excessive, unless you have a ton of players
So I have a problem with Waterfall on my server. This doesnt apply to java edition but bedrock edition players. I join my server and I keep getting Please enable IP Forwarding error even tho the option is on, and each spigot .yml has bungee mode on. Any ideas?
waterfall doesn't support bedrock
With geyser+floodgate doe?
which is not our software
I know that
We do not support bedrock, we cannot provide support for 3rd party tools trying to connect to it
Specifically on the error, that would imply that you're connecting directly to the servers, which is not supported, they'd need to connect to the proxy somehow, or, those plugins are breaking something
either you misconfigured it or there is an issue on their side, which they'd likely provide much better support for than I can
If im not mistaken geyser can be run on bungeecord
^
You need to do that if you want to make it work
Floodgate or whatever it was called allows that
Yeah I already have that setup. Imma head to geyser support and see what their opinion is.
Project Waterfall build #392: SUCCESS in 3 min 8 sec: https://papermc.io/ci/job/Waterfall/392/
wrong channel, do not screenshot timings
I mean, I'm assuming you're using paper, so, the paper channels?
I try find right command too send all online players, try this send all lobby work fine ingame, but when run from console it say it not find bungee network,has I set it up wrong or is it no command i can use?
From which console
server console on one connected server, you need more info?
aa thanks, it solved a lot of headaches 🙂 the question is whether you could get it running at certain times or have to look further for something i can use.
use some form of cron type plugin or something
if you're hosting using screen/tmux on your own setup, literally use cron
is self hosting server (we host the server themselves) 🙂 thanks shall see what i find.
Trying to use a forced host, it still seems to direct me to the lobby server, is there other settings to change to get it to work?
hey gamers
How does conversion work when migrating over from online to offline mode?
It seems like it's causing a lot of glitches, is there a way to "--forceUpgrade" everything?
No, and such things are unsupported. Mind you, if you use proper forwarding you can keep online mode UUIDs on a server behind a proxy
@signal summit did you set up your DNS accordingly? Please post both your waterfall config and a screenshot of the DNS settings you did
I figured it out. Works in Java fine it was geyser (bedrock) that doesn’t work.
Is there a way to install something like bungeeguard for forge servers?
I don't think geyser has a bungeecord/waterfall plugin? I think it might be going wrong there.
So thats probably where the problem is. I am surprised people can even join through the waterfall with bedrock 
I just saw a fork called waterdog that said it adds more bedrock support, although I don't know if it will fix your problem it might help.
I not get what you mean first 🙂 (i´m not soo home in linux), but it run the command nice in crontab. was a litel work to get it work and recommend use tmux (is not soo hard to set up), only thing is it will run the server in same folder as you run the start command from (so all files end up in that folder). So if it user run it the files end up in home folder.
cron is a scheduler
you schedule it to run commands
you just need to create something to attach to the screen or tmux session and throw the command into it
Made it work, however, it puts all server files where I put startcript (.sh) for tmux.
I had a bit of a problem getting the jar file running, so I ran it on test manually, then realized that it loads the files according to where it starts from.
Then to find the panel I had to run sudo first.
crontab -e was someone who taught me, so it can be pretty good now, tmux was new experiences.
Will get working on the next server so I can log in and test 🙂
By the way, can I get watterfall / bungee to connect to servers on another computer within the same network?
I seams too solve last part too 😛 I only run this on test, so have only windows (so run linux on VM), so I have to solve the problem I ask for in last part 🙂
It work really smooth (only have sort out the files when try use it live server).
Will it bee possible to translate and change messages like "summon to lobby by console" (i perhaps can fix it true a plugin, but i try to have so lite plugin i can on the hub)?
I mean, fi bungee made those translatable, grab the messages file and edit it
only way is see is compile the jar with own translations (i think is not so hard, has compile a plugin (not made it only use the code on github)).
You can literally just throw the messages file in the same folder as you're running the proxy
aa, that work too nice thanks 🙂
Hi, im looking for help with an issue thats happening with waterfall
.... [21:02:20 INFO] [LuckPerms]: [Messaging] Received user update ping for 'teacherabood' with id: 1978d150-e5fa-4f03-a239-66f977c89252
.... [21:02:20 INFO] [LuckPerms]: [Messaging] Received user update ping for 'teacherabood' with id: bc93ec07-6baa-43d5-9738-fc4ee09c7394
For some reason, theres 2 joins happening when a player joins the server
and each join the player has a different uuid
I only noticed this today when we enabled debugging in our playertracking plugin
which is breaking because of the 2 joins
@neat shadow this looks like your bungeecord is in online mode, your backend server is set for information forwarding but has bungee online mode set to false
bungeecord: true in both spigot.yml's for the 2 hubs
And I assume you’re using paper?
yes
Check the paper yml
bungee-online-mode: true on both hubs

I’ve had that conversation earlier;; I’ll cook something up to help you diagnose in a second
Waterfall or travertine?
waterfall

Hey so here is my file setup and for some reason the server-icon.png doesn't show up. Any reason why?
does it have the correct size?
