TCP · XDP
Minecraft Java
Handshake, status, ping, and login are checked first. Fake packets never reach your server.
Handshake inspect
Parses Java handshake, status, ping, and login before they reach the server.
VarInt & packet IDs
Malformed frames and illegal packet IDs are dropped at the driver.
SYN throttle
Per-IP SYN rate limits. Floods never fill the backlog.
Status floods
Server-list / MOTD bursts are classified and dropped in-kernel.
Line-rate drop
Junk never enters the network stack. The tick loop never sees it.




