XCord | High Performance | Anti-bot v1.72

(Note) Disable 'use-velocity-optimized-encoder-pipeline' in xcord.yml if you're using ViaVersion on bungeecord (NOT spigot). They're incompatible

[+] Added better support for HAProxy's and other local network systems
[+] Added option in config to use Velocity's optimized encoder pipeline (May be incompatible with some plugins!) [ENABLED BY DEFAULT]
[+] Added option in config to disable scoreboard tracking/api (Waste of memory/cpu if you don't use Bungee scoreboards..) [DISABLED BY DEFAULT]
[/] Disabled throwing exceptions on scoreboard errors since 1.8+ clients handle errors properly now
[/] More anti-ddos related changes
[/] Upstream merge

Don't leave your server vulnerable at lower layers, add IPTables rules:

[/] Further fixes to 1.17 support from upstream

Note: As of today, Travertine has officially been discontinued. XCord will continue to support 1.7 versions of Minecraft, but I will require your bug reports if you run into issues since XCord's community is much smaller and I don't have a 1.7 server myself.

[/] Fixed some issues with 1.17 support

WARNING: 1.17 support is still not considered STABLE. Not even Bungeecord has finalized support for 1.17 yet

[/] Fixed issue with IPTables and a name preventing an ipset blacklist from being created
[/] Improved verification check
[/] Added licensing to shared-global-blacklist, and future web-based protection (Wont be needed for first couple of months)
[/] Fixed incompatibility with Geyser and a few other plugins
[/] Upstream merge
[/] 1.17 support should be good to go (Unless more network logic is changed)

[/] Updated Bungeecord to 5/26/2021 commit (Merged upstream)
[/] Minor tweaks to default config options
[/] Fixed anti-ddos config variable using a config variable from exploit-monitor
[/] Minor compatibility patch for plugins like RedisBungee
[/] Major upgrades to the shared-global-blacklist (Doesn't require you to update XCord) [Very very recommended feature..]
[+] Added option to the verify check to ignore 1.16+ clients (Some users reported issues)


!Important Notice! Bungeecord has changed around some of the internals in ways that will break some Bungeecord plugins. Hopefully your broken plugin has already been updated, otherwise you will have to wait until the author updates to the newest Bungeecord development build.

!Important Notice #2 ! DDoS attacks are very common at the moment! Protect your server from DDoS attacks by filtering invalid/impossible/abusive packets: https://gist.github.com/mattia-beta/bd5b1c68e3d51db933181d8a3dc0ba64

[/] Fixed multiple potential exploits, improved DDoS protection and anti-hang protection
[/] Updated Bungeecord/Waterfall/Travertine (Merged upstream)

!Important Notice! Bungeecord has changed around some of the internals in ways that will break some Bungeecord plugins. Hopefully your broken plugin has already been updated, otherwise you will have to wait until the author updates to the newest Bungeecord development build.

!Important Notice #2 ! DDoS attacks are very common at the moment! Protect your server from DDoS attacks by filtering invalid/impossible/abusive packets: https://gist.github.com/mattia-beta/bd5b1c68e3d51db933181d8a3dc0ba64

[+] Added a new GLOBAL blacklist option (Disabled by default). Requires ROOT since it utilizes IPSet and IPTables commands.

This optional feature will download a blacklist maintained by XCord's many proxy scraper bots and set it locally on your iptables firewall. HIGHLY recommended to combat HUGE attacks.

The bot will automatically refresh the list every day or so with new proxies, and it will remove dead proxies.

[/] Fixed the blacklist not automatically being reset (Pretty critical?)
[+] Added 'print-connection-stats' to the config to print anti-bot connection rates for debug purposes or what not
[/] XCord only blacklist for packet related errors during an attack (Can be changed in the config)