#waterfall-help

1 messages · Page 48 of 1

barren wind
#

Hey, does anyone if it's possible to have a waterfall network with a forge server?

royal hawk
#

yes but only with forge 1.12.2 and older

normal sinew
royal hawk
#

Logs? A flood type attack can’t easily be subervted

crisp geyser
#

Hi guys!! Does waterfall protect against netty exploits?

reef fulcrum
#

waterfall protects against some stuff, but, it's not a netty exploit, it's a "stuff exposed to the internet has to process network connections", any real improvements which don't involve leaking memory would require restructuring the network logic in a way which would break some plugins

crisp geyser
#

ah gotcha thank you! :D

cedar thicket
#

helo

tough island
#

Or you could rate limit new connections.

crisp geyser
#

Hello, I'm getting an error from Waterfall, the error is ReadTimeout Exception : null
Any suggestions?

#

It sounds like...a network error of some sort but not sure tbh

royal hawk
#

It is a network error that basically says; that connection took too long to respond

crisp geyser
#

Hmm that's so weird ok

#

I've restarted both servers, waterfall and the backend so that's weird

royal hawk
#

@tough island right but bungeecord operates on a higher level and it will still have to respond to all potential valid networking requests, if it doesn’t then you kind of defeat the purpose

#

As for rate limits

#

Sure you can also use those but then again; the more valid players you expect the less good of an option it is

#

For limiting new connections over a certain address; yes plausible and potentially very useful. However not quite the best idea given how a few voting sites ping networks or; form experience; certain groups of users behind NAT (over shared address spaces or ipv6 bridges) will definitely trigger those limits

reef fulcrum
#

best stategy involves mutli layer, e.g. using things like haproxy or load balancing proxy instances, etc

tough island
#

Also this ^^

#

But yeah doing SYNPROXY helps stop illegitimate connections

tawdry tundra
#

I didn't set up firewall and throttle setup. What I have to do to allow my friends joining in my server?

timid ore
#

hello can someone help me i have this problem

#

java -Xms4G -Xmx4G -jar paper.jar
Invalid initial heap size: -Xms4G
The specified size exceeds the maximum representable size.
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.

reef fulcrum
#

you need a 64 bit JVM

timid ore
#

can you give me i dont know

reef fulcrum
#

.g adoptopenjdk

timid ore
#

DM me

marble kelpBOT
#

AdoptOpenJDK provides prebuilt OpenJDK binaries from a fully open source set of build scripts and infrastructure. Supported platforms include Linux, macOS, Windows, ARM, Solaris, and AIX.

reef fulcrum
#

grab java from there, grab the 64 bit version for windows

timid ore
#

ok

#

what do i choose Hotspot OpenJ9

reef fulcrum
#

hotspot

timid ore
#

ok

#

can you pls dm it to me my download speed is slow

#

like 15kbs

reef fulcrum
#

no

timid ore
#

ok

tawdry tundra
#

host: 0.0.0.0:25565

#

0.0.0.0 Is right?

#

forced_hosts:
0.0.0.0: pvp

reef fulcrum
#

ignore forced hosts

#

what you set the IP to, depends on your setup, leave it as 0.0.0.0 unless you're using a shared host generally

tawdry tundra
#

I will remove all server and waterfall
and setup them again
I think I have only that way now

reef fulcrum
#

as for how do you allow your friends, if you're home hosting, you'll need to configure your router to port forward, not all ISPs support this nor do we support router config

tawdry tundra
#

I did all processes. before I setup waterfall, there was no error...
Im using paper 1.12. But the waterfall version is 1.16. Is there a problem with this?

vast crow
#

How can i recognize which plugins use for bungee and not? Like, luckperms need to use it? and why...

tawdry tundra
#

query_port means what?
is it OK when it's number set same with "host"?

#

i solved it

rotund field
#

When I have nothing in the config.yml forced hosts, whenever I start the Proxy it automatically restores the default (pvp.md5.net: pvp) to the config. I won't be using forced hosts anyway, but is this meant to happen?

reef fulcrum
#

that's basically just how the defaults work, it's basically a non-issue, just leave it

tawdry tundra
#

How do I make people connect to the lobby server at every startup

#

and is there login plugin?
it seems that Userlogin plugin doesn't support waterfall

tough island
#

set force_default_server: false to true

soft forge
boreal hare
#

Uhm, is the motd colorable?

#

It just reset the config to before the change :D

soft forge
#

Are you using & or §?

boreal hare
#

&... is it §?

soft forge
#

No, it should be &...

boreal hare
#

Then that's weird...

soft forge
#

Are you seeing an error on the console?

#

Maybe it has to do with a parsing error.

boreal hare
#

Yeah got it.

#

Was missing ' ' ; )

#

Thanks 😄

soft forge
#

:D

soft forge
reef fulcrum
#

plugins

soft forge
#

Ohh, so sad that the plugin doesn't appear on the stacktrace ;-;

green palm
#

you can put a Thread.dumpStack in setCancelled

soft forge
#

I'm not a developer.

#

yet.

brazen tangle
#

Does waterfall work with Mojang vanilla?

reef fulcrum
#

without ip/uuid forwarding or a fork of vanillacord, yes

eternal pulsar
#

do i have to bungeecord true on my lobby server?

reef fulcrum
#

if you want UUIDs and IPs to be passed through, yes

#

you want that set on all servers

faint matrix
#

how do i make a waterfall server

reef fulcrum
#

use the bungee install guide

faint matrix
#

okay

frank marlin
#

whenever i try to join it just says disconnected

#

i followed bungee install guide

royal hawk
#

logs please

frank marlin
#

and if i use localhost it says "if you with to use ip forwarding, please enable it in your BungeeCord config as well", even though it is enabled in the bungeecord config

royal hawk
#

also: If you have a proxy you need to connect to that instead of the server directly

frank marlin
#

wait

#

i am big dumb

#

oen sec

#

i forgot to change the bungeecord port to 25565

#

🤦

#

or am i not supposed to

#

nope im just dum dum

#

ok yeah it works now

tender axle
faint matrix
#

how do i get plugins

#

i mean where do i put them

green palm
#
  1. Find them on SpigotMC or another reputable plugin site (such as the upcoming Hangar) 2. Read the description especially the requirements and notices 3. Drop the .jar file you download in the plugins folder of your server or proxy
green palm
#

in the plugins folder

faint matrix
#

plugins folder of waterfall

green palm
#

your-server-directory/plugins/

faint matrix
#

k nvm

tawdry tundra
#

plz recommand plugin that adds the bungeecord command on the backend server

vale ember
frank marlin
#

whats the permission for the /server command? im op and cant use it

reef fulcrum
#

.g bungeecord commands

marble kelpBOT
frank marlin
#

it still doesnt work even if i have the permission bungeecord.command.server

reef fulcrum
#

That pretty much means you're doing it wrong

#

If you have a perm plugin, configure the perms in there, for luck perms, note that the bungee version uses /lpb

frank marlin
#

ohhhhhhhhh

#

wait shoudlnt they sync between the backend and the bungee

#

since im using mysql

reef fulcrum
#

if you configured it properly it should

frank marlin
#

bruh it was reset

#

now i feel like an idiot

#

ok now it works

#

that the bungee luckperms is in sync

faint matrix
severe badger
#

In the plugins folder in your waterfall server

faint matrix
#

i did but it didnt work

severe badger
#

Gonna yell at the plugin author then

faint matrix
severe badger
#

Welp, Essentials is not a proxy plugin

green palm
#

leafberries, some plugins go on the proxy, some go on the backend servers

#

a few can run on both

faint matrix
#

whats a proxy plugin

green palm
#

but mostly, plugins designed for the backend servers don't run on the proxy

#

a plugin which runs on the proxy

faint matrix
#

ok

young rampart
#

I was just asked if it was possible to connect two proxies which each other so that you're able to switch between them

green palm
#

Sounds like XY problem. Why does someone want to switch between 2 proxies?

