Use Velocity as the authenticated front door to your Minecraft network, with one or more Paper servers behind it. For current servers running Minecraft 1.13 or newer, the reliable configuration is modern forwarding: Velocity and every Paper backend share the same forwarding secret, backends run with online-mode=false, Spigot/BungeeCord forwarding is disabled, and Paper’s Velocity integration is enabled. Finish by restarting every process and blocking direct public access to backend ports.
Godlike.Host offers hosted Minecraft Java servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
How the network should be arranged
Players connect to the Velocity proxy, not directly to a game server. Velocity performs the Mojang/Microsoft session authentication, chooses a destination such as a lobby or survival server, and forwards the authenticated player’s UUID, name, skin properties and connection information to that backend. Paper then accepts the forwarded identity instead of trying to authenticate the player a second time.
As an Amazon Associate I earn from qualifying purchases.
Modern forwarding packages the player data in a binary payload protected by a message-authentication code (MAC). A backend can verify that the payload came from a proxy holding the shared secret, which makes identity spoofing substantially harder than an unauthenticated forwarding format. Modern forwarding is available only for Minecraft 1.13 and newer clients/servers.
Forwarding authenticates data; it does not make a backend port private. If somebody can reach a backend directly, they may bypass the proxy’s access controls or exploit a server that is not intended to be public. Network isolation and firewall rules are therefore part of a complete setup.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Prerequisites and decisions
- A Velocity proxy and at least one Paper backend that can communicate over the network.
- Paper 1.13 or newer if you will use modern forwarding. A mixed network that includes an older backend needs a deliberate per-server forwarding override rather than one format blindly applied to every server.
- Administrative access to the proxy directory and each backend directory.
- A plan for listening addresses and firewall rules. The proxy’s public listener should be reachable by players; backend listeners should be reachable only by the proxy and trusted administration systems.
- A maintenance window: forwarding changes require process restarts, and a configuration reload is not guaranteed to apply them.
Keep the proxy’s online-mode setting in mind before editing Paper. Paper’s Velocity setting must match that value exactly; do not assume that a copied example is correct for every installation.
Configure the Velocity proxy
1. Stop the proxy and back up its configuration
Stop Velocity cleanly, then copy velocity.toml and the proxy directory to a backup location. A backup lets you restore a known-good configuration if a typo prevents startup.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
2. Select modern forwarding
Open velocity.toml and set the forwarding mode to modern:
player-info-forwarding-mode = "modern"Leave this value as modern when all destinations support modern forwarding. Do not combine it with BungeeCord forwarding on the same backend; the payload formats and verification procedures are different.
3. Check the proxy authentication mode
Find Velocity’s online-mode value in velocity.toml. The Paper backends will use a matching proxies.velocity.online-mode value later. If the proxy authenticates players online, Paper must be told that the proxy is operating in the corresponding mode; a mismatch can cause rejected connections or incorrect identity handling.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
4. Locate the generated forwarding secret
Velocity creates a file named forwarding.secret in its working directory. Open it as plain text and copy its contents exactly. Treat the secret like a password: do not publish it in screenshots, logs, public repositories or chat.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Whitespace matters. An extra space, a missing character or an added newline can make the backend reject every forwarded connection. Copy the value without changing its characters, and paste it into each backend’s Paper configuration as a single string.
5. Verify destination definitions
Each backend must have an address in the proxy’s server list. Use the backend’s private address and port, not a public address that allows players to bypass the proxy. The exact destination names are up to your network (for example, lobby and survival), but the names used by routing rules, player commands or fallback settings must match the names in velocity.toml.
Configure every Paper backend
Repeat the following procedure on every Paper server that will receive players through Velocity. A setting applied to one backend does not automatically apply to the others.
1. Disable backend authentication
In the backend’s server.properties, set:
online-mode=falseThe proxy is now the component that authenticates the player. Leaving a backend in online mode causes it to attempt a second session-server login and commonly produces failed connections or inconsistent identity data.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
2. Disable BungeeCord mode
Open spigot.yml and make sure the following setting is false:
settings:
bungeecord: falseDo not enable the old BungeeCord forwarding path when Velocity is using modern forwarding. Mixing the two formats is a frequent cause of wrong UUIDs, missing skins and connection errors.
3. Enable Velocity support in Paper’s current global configuration
Current Paper versions use config/paper-global.yml. Under proxies.velocity, enable the integration, paste the exact secret, and set the online-mode value to the same value used by the proxy:
proxies:
velocity:
enabled: true
online-mode: true
secret: "paste-the-contents-of-forwarding.secret-here"The sample uses true for online-mode only as an example. Replace it with the value from your own velocity.toml; the two values must match. Keep the secret on one line and preserve its exact characters.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →4. Watch for outdated instructions
Older guides may tell you to edit paper.yml or a velocity-support field. Those paths are not the current Paper layout described above. If your Paper build uses a different configuration structure, follow that build’s documentation rather than inserting obsolete keys into paper-global.yml.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Restart in the right order
- Save and close the backend files, then start or restart each Paper server.
