Programmer NEED GOOD TUNELLING SYSTEM

[Engradiel]

Hi everyone, I'm looking for someone with experience who has already developed an effective tunnel that doesn't suffer attacks and automatically chooses the best route.

If you've done this before and have experience in creating something good like this, please get in touch.I want to develop a tunnel to avoid delays and freezes on my server due to the higher rotation of my dedicated server provider

.About 10% of players experience this and sometimes complain about lag and kicks when it's normal for others.

Thank you.

 

[Engradiel]

Aurera Proxy, Kaldrox Proxy.
Does anyone have information on who created this?
It seems to work very well with the launcher coupled to the Tibia client DLL.

 

[M4rcin]

Hi everyone, I'm looking for someone with experience who has already developed an effective tunnel that doesn't suffer attacks and automatically chooses the best route.

If you've done this before and have experience in creating something good like this, please get in touch.I want to develop a tunnel to avoid delays and freezes on my server due to the higher rotation of my dedicated server provider

.About 10% of players experience this and sometimes complain about lag and kicks when it's normal for others.

Thank you.

A 10% difference is basically within the margin of error, so your "issue" might not even be real.
You really need to learn how to identify actual problems on your own.
From a player’s perspective, it is always the server’s fault - if you rely on player feedback to diagnose issues, you’re setting yourself up for a bad time.

View attachment 96659View attachment 96660

Aurera Proxy, Kaldrox Proxy.
Does anyone have information on who created this?
It seems to work very well with the launcher coupled to the Tibia client DLL.

IIRC, it was created by the creator of OTCv8 - Kondrah. He is no longer available for help.

 

[Engradiel]

A 10% difference is basically within the margin of error, so your "issue" might not even be real.
You really need to learn how to identify actual problems on your own.
From a player’s perspective, it is always the server’s fault - if you rely on player feedback to diagnose issues, you’re setting yourself up for a bad time.


IIRC, it was created by the creator of OTCv8 - Kondrah. He is no longer available for help.

It can't be him because Kaldrox implemented that feature recently... So it must be someone else.

 

[Gallus]

It can't be him because Kaldrox implemented that feature recently... So it must be someone else.

Its kondrah proxy which you can get from some people here.

 

[Engradiel]

A 10% difference is basically within the margin of error, so your "issue" might not even be real.
You really need to learn how to identify actual problems on your own.
From a player’s perspective, it is always the server’s fault - if you rely on player feedback to diagnose issues, you’re setting yourself up for a bad time.


IIRC, it was created by the creator of OTCv8 - Kondrah. He is no longer available for help.

Yes, it's true that many problems originate from the player themselves, such as: a computer with a virus, a bad network cable, or a bad modem.

However, others stem from poor routing between internet providers, which fluctuates and generates lag even when the ping is low.It's this second type that I want to prevent.


It's not a trivial matter, and players frequently complain about this problem. That's why I'm trying to fix it.

 

[Michael Orsino]

Thread 'Alpha Proxy Guide (kondrah/otclient multi-path proxy)'

Apr 1, 2025

Kondrah Alpha Multi Proxy Solution

This guide is written by @Michael Orsino, with thanks and credit to @Alpha—full attribution at the end.
Difficulty level: Hard – This guide assumes knowledge of Linux, firewalls, C++, and Lua.
Reading time: Approx. 10 minutes

Due to the increased frequency of DDoS ransom attacks against our community over recent months, I decided to write this guide in hopes that it will help you protect your game and provide the best experience to your players.

What is this?
This guide explains how to implement the proxy...

• Michael Orsino
• Replies: 48
• Forum: Miscellaneous

• 
• 

 

[M4rcin]

Thread 'Alpha Proxy Guide (kondrah/otclient multi-path proxy)'

Apr 1, 2025

Kondrah Alpha Multi Proxy Solution

This guide is written by @Michael Orsino, with thanks and credit to @Alpha—full attribution at the end.
Difficulty level: Hard – This guide assumes knowledge of Linux, firewalls, C++, and Lua.
Reading time: Approx. 10 minutes

Due to the increased frequency of DDoS ransom attacks against our community over recent months, I decided to write this guide in hopes that it will help you protect your game and provide the best experience to your players.