young rampart
#

One main proxy and one test proxy
And idk, I'm just forwarding the question :D

green palm
#

who's the asker? where are they?

reef fulcrum
#

Proxy IN proxy is the only way to do that but is blocked explictly because of the potential for bugs

#

there is no sane reason to do so and it's dumb, if you want a test bungee, have a seperate subdomain for it or something

green palm
#

velocity prohibits layered proxies entirely

#

for instance

young rampart
#

Yeah that's what we have right now anyway

#

I assume connecting a client to a different proxy on the same machine via a command is also not possible for various (security) reasons

reef fulcrum
#

The client does not support moving across networks

#

you'd need to magically find some way to redirect the connection to the proxy and deal with all of the state implications of it

#

Just, don't

magic flint
#

how to stop cheaters to pulling so much data from server because when there is no cheat my server can hold approx 100 person but sometimes cant even hold 50person (no tps problem only ping problem) can you add something like mbps limitation each player?:/ is it hard to do 😦

reef fulcrum
#

using something like iptables, yes

magic flint
#

hmm hashlimit?

reef fulcrum
#

think that's it

magic flint
#

ok thank you i will search for it

reef fulcrum
#

i just google that stuff and follow whatever guide comes up 🤷‍♂️

magic flint
#

I just searched before this topic it makes immediate disconnection to user

#

what if user goes to big loads of chunk :/

reef fulcrum
#

oh, apparently, traffic control, not iptables

magic flint
#

hmm

reef fulcrum
#

I mean, you're gonna stuff up the network queue anyways

twin solstice
#

besides it being bungeecord, any way to diagnose performance issues?

#

i'd assume just spark / yourkit profiling

reef fulcrum
#

pretty much, yea

crimson nymph
#

do I have to get bungeecord before getting waterfall?

royal hawk
#

No

reef fulcrum
#

No, but, read the bungee install guide

magic flint
#

omg so much documentation for limiting each ip to 1Mbps 😦 i drowned in information any help?

gaunt fjord
#

I feel like this CPU usage is not normal

agile sigil
#

Hey,
A good new year !
A question, how works Waterfall for DNS resolution of the server hostname in config.yml ?

#

My network are in Docker and ip adresse change after each reboot

reef fulcrum
#

disable async dns in waterfall.yml and it will use java's DNS stack which should support stuff like docker, etc

agile sigil
twin solstice
#

should be noted

#

waterfall / bungeecord caches the server's IP for ever

#

so if your server reboots, ,it'll still point to the old IP even though you use hostnames

reef fulcrum
#

non-netty DNS seems to cache for like 1 minute locally, outside of that, that's on java, which has its own set of configs for it

twin solstice
#

no it's bungee specific

#

sec

#

it seems its becuase bungee store the socketaddress on the actual ServerInfo object
which will only ever resolve once

reef fulcrum
#

oh, yea

twin solstice
#

had me going for an hour or something before i got information about that

#

very annoying

#

would be nice to get a waterfall patch for that

reef fulcrum
#

It's all impl detail is the issue

#

Only concern I got is performance of server switches not kicking itself due to lookups, then again, 99% of people use IPs in there, so, generally a non-issue

twin solstice
#

we just wrote a plugin that clears it every few seconds or so

reef fulcrum
#

I can't say that I can get to it, or understand the total implications of SoecketAddress, but, if somebody wanted to turn that to actually be able to lookup if needed, no issues there

#

Just make it store the string, only issue is that you then gotta make set/get act sane for that thing

twin solstice
#

besides it being bungeecord, any way to diagnose performance issues?
i'd assume just spark / yourkit profiling

#

quite frankly

#

i have no idea what i'm looking at in spark, does not help that i cannot focus on one thread like paper

#

it's all netty KEKS

reef fulcrum
#

Yea, that's why I pretty much always suggest proper tools

#

Issue is that it's pretty hard to quanity stuff

#

It's not like with paper where you cna say "this is a tick, it should be max of 40ms or whatever, where is this time going"

twin solstice
#

yes

vagrant yew
#

my server wont start

reef fulcrum
#

bad config file

vagrant yew
#

wait ima send it

#

help?

reef fulcrum
#

Have some patience, nobody owes you support

#

I mean

#

I'm dizzy

#

But

#

YOur listener section is fucked beyond all belief

#

create a new config and try again

vagrant yew
#

i did

#

still the same

#

ping me

reef fulcrum
#

that's not the config that was loaded there.

#

That error would be if you messed up the forced hosts section, leave it as default, or {} iirc for empty

vagrant yew
reef fulcrum
#

That error is literally from the forced_hosts section being an array and not a map

#

That's a map

#

There is no way that that is the config that was loaded in the last screenshot.

vagrant yew
#

wait

#

t

normal depot
#

I keep getting

[11:38:50 INFO]: WiredOrange lost connection: You are sending too many packets, :(

It keeps kicking me

#

all I'm doing is walking

vivid jetty
#

what is Travertine?

round ocean
#

Waterfall + additional legacy support.

slim pagoda
#

Hi, so I was setting up iptables and now I can't get into my network, any help?

restive hemlock
#

how can i disable /pl or plugins on my server

#

the command

royal hawk
#

thats #paper-help but negate the permission bukkit.command.plugins https://bukkit.gamepedia.com/CraftBukkit_Commands

BukkitWiki

The following are all the server commands either a server administrator or admin in-game can enter with CraftBukkit out-of-the-box. In addition to the original vanilla SMP commands there are 4 additional commands which are specific to CraftBukkit. CraftBukkit provides built-in permissions which can be used in a permissions manager. Defaults are ...

#

@restive hemlock

trim beacon
#

Can someone on the dev team change the link to download a updated verson?

*** Please check for a new build from https://papermc.io/ci/job/Waterfall/ ***
*** Should this build be outdated, you will get NO support for it. ***
*** Server will start in 10 seconds ***```
reef fulcrum
#

ouch, been too dead to remember where all the things are that they just get updated when people remind me of them

trim beacon
#

like change it tohttps://papermc.io/downloads

tidal musk
#

i get this but i have online-mode on in bungee config online mode off on the servers and bungeecord true in both of the spigot.ymls

royal hawk
#

Did you enable ip forwarding on your proxy

tidal musk
#

yea dumb from me i just enabled it

#

works now

lilac mulch
#

how would i config game_version?

#

so if i wanted to block a version would i put game_version: '1.14, 1.16'

reef fulcrum
#

It's just text which shows in the version info

#

No, you'd need a plugin to actually block versions

lilac mulch
reef fulcrum
#

Yes

lilac mulch
#

(ik its flamecord, only example i can get)

#

ok thanks

sage dragon
royal hawk
tidal musk
#

Will I be able to use my Bungeecord plugins that I have if I switch to waterfall?

reef fulcrum
#

yes

tidal musk
#

Awesome. I use Paper softwares so I guess it makes sense to switch to waterfall also. Awesome thanks

#

I just wanna make sure that way none of my plugins break

tidal musk
#

Hey does anyone know what all this NETTY.io stuff is. Ive had this before on my bungee but it happened very little so times. I switched to waterfall and my console/discord channels got spammed the hell out of it.

