OS OnlySyntax - Plugins
PLUGIN DETAIL

VeloCity Secuirty

Powerful, lightweight and highly configurable security for Velocity Minecraft networks. Built to stop bots, exploit attempts, plugin-message abuse and crash methods before they hit your backend.

Download productv Discord Support ->
LIMBO
IMPORTANT MODULE

Limbo Support

Suspicious joins can be held in Limbo before they touch your backend. Perfect for checking bots, strange connections and risky first joins.

JAVA BEDROCK Geyser + Floodgate
BEDROCK READY

Geyser & Floodgate

Designed for mixed Java and Bedrock networks. VeloCity Secuirty keeps compatibility while still protecting joins, payloads and player identity.

1.8 1.12 1.16 1.20 1.21
PROTOCOL SUPPORT

ViaVersion Stack

Compatible with ViaVersion, ViaBackwards and ViaRewind so your network can support more client versions without losing security checks.

CODE GUARD 
if (payload.suspicious()) {
  proxy.block(ip);
  notify.team("Exploit blocked");
}
ANTIBOT

Handshake limits and first-join checks.

ANTICRASHER

Payload size and exploit channel protection.

ANTI DDOS

Connection and per-IP rate limiting.

EXPLOIT GUARD
REGISTERBRANDPAYLOAD

Suspicious channel and packet detection.

ABOUT

About VeloCity-Security

VeloCity-Security is a powerful, lightweight and highly configurable security plugin for Velocity Minecraft networks.

It helps protect your proxy against bot attacks, suspicious joins, exploit attempts, plugin-message abuse, malicious payloads and common crash methods.

Every important module, limit, permission, kick message and team notification can be configured.

LIVE SHIELD

Proxy protection before backend damage.

Connections, payloads, logins and suspicious player behavior are checked at the proxy layer before they can reach your game servers.

SHIELD ONLINE0.6ms

BLOCK suspicious payload

LIMIT handshake flood

ALLOW trusted player

FEATURES

Protection Modules

EDGE

Connection Firewall

SCAN

Payload Analyzer

TRUST

Reputation Cache

UUIDIPJOIN
  • Limbo support for suspicious joins
  • Geyser and Floodgate Bedrock support
  • ViaVersion, ViaBackwards and ViaRewind compatibility
  • AntiBot and connection protection
  • IP limit per player address
  • First-join security check
  • SlowJoin / slow connection protection
  • Hostname and virtual-host validation
  • Rejoin, ping, command, tab-complete and server-switch limits
  • Optional high-ping join limiter
  • Per-IP handshake rate limiting
  • Per-IP failed-login limiting
  • UUID/IP reputation cache
  • Plugin message anti-crash protection
  • Max payload size protection
  • Suspicious payload pattern detection
  • Deep suspicious payload detection
  • Exploit channel blocklist
  • Brand spoof protection
  • Protocol and login validation
  • Unicode and control-character username protection
  • Optional country block rules
  • Temporary and permanent IP block database
  • Critical, new-player and trusted-player databases
  • IPTable / UFW / firewall integration
  • IP exempt list for local, database, vote and service IPs
  • Backend protection checks
  • RAM usage warnings
  • Console log filter
  • Optional PermissionsEx command protection
  • Optional WorldEdit //calc protection
  • Team notifications with permission support
  • Fully configurable messages, limits, permissions and toggles
  • Obfuscated release jar for better source protection
INSTALLATION

Installation

JAR PLUGINS RESTART
  1. Download the plugin jar.
  2. Put the jar file into your Velocity plugins folder.
  3. Restart your Velocity proxy.
  4. Edit the generated config.properties file.
  5. Run /vsecurity config reload or restart the proxy.

Recommended: Test the plugin on a test proxy before using it on a live production network.

PERMISSIONS

Permissions

ADMIN TEAM BYPASS

system.adminAllows usage of /vsecurity commands.

system.teamAllows team security notifications.

vsecurity.iplimit.bypassBypasses the IP limit protection.

COMMANDS

Control Center

COMMAND PREVIEW

Manage blocks, stats and reloads from one place.

$ /vsecurity stats

OK shield active, 38 threats blocked

$ /vsecurity add temporary 192.0.2.10

BLOCKED firewall rule synced

/vsecurity config reloadReloads the plugin configuration.
/vsecurity statsShows current security statistics.
/vsecurity add temporary <ip>Adds an IP address to the temporary block list.
/vsecurity add always <ip>Adds an IP address to the permanent block list.
/vsecurity remove temporary <ip>Removes an IP address from the temporary block list.
/vsecurity remove always <ip>Removes an IP address from the permanent block list.
/vsecurity reset temporaryClears all temporary IP blocks and removes their firewall rules.
/vsecurity reset alwaysClears all permanent IP blocks and removes their firewall rules.
CONFIGURATION

Fully Configurable

AntiBot Limbo Firewall Bedrock Payload Scan Team Notify
CONFIG CONTROL

Every important limit, toggle and message can be tuned.

Make the plugin strict for attack waves or softer for normal player traffic. Your network, your rules.

  • Protection modules
  • Limits and cooldowns
  • Kick messages
  • Notify messages
  • Bypass permissions
  • Team permissions
  • IP exempt lists
  • Firewall/IPTable behavior
  • Console filter options
  • Country block rules
  • Hostname rules
  • Payload and protocol checks
  • Limbo behavior
  • Geyser and Bedrock compatibility
  • High-ping limiter disabled by default
  • PermissionsEx protection disabled by default
  • WorldEdit //calc protection disabled by default
  • Limbo disabled by default