View source for Minecraft Bedrock-Java Self-hosted with VM proxy-260124

== '''GEYSER VELOCITY HAS A MALWARE SPAMBOT EXPLOIT''' ==
DONT RUN THIS

= The "Smart Hybrid" Minecraft Network Guide =

'''Architecture:''' Cloud Relay (Velocity) + Local Powerhouse (Geyser & Paper)

This guide documents the successful configuration of a professional-grade Minecraft network that bypasses CGNAT and optimizes costs by offloading heavy tasks to local hardware.

== 1. The Strategy: Why This Works ==

Running '''Geyser''' (the Bedrock translator) on a cheap VPS often crashes it because translating network packets requires significant CPU power and RAM.

'''The Problem:''' Cheap VPS (₱300/mo) = Low CPU/RAM. Great for relaying traffic, terrible for processing it.

'''The Solution:''' Your Dell 3070 (i5, 16GB RAM) is 10x more powerful. We run the heavy translation locally.

'''The Trick:''' We use <code>iptables</code> on the VPS to blindly forward Bedrock traffic to your home, so the VPS CPU does zero work.

== 2. Requirements & Costs ==

{| class="wikitable"
! Component !! Specification !! Cost (Approx) !! Role
|-
| '''Gateway''' || Contabo (Japan/SG) or Hetzner (SG) || ₱4,000/yr || Public IP, DDoS Protection, Velocity Proxy.
|-
| '''Muscle''' || Dell 3070 Micro (i5/16GB) || ₱10,000 (One-time) || Runs Game Servers & Geyser Translator.
|-
| '''Electricity''' || ~35W Avg Power Consumption || ₱3,780/yr (₱315/mo) || Power cost for running the Dell 24/7.
|-
| '''Tunnel''' || ZeroTier || Free || Securely connects Gateway to Muscle.
|-
| '''Domain''' || Cloudflare || ₱500/yr || Clean addresses (<code>https://www.google.com/search?q=mc.example.com</code>).
|}

'''Total Operational Cost:''' ~₱8,280 / year (₱690 / month) excluding one-time hardware.
[[File:Dell OptiPlex MiniPc 3000 i5 12th, 3070 i5 9th, 3080-3090 i5 10th PRELOVED.png|thumb|2026 Jan 24 Prices, may increase dramatically [https://www.lazada.com.ph/products/dell-optiplex-minipc-3000-i5-12th-3070-i5-9th-30803090-i5-10th-preloved-i2145744849-s21082298390.html? https://www.lazada.com.ph/products/dell-optiplex-minipc-3000-i5-12th-3070-i5-9th-30803090-i5-10th-preloved-i2145744849-s21082298390.html?]]]

== 3. Phase 1: The Backbone (ZeroTier) ==

''Objective: Create a virtual LAN cable between Japan and your Home.''

'''Install ZeroTier''' on both the VPS and the Dell 3070.

'''Join Network:''' Connect both to the same Network ID.

'''Authorize:''' Check the "Auth" box in the ZeroTier dashboard.

'''Verify IP Addresses:'''

#* '''Dell 3070 (Local):''' <code>10.100.100.2</code> (Example Placeholder)
#* '''Contabo (VPS):''' <code>10.100.100.1</code> (Example Placeholder)

== 4. Phase 2: The Muscle (Dell 3070 Local Setup) ==

''Objective: Set up the game servers and the heavy translator.''

=== 4.1. Java 21 Workaround (Debian 11) ===

Since standard repositories lack Java 21, use the portable version.

<syntaxhighlight lang="bash">
wget https://www.google.com/search?q=https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.1%252B12/OpenJDK21U-jre_x64_linux_hotspot_21.0.1_12.tar.gz
tar -xvf OpenJDK21U-jre_x64_linux_hotspot_21.0.1_12.tar.gz

Path is: /root/jdk-21.0.1+12-jre/bin/java

</syntaxhighlight>

=== 4.2. Game Servers (Docker) ===

Run your backend servers in Docker/Portainer.

'''Creative:''' Port <code>25565</code>

'''Survival:''' Port <code>25566</code>

'''Plugin:''' Ensure <code>Floodgate-Spigot.jar</code> is in the <code>/plugins</code> folder of both servers.

=== 4.3. Geyser Standalone (Host Install) ===

We run this on the '''Host''' (not Docker) for stability and easier config.

'''Install:'''

#:<syntaxhighlight lang="bash">
mkdir -p /root/geyser_standalone && cd /root/geyser_standalone
wget -O Geyser-Standalone.jar https://download.geysermc.org/v2/projects/geyser/versions/latest/builds/latest/downloads/standalone
</syntaxhighlight>

'''Configure <code>config.yml</code>:'''

#* <code>bedrock.address: 0.0.0.0</code>
#* <code>bedrock.port: 19132</code>
#* <code>remote.address: 10.100.100.2</code> ('''Crucial:''' Points to Dell's own ZT IP to loop back to Velocity).
#* <code>remote.port: 25565</code> (Points to Velocity's listening port).
#* <code>auth-type: floodgate</code>

'''Start Geyser:'''

#:<syntaxhighlight lang="bash">

Open a terminal in RDP and keep it running

/root/jdk-21.0.1+12-jre/bin/java -Xmx2G -Xms2G -jar Geyser-Standalone.jar
</syntaxhighlight>

=== 4.4. Troubleshooting: The Missing Key (key.pem) ===

If Geyser crashes with <code>NoSuchFileException: key.pem</code>, it means it cannot securely talk to your Docker servers. You must copy the key from Docker to the Host.

