Not an official Paper project. PaperGuard is not affiliated with or endorsed by PaperMC.

PaperGuard

Signed, replay-proof IP forwarding for servers behind a proxy.

Old servers and many plugins only work with BungeeCord ("legacy") forwarding. That forwarding has no protection at all: whoever reaches the backend port can join with any name and UUID, including your admins. A shared token helps, but once it leaks it works forever, on every server.

PaperGuard signs every single login instead.

Features


Signed per login	HMAC-SHA256 over name, UUID, IP, host, skin data, target server and time. Change one byte and the login is rejected.
Replay-proof	Every login has a one-time nonce and is only valid for a few seconds. A recorded login cannot be used again.
One key per server	A leaked key from one backend does not open the others.
Fail closed	If PaperGuard is not set up, nobody can join, instead of everybody.
Old servers too	Paper 1.12.2 and newer, Folia and Purpur, Java 8+.
Open protocol	Documented spec, test vectors and an MIT library, so any proxy can support it.

Setup with PaperProxy

PaperProxy signs logins out of the box.

In paperproxy.toml on the proxy, set the server to PaperGuard:
```
[forwarding.servers]
survival = "paperguard"
```
In the proxy console run paperproxy paperguard key survival.
Put PaperGuard into the backend's plugins/ folder and start it once.
Enter server-name and key in plugins/PaperGuard/config.yml, set settings.bungeecord: true in spigot.yml and restart.

Players joining through the proxy get in, everyone connecting directly is kicked.

Coming from PaperProxy-Bridge? That was the old name of this plugin. Replace the jar, your settings are taken over automatically.

Links

Source and protocol spec: GitHub / Codeberg
Support: Discord

MIT licensed. Made by LucasTHCR.

No gallery available for this project.

Version	Minecraft	Loader	Download
1.0.1	1.12.2, 1.13, 1.13.1, 1.13.2, 1.14, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.15, 1.15.1, 1.15.2, 1.16, 1.16.1, 1.16.2, 1.16.3, 1.16.4, 1.16.5, 1.17, 1.17.1, 1.18, 1.18.1, 1.18.2, 1.19, 1.19.1, 1.19.2, 1.19.3, 1.19.4, 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3	folia, paper, purpur	Download
PaperGuard 1.0.0 1.0.0	1.12.2, 1.13, 1.13.1, 1.13.2, 1.14, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.15, 1.15.1, 1.15.2, 1.16, 1.16.1, 1.16.2, 1.16.3, 1.16.4, 1.16.5, 1.17, 1.17.1, 1.18, 1.18.1, 1.18.2, 1.19, 1.19.1, 1.19.2, 1.19.3, 1.19.4, 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3	folia, paper, purpur	Download