NG HaProxy Support

Quick rating

NG HaProxy Support

No reviews yet

Adds HAProxy protocol support to Forge servers. See real player IPs behind Velocity, TCPShield, FRP, and Nginx proxies. Features hot-reload config, status command, and connection logging.

Mod Loaders
Forge
Minecraft
Hosting Partner

Want to reach Minecraft players?

We're looking for a server hosting partner to feature here and other parts of the site. Interested? Send us a message!

Get in touch

Community voices

Reviews

Versions
Loading versions…
Match includes

Click once to include, again to exclude, again to clear

Rating Any
Any 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0
Min
Max
Play Status
Reviews
Time Played
hrs+
Verified developers only
Has developer response
List view
Grid view
Compact view
Sort by
Date
Rating
Helpful
Unhelpful
Edited
Sort ascending
Delete this review?

This removes your review from the project. You can write a new review after.
Review submitted for moderation

Your review has been sent to moderators, who will check that it meets our guidelines before it appears publicly.

No reviews yet. Be the first to review this project!

Get it on

Available Platforms

CurseForge logo CurseForge Modrinth logo Modrinth

Compatibility

Supported Environments

Dev Environment
Client Unsupported
Server Required

About

Project Details

Type
Mod
License
MIT License
Latest Version
NG HaProxy Support v1.0.0 - Initial Release
Authors
CurseForge
Modrinth

For authors

Embed Badge

If you're the author of this project, you can embed a live badge anywhere that supports HTML or Markdown. It updates automatically whenever ratings change.

Custom banner text
ModDex rating badge preview

Use HTML for any page that supports it, or Markdown for README files and Markdown-based descriptions.

Identifiers

Platform IDs

CurseForge ID
Modrinth ID

Resources

External Links

Source Issues Wiki Discord

About

Description

NG Proxy Support

Adds HAProxy PROXY protocol support to your Minecraft Forge server.

See real player IP addresses when your server is behind a proxy like Velocity, TCPShield, FRP, Nginx, or any other HAProxy-compatible reverse proxy.

Features

  • HAProxy PROXY Protocol v1/v2 — Full support for both protocol versions
  • Real IP Resolution — Players connecting through a proxy will show their real IP in server logs, bans, and plugins
  • Hybrid Mode — Supports both proxied and direct connections simultaneously
  • Fail-Closed Security — Connections from unknown IPs are automatically rejected, preventing proxy bypass attacks
  • CIDR Notation — Whitelist entire subnets (e.g. 192.168.0.0/16)
  • TCPShield Integration — Automatically fetch and whitelist TCPShield server IPs
  • Hot-Reload Config — Reload configuration without restarting the server
  • Status Command — View current configuration and connection stats in-game
  • Connection Logging — Log real player IPs and proxy IPs to a dedicated log file

Commands

Command Permission Description
/proxyprotocol reload OP Level 4 Reload config without restart
/proxyprotocol status OP Level 4 View current config and active rules

Configuration

Config file: config/proxy_protocol_support.json

{
  "enableProxyProtocol": true,
  "proxyServerIPs": ["127.0.0.1"],
  "directAccessIPs": ["127.0.0.1", "192.168.0.0/16"],
  "whitelistTCPShieldServers": false,
  "logConnections": true
}
Option Description
enableProxyProtocol Enable/disable the mod entirely
proxyServerIPs IPs of your proxy servers (Velocity, HAProxy, etc.) — PROXY headers will only be accepted from these IPs
directAccessIPs IPs allowed to connect directly without PROXY headers
whitelistTCPShieldServers Auto-fetch TCPShield IPs and add them to proxy whitelist
logConnections Log real IP and proxy IP to logs/proxy_connections.log

How It Works

Player → Proxy (Velocity/HAProxy/FRP) → Forge Server (with NG Proxy Support)
                                          ↓
                                   Reads PROXY header
                                   Extracts real IP
                                   Sets player address
  1. Your proxy sends a PROXY protocol header with the real client IP
  2. NG Proxy Support intercepts incoming connections and reads the header
  3. The player's address is set to their real IP instead of the proxy IP
  4. All server logs, ban systems, and plugins see the correct IP

Security Model

NG Proxy Support uses a fail-closed model:

  • ✅ Connections from proxyServerIPs → PROXY header is read, real IP is extracted
  • ✅ Connections from directAccessIPs → Allowed without PROXY header
  • ❌ Connections from any other IP → Automatically rejected

This prevents players from bypassing your proxy to connect directly and spoof their IP.

