ProxyFlow-Velocity

ProxyFlow

The Velocity Network Security

Stop managing security server by server. ProxyFlow is the definitive security and maintenance solution for your Velocity proxy, providing a centralized, powerful, and efficient shield for your entire network. Every connection is vetted before it reaches your valuable game servers, saving resources and stopping threats at the front door.

From a robust, network-wide maintenance mode to intelligent threat detection powered by real-time APIs, ProxyFlow is the single plugin you need to command your network's security policy.

Why Choose ProxyFlow for Velocity?

Centralized Command: A single configuration file on your proxy controls the security and access for every server in your network. Simple, clean, and powerful.

Peak Efficiency: By blocking malicious connections at the proxy level, your game servers are never burdened with processing unwanted traffic. This saves CPU, RAM, and bandwidth.

Total Control: Gain fine-grained control over who can connect, from where, and how often. From entire countries to individual anonymous connections, you set the rules.

Featherlight Performance: Engineered to be fast and asynchronous, ProxyFlow adds a formidable layer of security with minimal overhead on your proxy's performance.

Feature Deep Dive

Network-Wide Maintenance Mode

Take your entire network offline for maintenance with a single command. ProxyFlow's maintenance mode is superior to single-server solutions.

One Command Control: Use /maintenance on the proxy to instantly enable or disable maintenance for all servers.

Custom Proxy MOTD: The server list will display a fully custom MOTD, informing players of the ongoing maintenance.

Centralized Bypass: Staff with a single permission (proxyflow.maintenance.bypass) can seamlessly connect and switch between backend servers while maintenance is active.

Advanced Threat Intelligence (VPN/Proxy Blocking)

Protect your community from bad actors hiding behind anonymous connections.

Real-Time API Integration: Leverages the powerful proxycheck.io API to detect and block connections from VPNs, public proxies, and even TOR nodes.

Staff Bypass: Grant trusted staff members permission to bypass this check if needed.

Geographic Access Control

Dictate which parts of the world can connect to your network.

Blacklist Mode: Block a list of specific countries from connecting.

Whitelist Mode: Only allow connections from a list of specific countries.

Ideal for region-specific communities or for blocking regions known for high levels of malicious activity.

First-Line Bot Defense

Stop bot attacks before they can strain your login servers.

Connection Rate Limiting: Prevents single IPs from spamming connections too quickly.

Username Validation: Blocks connections with invalid usernames that don't conform to Minecraft's standards.

Violation System: Automatically tracks suspicious behavior from IP addresses.

Network Integrity Rules

Multi-Account Prevention: Prevents more than one player from connecting from the same IP address, discouraging unfair advantages and ban evasion.

Automatic Temporary Ban: IPs that accumulate too many violations (e.g., trying to connect too fast multiple times) are automatically temp-banned for a configurable duration, stopping persistent attackers in their tracks.

Commands, Permissions and Configuration

Commands (run on the proxy):

/maintenance - Toggles network-wide maintenance mode.

/proxyflow reload - Reloads the ProxyFlow configuration.

Permissions:

proxyflow.command.maintenance - Grants access to the /maintenance command.

proxyflow.command.reload - Grants access to the /proxyflow reload command.

proxyflow.maintenance.bypass - Allows joining the network during maintenance.

proxyflow.security.vpn.bypass - Bypasses the VPN/Proxy check.

Configuration:

maintenance:
  enabled: false
  motd: "               &4&lMaintenance Mode\n      &lPlease try again later."
  kick-message: "&cThe server is currently in maintenance mode."
  bypass-permission: "proxyflow.maintenance.bypass"
security:
  vpn-check:
    enabled: true
    # Get a free API key from https://proxycheck.io
    api-key: "YOUR_API_KEY_HERE"
    bypass-permission: "proxyflow.security.vpn.bypass"
  country-block:
    enabled: false
    mode: "blacklist" # Can be "blacklist" or "whitelist"
    countries:
      - "US"
      - "CN"
      - "RU"