#

(theres a few more pages of it I just dont know what it all means)

reef fulcrum
#

netty is the networking library and 100% irrelevant to your issue

tidal musk
#

Alrighty ill just ignore it then.

royal hawk
#

Problem in a plugin seemingly named antileak

green palm
#

it appears antileak is calling hasPermission, which is legitimate

royal hawk
#

Has permission ->player, permission <| null

royal drift
#

Where do I download Waterfall 1.8.8? I want to my my server from 1.8.8 to 1.16.4

raven nacelle
#

waterfall supports 1.8-1.16 servers already

royal drift
#

so I just download the latest one?

reef fulcrum
#

yes

astral sierra
#

How setup so player end up in lobby/hub when you close a server (I have set one in priorities)? and activate bungee on the the other servers, ip forward so on.

reef fulcrum
#

you'd need a plugin for that

astral sierra
heady wasp
#

some retard was ddosing our server

#

even after multiple ip changes

#

it only stopped when we used openvpn (which we would rather not do)

#

We were already using a nginx tcp proxy

royal hawk
#

How is that supposed to happen? I couldn’t think of a reasonable way to squeeze bungeecord for the downstream addresses

vast crow
#

Hello, changes something if i use optimized jvm code than the normal one? like is more optimized or?

tidal musk
#

i think so

green palm
#

that would be a terrible idea

crimson nymph
#

Should I be useing Aikar's flags for my bungeecord server too?

green palm
#

check pins

surreal stump
#

bad packet ID, are mods in use!? Did not read all bytes from packet class net.md_5.bungee.protocol.packet.Handshake 0 Protocol HANDSHAKE Direction TO_SERVER
out of the logs of waterfall, no forge, only paper

marble kelpBOT
#

are mods in use?

surreal stump
#

no, only plugins

reef fulcrum
#

replicate without plugins, something is mangling packets

surreal stump
#

the waterfall plugins?

reef fulcrum
#

I don't know

#

99% of the time it's the server stuff

terse locust
#

i have big issue with bungeecord, i tried with differents bungee but change nothing, CPU usage so high like 300-500%

royal hawk
#

Use spark to profile the server and send the link it generates here

#

Also 100% -> 1 CPU core fully utilized. A bungeecord can take advantage of more than one but this still seems excessive, unless you have a ton of players

tidal musk
#

So I have a problem with Waterfall on my server. This doesnt apply to java edition but bedrock edition players. I join my server and I keep getting Please enable IP Forwarding error even tho the option is on, and each spigot .yml has bungee mode on. Any ideas?

reef fulcrum
#

waterfall doesn't support bedrock

tidal musk
reef fulcrum
#

which is not our software

tidal musk
#

I know that

reef fulcrum
#

We do not support bedrock, we cannot provide support for 3rd party tools trying to connect to it

#

Specifically on the error, that would imply that you're connecting directly to the servers, which is not supported, they'd need to connect to the proxy somehow, or, those plugins are breaking something

#

either you misconfigured it or there is an issue on their side, which they'd likely provide much better support for than I can

royal hawk
#

If im not mistaken geyser can be run on bungeecord

tidal musk
#

^

royal hawk
#

You need to do that if you want to make it work

#

Floodgate or whatever it was called allows that

tidal musk
#

Yeah I already have that setup. Imma head to geyser support and see what their opinion is.

marble kelpBOT
reef fulcrum
#

wrong channel, do not screenshot timings

#

I mean, I'm assuming you're using paper, so, the paper channels?

astral sierra
#

I try find right command too send all online players, try this send all lobby work fine ingame, but when run from console it say it not find bungee network,has I set it up wrong or is it no command i can use?

royal hawk
#

From which console

astral sierra
#

server console on one connected server, you need more info?

reef fulcrum
#

proxy commands are ran on the proxy

#

send is a proxy command

astral sierra
#

aa thanks, it solved a lot of headaches 🙂 the question is whether you could get it running at certain times or have to look further for something i can use.

reef fulcrum
#

use some form of cron type plugin or something

#

if you're hosting using screen/tmux on your own setup, literally use cron

astral sierra
#

is self hosting server (we host the server themselves) 🙂 thanks shall see what i find.

signal summit
#

Trying to use a forced host, it still seems to direct me to the lobby server, is there other settings to change to get it to work?

gleaming shard
#

hey gamers

#

How does conversion work when migrating over from online to offline mode?

#

It seems like it's causing a lot of glitches, is there a way to "--forceUpgrade" everything?

royal hawk
#

No, and such things are unsupported. Mind you, if you use proper forwarding you can keep online mode UUIDs on a server behind a proxy

#

@signal summit did you set up your DNS accordingly? Please post both your waterfall config and a screenshot of the DNS settings you did

signal summit
wet stirrup
#

Is there a way to install something like bungeeguard for forge servers?

wet stirrup
#

I don't think geyser has a bungeecord/waterfall plugin? I think it might be going wrong there.

#

So thats probably where the problem is. I am surprised people can even join through the waterfall with bedrock ReyWhatLol

wet stirrup
royal hawk
#

Oh no, Waterdog

astral sierra
# reef fulcrum use some form of cron type plugin or something

I not get what you mean first 🙂 (i´m not soo home in linux), but it run the command nice in crontab. was a litel work to get it work and recommend use tmux (is not soo hard to set up), only thing is it will run the server in same folder as you run the start command from (so all files end up in that folder). So if it user run it the files end up in home folder.

reef fulcrum
#

cron is a scheduler

#

you schedule it to run commands

#

you just need to create something to attach to the screen or tmux session and throw the command into it

astral sierra
# reef fulcrum you just need to create something to attach to the screen or tmux session and th...

Made it work, however, it puts all server files where I put startcript (.sh) for tmux.

I had a bit of a problem getting the jar file running, so I ran it on test manually, then realized that it loads the files according to where it starts from.

Then to find the panel I had to run sudo first.

crontab -e was someone who taught me, so it can be pretty good now, tmux was new experiences.
Will get working on the next server so I can log in and test 🙂
By the way, can I get watterfall / bungee to connect to servers on another computer within the same network?

astral sierra
#

I seams too solve last part too 😛 I only run this on test, so have only windows (so run linux on VM), so I have to solve the problem I ask for in last part 🙂

It work really smooth (only have sort out the files when try use it live server).

Will it bee possible to translate and change messages like "summon to lobby by console" (i perhaps can fix it true a plugin, but i try to have so lite plugin i can on the hub)?

reef fulcrum
#

I mean, fi bungee made those translatable, grab the messages file and edit it

astral sierra
#

only way is see is compile the jar with own translations (i think is not so hard, has compile a plugin (not made it only use the code on github)).

reef fulcrum
#

You can literally just throw the messages file in the same folder as you're running the proxy

astral sierra
#

aa, that work too nice thanks 🙂

neat shadow
#

Hi, im looking for help with an issue thats happening with waterfall

#

.... [21:02:20 INFO] [LuckPerms]: [Messaging] Received user update ping for 'teacherabood' with id: 1978d150-e5fa-4f03-a239-66f977c89252
.... [21:02:20 INFO] [LuckPerms]: [Messaging] Received user update ping for 'teacherabood' with id: bc93ec07-6baa-43d5-9738-fc4ee09c7394

#

For some reason, theres 2 joins happening when a player joins the server

#

and each join the player has a different uuid

#

I only noticed this today when we enabled debugging in our playertracking plugin

#

which is breaking because of the 2 joins

royal hawk
#

@neat shadow this looks like your bungeecord is in online mode, your backend server is set for information forwarding but has bungee online mode set to false

neat shadow
#

bungeecord: true in both spigot.yml's for the 2 hubs

royal hawk
#

And I assume you’re using paper?

neat shadow
#

yes

royal hawk
#

Check the paper yml

neat shadow
#

bungee-online-mode: true on both hubs

royal hawk
neat shadow
#

Im so confused lol

#

I have literally no idea why its happening

royal hawk
#

I’ve had that conversation earlier;; I’ll cook something up to help you diagnose in a second

neat shadow
#

Thankyou

#

free free to tag or pm me

royal hawk
#

Waterfall or travertine?

neat shadow
#

waterfall

royal hawk
wispy vault
#

Hey so here is my file setup and for some reason the server-icon.png doesn't show up. Any reason why?

marble kelpBOT
#

does it have the correct size?

