Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

What Is a Proxy Server in Minecraft and When Do You Need One?

A Minecraft proxy is the gateway that routes players between backend servers through one address. This guide explains when you need one, when direct connection is simpler, how Velocity compares with legacy BungeeCord forwarding, and which security and compatibility checks matter.
WorldMinecraft and When Do You Need One? Length10 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A Minecraft proxy is a server-side gateway between players and one or more backend Minecraft servers. Players connect to the proxy’s address, and the proxy routes each session to a lobby, survival world, minigame, or other backend. It can also move an already connected player from one backend to another without requiring a new public address.

You usually need a proxy only when you are operating a multi-server network or have a specific gateway requirement. A single standalone survival server is normally simpler and safer to let players join directly. Adding a proxy introduces another process, another configuration boundary, and forwarding and firewall decisions, so its benefits should justify that extra operational work.

As an Amazon Associate I earn from qualifying purchases.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a Minecraft proxy actually does

In a direct-connect setup, a player’s client reaches one Minecraft server and stays there. In a proxied setup, the player reaches the proxy first. The proxy accepts the connection, selects a backend server, and relays traffic between the client and that backend.

That arrangement creates one public entry point for an entire network. A player might join a lobby, select Survival, and later switch to a minigame while retaining the same network connection. The backend servers remain separate Minecraft instances, with their own worlds, plugins, configurations, and resource needs.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

The main jobs of the proxy

  • One public address: Players use the proxy address instead of learning a separate address for every backend.
  • Routing: The proxy chooses the initial backend and can transfer a connected player to another backend.
  • Identity forwarding: With Velocity modern forwarding, a backend can receive the player’s IP address, UUID, and skins through a protected forwarding format.
  • Network coordination: Proxy plugins and plugin messaging can coordinate commands, queues, permissions, or transfers between the proxy and backend servers.
  • Backend isolation: Proper network controls keep backend ports away from untrusted internet clients, making the proxy the intended route into the network.

A proxy does not merge worlds into one server and does not remove the need to configure each backend correctly. It is a routing and trust layer in front of independent servers.

When you need a proxy—and when you do not

Use one for a multi-server network

A proxy is the usual architecture when players should access several servers through one address. Common examples include:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • A lobby that sends players to Survival, Creative, or Skyblock backends.
  • A minigame network with separate instances for different game modes.
  • A community network that keeps production, testing, and event servers behind one gateway.
  • A setup where players must switch servers without disconnecting and reconnecting manually.

In each case, the proxy supplies the shared entry point and the server-switching mechanism. Pterodactyl documentation describes BungeeCord, Waterfall, and Velocity as proxies that let players reach several backend servers through one address. PaperMC describes Velocity as a proxy that can change the server to which a connected player is attached.

Skip it for one ordinary server

If you operate one Paper, Spigot, Fabric, or Forge server and players simply join that server, direct connection is generally the better design. There is no second backend for a proxy to route to, so the proxy adds a separate process and additional forwarding and security configuration without solving the central problem.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

You might still place a gateway in front of one server for a specialized architecture, but that is an exception rather than a requirement. Do not install a proxy merely because you run Minecraft.

How a proxied connection works

  1. DNS or an address points players to the proxy. The public endpoint is the gateway, not an individual backend.
  2. The client connects to the proxy. The proxy handles the initial handshake and applies its connection and routing rules.
  3. The proxy selects a backend. This may be a default lobby or another server chosen by your network logic.
  4. Forwarding data is passed to the backend. Depending on the selected mode, this can include the player’s UUID, IP address, and skin information.
  5. The player plays on the backend. The proxy relays traffic while the backend runs the world and gameplay logic.
  6. A transfer can occur without a new public address. The proxy can detach the player from one backend and attach them to another.

The trust boundary is important: the backend must be able to distinguish a forwarding message created by your proxy from a connection created by an arbitrary client. That is why forwarding mode, shared secrets, and network isolation must be configured as one design rather than as independent tweaks.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Velocity, BungeeCord, and Waterfall: what to compare

There is no universal winner. Choose according to the Minecraft versions you must support, the forwarding security model, backend implementations, and the plugins your network depends on.

