Better Proxy Join: Fortify Your Minecraft BungeeCord Network
Running a BungeeCord network brings a world of possibilities, but it also opens a security loophole that many server admins overlook. When you set online-mode to false to allow proxy connections, anyone can bypass your proxy and connect directly to a backend server. Better Proxy Join is the lightweight plugin that closes that gap, ensuring players always enter through the front door.
Why BungeeCord Servers Need Extra Protection
BungeeCord acts as a traffic cop, directing players to the right server behind the scenes. To make this work, you must disable online-mode in your server.properties file. This tells Minecraft not to verify player identities with Mojang’s session servers, because the proxy handles authentication. The downside? Without online-mode, a crafty user can grab the IP of a backend server and connect directly, skipping the proxy and any lobby, permissions, or anti-cheat systems you’ve set up. Better Proxy Join stops this cold by validating the connection source.
How Better Proxy Join Works
The plugin adds a simple but effective layer of authentication. When a player tries to join, Better Proxy Join checks the incoming IP address against a list of trusted proxy IPs. If the connection doesn’t originate from your BungeeCord server, the player gets kicked immediately. You can also whitelist specific IPs for staff or maintenance access, so direct connections remain possible for authorized users only.
Core Mechanics
- Proxy IP validation: Only connections from your defined proxy IPs are allowed.
- Kick message customization: Display a clear message to anyone attempting a direct join.
- Exception list: Add trusted IPs that can bypass the proxy restriction.
- Toggle on/off: Disable the plugin temporarily without removing it.
Configuration Made Simple
Better Proxy Join’s configuration file is straightforward and well-commented. You’ll find it in the plugins folder after the first run. Here’s a breakdown of each setting:
Enabled
Set to true to activate the plugin. Switch to false if you ever need to disable the protection temporarily—for example, during network maintenance when direct access is required.
Proxy-IPs
List the IP addresses or hostnames of your BungeeCord proxy servers. You can add multiple entries, which is handy if you run several proxy instances for load balancing. For example:
- 127.0.0.1 (if BungeeCord is on the same machine)
- yourproxy.domain.com
Disabled-For-IPs
This section lets you exempt certain IPs from the proxy requirement. Perfect for admins who need to connect directly for debugging or for a backup connection when the proxy is down. Note that the plugin ignores player names because they can be spoofed on offline-mode servers; IP-based whitelisting is the only reliable method.
Kick-Message
Craft a custom message that appears when someone tries to direct connect. Use color codes with the ampersand (&) format. The default “&5You can only join from the proxy” is clear, but you can personalize it with server branding or a helpful hint to use the correct address.
Installing Better Proxy Join on Your Server
Installation follows the standard Bukkit/Spigot plugin routine. Download the latest JAR file from the official resource page—no external links, just grab it from your trusted source. Drop the file into your server’s plugins folder and restart or run /reload. The plugin will generate a default config.yml, which you can then edit to match your network setup. For players who love tinkering with mods, the foxygame.net launcher offers a modern way to browse and install mods right from its menu, making it a convenient companion for any server administrator’s toolkit. While Better Proxy Join is a server-side plugin, keeping your client-side mods organized with a flexible launcher can complement your overall Minecraft experience.
Why Choose Better Proxy Join Over Alternatives?
Several plugins claim to secure BungeeCord networks, but Better Proxy Join stands out for its simplicity and reliability. It doesn’t bog down your server with unnecessary features; it does one job and does it well. The configuration is human-readable, and the plugin has been tested across multiple Minecraft versions. Plus, the built-in metrics (which you can opt out of) help the developer understand usage without compromising performance.
Real-World Use Cases
- Public networks: Prevent players from skipping the lobby and directly joining a minigame server, which could disrupt balancing or cause unauthorized access.
- Whitelisted communities: Ensure that only players coming through the proxy (where you manage whitelists) can enter, avoiding backdoor entries.
- Development environments: Allow developers to connect directly from their office IP while keeping the public out.
Final Thoughts
Better Proxy Join is a must-have for any server administrator running a BungeeCord network with online-mode set to false. It patches a critical vulnerability with minimal overhead, giving you peace of mind that your backend servers are shielded from direct connections. The plugin’s clean configuration and IP-based exception handling make it a set-and-forget solution. If you’re serious about network security, add Better Proxy Join to your server today and keep your players exactly where they belong—behind your proxy.