TCPShield
by vibing
TCPShield is a server-side mod that restricts which IP addresses may open connections to a Minecraft server, using an allowlist of trusted addresses and CIDR ranges.
What it does
On startup the mod fetches TCPShield's published IP ranges and closes any connection from an address outside the allowlist before the Minecraft protocol begins. Trusted addresses and CIDR ranges are added in the config file, so only traffic routed through the TCPShield proxy reaches the game. Netty channels are hooked early, which allows the connections to be dropped at the network layer.
It runs on the server alone, so players need nothing extra to join. The mod is released under the GNU General Public License v3.0 or later, is open source, and publishes files for Fabric, Forge and NeoForge across 23 release versions, 1.20 – 26.2.
Key features
Configurable IP allowlist
A simple allowlist accepts trusted addresses and CIDR ranges and rejects everything else.
TCPShield range lookup
TCPShield's IP ranges are fetched at startup, so the list of accepted proxy addresses stays current.
Early connection blocking
Connections from outside the allowlist are closed before Minecraft handles them, at the Netty channel level.
Compatibility
Latest build for each game version and loader.
26.x4 of 4 versions with builds
1.21.x12 of 12 versions with builds
1.20.x7 of 7 versions with builds
Only full game releases are shown. This mod publishes no snapshot builds.
Questions
Does TCPShield need to be installed on the client?
Is TCPShield a replacement for a firewall?
In the catalog
TCPShield is one of 8,016 Management mods on ModsFinder, and one of 5,930 Management mods for Fabric. 13,894 mods support Minecraft 26.2.
More from vibing
Similar mods
What the author says
A server-side mod that blocks direct connections to Minecraft servers behind TCPShield. It downloads TCPShield's IP ranges at startup and closes connections from addresses outside the allow-list before the Minecraft handshake.
Official listing
- Modrinth page
- modrinth.com/mod/tcpshield
- Owner
- vibing
- Published
- 2024-09-06
- Updated on Modrinth
- 2026-07-24
- Facts verified
- 2026-10-15