wispy vault
#

How do I check that

reef fulcrum
#

make sure you're not using ping passthrough, beyond that, check that the png meets the requirement, and maybe try refreshing a few times or something, there is some known vanilla bug there of god knows wth

wispy vault
#

Also it is the correct 512x512 size does it have to be something else?

reef fulcrum
#

No, it was like 64x64 or something

#

and that option was in config.yml

wispy vault
#

ohh

shut stirrup
#
io.netty.channel.unix.Errors$NativeIoException: bind(..) failed: Address already in use```
#

any idea what would be taking up that spot

#

nothing else is running

#

plugins are 1. skungee 2. that's it

#

removing skungee doesn't fix

reef fulcrum
#

use whatever tool your OS provides to check for what's listening to connections

shut stirrup
#

what does ubuntu 20.04 have

reef fulcrum
#

lsof -i

shut stirrup
#

that's the command?

reef fulcrum
#

yes

#

lsof -i | grep LISTEN

shut stirrup
#

ok

#

it just did nothing

reef fulcrum
#

try without the grep

#

might also need to sudo 🤷‍♂️

shut stirrup
#

just lsof -i only shows firefox

#

oooo

#

found something

#

just called java

#

but it says it's listening on 25565

reef fulcrum
#

That would either imply that you left the server itself on that port, or, you somehow got some stale instance in the background or something

shut stirrup
#

should i restart my server?

#

like the whole machine

reef fulcrum
#

make sure you changed the port, but, yea

#

just gotta find what that process is

#

there is always the kill command

shut stirrup
#

ill just restart

#

thanks for the help

#

also general question while im here what is travertine it sounds weird

reef fulcrum
#
  • 1.7 proto
shut stirrup
#

?

#

what do u mean

reef fulcrum
#

waterfall with 1.7 protocol support

shut stirrup
#

so its just old waterfall

#

but new

#

alr still won't work

reef fulcrum
#

in config.yml, disable the local bind

shut stirrup
#

ok

#

so bind_local_address to false?

reef fulcrum
#

yes

shut stirrup
#

what does that control

#

didnt work btw

reef fulcrum
#

it erm, does extra binding of local, I think, I got no idea, never had any issues with it but apparently some have recently

#

did you already start the server?

shut stirrup
#

i shut it down, set it to false, and then turned it back on

reef fulcrum
#

I mean, the paper server or whatever

shut stirrup
#

nope

#

just the waterfall is going on and off rn

reef fulcrum
#

You'd need to check what's binding that port i guess

shut stirrup
#

the port for paper server is 25567

#

same for query port

#

btw weird thing is is that it worked for one try but now its not working

#

wait

#

maybe it is skungee

#

things only stopped working when i installed skungee

#

A

#

yep it was skungee

#

i had to set it to a different port

#

thank u

hazy kiln
#

Where can I find a good walkthough tutorial on setting up a waterfall server network? I'm converting my 10 world paper / multiverse based server over to waterfall and don't see clear instructions on the waterfall site. (such as how to setup the config.yml on the host & client servers)

#

For example:
What is forced_hosts:
pvp.md-5.net: pvp

  • Do I close unused options like permissions: with [] (Since I use LuckPerms)

  • Why is no world generated when the server starts like Paper?

    • Where do you assign the primary world per server?
  • Where are the bukkit.yml, spigot.yml config files?

hazy kiln
#

This Waterfall.jar just appears to be a framework, not an actual MC server.....how do I get playable servers with Waterfall?

royal hawk
#

@hazy kiln forced hosts is when you want, for example, players to directly connect to PVP if they are using pvp.md-5.net as address. You close the permissions with simply: permissions:. Waterfall is a proxy; its not a server. It connects you to servers simply with a command, without having to go back to the server selection screen.

hazy kiln
#

So I just break apart my 10 mutiverse worlds into 10 separate paper (or other sever variants like forge) and point waterfall to each one?

#

Since each multiverse (MV) world is going to be it's own paper server do I have to rename the custom MV world name to world

royal hawk
#

Yes that would work; but beware: Proxies dont allow you to share inventories or any other player data between servers

hazy kiln
#

Ok good to know I'll keep my RPG survival worlds together

orchid plover
#

You could use the MySQLPlayerDataBridge plugin for sharing inventories across multiple servers.

royal hawk
#

That’s still a bad idea

shut stirrup
#

i'm having trouble setting up a server that isn't on the same machine as the main bungeecord any help

#

it just times out

#

nvm

#

had to shift around some IPs

tidal musk
#

Anyone know why this happens?

royal hawk
#

Networking issue?

royal drift
#

Hello why is this happenning to me in my server? Could not connect to default or fallback server, please try again later: io.netty.channel.AbstractChannel$AnnotatedConnectException
this appears when trying to join into the proxy

#

I also blocked all the ports from 25500 to 25599, 25565 is the only one open

untold ember
#

soo when is there a 1.16.5 Waterfall Jar?

reef fulcrum
royal hawk
#

@untold ember waterfall needs absolutely no update to work with 1.16.5

untold ember
#

ok thx

royal hawk
#

1.16.4 and 1.16.5 behave like 1.8-1.8.9, it’s the same to the proxy

#

Ie, the Proxy can’t tell the difference anyway

royal drift
#

eh anyone .....

reef fulcrum
#

your connection between the proxy and the backend servers is failing

#

I also blocked all the ports from 25500 to 25599

#

If everything is running on the same machine, bind the servers to localhost and connect over localhost

#

if that's ptero, you'll need to use the ptero interfaces IP

royal drift
#

how do I bind the servers to localhost?

royal drift
#

how do I do it xD

reef fulcrum
#

So, get the IP address of the ptero interface (see ip addr), and configure all the servers to use that IP address to bind to/communicate over

royal drift
reef fulcrum
#

Please don't ping

#

it should give you a list of interfaces and addresses

royal drift
#

Oh sry I forgot that reply pinged

reef fulcrum
#

look for the pterodactyl interface in there, grab the ip address of it

royal drift
#

It says a lot of pterodactyl0

#

12 for be exacly

reef fulcrum
#

paste it

royal drift
#

172.18.0.1 I guess its this one, can you check?

reef fulcrum
#

that sounds like the correct IP

#

I don't download files, too much crud in my downloads folder already

royal drift
#

xD ok

#

And than restart wings and the server and it should change the server-ip in server.priorities of the lobby server to this one

#

thats what I need to do?

reef fulcrum
#

idk what you're looking at

#

You need to configure the IP address of all the servers to use that IP address

#

and then configure bungee to use it

#

if you have any questions, you'd be better off asking in the ptero discord

royal drift
#

Configure in server.properties?

reef fulcrum
#

no, in the panel, leave server.properties alone

royal drift
#

oh ok

#

lobby:
address: 172.18.0.1:25569
motd: |-
§c§lPaTz§f§lMC§r (1.8 - 1.16) §fMELHOR SERVIDOR
DE MINECRAFT DE &2PO&eR&4TUGAL
restricted: false

#

It did not work.

reef fulcrum
#

make sure that your firewall rules aren't blocking it

royal drift
reef fulcrum
#

beyond that, speak to ptero for support, we can't really help with network issues

#

you literally have a DROP rule

#

remove it

royal drift
#

Its what its in the BungeeCord wiki

#

;-;

#

the proxy port is still open

reef fulcrum
#

the bungeecord wiki is wrong for ptero

#

Yes, but you're blocking the traffic for the actual servers

royal drift
#

Hum ok

#

Ill do that

#

How do I protect my servers than?

reef fulcrum
#

You're using a private network interface which is not exposed to the world

royal drift
#

Mate I know you said I needed to ask Pterodactyl but can u say me whats wrong this last time?

