Skip to main content

​
Architecting a Professional Network

A Minecraft “Proxy” functions as a high-performance traffic router, serving as the primary entry point for your community. It enables players to connect to a single IP address and smoothly jump between different physical server instances (e.g., transitioning from a central Hub to a Survival world) without ever disconnecting from the network. While BungeeCord was the legacy standard, Velocity is the modern industry recommendation, providing vastly superior security protocols, improved resource efficiency, and advanced player synchronization. This guide walk you through the technical architecture required to launch your first network on FREAKHOSTING.

Difficulty

Advanced

Time

15 Minutes

​
Technical Infrastructure Overview

A functional network requires a minimum of three distinct FREAKHOSTING server IDs to maintain a professional logical separation.
  1. The Proxy (Velocity): The “Front Door” of your network. It handles authentication and traffic routing (typically assigned to Port 25565).
  2. The Hub (Paper): The default landing zone where players materialize upon joining.
  3. The Game Server (Paper/Forge): The destination world where the primary gameplay (Survival, Skyblock, etc.) occurs.

​
Technical Configuration Workflow

Follow these steps to establish the secure handshake between your proxy and your backend servers.

​
Step 1: Configuring the Velocity Gateway

1

Initialize the Registry

Open your Velocity server’s velocity.toml file. Locate the [servers] section and define your backend instances.
2

Identify the Secret Key

Locate the forwarding-secret string generated within the same file. Copy this key precisely; it is the cryptographic “password” for your network.

​
Step 2: Hardening the Backend Servers (Paper)

On every backend server (Hub, Survival, etc.), you must authorize the proxy to manage player sessions.
1

Update Paper Configuration

Open the config/paper-global.yml file.
2

Enable Velocity Support

Set velocity.enabled to true and paste your Secret Key from Step 1 into the velocity.secret field.
3

Modify Authentication Protocol

Important: In server.properties, set online-mode to false. Velocity will handle the official Mojang authentication at the front door, ensuring your backend remains secure.

​
Strategic Security Architecture

​
Critical: Preventing Proxy Bypass

Operating backend servers in “Offline Mode” is technically required for proxy functionality, but it introduces a major security vulnerability. If a malicious actor identifies your backend ports (e.g., 25566), they can join them directly and assume any identity, including yours. using Velocity’s Modern Forwarding Secret is mandatory; it ensures that your backend servers strictly reject any connection attempt that does not originate from your authorized proxy.

​
Need Extra Help?

If you encounter any issues, our support team is ready to assist:

​
Save on Your Hosting

Ready to get a new server? Use code KB20 at checkout for 20% off your first month!
Last Updated: January 2026 | Minecraft: Network architecture online.