VeloCity Security - anti-bot, anti-crash. Geyser and Floodga

VELOCITY-NATIVE SECURITY UPDATE A major security and performance update for VeloCity-Security is now available! ━━━━━━━━━━━━━━━━━━━━ Added ━━━━━━━━━━━━━━━━━━━━ Early STATUS, LOGIN and TRANSFER handshake protection PluginMessage checks in both directions Channel register and unregister spam protection Strict brand parser for malformed VarInts and invalid UTF-8 Resource-pack request and status flood protection Backend transfer and redirect-loop protection Improved IPv4 and IPv6 normalization Bounded ASN, VPN and reputation caches Bounded database and firewall executor queues Extended config sanity checks Improved database fail-safe behavior ━━━━━━━━━━━━━━━━━━━━ Improved ━━━━━━━━━━━━━━━━━━━━ Shared high-performance rate-limit engine Reduced temporary allocations during config access Better protection when databases fail to start Backend payloads can no longer use a player's bypass permission Updated Velocity event priorities Improved obfuscation verification against JVM VerifyErrors Geyser, Floodgate, ViaVersion, ViaBackwards and ViaRewind remain supported. This update contains no BungeeCord dependencies and is built for Velocity with Java 21. ━━━━━━━━━━━━━━━━━━━━ Verification ━━━━━━━━━━━━━━━━━━━━ Full clean build completed successfully 9 automated tests passed Obfuscated release classes verified by the JVM 0 test failures Discord: https://discord.com/invite/uwffG2vrRB

VeloCity-Security Update A new security update is now available! Added Login-Queue protection during attacks Added optional Captcha / Verification system Added Resource-Pack URL protection Added Command Argument Length protection Added Fail-Safe mode if databases cannot start Added Config Sanity Check on startup Added manual Lockdown Mode Added /vsecurity lockdown <on/off> Added /vsecurity firewall test <ip> dry-run command Default settings: Login Queue: enabled Command Argument Length protection: enabled Fail-Safe: enabled Config Sanity Check: enabled Captcha Verification: disabled by default Resource-Pack URL protection: disabled by default VeloCity-Security is still in BETA. Please create a TICKET on Discord to request access, report bugs or suggest improvements. Discord: https://discord.com/invite/uwffG2vrRB

VeloCity-Security Update, Update Website

VeloCity-Security Update, Download on Website

VeloCity-Security Update Discord has been fixed! You can now join our Discord server again without any issues.

New Security Update Added PermissionsEx protection The PermissionsEx command protection can block risky /pex and /permissionex command usage. This module is disabled by default and can be enabled in the config. Default: permissionex.enabled=false Added WorldEdit calculation command protection The WorldEdit protection can block risky calculation commands such as //calc and //calculate. This module is disabled by default and can be enabled in the config. Default: worldedit.enabled=false Added ViaVersion compatibility manager VeloCity-Security now detects ViaVersion, ViaBackwards and ViaRewind automatically. This helps prevent unnecessary protocol-related kicks when Via plugins are installed. Default: viaversion.enabled=true