#

lobby:
address: 172.18.0.1:25569
motd: |-
§c§lPaTz§f§lMC§r (1.8 - 1.16) §fMELHOR SERVIDOR
DE MINECRAFT DE &2PO&eR&4TUGAL
restricted: false

reef fulcrum
#

I don't know

#

if you binded stuff to the correct thing as I said, it should work

#

I've advised doooozens of people to do that for years and it's worked perfectly fine for all of them

#

best guess would be make sure that you're still not dropping traffic

#

if you're blocking by default, make sure that you allow traffic over the private interfaces

#

I got no idea how iptables works there as docker networking is generally ass

royal drift
#

I dont know what I did because this was working some time ago

#

I probably did something that well destroyed everything

#

Im gonna try

royal drift
#

Yey thank you for all your help! I am stupid and that's it :). iptables for some reason was still blocking the ports but I fixed it 😉

terse locust
#

hello my bungeecord is consuming a lot of cpu +300+400%

reef fulcrum
#

use a proper sampler/spark

barren terrace
#

Hello, what are the features included in Waterfall ? And how to migrate from Bungee to it ?

tough island
#

Bungee to waterfall is pretty much drag and drop

next birch
#

are there a plugin which allow player to login in to their last server they join after they go through the lobby

royal hawk
#

What do you want to do here? A lobby is generally there to allow users to select the server they want to go to. That makes little sense if you’re sending the user to another server from the lobby if you don’t allow them to choose. You should instead disable force default server in the config, that will connect the player to whatever server they were on before they disconnected and skip the lobby

tough island
next birch
#

well i have two part of paper one is survival group and other is minigames group
after player login to lobby player will go into a portal if that portal is survival.They will send to the player that last login places

tough island
#

That also reminds me... I want to set up the forced hosts.

barren terrace
#

How to migrate from Bungee to Waterfall ?

severe badger
#

It's a drop in replacement

placid monolith
#

1.8 Waterfall link please?

severe badger
#

Same as for any other version.

placid monolith
#

But I can't seem to find the Legacy like on Paper

#

nvm I clearly am very dumb

barren terrace
#

What are features of Waterfall that Bungee doesn't have?

placid monolith
#

Would guess exploit fixes

severe badger
#

That and optimizations ig, but velocity >

royal hawk
terse locust
#

any pro with spark

young rampart
#

.ask

marble kelpBOT
#

If you have a question, please just ask it. Don't look for staff or topic experts. Don't ask to ask or ask if people are awake or available. Just ask the question to the channel straight out, and wait patiently for a reply.

tidal musk
#

Is there a way to restrict access to certain servers? So I can have no like a staff server, which is connected to the main network but only staff can join

cold hamlet
#

so what lib am i miising here?

nocturne fog
#

@cold hamlet this is your host's issue. You'd have to speak with them, nothing you can do

cold hamlet
#

k, will do

nocturne fog
#

If you give them that error, to someone who knows what they are doing it is super obvious so they should be able to figure it out no problem.

royal hawk
#

@tidal musk ¯_(ツ)_/¯ you could have a whitelist on that server but I’m sure there are plugins for that

normal depot
#

So is there a way to connect from one proxy to another proxy?

#

like from Lobby on Waterfall 1 to Lobby on Waterfall2?

reef fulcrum
#

no

#

there is 0 sane reason to do that and it creates potential issues

normal depot
#

hmmm

marble kelpBOT
#

I really wish we could handover the connection to another server like in Bedrock :S would allow the only usecase where I actually tried to have two proxies behind each other (linking to partnered servers) in a way smoother way

#

I've wanted that for eons

#

my first post on spigot was about that

reef fulcrum
#

I was hoping forge was gonna add that, woulda made dealing with mods much easier/cleaner

eternal pulsar
#

how can i increase the player slots? i have increased it but players can't connect to server when it reaches 10

reef fulcrum
#

the player limits for waterfall are in config.yml

#

if you mean the actual servers themselves, you'd need to increase it there

eternal pulsar
#

will look it up in config, cheers

#

max players is 100 in config.yml

#

but only 10 can join

reef fulcrum
#

well, what's your servers max player limit?

eternal pulsar
#

my backends?

reef fulcrum
#

yes

#

either the proxy is limiting or, or your backend is limiting it

eternal pulsar
#

i've increased them to, for example survival is 50, maybe my lobby is limited

reef fulcrum
#

It would be the servers in your priority list which control the limit if players have to connect to those

eternal pulsar
#

in my priority list i only have my lobby, i don't have to add my survival if i don't want to right?

reef fulcrum
#

it's a list of servers in the order it tries to connect players to them

#

if you only have your lobby server in there, then people will only try to join the lobby server, which if they're new players, or they DC'd from that server (or you have force default on), they won't be able to join if they can't join that server

eternal pulsar
#

[22:12:47 WARN]: No client connected for pending server! is the error i see in console when the player tries to join

reef fulcrum
#

that often screams a plugin or something kicked them iirc

eternal pulsar
#

i have force default on true, so that means my lobby is preventing the players from joining right. assuming i only have lobby in my prio list

reef fulcrum
#

if you hit the limit on that server, yes

eternal pulsar
#

weird because there are 0 players in my lobby, even with that i have my max players 100 on waterfall as well as lobby and survival

#

found the issue

#

there is a max_player and player_limit in config.yml and i was changing max players all the time

jovial edge
#

i recently switched to paper after using spigot for a while. should i also switch to waterfall? and how hard is the bungeecord to waterfall switch? can i just replace the jars and call it done

reef fulcrum
#

yea, just a simple jar replace

jovial edge
#

ok

#

so configs are fine

#

and will all my bungee plugins still work? its just viaversion, geyser, and one that i wrote

reef fulcrum
#

yup

jovial edge
#

great!

reef fulcrum
#

only real caveat I know of is waterfall.yml, async DNS, if in docker and relying on hostnames for containers and such, gotta disable that

jovial edge
#

hostnames>

#

?

#

everything is run on the same pc

reef fulcrum
#

if you don't know what that means, ignore it ;P

jovial edge
#

k

#

whats travertine?

reef fulcrum
#

waterfall + 1.7

jovial edge
#

ah

#

my server is 1.8-1.16 so i can just use waterfall right

reef fulcrum
#

yes

jovial edge
#

k thanks

spring lodge
#

is the latest waterfall build working with 1.16.5?

reef fulcrum
#

yes

spring lodge
#

but

#

protocolize throws warnings

green palm
#

report that to protocolize then

spring lodge
#

but protocolize is already updated

#

protocolize is newer than waterfall xD

reef fulcrum
#

755 is not even a real protocol version

tough island
#

They probably didn't read the announcement and assumed there's a new version...

lusty birch
#

New version could mean new issues

reef fulcrum
#

Yea, they did

#
1.16.4 (protocol version 754)
1.16.5 (protocol version 755)
tough island
#

Hahaha

lusty birch
#

lol

green palm
#

"Aegis" lol

tidal musk
#

somebody can help me setting the fallback server?

#

like when a server restarts it send me at the hub instead of kicking me out

reef fulcrum
#

You'd need a plugin for that

tidal musk
#

what can i use?

#

i don't know any plugin that do that work

tough island
#

You could also script it.

tidal musk
#

how?

tough island
#

when you shut down the server, get the console to fire off /send current hub

#

Also.. I got bored and configured Forced Hosts.. Very nice

tidal musk
tough island
#

Same as SNI based routing for webservers

tidal musk
#

u.u cool

astral sierra
#

Is not easy find any good way too send player too hub, you cant use bungee commands in the minecraft server console.

The only plugin some i find some give you that option are CommandSync (it link bungee to your servers) , but are old so ether it not work or can have exploits some not will be fixed.

I self think too use script and use tmux (so is I not version dependent).

royal hawk
#

@astral sierra as long as the player is connected to the server it’s very much possible; what are you trying to accomplish?

astral sierra
#

True script and tmux I find a way, but not from a plugin (no plugin I find has option too use send all onlineplayers to hub). Only work if player use a command. You cant use bungee commands in a server directly (I need to be in bungee console).