Comparison point Velocity BungeeCord-compatible options
Typical modern client range Modern forwarding is generally intended for Minecraft 1.13 and newer clients. Legacy BungeeCord forwarding can support older clients, including versions as old as 1.7.2.
Forwarding security Modern forwarding uses a pre-arranged secret and is the safer choice when all supported versions permit it. Legacy forwarding is fundamentally insecure unless additional protections, such as BungeeGuard and strict network controls, are used.
Plugin compatibility Not a drop-in runtime for every BungeeCord or Waterfall plugin; verify a Velocity port or supported alternative. Existing BungeeCord-compatible plugins may fit more naturally, but each plugin still needs version and security review.
Backend support Paper and compatible servers can use modern forwarding; Fabric and Forge may need specific compatibility solutions. Backend settings and forwarding behavior depend on the BungeeCord-compatible mode selected.
Operational requirement Proxy and every backend must be running, reachable on the intended address and port, and configured with matching forwarding settings. The same availability and matching-configuration requirements apply.
Proxy chaining Proxy-behind-proxy arrangements are not supported by the documented Velocity setup. Do not assume that chaining is supported simply because two proxy products can be connected on a network.

For a new network that can require Minecraft 1.13 or newer clients, modern Velocity forwarding is generally the safer default. If support for substantially older clients is non-negotiable, legacy forwarding may be the compatibility path, but its security limitations must be treated as a design constraint rather than a footnote.

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Forwarding modes and the security decisions behind them

Velocity modern forwarding

PaperMC describes modern forwarding as a custom forwarding format that is more secure. The proxy and backend share a pre-arranged secret, and the backend is configured to accept the corresponding Velocity forwarding data.

Use one forwarding mode at a time. On the backend, enable Velocity support, set the same shared secret used by the proxy, and make the proxy and backend online-mode settings match the documented configuration for your deployment. A mismatch can produce failed logins, missing identities, or players appearing with incorrect profile data.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Legacy BungeeCord forwarding

Legacy forwarding exists mainly for compatibility with older clients and older network designs. PaperMC explicitly characterizes it as fundamentally insecure. Enable the backend’s BungeeCord support only when you understand that trade-off and have added compensating controls, such as BungeeGuard where appropriate and firewall rules that prevent direct public access.

Never combine modern and legacy forwarding settings casually. A backend configured for one mode will not safely interpret traffic intended for the other.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

A firewall is still required

Modern forwarding does not replace a firewall. PaperMC’s security guidance makes that distinction explicit. Configure host firewalls or equivalent network controls so that backend ports accept traffic only from the proxy or from the private network paths you intentionally permit.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Hiding a backend address in a configuration file is not network isolation. If an attacker can connect directly to the backend, they may bypass the proxy’s authentication and forwarding assumptions. Pterodactyl’s proxy guidance likewise treats backend servers as hidden from ordinary internet clients.

Treat plugin messages as trusted input

Proxy-to-backend plugin messaging crosses the same trust boundary as forwarding data. A handler that accepts an unverified message can allow a player to impersonate the proxy to a backend. Accept messages only from trusted sources and mark handled messages correctly so they are not processed again by unrelated handlers.

Compatibility by server implementation

Backend implementation What to verify
Paper or Spigot Use the appropriate Velocity modern-forwarding or BungeeCord-compatible settings, and ensure the proxy and backend agree on the selected mode.
Fabric FabricProxy-Lite can provide modern forwarding support. Legacy forwarding support is not actively supported for Fabric according to the documented guidance.
Forge ProxyCompatibleForge or SpongeForge may be required, depending on the Forge version and the rest of the setup.
Forge-Bukkit hybrids Velocity documentation identifies these combinations as unsupported; do not assume that a hybrid server will behave like a supported Paper, Fabric, or Forge backend.