What is this?
This guide explains how to implement the proxy...

• Michael Orsino
• Replies: 48
• Forum: Miscellaneous

• 
• 

You are missing the thread's point, Kondrahs proxy actually increases ping, since rarely the proxy nodes are going to be located near you, effectively increasing the distance the connection travels.

A proxy solution like that serves the purpose of hiding the IP of the main server at the cost of decreasing connection quality (given your nodes are weak, and you will connect to a further node, after one near dies), so it feels completely counterproductive here.

PS: It is also a first point of failure on <64GB RAM server.
If you guys want to take credit for it, you should really fix the obvious inefficiencies it has ... I really hope the fix is not a paid service Ezzz style, that would be straight up scam.

Yes, it's true that many problems originate from the player themselves, such as: a computer with a virus, a bad network cable, or a bad modem.

However, others stem from poor routing between internet providers, which fluctuates and generates lag even when the ping is low.It's this second type that I want to prevent.


It's not a trivial matter, and players frequently complain about this problem. That's why I'm trying to fix it.

No general solution (unless very costly) is going to work for these users, since your proxy nodes will usually extend the distance the connection travels.

If the user has issues with the connection, the best thing you can do is help profile it, and if it's bad routing - suggest a tunneling service like ExitLag, which allows to finetune routes.
Renting nodes everywhere will be less cost-efficient than buying licenses for each player who has issues.

 

[Engradiel]

You are missing the thread's point, Kondrahs proxy actually increases ping, since rarely the proxy nodes are going to be located near you, effectively increasing the distance the connection travels.

A proxy solution like that serves the purpose of hiding the IP of the main server at the cost of decreasing connection quality, so it's completely counterproductive here, and this is why I didn't link it.

PS: Not only counterproductive, but also a first point of failure on <64GB RAM server.
If you guys want to take credit for it, you should really fix the obvious inefficiencies it has ... I really hope the fix is not a paid service Ezzz style, that would be straight up scam.


No general solution (unless very costly) is going to work for these users, since your proxy nodes will usually extend the distance the connection travels.

If the user has issues with the connection, the best thing you can do is help profile it, and if it's bad routing - suggest a tunneling service like ExitLag, which allows you to finetune routes.
Renting nodes everywhere will be less cost-efficient than buying licenses for each player who has issues.

The ping didn't increase if I bought a proxy VPS alongside the main dedicated server.

 

[Marko999x]

You got a server with 2k players
just get a programmer that setup it up for your server for few dollars

 

[M4rcin]

The ping didn't increase if I bought a proxy VPS alongside the main dedicated server.

You gain absolutely nothing except a point of failure by proxying your main server with some weak VPS in the same location.
What's the point of a proxy like that?

 

[MC Kresha]

I really hope the fix is not a paid service Ezzz style,

I fucking love how vindictive u are and im all for it

 

[Gallus]

You gain absolutely nothing except a point of failure by proxying your main server with some weak VPS in the same location.
What's the point of a proxy like that?

You get different network routes, hide main servers IP and fairly strong protection against attacks since it would be difficult to take down all proxies at once (if you configure it properly) - at very minimal cost.

In fact, you dont degrade connection quality but you improve it.

 

[M4rcin]

You get different network routes, hide main servers IP and fairly strong protection against attacks since it would be difficult to take down all proxies at once (if you configure it properly) - at very minimal cost.

In fact, you dont degrade connection quality but you improve it.

Its way easier to take down some random VPS than correctly set up a dedicated server from OVH.
If the node is in the same place, your routes will be identical (unless you are in some kind of private network, but this again, require other nodes)
If one of your nodes dies and you get connected to a node further away, your connection will be worse.