I try auto send players to hub, when server restart.

stable granite
#

hey there. yesterday my bungee-waterfall server has been attacked with some weird packets (cf. PDF file). after a while it crashed. has someone an idea how to secure it so this won't happen again?

reef fulcrum
#

I was gonna look at restricting how long that data can be, bungee has it set to an excessive size, beyon that, a plugin could probably do the same thing to some degree

stable granite
#

ok thanks is there some plugin that does that or do i have to write my own?

leaden laurel
#

Quick q? Is waterfall better at exploit handling than bungee?

tough island
#

As waterfall is a fork of bungee, there are very likely exploit fixes that aren't in bungee.

royal hawk
#

That said, even waterfall can only take so much beating. It’s not magic, if you attack it hard enough it WILL buckle at some point

normal anvil
#

Is latest waterfall build compatible with 1.16.5?

surreal stump
#

1.16.5 is a minor release which retains protocol compatibility with 1.16.4 that mean all what is compatible with 1.16.4 works with 1.16.5

normal anvil
#

Thank you!

forest stump
tough island
tough island
forest stump
#

But I'm not using scoreboards o-o I will try remove scoreboard.dat file in worlds to see if it fixes

cunning sable
#

Hi

#

I need help in configuring the server

#

could someone help me with allowing different versions of the game to be in the same server

royal hawk
#

Nobody here will walk you through the process on configuring waterfall step by step. Go read the official bungeecord installation guide and come back here if you have questions.
As for multi version-support, you’ll need to use either ViaVersion (+ViaBackwards/ViaRewind) or ProtocolSupport or a mix of both depending on what versions you want to support. Refer to their respective plugin pages to learn more

cunning sable
#

ok, thxs

eternal pulsar
#

is there a way to allow specific users to join server x and the rest not? maybe with the help of luckperms? i can't get it to work

severe badger
#

Permissions.

eternal pulsar
#

it is this one right?

#

bungeecord.command.server for example assign bungeecord.command.server.X deny to default

severe badger
#

That is most likely documented within the bungeecord docs.

maiden quiver
#

does waterfall fixed nullping crashing?

unreal stag
#

@maiden quiver "nullping crashing" has been fixed since July.

dawn umbra
#

guys i keep getting this when a player or i get kicked back to hub with a message that says the serve you where on previously went down so you where send to the fallback server. how can i fix this?

crimson nymph
#

how do i add a server icon to my server

dawn umbra
#

on you server you require a 64x64pixel image called server-icon.png

#

then it will automatically load it

crimson nymph
#

i do have one in the same directory as my waterfall.jar

dawn umbra
#

yes

crimson nymph
#

but its not working for some reason

#

nvm

sacred flare
#

Portforwarding not working

crimson nymph
#

i just spammed the refresh button and it worked

dawn umbra
#

it might be that it is required on the non proxy server

#

try adding it to your hub and to your example faction server

#

and restart them

dawn umbra
sacred flare
#

I did port forwarding for my server a d tried connecting to it via public ip in another device but it doesn't work

#

I did make exceptions in firewall tho

#

🙂

dawn umbra
#

well that one little hard to explain, but i suggest you do the forcehost machanic too

#

there if you have a fancy domain name you can direct connect via example fac.papermc.gg

reef fulcrum
#

.paste

marble kelpBOT
reef fulcrum
#

icon not showing is some weird known vanilla client issue

sacred flare
reef fulcrum
#

no, you'd just give people who want to connect the IP

dawn umbra
#

it just adds extra security

sacred flare
#

I host only for my friends

dawn umbra
#

i do not really want to send it cause of clients IP's

reef fulcrum
#

I refuse to download logs

#

I got enough crud in my downloads folder

dawn umbra
#

ok so just the snippit of the crash

reef fulcrum
#

not all routers support reverse NAT, you'd need to use a server status site or something to test it

dawn umbra
#

better i t hides the ip's

reef fulcrum
#

Are you using mods?

dawn umbra
#

yes

reef fulcrum
#

Using mods? refer to disable_entity_metadata_rewrite in waterfall.yml

dawn umbra
#

cause it did the same thing when i used bungeecord and right after i reduced the connection throttle on the other servers and network_compression_threshold changed this to 64

reef fulcrum
#

Your server is sending entity metadata which bungee doesn't understand

#

set that option to true and it disables the mechanism in bungee which requires it to understand that data

dawn umbra
#

disable_entity_metadata_rewrite so from false to true then?

reef fulcrum
#

Yes

dawn umbra
#

ty

#

cause it got really annoying and i was to lazy yesterday after i did all the things to my network to ask around and search

somber tulip
#

Hey, can someone help me troubleshoot waterfall? I can send logs

west sage
#

Looks like the server got killed. Are you close to running out of RAM on the actual machine it's running on?

#

What was happening when it happened

#

Etc etc

marble kelpBOT
#

no it doesn't

viscid silo
#

That's not even waterfall

somber tulip
#

oh sorry wrong thing

marble kelpBOT
#

it's a plugin or it got told to stop

reef fulcrum
#

that's the literal stop command

west sage
#

i dont see stop in the log (as in the command but ye could be api call) but ye, not waterfall and i didnt notice

somber tulip
#

I want to connect sub servers and waterfall can't find them

#

I use a domain thing, idk if that would mess with anything

reef fulcrum
#

a domain thing?

west sage
#

we dont have a waterfall log so we can't help you, unless waterfall isn't even the issue?

somber tulip
#

this is the waterfall log

west sage
#

bukkit plugins in the waterfall server

#

no good

reef fulcrum
#

there wasn't even a single connection attempt to it

west sage
#

and that

somber tulip
#

waterfall can't find the other servers (paper)

#

it's as if they don't exist

reef fulcrum
#

We need logs where you actually attempt to connect

marble kelpBOT
#

?? you didn't even connect?

reef fulcrum
#

There is literally 0 useful info in there

somber tulip
#

I'll run it again

reef fulcrum
#

encountered exception: net.md_5.bungee.util.QuietException: Server is online mode!

#

Read the install instructions for bungeecord

somber tulip
#

where's that?

west sage
#

.g how to install bungeecord

marble kelpBOT
west sage
#

Specifically the Post-Installation section.

somber tulip
#

why does it need to have the servers in offline mode?

west sage
#

because bungeecord/waterfall takes over authentication with mojang

#

let the proxy handle it

reef fulcrum
#

because you can't MITM auth or re-authenticate with the same key

somber tulip
#

oh, waterfall does the authentication

#

so the servers don't need it

west sage
#

waterfall stays in online mode, backend servers go in offline mode

somber tulip
#

thanks

reef fulcrum
#

yes, they can't have it enabled because that would break the ability to transfer servers

west sage
#

make sure you read the big red IMPORTANT SECURITY NOTICE too and don't leave your backend servers exposed

#

cause, ye, offline

main saddle
#

so how do i listen for incomming ByteStream packets in Bungeecord..

main saddle
#

well looks like this is dead..

green palm
cyan scarab
#

Hi, does Waterfall/Travertine support 1.16.5 out of the box? (latest release)

cyan scarab
#

Nice thank you

tough island
#

There's no protocol changes in 1.16.5 so yes :)

dawn umbra
#

yo can i make it so that if you try to connect to modded server it doesn't show incompatible ?