'''Find the Key:''' The Docker containers (Creative/Survival) automatically generated one. Find it:

#:<syntaxhighlight lang="bash">
find / -name "key.pem" 2>/dev/null
</syntaxhighlight>
#:''Expected result looks like:'' <code>/var/lib/docker/volumes/.../plugins/floodgate/key.pem</code>

'''Copy to Geyser:''' Take that path and copy it to your standalone folder:

#:<syntaxhighlight lang="bash">

Replace the long path below with what you found in step 1

cp /var/lib/docker/volumes/LONG_PATH_HERE/key.pem /root/geyser_standalone/key.pem
</syntaxhighlight>

'''Restart Geyser:''' Now that the file exists, start Geyser again (Section 4.3 Step 4). It should say <code>Done!</code>.

== 5. Phase 3: The Gateway (Japan VPS Setup) ==

''Objective: Receive traffic and split it. TCP goes to Velocity, UDP goes to Dell.''

=== 5.1. Velocity Proxy (Manual Install) ===

'''Install Java 21:''' (Same steps as 4.1).

'''Install Velocity:'''

#:<syntaxhighlight lang="bash">
mkdir -p /root/velocity_data_241227 && cd /root/velocity_data_241227
wget -O velocity.jar https://www.google.com/search?q=https://api.papermc.io/v2/projects/velocity/versions/3.3.0-SNAPSHOT/builds/latest/downloads/velocity-3.3.0-SNAPSHOT-latest.jar
</syntaxhighlight>

'''Install Plugin:''' Only <code>VeloAuth.jar</code> is needed here. '''Do NOT install Geyser/Floodgate here.'''

=== 5.2. Velocity Configuration (velocity.toml) ===

<syntaxhighlight lang="toml">
[servers]
creative = "10.100.100.2:25565"
survival = "10.100.100.2:25566"

try = ["creative", "survival"]

[forced-hosts]
"https://www.google.com/search?q=mc.example.com" = ["creative"]
"https://www.google.com/search?q=sumc.example.com" = ["survival"]

[query]
enabled = true
port = 25565
</syntaxhighlight>

=== 5.3. The Magic Router (UDP Forwarding) ===

This saves your VPS from crashing. It forwards all Bedrock traffic directly to the Dell via ZeroTier.

<syntaxhighlight lang="bash">

Enable Forwarding

sysctl -w net.ipv4.ip_forward=1

The Magic Rule:

"If UDP comes to port 19132, throw it to 10.100.100.2"

iptables -t nat -A PREROUTING -p udp --dport 19132 -j DNAT --to-destination 10.100.100.2:19132
iptables -t nat -A POSTROUTING -j MASQUERADE

Save rules so they survive reboot

apt-get install iptables-persistent
</syntaxhighlight>

== 6. Standard Operating Procedures (SOP) ==

=== 6.1. Startup Sequence ===

'''Dell 3070:''' Ensure Docker containers (<code>creative</code>/<code>survival</code>) are UP.

'''Dell 3070:''' Open Terminal, run Geyser Standalone.

#* ''Check:'' <code>[INFO] Started Geyser on 0.0.0.0:19132</code>

'''Japan VPS:''' Start Velocity Headless.

#:<syntaxhighlight lang="bash">
cd /root/velocity_data_241227
rm -f nohup.out
nohup /root/jdk-21.0.1+12-jre/bin/java -Xmx512M -Xms512M -jar velocity.jar > nohup.out 2>&1 &
</syntaxhighlight>

=== 6.2. Diagnostics Checklist ===

If "Loading Ping" appears:

'''Check VPS Forwarding:''' <code>iptables -t nat -L -n -v</code> (Packet count should rise).

'''Check Dell Geyser:''' Is the terminal window open? Is it showing errors?

'''Check Key:''' Does <code>key.pem</code> match in Geyser, Creative, and Survival folders?

== 7. Connectivity Guide ==

{| class="wikitable"
! Device !! Address !! Port !! Notes
|-
| '''PC (Java)''' || <code>https://www.google.com/search?q=mc.example.com</code> || Default || Connects to Creative.
|-
| '''PC (Java)''' || <code>https://www.google.com/search?q=sumc.example.com</code> || Default || Connects to Survival.
|-
| '''iPad (Bedrock)''' || <code>https://www.google.com/search?q=mc.example.com</code> || '''19132''' || Connects to Creative.
|-
| '''iPad (Bedrock)''' || <code>https://www.google.com/search?q=sumc.example.com</code> || '''19132''' || Connects to Survival.
|}

''Note: Bedrock players always use port 19132. Velocity handles the routing to Survival/Creative based on the subdomain they typed.''