Guides

Guides zum Minecraft-Schutz

Praktische Guides ohne Füllstoff: Schutz bei jedem Host einrichten, Configs Schritt für Schritt, richtig auf Angriffe reagieren und den passenden Dienst wählen.

Diese Guides sind derzeit nur auf Englisch verfügbar.

DDoS-protected hosting

You don't need special 'DDoS protected hosting'. Buy any Minecraft host you like, put Arvoris in front for $0–40/mo, and get 500+ Tbps protection with real player IPs.

Guide lesen →

Why you need protection

Booters cost $5 and any argument can get your Minecraft server flooded. What attacks look like, what downtime really costs, why plugins can't stop them — and why starting free removes the last excuse.

Guide lesen →

Pterodactyl

Step-by-step: put Arvoris in front of a Pterodactyl-hosted Minecraft server. Find your allocation, add it as a backend, set one DNS record, enable PROXY protocol in the file manager, then firewall the node.

Guide lesen →

Stop an attack

Your Minecraft server is being DDoSed right now? Identify the attack type, don't pay ransoms, don't restart-loop — and get behind a filtering edge before the next wave. Honest notes on setup during an active attack.

Guide lesen →

Am I being DDoSed?

Lag spikes, timeouts, everyone disconnecting at once — DDoS or just a bad plugin? A symptom table for the three attack types, what your console and host graphs show for each, and how to rule out ordinary causes.

Guide lesen →

Free DDoS protection

Every genuinely free way to DDoS-protect a Minecraft server, why most of them fail for game traffic, and how to get a full mitigation pipeline for $0 with no card.

Guide lesen →

Velocity setup

Enable PROXY protocol on Velocity in one line: haproxy-protocol = true in velocity.toml. Get real player IPs behind Arvoris, why direct connections then fail (that's a feature), and how to fix 'invalid packet' errors.

Guide lesen →

BungeeCord setup

Enable PROXY protocol on BungeeCord or Waterfall to get real player IPs behind Arvoris: set proxy_protocol: true under the listener in config.yml, restart, done.

Guide lesen →

Best DDoS protection

There's no single 'best' Minecraft DDoS protection — it depends on player count, budget and region. A criteria checklist, the main options compared, and who each one fits.

Guide lesen →

What is a booter

A booter (or stresser) is a paid DDoS-for-hire service, typically $5–30/mo. What they are, why using one against others is illegal, why Minecraft servers are favorite targets, and how to defend.

Guide lesen →

How Cryo mitigates attacks

A stage-by-stage walkthrough of how Arvoris' Cryo engine mitigates a Minecraft DDoS attack: anycast absorption, protocol parsing, adaptive rate limits, auto-UAM and verification — what happens to each packet, in order.

Guide lesen →

Edge vs. server-side protection

Why Minecraft protection belongs at the edge, not in a plugin, firewall or your host: server-side antibot acts too late, firewalls can't read the protocol, host scrubbing null-routes. Edge stops attacks before your hardware.

Guide lesen →

Minecraft bypass bots

Bypass bots are written to defeat a specific antibot's checks. Here's how they work, why open-source and static antibots are vulnerable, and how edge verification with per-session randomization stops them.

Guide lesen →

Edge antibot vs plugin

Plugin antibots (Sonar, LimboFilter, nAntiBot) run on your server, after the connection is accepted. Edge antibots filter upstream, before your box sees it. Here's when each wins — and why big attacks need the edge.

Guide lesen →

Protocol-aware filtering

Generic DDoS mitigation filters on packet shape, rate and reputation. A Minecraft join flood is correct on all three. Protocol-aware filtering parses the game protocol itself — hostname, version, join intent — and is the only thing that separates bots from players without kicking players.

Guide lesen →

Server RAM

Real RAM numbers for Minecraft servers by player count and server type: vanilla, Paper with plugins, and modpacks. Why more RAM often makes lag worse, what actually drives memory use, and how to tell if RAM is your bottleneck at all.

Guide lesen →

Velocity vs BungeeCord

Velocity vs BungeeCord compared on performance, security, plugin ecosystem and forwarding. Why modern forwarding matters, what Waterfall's deprecation changed, and when staying on BungeeCord is still the right call.

Guide lesen →

Paper vs Purpur vs Folia

Which Minecraft server software should you run? Paper, Purpur and Folia compared on performance, plugin compatibility, configurability and who each one is actually for — including why Folia is not a drop-in upgrade.

Guide lesen →

LuckPerms setup

Set up LuckPerms properly the first time: how groups and inheritance actually work, the commands you need, the web editor, and the mistakes that make permissions unmanageable six months in.

Guide lesen →

server.properties

A practical server.properties reference for Minecraft admins: what view-distance, simulation-distance, online-mode, network-compression-threshold and the rest actually do, which ones affect performance, and which ones are security decisions.

Guide lesen →

Finding lag with spark

Stop guessing at Minecraft server lag. Use the spark profiler to find the actual cause: how to read a profile, tell TPS lag from network lag, and identify the plugin, farm or chunk load eating your tick.

Guide lesen →

JVM flags & GC

Why your Minecraft server freezes every few minutes, and what JVM flags actually fix it. G1GC tuning explained, why -Xms should equal -Xmx, which flags are cargo cult, and how to verify the change worked.

Guide lesen →

Minecraft in Docker

Run a Minecraft server in Docker properly: volumes that survive a rebuild, memory limits that do not fight the JVM, restart policies, and the networking mistake that exposes your backend to the whole internet.

Guide lesen →

Vergleiche

TCPShield alternativeNeoProtect alternativeArvoris vs Sonar

Der nächste Angriff ist schon geplant.
Sei hinter der Edge, wenn er einschlägt.

Wir kümmern uns um die Sicherheit, damit Raum zum Wachsen bleibt. Free-Plan, keine Karte, ein DNS-Record — wenn es nicht hält, sind fünf Minuten verloren.