- Save
velocity.tomland restart Velocity after the backends are configured. - Connect from a normal player account through the proxy’s public address.
- Join each destination in turn. Check that the UUID remains stable, the skin appears, and switching servers does not create a new offline identity.
- Inspect the proxy and backend logs immediately if a connection fails. The first authentication or forwarding error is usually more useful than later disconnect messages.
Do not rely on a runtime reload for this change. Forwarding settings are read during startup in many deployments, so a full restart is the dependable way to apply them.
Protect the backend ports
Modern forwarding proves that a connection came from a holder of the shared secret, but it does not prevent someone from opening a TCP connection directly to a backend. Use host firewalls, cloud security groups or a private network so that backend ports accept traffic only from the Velocity host (and from explicitly approved administration addresses).
- Expose the proxy listener to the Internet; keep backend listeners off the public interface where practical.
- Allow backend traffic from the proxy’s private IP address or security-group identity.
- Remove broad “anywhere” rules left over from initial testing.
- Do not publish
forwarding.secret. Rotate it by changing the proxy secret and updating every backend during a maintenance window if you believe it has leaked. - Keep operating-system, Java, Velocity and Paper updates on a planned schedule, testing configuration changes on a non-production instance first.
Supporting mixed-version networks
Modern forwarding is the default choice for a network whose destinations are all compatible with it. Velocity also supports per-server forwarding overrides. In the [servers] configuration, a destination can inherit the global mode (the INHERIT behavior) or use a different forwarding mode when a particular legacy backend requires it.
This is useful for a network that includes an older 1.8-era server alongside modern destinations, but it increases operational risk. Configure the legacy destination and its backend as a matched pair, document which mode it uses, and test that route separately. Never set a modern Paper backend to expect BungeeCord data while the proxy sends modern data, or vice versa.
Because forwarding support and configuration keys vary by software version, verify the exact per-server option in the Velocity and backend documentation for the versions you run. Do not copy a key from an old tutorial simply because the destination is called “legacy.”
Troubleshooting forwarding failures
“This server requires you to connect through Velocity” or a similar proxy-only error
- Confirm that the proxy uses
player-info-forwarding-mode = "modern". - Confirm that the backend has
proxies.velocity.enabled: true. - Compare the backend’s
secretcharacter-for-character withforwarding.secret. Check for an accidental space, quotation mark included as part of the value, or line break. - Restart both the backend and the proxy after correcting the files.
Players connect but have the wrong UUID or no skin
Check all three forwarding layers together: modern mode in velocity.toml, Velocity enabled with the correct secret in paper-global.yml, and settings.bungeecord: false in spigot.yml. A leftover BungeeCord setting or a backend that was not restarted can make the server interpret the payload incorrectly.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesEvery backend rejects players after a migration
Look for a global mismatch rather than troubleshooting one destination at a time. Verify the proxy’s online-mode against each backend’s proxies.velocity.online-mode, verify that every backend has online-mode=false in server.properties, and ensure that all machines received the same secret. Then restart all processes.
Only one destination fails
Compare that server’s files with a working backend. Check its private address in the proxy’s destination list, its local firewall, the Paper path (config/paper-global.yml), and whether a per-server forwarding override is selecting a different format. A single legacy override can be correct for one destination and wrong for another.
The proxy works locally but not for remote players
This is usually a listener, routing or firewall issue rather than a forwarding-secret issue. Confirm that the proxy’s public listener is bound to an externally reachable interface, that the network firewall forwards the intended port to the proxy, and that backend-only firewall rules are not mistakenly blocking the proxy’s private address.
Configuration changes appear to have no effect
Stop the relevant process, verify that you edited the active server directory, save the file, and start it again. Reload commands do not always reload forwarding settings. Read startup logs to confirm the process loaded the edited configuration and did not fall back to a different directory or a malformed file.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallPre-launch verification checklist
- Proxy:
player-info-forwarding-mode = "modern"for a modern network. - Secret: every backend contains the exact contents of the proxy’s
forwarding.secret. - Paper:
proxies.velocity.enabledis true, the online-mode value matches the proxy, and the current path isconfig/paper-global.yml. - Backend authentication:
online-mode=falsein every backend’sserver.properties. - BungeeCord:
settings.bungeecord: falsein every backend’sspigot.yml. - Version plan: all modern destinations support 1.13+ forwarding, or legacy destinations have explicit, tested per-server overrides.
- Network security: backend ports are restricted to the proxy and approved administration sources.
- Activation: all backends and the proxy were fully restarted, then tested through the proxy from an external player connection.
What a successful test proves
A successful end-to-end test should show that a player can authenticate once at Velocity, enter each permitted backend, retain the same UUID and skin, and cannot reach a backend through an unauthorised direct route. Test both a normal player account and an account with the permissions used for server switching. If direct backend access still works from an untrusted network, forwarding is configured but the network is not yet secured.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
