DDoSDefender

Development has moved to a Premium Model
To receive continued updates and support, please visit our new home.

DDoSDefender delivers high-performance mitigation by injecting a sophisticated network handler directly into your server’s Netty pipeline. By inspecting handshake packets and source IP addresses in real time, the system applies dynamic rate limiting and selective packet cancellation to neutralise malicious bursts instantly. Furthermore, DDoSDefender intercepts LoginStart packets using a state-of-the-art detection suite that executes 14 individual heuristic checks, achieving a near-perfect 99.997% bot detection rate without sacrificing performance.

This figure is based on two separate controlled tests, each involving 10,000 bots using varied naming schemes.

DDoSDefender features our proprietary "FastPass" system, which allows previously verified players to bypass security checks on subsequent logins. This rewards your community with seamless connections while keeping your server protected from disruptions.

/iudexindustries FastPass add . (Run as an op if a Player cannot join)

DDoSDefender focuses exclusively on managing and filtering application-level connection attempts. It is important to note that it does not—and cannot—protect your physical network infrastructure, as no software-level plugin can mitigate volumetric attacks at the ISP level.

For comprehensive protection, we strongly recommend a layered security strategy: pair DDoSDefender/DDoSDefenderLite with a network-level proxy like TCPShield. While TCPShield shields your IP and absorbs massive network-layer floods, DDoSDefender provides the "last mile" of defence by intelligently filtering the complex, Minecraft-specific handshake exploits that proxies might pass through.