#

DM me the answer i am gonna head to bed cause i want to wake up early

rocky turret
#

Waterfall works with spigot?

severe badger
#

Yes.

rocky turret
#

Ty

sour sedge
#

Hi, where can I find a static link to the latest Waterfall release for my automatic update script?

marble kelpBOT
#

check the download api, should be pinned in one of the channels

#

or scroll up in #announcements

sour sedge
#

Oh that's neat. But it looks like there is no route like GET /v2/projects/waterfall/versions/1.16/builds/latest/downloads/waterfall-1.16-latest.jar
So I'd have to do one request to see what the latest build is called and another to download that.
Is this correct or am I missing something?

marble kelpBOT
#

sounds right

sour sedge
#

Nice, thank you for the help!

stark lake
#

After this error my server crashes and players get kicked

https://hatebin.com/ftsksvdrge

I think this is some kind of query attack so i tried to disable query in proxy config but it keeps turning back to true after i restart.

tough island
#

Check your DNS

#

Are there any DNS related warnings prior to that

reef fulcrum
#

All we can tell you is that a DNS request failed, could be many things such as just a bad moment for the network

#

waterfall will by default force google DNS because of the netty dns stuff configured in waterfall.yml

tough island
still whale
#

Sometimes when users connect they Cant do anything. no commmands. cant move (can but its client side) and cant chat.

#

Can anyone help me with this real quick?

reef fulcrum
#

.895

marble kelpBOT
still whale
#

But its not all the time. its almost like its random

vernal geode
#

how do you make a block float in my lobbyu?

#

you cant pick it up too

#

and it doesnt collide

reef fulcrum
#

wrong channel, you'd do that on the server itself, not the proxy

vernal geode
#

ah ok

#

but how do u do that

dawn umbra
#

it is correct server it has all the mod in the server

reef fulcrum
#

use ping passthrough

dawn umbra
#

magmafoundation.org i am not using sponge forge

#

i am using the server i gave now

reef fulcrum
#

Yes, use ping passthrough

#

waterfall will reply to the FML ping, but, it won't forward it to the server, so the client won't see the mods list and stuff

dawn umbra
#

ping_passthrough is enabled proxy side

#

didn't even have to go change it

inner pelican
#

So umm. I'm having problems with my bungeecord server, when i switch servers it takes 5-7 seconds for me to join. This doesn't have to do with my ping and yes i've tried deleting my plugins but nothing works. Here's my configuration in Waterfall https://pastebin.com/5r4WJDqA
I appreciate any help from this community and please ping me when you know a solution for this, thanks...

tidal musk
#

Is there new waterfall version for 1.16.5 or is it "auto updating" ?

tough island
#

tbh there's no need for a new waterfall version because there are no protocol changes and everything that was changed in vanilla has already been implemented in paper... so Tl:dr; No, there is not...

dawn umbra
dawn umbra
#

really and core team or dev that can tell me how to fix the issue i have

#

cause i have ping passthrough on

somber forge
#

I started a PaperMC server by running the jar once, setting eula to true and running the jar again.
Now I want to try Waterfall, again ran the jar, but rerunning it won't start the server.
Am I too impatient or do I need to create a "start" file like for bungeecord? Or is it something else? I couldn't find installation instructions.

marble kelpBOT
#

well what issue do you have on first run?

dawn umbra
somber forge
tidal musk
#

If I had a server for people who are jailed, is there a way to direct them to a different server rather than the main lobby?

marble kelpBOT
#

with a plugin, sure

#

ideally whatever plugin you use for punishments has support for that kind of setup built in

tidal musk
#

Ok

somber forge
#

I have a waterfall server running, but when trying to connect to it on localhost:25565 I get an exception:

royal hawk
#

.paste a copy of your config

marble kelpBOT
somber forge
royal hawk
#

@somber forge uhm you realize that in the second picture you were able to connect to it successfully right? Waterfall is a proxy that connects people to servers, what happened here is that it wasn’t able to connect you to the first server you specified

somber forge
#

Okay that's good to know, but that doesn't help me. I thought, with a fresh default config (without any changes), this should be ready to go, so I'm wondering what I'm doing wrong.

royal hawk
#

Did you expect Waterfall to be a server? It’s a proxy; a fake server you use to link real servers together

#

^ should help

somber forge
#

Oh I see, that's a good hint, thank you 😄

tidal musk
#

Today my waterfall kicked 50 people with this message ReadTimeoutException : null

#

this is caused by what?

royal hawk
#

Networking or system issue

#

Do you have a firewall that uses rate limits? If yes then that’s likely the cause. Hosters like OVH have that too

tidal musk
royal hawk
reef fulcrum
#

All we know is that we didn't get s packet in 30 seconds

#

That's basically outside of what anybody here can really provide support for outside of saying to check your network, etc

#

Some route going down and taking out a dozen players is hardly rare

lone void
#

Hello, is there a debug log that Waterfall has? I am having a disconnect issue with my server only when i'm on a proxy - removing proxy everything works fine. There is no error displayed in proxy console when it happens though

marble kelpBOT
#

well what message does it show?

lone void
#

a simple disconnection message

marble kelpBOT
#

well, which one...

lone void
#

the BungeeChat plugin announcing my join, then my disconnect

#

nothing else relevant

marble kelpBOT
#

that looks more like you switched the server, not that you disconnected.

#

if you think that your server disconnected you look at its log

lone void
#

nothing in server log but in proxy log is bad packet ID, are mods in use!? Did not read all bytes from packet class net.md_5.bungee.protocol.packet.EntityEffect 79 Protocol GAME Direction TO_CLIENT

reef fulcrum
#

...

marble kelpBOT
#

well that's pretty clear, ARE mods in use? if so remove them and try again

reef fulcrum
#

"Nothing else is relevant, i'm just seeing a disconnect message"

lone void
#

i just found it what

#

and phoenix that breaks the purpose of a modpack but if theres nothing u guys can do ok thanks anyway for help ❤️

reef fulcrum
#

it's a known waterfall issue due to the nature of fixing some other forge issue

#

Apparently one of the item mods do it, but, I've yet to spot that code as I was just gonna make it write that data through if possible

marble kelpBOT
#

could try using velocity instead 👀

lone void
#

i was worried you'd say that

reef fulcrum
#

if you're cpable of compiling yourself, drop the forge race condition patch

lone void
#

I can definitely compile myself but do you have a link or a general direction of where to look for that? Google is giving me 9 year old stuff 😄

#

I see what I have to do now my bad and thank you 😄

reef fulcrum
#

I mean, our repo is on github, not whatever that repo is, but, that's the patch that causes the issues

glossy yacht
#

I know this isn't specifically a waterfall error but it still relates to waterfall. Why is there no class found for this?

reef fulcrum
#

for what?

glossy yacht
#

Sorry. Had to create a paste of the error.

reef fulcrum
#

Because bungeecord is not bukkit

#

that plugin is not a bungee plugins

glossy yacht
#

holy fuck

#

im sorry i am legitametly braindead

#

thank you jesus

#

IM A DEVELOPER HOW DID I NOT
o

#

im gonna go have a meltdown

#

thank you for helping me

olive robin
reef fulcrum
#

20:45:05 [SEVERE] java.lang.IllegalArgumentException: Server lobby (priority 0) is not defined

#

your priority list points to a server which doesn't exist

shadow dawn
#

does waterfall do the same things as bungiecord, and if not, does bungiecord work with papermc?

severe badger
#

Yes & yes

shadow dawn
#

k

#

im mainly just looking for a queue feature

rugged portal
#

Hello! I'd like to know the changes Waterfall has made to BungeeCord

marble kelpBOT
#

take a look at the patches folder

rugged portal
#

Thanks

ivory mirage
#

I am getting some waterfall config errors, should I put them here?

reef fulcrum
#

.paste

marble kelpBOT
ivory mirage
#

Is it fine if it shows a server IP in it?

reef fulcrum
#

we generally don't care

ivory mirage
reef fulcrum
#

your MOTD's are misformatted

#

missing the space between the key and the value

ivory mirage
#

Oh it fixed it! Thank you!

fading plinth
#

with travertine can u connect a 1.8 server with 1.16?

reef fulcrum
#

no

marble kelpBOT
little garden
#

Can anyone give me an idea of what seems to be happening here?