How do I check that
make sure you're not using ping passthrough, beyond that, check that the png meets the requirement, and maybe try refreshing a few times or something, there is some known vanilla bug there of god knows wth
What is ping passthrough?
Also it is the correct 512x512 size does it have to be something else?
ohh
io.netty.channel.unix.Errors$NativeIoException: bind(..) failed: Address already in use```
any idea what would be taking up that spot
nothing else is running
plugins are 1. skungee 2. that's it
removing skungee doesn't fix
use whatever tool your OS provides to check for what's listening to connections
what does ubuntu 20.04 have
lsof -i
that's the command?
just lsof -i only shows firefox
oooo
found something
just called java
but it says it's listening on 25565
That would either imply that you left the server itself on that port, or, you somehow got some stale instance in the background or something
make sure you changed the port, but, yea
just gotta find what that process is
there is always the kill command
ill just restart
thanks for the help
also general question while im here what is travertine it sounds weird
- 1.7 proto
waterfall with 1.7 protocol support
in config.yml, disable the local bind
yes
it erm, does extra binding of local, I think, I got no idea, never had any issues with it but apparently some have recently
did you already start the server?
i shut it down, set it to false, and then turned it back on
I mean, the paper server or whatever
You'd need to check what's binding that port i guess
the port for paper server is 25567
same for query port
btw weird thing is is that it worked for one try but now its not working
wait
maybe it is skungee
things only stopped working when i installed skungee
A
yep it was skungee
i had to set it to a different port
thank u
Where can I find a good walkthough tutorial on setting up a waterfall server network? I'm converting my 10 world paper / multiverse based server over to waterfall and don't see clear instructions on the waterfall site. (such as how to setup the config.yml on the host & client servers)
For example:
What is forced_hosts:
pvp.md-5.net: pvp
-
Do I close unused options like
permissions:with[](Since I use LuckPerms) -
Why is no world generated when the server starts like Paper?
- Where do you assign the primary world per server?
-
Where are the bukkit.yml, spigot.yml config files?
This Waterfall.jar just appears to be a framework, not an actual MC server.....how do I get playable servers with Waterfall?
@hazy kiln forced hosts is when you want, for example, players to directly connect to PVP if they are using pvp.md-5.net as address. You close the permissions with simply: permissions:. Waterfall is a proxy; its not a server. It connects you to servers simply with a command, without having to go back to the server selection screen.
So I just break apart my 10 mutiverse worlds into 10 separate paper (or other sever variants like forge) and point waterfall to each one?
Since each multiverse (MV) world is going to be it's own paper server do I have to rename the custom MV world name to world
Yes that would work; but beware: Proxies dont allow you to share inventories or any other player data between servers
Ok good to know I'll keep my RPG survival worlds together
You could use the MySQLPlayerDataBridge plugin for sharing inventories across multiple servers.
That’s still a bad idea
i'm having trouble setting up a server that isn't on the same machine as the main bungeecord any help
it just times out
nvm
had to shift around some IPs
Networking issue?
Hello why is this happenning to me in my server? Could not connect to default or fallback server, please try again later: io.netty.channel.AbstractChannel$AnnotatedConnectException
this appears when trying to join into the proxy
lobby is on
This is the bungee config https://pastebin.com/Ed1n0f6q
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
This is the server.priorities of the lobby https://pastebin.com/g8ZYKK0M
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
I also blocked all the ports from 25500 to 25599, 25565 is the only one open
soo when is there a 1.16.5 Waterfall Jar?
@untold ember waterfall needs absolutely no update to work with 1.16.5
ok thx
1.16.4 and 1.16.5 behave like 1.8-1.8.9, it’s the same to the proxy
Ie, the Proxy can’t tell the difference anyway
eh anyone .....
your connection between the proxy and the backend servers is failing
I also blocked all the ports from 25500 to 25599
If everything is running on the same machine, bind the servers to localhost and connect over localhost
if that's ptero, you'll need to use the ptero interfaces IP
how do I bind the servers to localhost?
yes this is ptero
how do I do it xD
So, get the IP address of the ptero interface (see ip addr), and configure all the servers to use that IP address to bind to/communicate over
Can I send here what says in ip addr or it includes things that I shouldnt share?
