Welcome to the Hangar Open Beta. Please report any issue you encounter on GitHub!
Avatar for Kaizen-Network

Kick players who connect through a VPN or proxy, or from a country you do not allow, before they join.

Report OriginGate?

OriginGate: VPN, proxy, and country checks at login

Kick players who connect through a VPN or proxy, or from a country you do not allow. OriginGate runs on Bukkit, Spigot, Paper, BungeeCord, and Velocity, and the check finishes before a player enters the world or reaches a backend server.

Features

  • Rules for VPNs, proxies (with allowed countries), country allowlists or denylists, and IP addresses or ranges you list.
  • Every rule has its own bypass permissions, plus a global bypass by player, IP, or permission.
  • IP data from proxycheck.io, IPHub, ip-api.com, IPinfo, or a local MaxMind GeoLite2 file. Combine them, with fallback to the next one.
  • Each IP is looked up at most once every 30 days by default, saved in SQLite or MySQL/MariaDB.
  • Dry-run mode shows who would be kicked, without kicking anyone.
  • One console line per check, daily log files, and staff alerts in chat.
  • On Velocity, works with LuckPerms, ban plugins, Geyser, and ConsentGate.

Requirements

Each platform has its own file. Download the one for yours.

  • Bukkit, Spigot, or Paper: Minecraft 1.7.2 or newer, on Java 8 or newer. Folia is not supported.
  • BungeeCord or Waterfall: API 1.21-R0.4 or newer, on Java 8 or newer. Current BungeeCord and Waterfall builds need Java 17 or newer.
  • Velocity 3.4.0 or newer, on Java 21 or newer.
  • A proxycheck.io API key is optional. Without one, proxycheck.io allows 100 lookups per day; a free account raises that to 1,000.

See compatibility for tested builds and limits.

Quick start

  1. Put the JAR in the plugins folder and start the server or proxy.
  2. In config.yml (in plugins/OriginGate on Bukkit and BungeeCord, or plugins/origingate on Velocity), add your API keys, turn on the rules you want, and start with dry-run: true.
  3. Run origingate reload.
  4. Watch the WOULD-DENY lines for a few days, then set dry-run: false.

OriginGate sends anonymous usage statistics to bStats, with no player names or IP addresses. See what is sent and how to turn it off.

Made by Kaizen Network. Licensed under GPL-3.0-only.

Information

Category
Protection
Published
November 5, 2026
0Downloads
0Stars

Pinned Versions

  • R
    Paper1.8–26.3Waterfall1.21Velocity3.4–4.3.1

Members

1