MC Plugin NullCordX | Lightweight - Antibot v3.7.4 - 1.19.4

Sophisticated Waterfall fork with performance and filtering on mind even Modern Forge Support

NullCordX
NullCordX is the most advanced proxy in every way, be it performance or features, there is no other like it and at such a low price! From intelligent rotating filters like Cloudfare's to being able to run giant servers in a few instances.


Antibot System:
Performant anti-bot for all systems with a great migration system for Layer7 without relying on Linux software.
However, if you run the proxy as root, you'll get extra features like easy-and-fast mitigation of attacks via deniying connections using IPSet/IPTables

Antibot Checks:

((All checks are configurable, toggleable and quite manipulable))

• Human fake-lobby: Advanced filter to verify any prototype of packet, the sentry of high-performant bots with several item-layers like snow, wood, barries, oaks etc... working as Chunk-colission. Also changes dynamically from coordinates. On top of that there are several protocol verifications like Ping-pong, KeepAlive timeouts, WindowTransactions, negative Levitation and HUGE verifications on falling of 3s that makes actually fast and working verification.
• Packet-Filtering: Not only are there limits before decompress, but also after decode on all backends colloquially known as "backend anticrash" preventing Netty from using heavy methods and sending very large amounts of data. This avoids using plugins on every backend, natively faster and instant mitigation.
• Ping limitation: Connections won't be able to join if their ping exceeds the maximun specified, this usually works with stupid sockets (bots)
• Mojang requests?: The proxy won't trigger PreLoginEvent before verification avoiding rate-limits with any plugin.
• Rate-limit -> Is any bot constantly logging into the server? By default the BungeeCord throttle will be used along with a quicker disconnect, but you can use the blacklist module for a longer time.
• Framed-captcha -> By looking at captcha systems like Google or cloudfare, we have managed to replicate it in Minecraft to prevent neural systems from bypassing the verification (frame-rotating)
• Framed-puzzle -> Innovative image-loaded puzzle (with configurable render layers) based on rotating configurable images.
• Solid-netty-traceless -> NullCordX has an advanced attack mitigation system in place to avoid throwing exceptions so that Netty doesn't even know about it, we have some changes that do in software terms that something like low level exceptions are filtered out as well.
• Nickname check: Option to verify player names, such as repetitive, blacklisted and strange names, to ensure that even with a bad configuration or with the antibot disabled, any bot from common services won't be able to join.
• Direct-Connection: If the counting detects any strange loadup on connections will avoid connections that did not ping server list before joining (Disable it if something caches before pings such as Cloudfare, TCPShield etc..)
• Exception check: Most of attacks are based on exceptions, this overloads the usage and floods the console, NullCordX caches them and deny that connection. (( You can limit e-connections and add/remove other packets ))
• Internal checks: Certain checks at the Minecraft protocol level limiting the data sent by packets even before entering the server, after decompress including checks to avoid invalid states in attacks without bothering player, either multiple exception stuff such as KeepAlive timeout that checks if the player responsed with the same ID as the server, this is same on 1.8 but with Window transaction
• Invalid packet checking: NullCordX verifies Minecraft protocol packets without trowing any exception and kicking instantly if is not recognised.
• Geyser checks: We've built-in Geyser Standalone Support, you can choose which checks do they have to pass before joining the backend server.
• Blacklist (via iptables/netty): Linux tool implemented to blacklist quickly bad TCP connections to avoid attack reach maximum performance, if you don't have access NullCordX will blacklist bots with netty blacklist module.
• Protocol packets: By legally limiting packets according to Mojang's protocol adding innovative checks, we can avoid ilegal attacks that load the system without any human-layer verification.
• Proxy-data: Some networks need split their proxy instance on more than one, NullCordX can sync the anti-bot data between them to avoid waste of performance.
• Motd/Spam attack: Most of attacks doesn't end handshake process to the end, we directly avoid then when the threshold got triggered, also you can hide favicon when attack is detected to save traffic, even you can cache the requests of the motd and compress the favicon.

There are bunch more of verifications that are secundary, check configuration to enable them
Motd System (( Native faster))
NullCordX by default comes with a MOTD that replaces the BungeeCord encoder and creates its own packet which supports hexadecimal colors (RGB) and brings more functions.

Apart from that it has another very important function. Exploits have been found that prevent players from entering the server by sending simultaneous requests and freezing the status response.

Thanks to the native MOTD, incoming requests are cached to prevent this type of attack.

In addition, you can hide the favicon to prevent the StatusResponse from ever being compressed. This greatly improves traffic consumption during a massive attack or large traffic.

On top of that Close the connection if the client tries to compute a ping to the server after successfully sending motd during the attack, even you can compress the favicon

Advanced AntiProxy & AntiVPN system:
Advanced AntiProxy (AntiVPN) system based on known pages with virtually unlimited requests that allow you to block specific countries and avoid proxies.

You can configure it to only use the options on certain occasions such as when an attack is detected, always, or disable it completely.
On top of that you can download new databases in configurable time, cache time and even limit the use of threads of your processor.

Moreover, thanks to our Cache system powered by Caffeine, rate-limits are very complicated with free plans. In very few situations this will ever happen.

Advanced Handshake (( Modern Forge Connector ))
Most proxies do not support modern forge due to the strict forge protocol in versions higher than 1.13 which complicates the implementation of forge.

NullCordX thanks to some internal changes can support modern forge connections without problems (mostly).

This makes the proxy the most complete on the market, without needing to do too many dangerous tricks to support connections like this.

At the top of all supports the project called arcligth to further improve the server administrator experience.