Oh sry I forgot that reply pinged
look for the pterodactyl interface in there, grab the ip address of it
paste it
that sounds like the correct IP
I don't download files, too much crud in my downloads folder already
xD ok
I put it here?
And than restart wings and the server and it should change the server-ip in server.priorities of the lobby server to this one
thats what I need to do?
idk what you're looking at
You need to configure the IP address of all the servers to use that IP address
and then configure bungee to use it
if you have any questions, you'd be better off asking in the ptero discord
Configure in server.properties?
no, in the panel, leave server.properties alone
oh ok
lobby:
address: 172.18.0.1:25569
motd: |-
§c§lPaTz§f§lMC§r (1.8 - 1.16) §fMELHOR SERVIDOR
DE MINECRAFT DE &2PO&eR&4TUGAL
restricted: false
It did not work.
make sure that your firewall rules aren't blocking it
beyond that, speak to ptero for support, we can't really help with network issues
you literally have a DROP rule
remove it
the bungeecord wiki is wrong for ptero
Yes, but you're blocking the traffic for the actual servers
You're using a private network interface which is not exposed to the world
Mate I know you said I needed to ask Pterodactyl but can u say me whats wrong this last time?
lobby:
address: 172.18.0.1:25569
motd: |-
§c§lPaTz§f§lMC§r (1.8 - 1.16) §fMELHOR SERVIDOR
DE MINECRAFT DE &2PO&eR&4TUGAL
restricted: false
I don't know
if you binded stuff to the correct thing as I said, it should work
I've advised doooozens of people to do that for years and it's worked perfectly fine for all of them
best guess would be make sure that you're still not dropping traffic
if you're blocking by default, make sure that you allow traffic over the private interfaces
I got no idea how iptables works there as docker networking is generally ass
I dont know what I did because this was working some time ago
I probably did something that well destroyed everything
The open-source server management solution.
Im gonna try
Yey thank you for all your help! I am stupid and that's it :). iptables for some reason was still blocking the ports but I fixed it 😉
hello my bungeecord is consuming a lot of cpu +300+400%
use a proper sampler/spark
Hello, what are the features included in Waterfall ? And how to migrate from Bungee to it ?
Bungee to waterfall is pretty much drag and drop
are there a plugin which allow player to login in to their last server they join after they go through the lobby
What do you want to do here? A lobby is generally there to allow users to select the server they want to go to. That makes little sense if you’re sending the user to another server from the lobby if you don’t allow them to choose. You should instead disable force default server in the config, that will connect the player to whatever server they were on before they disconnected and skip the lobby
That happens by default unless you force them to go to the lobby each time.
well i have two part of paper one is survival group and other is minigames group
after player login to lobby player will go into a portal if that portal is survival.They will send to the player that last login places
That also reminds me... I want to set up the forced hosts.
How to migrate from Bungee to Waterfall ?
It's a drop in replacement
1.8 Waterfall link please?
Same as for any other version.
What are features of Waterfall that Bungee doesn't have?
Would guess exploit fixes
That and optimizations ig, but velocity >

any pro with spark
.ask
If you have a question, please just ask it. Don't look for staff or topic experts. Don't ask to ask or ask if people are awake or available. Just ask the question to the channel straight out, and wait patiently for a reply.
Is there a way to restrict access to certain servers? So I can have no like a staff server, which is connected to the main network but only staff can join
so what lib am i miising here?
@cold hamlet this is your host's issue. You'd have to speak with them, nothing you can do
k, will do
If you give them that error, to someone who knows what they are doing it is super obvious so they should be able to figure it out no problem.
@tidal musk ¯_(ツ)_/¯ you could have a whitelist on that server but I’m sure there are plugins for that
Ok, thanks!
