Back
mc-packet-guard
Solo Project Security Java 21
High-throughput Netty pipeline channel interceptor, malformed packet filter, and token-bucket rate limiter for high-traffic Java servers.
Overview (English)
mc-packet-guard is a low-level network security module engineered for Java game servers and Netty-based socket services. Sitting directly ahead of the server loop, it monitors raw byte buffers, validates custom packet frame headers, throttles SYN/handshake bursts using a lock-free token bucket, and silently drops malicious exploit payloads before they touch game logic.
Key Capabilities
✓ Netty Channel Inbound Handler
Zero-copy raw byte verification directly in native memory buffers with minimal overhead.
✓ Anti-Crash & Exploit Filtering
Rejects oversized NBT tags, invalid packet lengths, and malformed UTF-8 payload attacks.
✓ Rate-Limiter & Geo-Rules
Token-bucket per-IP connection limits preventing connection floods and bot swarms.
✓ Zero Garbage Generation
Optimized object pooling architecture minimizing JVM garbage collection pause times.