ModsFinder

NG HaProxy Support

by SSbaxyS

NG HaProxy Support lets a Forge server read the real client address when players connect through a HAProxy-compatible reverse proxy.

ForgeServer-side onlyMIT License1.20.1

What it does

Without support for the PROXY protocol, a server sees only the address of the proxy, so every player appears to share one IP. NG HaProxy Support accepts PROXY protocol v1 and v2 headers and restores the real player address in server logs. It is aimed at servers placed behind proxies such as Velocity, TCPShield, FRP or Nginx, and any other reverse proxy that can send the header.

The mod supports a hybrid setup in which proxied and direct connections are accepted at the same time. Connections from addresses it does not recognize are rejected by default, which blocks players who try to skip the proxy and spoof an IP. Whitelists accept CIDR ranges, and TCPShield server addresses can be fetched automatically. The config can be reloaded without a restart, and a status command shows the current settings and connection counts in game.

The mod is server-side only, so players join without installing anything. It is published for Forge 1.20.1, with the latest file, 1.0.0, dated 2026-03-15. Its code is under the MIT License and is not open source.

Key features

  1. PROXY protocol v1 and v2

    Both header versions are parsed, so the server recognizes the real client address from either format.

  2. Fail-closed connections

    Unknown addresses are rejected automatically, which stops players from bypassing the proxy and connecting directly.

  3. CIDR whitelists

    Whole subnets can be listed in one entry instead of individual addresses.

  4. TCPShield address fetch

    The whitelist can pull TCPShield server addresses automatically rather than requiring manual updates.

  5. Status command and logging

    An in-game command shows the current configuration and connection statistics, and connections are logged.

Compatibility

Latest build for each game version and loader.

1.20.11.0.0
ReleaseBetaAlphaNot available

Only full game releases are shown. This mod publishes no snapshot builds.

How it compares

Full comparison

ProperProxyProtocol is available for Fabric, Forge and NeoForge across 1.20 – 1.21.11, is server-side only and is under All rights reserved, so it is not open source. PROXY protocol Wrapper targets Fabric only, for 1.21.11 – 26.3, is server-side only and is open source under the GNU General Public License v3.0 or later. TCPShield covers Fabric, Forge and NeoForge for 1.20 – 26.2 and is open source under the GNU General Public License v3.0 or later.

ModLoadersGame versionsEnvironmentUpdated
NG HaProxy SupportForge1.20.1Server-side only2026-03-15
ProperProxyProtocolFabric, Forge and NeoForge1.20 – 1.21.11Server-side only2026-05-27
PROXY protocol WrapperFabric1.21.11 – 26.3Server-side only2026-10-13
TCPShieldFabric, Forge and NeoForge1.20 – 26.2Server-side only2026-07-24

Questions

Does NG HaProxy Support need to be installed on the client?

No. Players join without it, since only the server has to run the mod.

Which proxies work with NG HaProxy Support?

Velocity, TCPShield, FRP and Nginx are named, along with other HAProxy-compatible reverse proxies that send PROXY protocol headers.

What happens to a connection that skips the proxy?

The mod is fail-closed: an address it does not recognize is rejected automatically, which prevents spoofed connections.

In the catalog

NG HaProxy Support is one of 8,499 Technology mods on ModsFinder, and one of 4,122 Technology mods for Forge. 34,764 mods support Minecraft 1.20.1.

More from SSbaxyS

All projects

Similar mods

What the author says

Adds HAProxy PROXY protocol support to your Minecraft Forge server. See real player IP addresses when your server is behind a proxy like Velocity, TCPShield, FRP, Nginx, or any other HAProxy-compatible reverse proxy.
SSbaxyS, on the Modrinth page

Official listing

Owner
SSbaxyS
Published
2025-12-19
Updated on Modrinth
2026-03-15
Facts verified
2026-10-15

Tags