So is there a way to connect from one proxy to another proxy?
like from Lobby on Waterfall 1 to Lobby on Waterfall2?
hmmm
I really wish we could handover the connection to another server like in Bedrock :S would allow the only usecase where I actually tried to have two proxies behind each other (linking to partnered servers) in a way smoother way
I've wanted that for eons
my first post on spigot was about that
I was hoping forge was gonna add that, woulda made dealing with mods much easier/cleaner
how can i increase the player slots? i have increased it but players can't connect to server when it reaches 10
the player limits for waterfall are in config.yml
if you mean the actual servers themselves, you'd need to increase it there
will look it up in config, cheers
max players is 100 in config.yml
but only 10 can join
well, what's your servers max player limit?
my backends?
i've increased them to, for example survival is 50, maybe my lobby is limited
It would be the servers in your priority list which control the limit if players have to connect to those
in my priority list i only have my lobby, i don't have to add my survival if i don't want to right?
it's a list of servers in the order it tries to connect players to them
if you only have your lobby server in there, then people will only try to join the lobby server, which if they're new players, or they DC'd from that server (or you have force default on), they won't be able to join if they can't join that server
[22:12:47 WARN]: No client connected for pending server! is the error i see in console when the player tries to join
that often screams a plugin or something kicked them iirc
i have force default on true, so that means my lobby is preventing the players from joining right. assuming i only have lobby in my prio list
if you hit the limit on that server, yes
weird because there are 0 players in my lobby, even with that i have my max players 100 on waterfall as well as lobby and survival
found the issue
there is a max_player and player_limit in config.yml and i was changing max players all the time
i recently switched to paper after using spigot for a while. should i also switch to waterfall? and how hard is the bungeecord to waterfall switch? can i just replace the jars and call it done
yea, just a simple jar replace
ok
so configs are fine
and will all my bungee plugins still work? its just viaversion, geyser, and one that i wrote
yup
great!
only real caveat I know of is waterfall.yml, async DNS, if in docker and relying on hostnames for containers and such, gotta disable that
if you don't know what that means, ignore it ;P
waterfall + 1.7
yes
k thanks
is the latest waterfall build working with 1.16.5?
yes
report that to protocolize then
Just because it's newer doesn't mean it's better 😛
They probably didn't read the announcement and assumed there's a new version...
New version could mean new issues
Yea, they did
1.16.4 (protocol version 754)
1.16.5 (protocol version 755)
Hahaha
lol
"Aegis" lol
somebody can help me setting the fallback server?
like when a server restarts it send me at the hub instead of kicking me out
You'd need a plugin for that
You could also script it.
how?
when you shut down the server, get the console to fire off /send current hub
Also.. I got bored and configured Forced Hosts.. Very nice
what are forced hosts?
Forced hosts is when you connect to a relevant host from a specific domain... i.e.
forced_hosts:
survival.minecraft.mc.net: survival
minigames.minecraft.mc.net: minigames
Same as SNI based routing for webservers
u.u cool
Is not easy find any good way too send player too hub, you cant use bungee commands in the minecraft server console.
The only plugin some i find some give you that option are CommandSync (it link bungee to your servers) , but are old so ether it not work or can have exploits some not will be fixed.
I self think too use script and use tmux (so is I not version dependent).
@astral sierra as long as the player is connected to the server it’s very much possible; what are you trying to accomplish?
True script and tmux I find a way, but not from a plugin (no plugin I find has option too use send all onlineplayers to hub). Only work if player use a command. You cant use bungee commands in a server directly (I need to be in bungee console).
I try auto send players to hub, when server restart.
hey there. yesterday my bungee-waterfall server has been attacked with some weird packets (cf. PDF file). after a while it crashed. has someone an idea how to secure it so this won't happen again?
I was gonna look at restricting how long that data can be, bungee has it set to an excessive size, beyon that, a plugin could probably do the same thing to some degree
ok thanks is there some plugin that does that or do i have to write my own?
Quick q? Is waterfall better at exploit handling than bungee?
As waterfall is a fork of bungee, there are very likely exploit fixes that aren't in bungee.
That said, even waterfall can only take so much beating. It’s not magic, if you attack it hard enough it WILL buckle at some point
Is latest waterfall build compatible with 1.16.5?
1.16.5 is a minor release which retains protocol compatibility with 1.16.4 that mean all what is compatible with 1.16.4 works with 1.16.5
Thank you!
Suddenly ~10 players got kicked from the server, this error shows in console for every player, after they get kicked
https://pastebin.com/TQTXkXRb
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Read that ^^. Not an issue with waterfall but specifically with the scoreboard plugin.
But I'm not using scoreboards o-o I will try remove scoreboard.dat file in worlds to see if it fixes
Hi
I need help in configuring the server
could someone help me with allowing different versions of the game to be in the same server
Nobody here will walk you through the process on configuring waterfall step by step. Go read the official bungeecord installation guide and come back here if you have questions.
