protocolize icon indicating copy to clipboard operation
protocolize copied to clipboard

Server crash with pipeline not initialized

Open zestian56 opened this issue 1 year ago • 4 comments

Describe the bug A clear and concise description of what the bug is. image

To Reproduce Not sure how this can be reproduced

Expected behavior Server doesnt crash

Screenshots https://pastebin.com/eRmJZyHU

Proxy environment Velocity latest version

Minecraft versions used Only proxy

zestian56 avatar Jan 19 '24 16:01 zestian56

Exactly same spamming happened to us, we have discovered with our host that this is related to an exploit involving handshakes. Basically attacker is sending multiple malformed handshakes, server doesn't crash due to the host filtering most of the attack but there is huge console spam

NaTorOG avatar Jan 19 '24 21:01 NaTorOG

I just have a lot of bot attacks, and even the lowest one was crashing the server. the issue was with protocolozy.

The issue is that protocolize fails a packet on PLAYER PING, each time a player pings the server it executes a packet event and that can saturate de cpu.

here is the output of what was happening. https://pastebin.com/eRmJZyHU

zestian56 avatar Jan 20 '24 04:01 zestian56

Hey, what plugins do you have installed on Velocity? This issue currently only occurs when having Geyser installed, which is currently incompatible with protocolize.

Exceptionflug avatar Jan 20 '24 08:01 Exceptionflug

I just have a lot of bot attacks, and even the lowest one was crashing the server. the issue was with protocolozy.

The issue is that protocolize fails a packet on PLAYER PING, each time a player pings the server it executes a packet event and that can saturate de cpu.

here is the output of what was happening. https://pastebin.com/eRmJZyHU

From the error beside, Protocolize is doing everything right here. It is it's job to process incoming events. If you want to mitigate dos attacks, you should consider adding a TCPShield proxy in front or use dedicated anti DDoS hard- and software like SteelShield for example.

Exceptionflug avatar Jan 20 '24 08:01 Exceptionflug