Proxy (Velocity / Waterfall)

Configure a Velocity or Waterfall proxy on PlaySafe from the Proxy tab: forwarding mode, online mode, MOTD, forwarding secret and backend servers.

PlaySafe Team · Minecraft · Updated

Proxy

A Minecraft proxy sits in front of several Minecraft servers (a lobby, survival, creative…) and lets players move between them without disconnecting. Players connect to the proxy’s address.

PlaySafe offers two proxy server types:

  • Velocity: modern and recommended for new networks.
  • Waterfall: BungeeCord based. PaperMC no longer develops it; keep it for setups that need BungeeCord style forwarding.

To configure one, go to Hosting > Game Servers > your proxy server and click the Proxy tab. The tab only exists on these two server types. It edits velocity.toml (Velocity) or config.yml (Waterfall).


Proxy Settings

The Proxy Settings card has:

FieldVelocityWaterfall
Forwarding ModeNone, Legacy (BungeeCord) or Modern (recommended)Disabled or Enabled (ip_forward)
Online ModeSwitch. On: the proxy checks accounts with Mojang.Same
MOTDText shown when players ping the proxy.Same

Forwarding passes each player’s real UUID and IP to the backend servers. Without it, backends see every player as coming from the proxy.

Forwarding secret (Velocity, Modern)

When Velocity uses Modern (recommended) forwarding, a Forwarding Secret field appears with the secret hidden. Click the copy icon to copy it, then add it to the Velocity settings of each backend Paper server and restart the backend. On current Paper versions these are proxies.velocity.enabled: true and proxies.velocity.secret in config/paper-global.yml; the hint in the panel names the key used by older versions, velocity-support.secret in paper.yml. A backend with a missing or wrong secret refuses players coming from the proxy.


Backend servers

The Backend Servers card lists the servers the proxy can send players to, each with its route name and address.

Add a backend

  1. Click Add Server. The Add Backend Server dialog opens.
  2. Choose a tab:
    • PlaySafe Servers: lists your other active game servers that are not proxies, with their address. Click one, check the Route name in proxy (filled from the server name) and click Add followed by the server name.
    • Custom: type a Route name (for example lobby), the IP Address and the Port, then click Add Server.
  3. Repeat for each backend.
  4. Click Save Config under the cards. The message says “Config saved. Restart the server to apply.”
  5. Restart the proxy with Restart in the server header.

To remove a backend, click its trash icon and then Save Config.

ℹ

Order players are sent to

The tab does not edit the order in which Velocity tries backends when a player joins (the `try` list in `velocity.toml`). Edit that list in the [Files](/en/game-servers/panel/files) tab. Backends you remove in the Proxy tab are also removed from that list when you save.

Nothing in this tab is applied until you click Save Config and restart the proxy.


Set up a network

  1. Deploy each backend (Paper, Purpur…) as its own game server.
  2. Deploy the proxy (Velocity or Waterfall).
  3. On each backend, set online-mode to off in the Options tab: the proxy checks accounts, not the backend.
  4. Turn on forwarding on the backend: the Velocity secret for Modern, or bungeecord: true in spigot.yml for Waterfall and Legacy.
  5. In the proxy’s Proxy tab, add each backend and click Save Config.
  6. Restart the backends and the proxy.

Players now connect to the proxy’s address, shown in its server header.

!

Protect your backends

A backend with `online-mode` off accepts any name from anyone who reaches it directly. With Velocity **Modern** forwarding, Paper only accepts players that come through the proxy with the right secret, so prefer it.

Next steps