As for multi version-support, you’ll need to use either ViaVersion (+ViaBackwards/ViaRewind) or ProtocolSupport or a mix of both depending on what versions you want to support. Refer to their respective plugin pages to learn more
ok, thxs
is there a way to allow specific users to join server x and the rest not? maybe with the help of luckperms? i can't get it to work
Permissions.
it is this one right?
bungeecord.command.server for example assign bungeecord.command.server.X deny to default
That is most likely documented within the bungeecord docs.
does waterfall fixed nullping crashing?
@maiden quiver "nullping crashing" has been fixed since July.
guys i keep getting this when a player or i get kicked back to hub with a message that says the serve you where on previously went down so you where send to the fallback server. how can i fix this?
how do i add a server icon to my server
on you server you require a 64x64pixel image called server-icon.png
then it will automatically load it
i do have one in the same directory as my waterfall.jar
yes
Portforwarding not working
i just spammed the refresh button and it worked
it might be that it is required on the non proxy server
try adding it to your hub and to your example faction server
and restart them
what you mean
I did port forwarding for my server a d tried connecting to it via public ip in another device but it doesn't work
I did make exceptions in firewall tho
🙂
well that one little hard to explain, but i suggest you do the forcehost machanic too
there if you have a fancy domain name you can direct connect via example fac.papermc.gg
.paste
Please paste large logs to a pastebin: https://paste.gg
A sensible, modern pastebin. Share text and source code snippets with no hassle.
icon not showing is some weird known vanilla client issue
I m using my machine and i didnt get any domains stuffs is domain name mandatory
no, you'd just give people who want to connect the IP
it just adds extra security
I host only for my friends
should i send the .log.0 file too
i do not really want to send it cause of clients IP's
ok so just the snippit of the crash
not all routers support reverse NAT, you'd need to use a server status site or something to test it
Are you using mods?
yes
Using mods? refer to disable_entity_metadata_rewrite in waterfall.yml
cause it did the same thing when i used bungeecord and right after i reduced the connection throttle on the other servers and network_compression_threshold changed this to 64
Your server is sending entity metadata which bungee doesn't understand
set that option to true and it disables the mechanism in bungee which requires it to understand that data
disable_entity_metadata_rewrite so from false to true then?
Yes
ty
cause it got really annoying and i was to lazy yesterday after i did all the things to my network to ask around and search
Hey, can someone help me troubleshoot waterfall? I can send logs
A easy to use Paste site for Minecraft Server logs.
Looks like the server got killed. Are you close to running out of RAM on the actual machine it's running on?
What was happening when it happened
Etc etc
no it doesn't
That's not even waterfall
oh sorry wrong thing
it's a plugin or it got told to stop
that's the literal stop command
i dont see stop in the log (as in the command but ye could be api call) but ye, not waterfall and i didnt notice
I want to connect sub servers and waterfall can't find them
I use a domain thing, idk if that would mess with anything
a domain thing?
we dont have a waterfall log so we can't help you, unless waterfall isn't even the issue?
there wasn't even a single connection attempt to it
and that
We need logs where you actually attempt to connect
?? you didn't even connect?
There is literally 0 useful info in there
encountered exception: net.md_5.bungee.util.QuietException: Server is online mode!
Read the install instructions for bungeecord
where's that?
.g how to install bungeecord
The home of Spigot a high performance, no lag customized CraftBukkit Minecraft server API, and BungeeCord, the cloud server proxy.
Specifically the Post-Installation section.
why does it need to have the servers in offline mode?
because bungeecord/waterfall takes over authentication with mojang
let the proxy handle it
because you can't MITM auth or re-authenticate with the same key
waterfall stays in online mode, backend servers go in offline mode
thanks
yes, they can't have it enabled because that would break the ability to transfer servers
make sure you read the big red IMPORTANT SECURITY NOTICE too and don't leave your backend servers exposed
cause, ye, offline
so how do i listen for incomming ByteStream packets in Bungeecord..
well looks like this is dead..
you got your answer in #waterfall-dev
Hi, does Waterfall/Travertine support 1.16.5 out of the box? (latest release)
yes
Nice thank you
There's no protocol changes in 1.16.5 so yes :)
yo can i make it so that if you try to connect to modded server it doesn't show incompatible ?
DM me the answer i am gonna head to bed cause i want to wake up early
Waterfall works with spigot?
Yes.
