VoxaAegis

Features Real vanilla-gravity fall verification (configurable height, tolerance, timeout) Distorted image map-captcha, on-demand or attack-only Netty connection-rate throttle (per-IP/sec, global/sec, max-concurrent) Per-IP join rate limiting, subnet awareness, attack-mode escalation Risk scoring brain: username patterns, reconnect waves, retry swarms, session churn Fail-closed topology validation (blocks direct-backend bypass) Lock-free hot path — built to stay fast under heavy floods Optional edge coordination: a signed admission token emitted on a plugin-message channel your backend can consume (advanced integration; off by default — no backend plugin ships or is required) Full operator tooling: live status, dumps, incident reports, attack summaries Attack alerts to your Discord/Slack — a webhook fires the moment an attack starts and ends, carrying the live join-rate/profile and the end-of-attack summary (how many bots blocked, which layer caught them). Off by default; pure notification, never affects who is let in. Discord / Slack / generic-JSON formats; /voxaaegis alert test to verify your channel. Requirements Proxy: Velocity 3.3+ — the plugin runs here as one jar, no backend plugin to install. Java 21. Clients: 1.20.5 – 1.21.11 verified natively (each end-to-end tested with a real client). On networks running ViaVersion (most multi-version setups), it also covers 1.21 up to your ViaVersion's newest supported version — and future Minecraft releases automatically — see Compatibility. Backend: backend-agnostic — VoxaAegis sits in front of whatever server your network already runs (Paper/forks/etc.), so it needs nothing installed there. Cracked (offline-mode) supported — designed for it. Compatibility (client versions) Two ways VoxaAegis covers your players — and together they reach modern + future versions:

Natively (no ViaVersion needed): the limbo speaks the client's exact protocol across 1.20.5 – 1.21.11, every version verified live with a real client. With ViaVersion on your proxy (the common multi-version setup): ViaVersion translates each client down to the limbo, which verifies it and hands it off. This was confirmed live — a real 26.1.2 client passed end-to-end through ViaVersion. So with Via you cover 1.21 up to your installed ViaVersion's newest supported version, and new Minecraft releases keep working automatically as you update ViaVersion — no plugin update needed on our side. Honest notes (no overselling):

A brand-new client version only works once your ViaVersion supports it (e.g. a 26.2 client needs a ViaVersion build that knows 26.2). Very old clients (roughly pre-1.19) routed through ViaBackwards may not reach the limbo — that bridging is ViaVersion/ViaBackwards' job, not the plugin's. A client on a version nothing can handle is shown a clear "version unsupported" message rather than slipping through unverified. What you get A single voxa-aegis-velocity proxy jar (drop into Velocity plugins/). No backend plugin. Config presets for common scenarios (calm / Velocity / under-attack-hardened). A personal license key — optional: protection runs at full strength without it; the key just registers your build.