Minecraft servers
When a Minecraft network needs a Velocity proxy
Decide whether multiple Minecraft servers need a proxy and account for forwarding security and extra failure modes.
By AppLaunch Editorial · Reviewed 2026-08-25
Direct answer
A proxy is useful when players need one entry point into multiple backend servers, such as a lobby plus game modes. It is unnecessary complexity for one server, and backend servers must be protected so players cannot bypass the proxy or spoof forwarded identity.
What this means in plain English
A proxy such as Velocity gives players one front door for several Minecraft servers. It can send them from a lobby to survival, creative or minigame servers without entering a new address. A single normal server does not need this extra layer.
The proxy becomes part of login and player identity, so security matters. Backend servers should accept connections only from the proxy and use the supported player-information forwarding setup. Simply turning off account checking on public backends is dangerous.
When is a proxy justified?
| Benefit | One address and controlled movement between backends |
|---|---|
| New dependency | Proxy availability and configuration |
| Security requirement | Authenticated forwarding plus unreachable direct backends |
A simple example
A network has a lobby, one survival server and one minigame server. Players join play.example.com, reach the Velocity proxy and are sent to the right backend. The backends are firewalled so nobody can connect to them directly and pretend to be another account.
What to do, step by step
1. Confirm multiple backends are truly required.
Start here before buying anything or changing several settings at once. It gives you a clear starting point based on benefit: one address and controlled movement between backends. Write the result down so you can compare it later.
2. Choose and configure a supported forwarding mode.
Use the same files, versions and settings that the real project will use. A quick test with an empty or different setup can look successful while completely missing the problem you are trying to solve.
3. Firewall backends to the proxy path.
Try the busiest realistic situation, not the easiest one. Include the people, data, traffic or background work you genuinely expect, then watch for slowdowns and errors rather than relying on a single headline number.
4. Test reconnects and proxy failure behaviour.
Finish by checking the result against security requirement: authenticated forwarding plus unreachable direct backends. Keep the old setting or release available until you know the change works and can be reversed safely.
One more useful tip
Plan what happens if the proxy stops. Even healthy backend servers will appear offline to players. Monitor the proxy itself and keep its configuration and forwarding secret backed up.
Common mistakes and how to avoid them
Turning off backend online mode without securing forwarding.
This gives a misleading or unsafe result because it leaves out benefit. A better approach is to confirm multiple backends are truly required, then check the result before making the change permanent.
Publishing backend addresses.
This gives a misleading or unsafe result because it leaves out new dependency. A better approach is to choose and configure a supported forwarding mode, then check the result before making the change permanent.
Adding a lobby to a community too small to need one.
This gives a misleading or unsafe result because it leaves out security requirement. A better approach is to firewall backends to the proxy path, then check the result before making the change permanent.
Words explained
- mod
- A modification that changes or adds to the game. Mods can add blocks, machines, creatures or whole new systems and often need to be installed by players too.
- port
- A numbered network doorway used by a service. Players need the Minecraft port to be reachable, but unrelated ports should stay closed.
- proxy
- A front server that accepts players and sends them to one of several Minecraft servers, such as a lobby or survival world.
Quick checklist
- Confirm multiple backends are truly required.
- Choose and configure a supported forwarding mode.
- Firewall backends to the proxy path.
- Test reconnects and proxy failure behaviour.
Common questions
What is the simple answer?
A proxy is useful when players need one entry point into multiple backend servers, such as a lobby plus game modes. It is unnecessary complexity for one server, and backend servers must be protected so players cannot bypass the proxy or spoof forwarded identity.
What should I check first?
Start with benefit: one address and controlled movement between backends. That is usually more useful than choosing from a marketing label or copying somebody else’s setting.
How can I make the change safely?
Confirm multiple backends are truly required. Then change one thing at a time, keep a backup or old version, and use the same real-world test after each change.
What is the easiest mistake to avoid?
Turning off backend online mode without securing forwarding. Avoiding that one mistake makes the rest of the comparison much more trustworthy.