Ty
Hi, where can I find a static link to the latest Waterfall release for my automatic update script?
check the download api, should be pinned in one of the channels
or scroll up in #announcements
Oh that's neat. But it looks like there is no route like GET /v2/projects/waterfall/versions/1.16/builds/latest/downloads/waterfall-1.16-latest.jar
So I'd have to do one request to see what the latest build is called and another to download that.
Is this correct or am I missing something?
sounds right
Nice, thank you for the help!
After this error my server crashes and players get kicked
https://hatebin.com/ftsksvdrge
I think this is some kind of query attack so i tried to disable query in proxy config but it keeps turning back to true after i restart.
All we can tell you is that a DNS request failed, could be many things such as just a bad moment for the network
waterfall will by default force google DNS because of the netty dns stuff configured in waterfall.yml
Huh.. TIL... Didn't realise it used google dns
Sometimes when users connect they Cant do anything. no commmands. cant move (can but its client side) and cant chat.
Can anyone help me with this real quick?
.895
But its not all the time. its almost like its random
how do you make a block float in my lobbyu?
you cant pick it up too
and it doesnt collide
wrong channel, you'd do that on the server itself, not the proxy
use ping passthrough
Yes, use ping passthrough
waterfall will reply to the FML ping, but, it won't forward it to the server, so the client won't see the mods list and stuff
So umm. I'm having problems with my bungeecord server, when i switch servers it takes 5-7 seconds for me to join. This doesn't have to do with my ping and yes i've tried deleting my plugins but nothing works. Here's my configuration in Waterfall https://pastebin.com/5r4WJDqA
I appreciate any help from this community and please ping me when you know a solution for this, thanks...
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Is there new waterfall version for 1.16.5 or is it "auto updating" ?
tbh there's no need for a new waterfall version because there are no protocol changes and everything that was changed in vanilla has already been implemented in paper... so Tl:dr; No, there is not...
ping pasthrough is enabled and still doing incompatible fml mods
really and core team or dev that can tell me how to fix the issue i have
cause i have ping passthrough on
I started a PaperMC server by running the jar once, setting eula to true and running the jar again.
Now I want to try Waterfall, again ran the jar, but rerunning it won't start the server.
Am I too impatient or do I need to create a "start" file like for bungeecord? Or is it something else? I couldn't find installation instructions.
well what issue do you have on first run?
need a start file like bungee cord
Thank you!
If I had a server for people who are jailed, is there a way to direct them to a different server rather than the main lobby?
with a plugin, sure
ideally whatever plugin you use for punishments has support for that kind of setup built in
Ok
I have a waterfall server running, but when trying to connect to it on localhost:25565 I get an exception:
.paste a copy of your config
Please paste large logs to a pastebin: https://paste.gg
A sensible, modern pastebin. Share text and source code snippets with no hassle.
I only found this thread https://www.spigotmc.org/threads/couldnt-connect-to-fallback-server.182528/, which didn't really help me. The config files were just automatically generated, I changed nothing. I also tried to connect via 0.0.0.0:25577, which causes this same exception:
it's a fresh config with no changes - https://paste.gg/p/anonymous/a238655dca1a495bbca5d089cbbdeb00
@somber forge uhm you realize that in the second picture you were able to connect to it successfully right? Waterfall is a proxy that connects people to servers, what happened here is that it wasn’t able to connect you to the first server you specified
Okay that's good to know, but that doesn't help me. I thought, with a fresh default config (without any changes), this should be ready to go, so I'm wondering what I'm doing wrong.
Did you expect Waterfall to be a server? It’s a proxy; a fake server you use to link real servers together

The home of Spigot a high performance, no lag customized CraftBukkit Minecraft server API, and BungeeCord, the cloud server proxy.
^ should help
Oh I see, that's a good hint, thank you 😄
Today my waterfall kicked 50 people with this message ReadTimeoutException : null
this is caused by what?
