Skip to content

FlowGate-Lite 1.0.7

Latest
Latest

Choose a tag to compare

View all tags
@darkzmaj darkzmaj released this 16 Oct 10:35
v1.0.7
ce23d77
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

FlowGate Lite 1.0.7

A reliability and security update to 1.0.6. Existing routing features, configuration keys and the Bungee Connect message format are preserved.

What's Changed

  • Hardened hub selection, fallback routing, backend messages and configuration reloads.
  • Added regression tests, reproducible JAR builds and automated release publishing.

Bug Fixes

  • Complete limbo cleanup and clear waiting titles after a successful server switch.
  • Use fallback when healthy hubs are full; bound repeated backend rejection chains instead of looping indefinitely.
  • Stage and serialize reloads, safely publish configuration across threads, and clean up shutdown state.
  • Handle locale-sensitive policy matching and title counter overflow.

Security Improvements

  • Honor restricted-server access across hub, direct, fallback and backend-message routes.
  • Reject stale backend sources, malformed/oversized messages and disallowed destinations; respect cancelled events.
  • Apply atomic, monotonic per-player message limits and remove entries on disconnect. Trusted backends must still be secured.

Compatibility

  • Minecraft Java 26.3 verified with BungeeCord build 2104, including real protocol-777 routing between Paper 26.3 backends using FlowGate-Bridge. BungeeCord ran on Java 21.
  • BungeeCord plugin; not a Velocity plugin. Waterfall is discontinued and is not verified for 26.3. Java 17 bytecode does not imply that every older proxy/runtime is supported.
  • Validation: 8 passing regression tests, startup/status/reload/shutdown, forged-client-message rejection and bounded backend-failure routing.

Installation / Updating

Stop the proxy, back up the plugin/configuration, replace the old JAR with FlowGate-Lite-1.0.7.jar, and restart. No configuration migration is required. Restricted destinations now consistently require access. Verify the accompanying SHA-256 file; source archives are not installable plugins.

Known Limitations

Online-mode authentication, sustained load, older releases, Waterfall/FlameCord and every sticky-session/title/failure timing combination were not tested. No Velocity port is included.

Assets 4
Loading