It's still better than no connection, but what I am trying to say is - just secure your OVH dedicated and dont leave vulnerabilities
You will be way better than any OTLand proxy written on a knee, with hundreds of iffy nodes that nullroute as soon as a weird packet comes in ... unless you can afford another OVH dedicated server as your node, but this effectively doubles your hosting costs.

Circling back to the topic: Proxies might help in edgecases, but it is expensive to spread them in a way they will actually do.
The users might still experience connection issues, simply because the issue is usually between them and your nearest node, or your node will share the faulty route.

 

[Gallus]

Its way easier to take down some random VPS than correctly set up a dedicated server from OVH.

Yes, thats exactly why you dont rely on single proxy.

If the node is in the same place, your routes will be identical (unless you are in some kind of private network, but this again, require other nodes)

Yes, thats exactly why you buy several nodes in different hostings.

If one of your nodes dies and you get connected to a node further away, your connection will be worse.

No, because you can have more proxes with better latency than direct connection with dedic.

It's still better than no connection, but what I am trying to say is - just secure your OVH dedicated and keep it alive
You will be way better than any OTLand proxy written on a knee, with hundreds of iffy nodes that nullroute as soon as a weird packet comes in ... unless you can afford another OVH dedicated server as your node, but this effectively doubles your hosting costs.

Arent you developer of soerpg.com, who has been having DDoS and lag issues for several editions now?

 

[Engradiel]

The system initially worked well, and I will improve it.

I have one problem: I have a feature that, when the player's IP address is 0, the creatures ignore them (this is good because in case of power or internet outages, the player is protected).

However, with Alpha Proxy (hasproxy), when exiting the character, it takes 30 seconds to lose the IP address. Does anyone know how to adjust this setting?


Demonstration video: Watch WhatsApp Video 2025-12-16 at 19.20.16 | Streamable (https://streamable.com/vgz4o7)

 

[M4rcin]

No, because you can have more proxes with better latency than direct connection with dedic.

This is where your idea goes south.

Arent you developer of soerpg.com, who has been having DDoS and lag issues for several editions now?

Yes, we had DDoS issues in the past, and we don't have them anymore.
Are you going to invalidate my experience simply because I actually have it?
That would probably be as smart as setting a weak proxy in front of your dedicated server

 

[Gallus]

This is where your idea goes south.

Why? Honestly, it looks like you dont really understand how these proxies work.

 

[M4rcin]

Why? Honestly, it looks like you dont really understand how these proxies work.

You can achieve that only if you go around a faulty route, which implies that the node will not share the same route.
Making it true for users around the globe will generate costs.

Surely you can become another ExitLag (which is a proxy service I suggested above) for your players, but if that is going to be "minimal costs" you mentioned? I am not so sure.

Even for anonymity's sake, if you want a proxy as resilient as a single dedicated server, you need at least one dedicated server in your nodes, which doubles your costs at the very start. I get you can get cheap VPS's, but most of these VPS's will nullroute as soon as the attack start, and you might be left out with no nodes available otherwise.

Is there anything that I am missing?

 

[Engradiel]

You can achieve that only if you go around a faulty route, which implies that the node will not share the same route.
Making it true for users around the globe will generate costs.

Surely you can become another ExitLag (which is a proxy service I suggested above) for your players, but if that is going to be "minimal costs" you mentioned? I am not so sure.

Even for anonymity's sake, if you want a proxy as resilient as a single dedicated server, you need at least one dedicated server in your nodes, which doubles your costs at the very start. I get you can get cheap VPS's, but most of these VPS's will nullroute as soon as the attack start, and you might be left out with no nodes available.

Is there anything that I am missing?

Yes, I'll personally ask all the players who start playing to download Exitlag and learn how to use it. Thanks for the tip, man.