[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /199.7.68.251:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /217.75.219.246:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /91.229.3.152:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /95.85.31.219:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /87.244.121.214:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /8.8.8.8:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /46.144.17.28:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /82.141.128.226:53
[10:02:40] [Netty Worker IO Thread #0/WARN]: Query - Incorrect magic!: /87.240.102.18:53
#

had this with various IP's spammed thousands in the console shortly before waterfall crash

#

what's weird is they're using a dns port with a dns IP?

marble kelpBOT
#

might be a dns redirection attack or however that is called

little garden
#

Is this a vulnerability on our side?

reef fulcrum
#

not exactly

marble kelpBOT
#

not sure if there is a way to avoid people pointing their nameserver at yours lol

little garden
#

Dont even have any sort of NS on the server, all ports closed except the MC port

reef fulcrum
#

i forget how UDP works as for the source port, if it uses its own port that you conneted to or creates a new one

marble kelpBOT
#

I personally would just block requests from/to port 53 on your server if you don't host your own nameserver

reef fulcrum
#

basically, you could try to exclude packets from 53 ^

little garden
#

53 is DNS? Blocking port 53 wouldn't be good...

reef fulcrum
#

But, it's literal "anything exposed to the internet needs to process requests from the internet"

little garden
#

how would bungee auth with mojang?

reef fulcrum
#

from

#

the source

#

you'd add a rule to allow connections from your own end, iptables calls it related or something iirc

marble kelpBOT
#

you should block incomming connections from that port

#

iptables has a way to only block new connections but allow established (the ones that started on your end and got a reply)

little garden
#

What confuses me the post is how the IP's spoofed?

#

Or atleast they must be

#

8.8.8.8 is google DNS how is it sending data towards my server.

reef fulcrum
#

it's UDP

marble kelpBOT
#

you can spoof the sender address contained in the packet but technically it's not too hard to get other DNS/nameservers to query a random server (by claiming that it's the nameserver for some domain and them trying to cache it)

little garden
#

so someone could have spammed googles dns, with fake udp packets saying they're from my IP which caused google to send loads of stuff my my server..

#

I think i've heard abotu with with NTP server attacks

reef fulcrum
#

potentially, yes

#

NTP is the exact same flaw

marble kelpBOT
#

they could've also just spammed your server with their addresses

reef fulcrum
#

Well, leverage concept

little garden
#

I appreciate you taking the time to help me understand this

reef fulcrum
#

NTP and DNS both reply with a packet larger than the request itself generally

marble kelpBOT
#

I was under the impression though that this kind of dns amplification attack was somehow prevented now?

little garden
#

it's always dns

reef fulcrum
#

Not really too much you can do about it

#

some of the aplification attacks where down to a bug or a common misconfiguration issue iirc

humble thistle
#

How can i select the force_default_server: true?

reef fulcrum
#

priority list

humble thistle
#

priorities:

  • Lobby
  • Survival
#

So alwais join first Lobby?

little garden
#

yes

marble kelpBOT
#

oh, so it's on ISPs to verify the sender of UDP packets to mitigate that properly, I see

humble thistle
#

EggWars:
address: 172.18.0.1:25570
motd: '&1Just another Waterfall - Forced Host'
restricted: false

#

and this of restricted whats mean?

reef fulcrum
#

if they need a perm to join it

humble thistle
#

i put lobby in priorities

#

and force default server

#

and they join in other server

reef fulcrum
#

did you restart the proxy?

humble thistle
#

yeah

#

only the bungee

marble kelpBOT
#

.paste your full config

#

please paste it

#

nobody wants to download dozens of random files

little garden
#

why is the config inside the log?

marble kelpBOT
reef fulcrum
#

I mean, you have a server called Lobby

#

which you clearly have a plugin moving people to that server

#

I mean, called Login

marble kelpBOT
#

JPremium

#

oof

humble thistle
#

what?

reef fulcrum
#

99.9% chance, it's that plugin causing it

little garden
#

oh god i hope i turned off auto ping, sorry if i didn't

marble kelpBOT
#

looks correctl, although I would just block all sourfces ¯_(ツ)_/¯

reef fulcrum
#

can just block incoming source 53 to whatever your mc port is

marble kelpBOT
#

iptables -A INPUT -p udp --sport 53 --dport 25565 -m state --state NEW -j REJECT --reject-with icmp-port-unreachable should do the trick without blocking too much if it goes wrong lol

#

actually I'm not too sure if drop or reject is better here. my thought for using reject was that it could lead to DNS servers realising that they should not send further traffic there

tough island
#

IMO Always drop

marble kelpBOT
#

but dropping will obviously stop it from sending packets back but with DNS amplification attacks the pure size of the packet is usually the issue, not the amount of them

reef fulcrum
#

general gist is to not waste CPU dealing with invalid stuff

#

if you're not expecting DNS queries against your machine, no reason to send a message back for them

marble kelpBOT
#

hm, I guess I could check cloudflare/google dns docs and see if maybe one can send a certain status back to indicate such issues

reef fulcrum
#

Well, your command there told it to send back an unreachable message

marble kelpBOT
#

yeah, using a prohibited one might be better

#

hm, can't really find anything about that. kinda annoying that one can't tell them to not send any traffic your way in the next couple minutes/hours

reef fulcrum
#

Not really viable for something like DNS when you consider things like CGNATs, etc

marble kelpBOT
#

hm, I guess

#

they really should've went with a large address space from the start -.-

reef fulcrum
#

I'm just waiting for ipv6 exhaustion

marble kelpBOT
#

I doubt we will have that issue any time soon. the AI(s) will use their own system that we don't understand to address stuff anyways

reef fulcrum
#

Well, yea, but

#

we said that about v4

marble kelpBOT
#

pretty sure people didn't think about AI back then :P

reef fulcrum
#

I need my v6 address while on mars

marble kelpBOT
#

just let ipfs deal with it

#

I mean there are more ipv6 addresses than human neurons on the planet so ¯_(ツ)_/¯

#

the space is definitly enough to give an AI enough networking space to simulate a brain xD

reef fulcrum
#

Well, yea, but, somebody creates one, and then somebody creates another... and then somebody sends one to mars... 😄

marble kelpBOT
#

and there is more ipv6 than estimated stars in the universe, we are gonna be fine for a long time lol

#

(well observable universe I guess)

reef fulcrum
#

.g how old is ipv4

marble kelpBOT
#

Internet Protocol version 4 (IPv4) is the fourth version of the Internet Protocol (IP). It is one of the core protocols of standards-based internetworking methods in the Internet and other packet-switched networks. IPv4 was the first version deployed for production on SATNET in 1982 and on the ARPANET in January 1983. It still routes most Intern...

reef fulcrum
#

sips tea

marble kelpBOT
#

I guess one could calcualte how long ipv6 will be enough by taking into account some formula for the tech growth and putting that into relation with how long ipv4 lasted

#

but at that point I don't even care anymore, I believe that the technological singularity will come soon anyways :P

reef fulcrum
marble kelpBOT
hoary osprey
#

alright sorry if im sounding a bit desperate, but im having a little problem with my server security:
im running a minecraft server with bungeecord and today one of my admins (according to logs) gave a player "*" on luckperms, which he used to run several hazardous commands and damage my network. we set up things like 2fa and such things in attempts of patching this issue, but 10 minutes ago this has happened again
the "hacker" in question is able to run luckperms commands directly from my bungeecord proxy, giving himself any permission he wants

before i remove every permission from the admin in commands, could anyone give me any insight on why this may be happening?

#

nevermind, apparently he managed to log in as the admin as well

#

and bypassed 2fa

#

somehow

marble kelpBOT
#

if you are sure that your firewall is setup correctly (and you run online mode) then that sounds like a malicious plugin or some web panel/backend access

#

(technically it could also be the case of a book with a click event but I would hope that people that have admin ranks don't click stuff in books that they got from random players...)

hoary osprey
#

im running online mode, and firewall is setup correctly

#

if this helps, they have sent me an image

#

i have absolutely no idea what this is