Compatibility is not only a question of whether the server starts. Check login identity, skins, IP forwarding, server transfers, plugin messaging, and the plugins that execute on both the proxy and backend.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to plan and deploy a proxy network

  1. Define the backend roles. Decide which servers are lobby, Survival, minigame, testing, or other roles. Give each a clear intended address and port inside your network.
  2. Select the proxy and supported versions. List the oldest client version you must accept, then choose modern forwarding or a legacy-compatible design based on that requirement. Audit the plugins you need before committing to a proxy runtime.
  3. Install and start the proxy process. Confirm that it is running on the public endpoint and that your host or provider exposes the intended address and port.
  4. Configure every backend for the same forwarding mode. Enable Velocity support and the shared secret for modern forwarding, or enable BungeeCord support for legacy mode. Apply the corresponding online-mode settings consistently.
  5. Restrict backend reachability. Use host firewalls, private networking, or equivalent controls so internet clients cannot bypass the proxy. Permit the proxy-to-backend paths explicitly.
  6. Configure routing and transfers. Set a default backend, then test the rules or plugin actions that move players between servers. Keep routing behavior understandable when a backend is offline.
  7. Test identity and trust. Join through the proxy and verify UUID, IP, skin, permissions, chat, and plugin messaging. Attempting a direct backend connection from an untrusted client should be blocked by the network controls.
  8. Document recovery. Record which forwarding mode, secret, backend settings, firewall rules, and plugin versions belong together. A replacement proxy or backend should be reproducible without guessing.

Common failures and how to diagnose them

Symptom Likely cause Check first
Players cannot connect to the network Proxy process is stopped, the public endpoint is wrong, or the intended port is blocked. Verify the proxy is running, listening on the intended address and port, and allowed by the host or provider firewall.
Proxy cannot reach a backend Backend is stopped, the internal address is wrong, or firewall rules reject proxy traffic. Confirm backend availability and test the proxy-to-backend path using the configured internal address.
Login succeeds but UUID, skin, or IP data is wrong Forwarding mode or shared secret does not match between proxy and backend. Check that both sides use the same mode, that modern forwarding secrets match exactly, and that online-mode settings follow the selected design.
A backend can be joined directly Backend ports are exposed to the internet. Replace obscurity with firewall rules that allow only the proxy or trusted private network.
A plugin works on BungeeCord but not Velocity The plugin depends on a BungeeCord or Waterfall runtime and has no compatible Velocity implementation. Look for a maintained Velocity port or an alternative plugin, and verify behavior on the versions you run.
Fabric or Forge behaves incorrectly behind the proxy The required compatibility mod or forwarding path is missing, or the server combination is unsupported. Check the documented FabricProxy-Lite, ProxyCompatibleForge, or SpongeForge requirements for that exact implementation and version.
Plugin messages trigger unexpected actions A handler trusts messages from an unverified source or fails to mark a message as handled. Restrict accepted sources to the proxy and audit message handling and forwarding logic.

Operational costs and requirements

The important cost of a proxy is architectural complexity, not a guaranteed performance improvement. You must operate one more process, keep its configuration synchronized with every backend, monitor another failure point, and maintain compatible proxy plugins. Hosting capacity, Java requirements, supported Minecraft versions, and provider pricing vary by deployment and change over time, so they must be checked for the specific versions you intend to run.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A practical minimum checklist is:

  • A proxy host or process that can remain available while backends are restarted.
  • At least two backend servers when the goal is server switching through one address.
  • A documented forwarding mode and, for modern forwarding, a secret shared only by the proxy and approved backends.
  • Firewall or private-network controls that prevent direct public access to backend ports.
  • Compatibility confirmation for every backend implementation, Minecraft version, and proxy plugin.
  • Monitoring and a recovery plan for proxy, backend, network, and configuration failures.

Is a Minecraft proxy secure?

It can be, but security comes from the complete design rather than the proxy name. Modern Velocity forwarding is more secure than legacy forwarding because it uses a pre-arranged secret and a custom forwarding format. It still does not replace firewalling, backend isolation, careful plugin selection, or secure handling of plugin messages.

Legacy forwarding should be treated as a compatibility compromise. If you must use it for older clients, reduce exposure with strict network controls and additional protections, and understand that those measures mitigate rather than erase the underlying weakness.

The decision in one rule

Use a proxy when you need several Minecraft backends behind one address or need seamless movement between them. For a single direct-connect server, leave the proxy out unless a clearly defined gateway requirement outweighs its extra process and security configuration. When you do build a network, prefer modern Velocity forwarding where your supported client versions and server implementations allow it, isolate every backend from the public internet, and verify compatibility instead of assuming that BungeeCord plugins or Forge and Fabric setups will transfer unchanged.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.