Protect your home Minecraft Server from DDOS attacks with a VPS

Introduction

Want to run a Minecraft server from home without revealing your IP address? You can! Just set up a free proxy with a VPS to protect your server from denial-of-service attacks.

Note

All commands in this guide are being ran as root.

Installation

Install sslh and back up the config file

apk add sslh
cp /etc/init.d/sslh /etc/init.d/sslh.bak

Edit the config file

Note

Replace YOUR.MC.IP.ADDRESS with your home IP address. If you don’t know your IP, use icanhazip.com or Cloudflare’s IP Address Information page

1
# Configuration for /etc/init.d/sslh
2

3
# The sslh binary to run; one of:
4
#
5
# fork    Forks a new process for each incoming connection. It is well-tested
6
#         and very reliable, but incurs the overhead of many processes.
7
# select  Uses only one thread, which monitors all connections at once. It is
8
#         more recent and less tested, but has smaller overhead per connection.
9
#mode="fork"
10
mode="select"
11

12
# Path of the configuration file.
13
#cfgfile="/etc/sslh.conf"
14

15
# Additional options to pass to the sslh daemon. See sslh(1) man page.
16
#command_args=""
17
command_args="--user root --listen 0.0.0.0:25565 --anyprot YOUR.MC.IP.ADDRESS:25565"
18

19
# Uncomment to run the sslh daemon under process supervisor.
20
#supervisor=supervise-daemon

Start sslh

rc-service sslh start

Verify that the sslh started successfuly

rc-service sslh status
netstat -tulnp | grep :25565

sslh should now be running. Make sure your home router is port forwarding port 25565 traffic to your home server. You might want to give your computer a static IP address so this doesn’t change.

To see if people can access your server, type the VPS’s IP address into an online status checker. You can also type the VPS IP into your Minecraft client and try to join. If it doesn’t work, make sure the 25565 port is open in the VPS provider’s and the VPS’s OS firewalls.