OS OnlySyntax - Plugins
PLUGIN DETAIL

VeloCity Secuirty

Powerful, lightweight and highly configurable security for Velocity Minecraft networks. Built to stop bots, exploit attempts, plugin-message abuse and crash methods before they hit your backend.

Download productv Discord Support ->
LIMBO
IMPORTANT MODULE

Limbo Support

Suspicious joins can be held in Limbo before they touch your backend. Perfect for checking bots, strange connections and risky first joins.

JAVA BEDROCK Geyser + Floodgate
BEDROCK READY

Geyser & Floodgate

Designed for mixed Java and Bedrock networks. VeloCity Secuirty keeps compatibility while still protecting joins, payloads and player identity.

1.8 1.12 1.16 1.20 1.21
PROTOCOL SUPPORT

ViaVersion Stack

Compatible with ViaVersion, ViaBackwards and ViaRewind so your network can support more client versions without losing security checks.

CODE GUARD 
if (payload.suspicious()) {
  proxy.block(ip);
  notify.team("Exploit blocked");
}
ANTIBOT

Handshake limits and first-join checks.

ANTICRASHER

Payload size and exploit channel protection.

ANTI DDOS

Connection and per-IP rate limiting.

EXPLOIT GUARD
REGISTERBRANDPAYLOAD

Suspicious channel and packet detection.

WHAT'S NEW

New protection modules and safety upgrades.

ATTACK MODE

Login Queue during attacks

During Attack Mode or Lockdown, only a configured number of logins per second can pass through. Extra joins receive a retry message.

LOGIN QUEUE
VERIFICATION

Captcha / verification

Optional code check through chat or /captcha <code>. Disabled by default.

RESOURCE PACK

URL protection

Blocks suspicious resource-pack URLs such as localhost, private IP targets or invalid protocols. Disabled by default.

COMMAND GUARD

Argument length protection

Blocks extremely long commands or arguments against spam and crash attempts. Enabled by default.

FAIL-SAFE

Safe module fallback

If databases fail to start, safe modules keep running and commands do not crash.

CONFIG CHECK

Config sanity check

Checks broken config values, regex patterns, limits and protection modes during startup.

LOCKDOWN

Manual lockdown mode

/vsecurity lockdown on/off manually enables stricter protection for attack situations.

FIREWALL TEST

Firewall dry-run

/vsecurity firewall test <ip> previews firewall commands without executing them.

ABOUT

About VeloCity-Security

VeloCity-Security is a powerful, lightweight and highly configurable security plugin for Velocity Minecraft networks.

It helps protect your proxy against bot attacks, suspicious joins, exploit attempts, plugin-message abuse, malicious payloads and common crash methods.

Every important module, limit, permission, kick message and team notification can be configured.

LIVE SHIELD

Proxy protection before backend damage.

Connections, payloads, logins and suspicious player behavior are checked at the proxy layer before they can reach your game servers.

SHIELD ONLINE0.6ms

BLOCK suspicious payload

LIMIT handshake flood

ALLOW trusted player

FEATURES

Protection Modules

EDGE

Connection Firewall

SCAN

Payload Analyzer

TRUST

Reputation Cache

UUIDIPJOIN
  • Limbo support for suspicious joins
  • Geyser and Floodgate Bedrock support
  • ViaVersion, ViaBackwards and ViaRewind compatibility
  • Login queue for Attack Mode and Lockdown
  • Optional captcha / verification system
  • Resource-pack URL protection
  • AntiBot and connection protection
  • IP limit per player address
  • First-join security check
  • SlowJoin / slow connection protection
  • Hostname and virtual-host validation
  • Rejoin, ping, command, tab-complete and server-switch limits
  • Optional high-ping join limiter
  • Per-IP handshake rate limiting
  • Per-IP failed-login limiting
  • UUID/IP reputation cache
  • Plugin message anti-crash protection
  • Max payload size protection
  • Suspicious payload pattern detection
  • Deep suspicious payload detection
  • Exploit channel blocklist
  • Brand spoof protection
  • Protocol and login validation
  • Unicode and control-character username protection
  • Optional country block rules
  • Temporary and permanent IP block database
  • Critical, new-player and trusted-player databases
  • IPTable / UFW / firewall integration
  • IP exempt list for local, database, vote and service IPs
  • Backend protection checks
  • RAM usage warnings
  • Console log filter
  • Command argument length protection
  • Fail-safe database startup behavior
  • Config sanity check on startup
  • Optional PermissionsEx command protection
  • Optional WorldEdit //calc protection
  • Team notifications with permission support
  • Fully configurable messages, limits, permissions and toggles
  • Obfuscated release jar for better source protection
INSTALLATION

Installation

JAR PLUGINS RESTART
  1. Download the plugin jar.
  2. Put the jar file into your Velocity plugins folder.
  3. Restart your Velocity proxy.
  4. Edit the generated config.properties file.
  5. Run /vsecurity config reload or restart the proxy.

Recommended: Test the plugin on a test proxy before using it on a live production network.

PERMISSIONS

Permissions

ADMIN TEAM BYPASS

system.adminAllows usage of /vsecurity commands.

system.teamAllows team security notifications.

vsecurity.iplimit.bypassBypasses the IP limit protection.

COMMANDS

Control Center

COMMAND PREVIEW

Manage blocks, stats and reloads from one place.

$ /vsecurity stats

OK shield active, 38 threats blocked

$ /vsecurity lockdown on

LOCKDOWN stricter attack protection enabled

$ /vsecurity firewall test 192.0.2.10

DRY-RUN firewall command preview only

/vsecurity config reloadReloads the plugin configuration.
/vsecurity statsShows current security statistics.
/vsecurity add temporary <ip>Adds an IP address to the temporary block list.
/vsecurity add always <ip>Adds an IP address to the permanent block list.
/vsecurity remove temporary <ip>Removes an IP address from the temporary block list.
/vsecurity remove always <ip>Removes an IP address from the permanent block list.
/vsecurity reset temporaryClears all temporary IP blocks and removes their firewall rules.
/vsecurity reset alwaysClears all permanent IP blocks and removes their firewall rules.
/vsecurity lockdown on/offManually enables or disables stricter lockdown protection.
/vsecurity firewall test <ip>Shows firewall commands as a dry-run without executing them.
CONFIGURATION

Fully Configurable

AntiBot Limbo Firewall Bedrock Payload Scan Team Notify
CONFIG CONTROL

Every important limit, toggle and message can be tuned.

Make the plugin strict for attack waves or softer for normal player traffic. Your network, your rules.

  • Protection modules
  • Limits and cooldowns
  • Kick messages
  • Notify messages
  • Bypass permissions
  • Team permissions
  • IP exempt lists
  • Firewall/IPTable behavior
  • Console filter options
  • Country block rules
  • Hostname rules
  • Payload and protocol checks
  • Resource-pack URL rules
  • Captcha verification settings
  • Limbo behavior
  • Attack Mode login queue
  • Command argument length limits
  • Geyser and Bedrock compatibility
  • High-ping limiter disabled by default
  • PermissionsEx protection disabled by default
  • WorldEdit //calc protection disabled by default
  • Limbo disabled by default