Direct access to the Arka Paper server may allow players to bypass checks in the proxy. Restrict network access with modern forwarding.
Step by step
-
Determine which machines the proxy and backend servers are running on. On the same machine, the back server can only listen locally.
-
On separate machines, only allow the backgamer port from the proxy's private network address. Check provider rules and operating system firewall together.
-
Verify that the modern forwarding secret value matches in Velocity and Paper. Announce back server ports to players.
-
Enter the proxy from the external network and switch to the back server. Check if a connection cannot be established when you try to log in directly to the back address from the same network.
Keep in mind
The Forwarding setting does not replace the network rule. Test the two guards separately.