Setup Guide

With Velocity

  1. Install NG Proxy Support on your Forge server
  2. Enable PROXY protocol in Velocity's velocity.toml:
   [advanced]
   haproxy-protocol = true
  1. Add your Velocity server IP to proxyServerIPs in the mod config
  2. Restart both servers

With HAProxy / Nginx / FRP

  1. Configure your reverse proxy to send PROXY protocol headers
  2. Add the proxy IP to proxyServerIPs
  3. Restart the Forge server

Requirements

  • Minecraft 1.20.1
  • Forge 47.x
  • Java 17+
  • Server-side only (no client mod needed)

Credits

Made by xylos | © 2024-2026 All rights reserved

NG Proxy Support

Adds HAProxy PROXY protocol support to your Minecraft Forge server.

See real player IP addresses when your server is behind a proxy like Velocity, TCPShield, FRP, Nginx, or any other HAProxy-compatible reverse proxy.

Features

  • HAProxy PROXY Protocol v1/v2 — Full support for both protocol versions
  • Real IP Resolution — Players connecting through a proxy will show their real IP in server logs, bans, and plugins
  • Hybrid Mode — Supports both proxied and direct connections simultaneously
  • Fail-Closed Security — Connections from unknown IPs are automatically rejected, preventing proxy bypass attacks
  • CIDR Notation — Whitelist entire subnets (e.g. 192.168.0.0/16)
  • TCPShield Integration — Automatically fetch and whitelist TCPShield server IPs
  • Hot-Reload Config — Reload configuration without restarting the server
  • Status Command — View current configuration and connection stats in-game
  • Connection Logging — Log real player IPs and proxy IPs to a dedicated log file

Commands

Command Permission Description
/proxyprotocol reload OP Level 4 Reload config without restart
/proxyprotocol status OP Level 4 View current config and active rules

Configuration

Config file: config/proxy_protocol_support.json

{
  "enableProxyProtocol": true,
  "proxyServerIPs": ["127.0.0.1"],
  "directAccessIPs": ["127.0.0.1", "192.168.0.0/16"],
  "whitelistTCPShieldServers": false,
  "logConnections": true
}
Option Description
enableProxyProtocol Enable/disable the mod entirely
proxyServerIPs IPs of your proxy servers (Velocity, HAProxy, etc.) — PROXY headers will only be accepted from these IPs
directAccessIPs IPs allowed to connect directly without PROXY headers
whitelistTCPShieldServers Auto-fetch TCPShield IPs and add them to proxy whitelist
logConnections Log real IP and proxy IP to logs/proxy_connections.log

How It Works

Player → Proxy (Velocity/HAProxy/FRP) → Forge Server (with NG Proxy Support)
                                          ↓
                                   Reads PROXY header
                                   Extracts real IP
                                   Sets player address
  1. Your proxy sends a PROXY protocol header with the real client IP
  2. NG Proxy Support intercepts incoming connections and reads the header
  3. The player's address is set to their real IP instead of the proxy IP
  4. All server logs, ban systems, and plugins see the correct IP

Security Model

NG Proxy Support uses a fail-closed model:

  • ✅ Connections from proxyServerIPs → PROXY header is read, real IP is extracted
  • ✅ Connections from directAccessIPs → Allowed without PROXY header
  • ❌ Connections from any other IP → Automatically rejected

This prevents players from bypassing your proxy to connect directly and spoof their IP.

Setup Guide

With Velocity

  1. Install NG Proxy Support on your Forge server
  2. Enable PROXY protocol in Velocity's velocity.toml:
   [advanced]
   haproxy-protocol = true
  1. Add your Velocity server IP to proxyServerIPs in the mod config
  2. Restart both servers

With HAProxy / Nginx / FRP

  1. Configure your reverse proxy to send PROXY protocol headers
  2. Add the proxy IP to proxyServerIPs
  3. Restart the Forge server

Requirements

  • Minecraft 1.20.1
  • Forge 47.x
  • Java 17+
  • Server-side only (no client mod needed)

Credits

Made by xylos | © 2024-2026 All rights reserved

Screenshots

Gallery

This project has no gallery images yet.

Versions

Files

Relations

Project Relations

More like this

Similar Mods

Suggestions use data such as tags, dependencies, dependents, descriptions, titles, and more to rank how much they overlap with this mod.

On ModDex

Community snapshot

0
Ratings
0
Followers
0
In stacks

By the numbers

Statistics

<1,000
Total Downloads
CurseForge
<1,000
Modrinth
<1,000
Last Updated
CurseForge
Modrinth
Created
CurseForge
Modrinth
Last synced
When ModDex last fetched this project from CurseForge or Modrinth. Every project is re-checked on a schedule, and any project that ships a new file is synced automatically within hours of the release.
New file updates sync automatically
How syncing works