Networking or system issue
Do you have a firewall that uses rate limits? If yes then that’s likely the cause. Hosters like OVH have that too
no, the only thing that interacts with iptables/ipset is botsentry
That doesn’t change that this was either caused by your OS, hardware, or some other network issue
All we know is that we didn't get s packet in 30 seconds
That's basically outside of what anybody here can really provide support for outside of saying to check your network, etc
Some route going down and taking out a dozen players is hardly rare
i have ubuntu server 18.04
@tidal musk this
Hello, is there a debug log that Waterfall has? I am having a disconnect issue with my server only when i'm on a proxy - removing proxy everything works fine. There is no error displayed in proxy console when it happens though
well what message does it show?
a simple disconnection message
well, which one...
that looks more like you switched the server, not that you disconnected.
if you think that your server disconnected you look at its log
nothing in server log but in proxy log is bad packet ID, are mods in use!? Did not read all bytes from packet class net.md_5.bungee.protocol.packet.EntityEffect 79 Protocol GAME Direction TO_CLIENT
...
well that's pretty clear, ARE mods in use? if so remove them and try again
"Nothing else is relevant, i'm just seeing a disconnect message"
i just found it 
and phoenix that breaks the purpose of a modpack but if theres nothing u guys can do ok thanks anyway for help ❤️
it's a known waterfall issue due to the nature of fixing some other forge issue
Apparently one of the item mods do it, but, I've yet to spot that code as I was just gonna make it write that data through if possible
could try using velocity instead 👀
i was worried you'd say that
if you're cpable of compiling yourself, drop the forge race condition patch
I can definitely compile myself but do you have a link or a general direction of where to look for that? Google is giving me 9 year old stuff 😄
I see what I have to do now my bad and thank you 😄
I mean, our repo is on github, not whatever that repo is, but, that's the patch that causes the issues
I know this isn't specifically a waterfall error but it still relates to waterfall. Why is there no class found for this?
for what?
holy fuck
im sorry i am legitametly braindead
thank you jesus
IM A DEVELOPER HOW DID I NOT
o
im gonna go have a meltdown
thank you for helping me
server wont launch, https://pastebin.com/PCGcseay
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
20:45:05 [SEVERE] java.lang.IllegalArgumentException: Server lobby (priority 0) is not defined
your priority list points to a server which doesn't exist
does waterfall do the same things as bungiecord, and if not, does bungiecord work with papermc?
Yes & yes
Hello! I'd like to know the changes Waterfall has made to BungeeCord
take a look at the patches folder
Thanks
I am getting some waterfall config errors, should I put them here?
.paste
Please paste large logs to a pastebin: https://paste.gg
A sensible, modern pastebin. Share text and source code snippets with no hassle.
Is it fine if it shows a server IP in it?
we generally don't care
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Oh it fixed it! Thank you!
with travertine can u connect a 1.8 server with 1.16?
no
Project Waterfall build #393: SUCCESS in 3 min 40 sec: https://papermc.io/ci/job/Waterfall/393/
Project Travertine build #170: SUCCESS in 1 min 41 sec: https://papermc.io/ci/job/Travertine/170/
Can anyone give me an idea of what seems to be happening here?
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /199.7.68.251:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /217.75.219.246:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /91.229.3.152:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /95.85.31.219:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /87.244.121.214:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /46.144.17.28:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /82.141.128.226:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /87.240.102.18:53
had this with various IP's spammed thousands in the console shortly before waterfall crash
what's weird is they're using a dns port with a dns IP?
might be a dns redirection attack or however that is called
Is this a vulnerability on our side?
not exactly
not sure if there is a way to avoid people pointing their nameserver at yours lol
Dont even have any sort of NS on the server, all ports closed except the MC port
i forget how UDP works as for the source port, if it uses its own port that you conneted to or creates a new one
I personally would just block requests from/to port 53 on your server if you don't host your own nameserver
basically, you could try to exclude packets from 53 ^
53 is DNS? Blocking port 53 wouldn't be good...
But, it's literal "anything exposed to the internet needs to process requests from the internet"
how would bungee auth with mojang?
from
the source
you'd add a rule to allow connections from your own end, iptables calls it related or something iirc
you should block incomming connections from that port
iptables has a way to only block new connections but allow established (the ones that started on your end and got a reply)
What confuses me the post is how the IP's spoofed?
Or atleast they must be
8.8.8.8 is google DNS how is it sending data towards my server.
it's UDP
you can spoof the sender address contained in the packet but technically it's not too hard to get other DNS/nameservers to query a random server (by claiming that it's the nameserver for some domain and them trying to cache it)
so someone could have spammed googles dns, with fake udp packets saying they're from my IP which caused google to send loads of stuff my my server..
I think i've heard abotu with with NTP server attacks
they could've also just spammed your server with their addresses
Well, leverage concept
I appreciate you taking the time to help me understand this
NTP and DNS both reply with a packet larger than the request itself generally
I was under the impression though that this kind of dns amplification attack was somehow prevented now?
it's always dns
Not really too much you can do about it
some of the aplification attacks where down to a bug or a common misconfiguration issue iirc
How can i select the force_default_server: true?
priority list
yes
oh, so it's on ISPs to verify the sender of UDP packets to mitigate that properly, I see
EggWars:
address: 172.18.0.1:25570
motd: '&1Just another Waterfall - Forced Host'
restricted: false
and this of restricted whats mean?
if they need a perm to join it
i put lobby in priorities
and force default server
and they join in other server
did you restart the proxy?
.paste your full config
Please paste large logs to a pastebin: https://paste.gg
A sensible, modern pastebin. Share text and source code snippets with no hassle.
please paste it
nobody wants to download dozens of random files
why is the config inside the log?

I mean, you have a server called Lobby
which you clearly have a plugin moving people to that server
I mean, called Login
what?
99.9% chance, it's that plugin causing it
sorry to butt in, but does this look on the right track to you for the dns thing?
iptables -A OUTPUT -p udp -d 1.1.1.1 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp -s 1.1.1.1 --sport 53 -m state --state ESTABLISHED -j ACCEPT
oh god i hope i turned off auto ping, sorry if i didn't
looks correctl, although I would just block all sourfces ¯_(ツ)_/¯
can just block incoming source 53 to whatever your mc port is
iptables -A INPUT -p udp --sport 53 --dport 25565 -m state --state NEW -j REJECT --reject-with icmp-port-unreachable should do the trick without blocking too much if it goes wrong lol
actually I'm not too sure if drop or reject is better here. my thought for using reject was that it could lead to DNS servers realising that they should not send further traffic there
IMO Always drop
but dropping will obviously stop it from sending packets back but with DNS amplification attacks the pure size of the packet is usually the issue, not the amount of them
general gist is to not waste CPU dealing with invalid stuff
if you're not expecting DNS queries against your machine, no reason to send a message back for them
hm, I guess I could check cloudflare/google dns docs and see if maybe one can send a certain status back to indicate such issues
Well, your command there told it to send back an unreachable message
yeah, using a prohibited one might be better
hm, can't really find anything about that. kinda annoying that one can't tell them to not send any traffic your way in the next couple minutes/hours
Not really viable for something like DNS when you consider things like CGNATs, etc
hm, I guess
they really should've went with a large address space from the start -.-
I'm just waiting for ipv6 exhaustion
I doubt we will have that issue any time soon. the AI(s) will use their own system that we don't understand to address stuff anyways
pretty sure people didn't think about AI back then :P
I need my v6 address while on mars
just let ipfs deal with it
I mean there are more ipv6 addresses than human neurons on the planet so ¯_(ツ)_/¯
the space is definitly enough to give an AI enough networking space to simulate a brain xD
Well, yea, but, somebody creates one, and then somebody creates another... and then somebody sends one to mars... 😄
and there is more ipv6 than estimated stars in the universe, we are gonna be fine for a long time lol
(well observable universe I guess)
.g how old is ipv4
(DiscordBot) https://en.wikipedia.org/wiki/IPv4
Internet Protocol version 4 (IPv4) is the fourth version of the Internet Protocol (IP). It is one of the core protocols of standards-based internetworking methods in the Internet and other packet-switched networks. IPv4 was the first version deployed for production on SATNET in 1982 and on the ARPANET in January 1983. It still routes most Intern...
sips tea
I guess one could calcualte how long ipv6 will be enough by taking into account some formula for the tech growth and putting that into relation with how long ipv4 lasted
but at that point I don't even care anymore, I believe that the technological singularity will come soon anyways :P
UK WOOO
isn't better in Germany either: https://is.papr.best/gk5AIhhw.png
alright sorry if im sounding a bit desperate, but im having a little problem with my server security:
im running a minecraft server with bungeecord and today one of my admins (according to logs) gave a player "*" on luckperms, which he used to run several hazardous commands and damage my network. we set up things like 2fa and such things in attempts of patching this issue, but 10 minutes ago this has happened again
the "hacker" in question is able to run luckperms commands directly from my bungeecord proxy, giving himself any permission he wants
before i remove every permission from the admin in commands, could anyone give me any insight on why this may be happening?
nevermind, apparently he managed to log in as the admin as well
and bypassed 2fa
somehow
if you are sure that your firewall is setup correctly (and you run online mode) then that sounds like a malicious plugin or some web panel/backend access
(technically it could also be the case of a book with a click event but I would hope that people that have admin ranks don't click stuff in books that they got from random players...)
