[Game] Minecraft Pocket Edition Incompatible With Servers Using RakNet Cookies

[Kas-tle]

We recently pushed an update on a Minecraft Bedrock project I work on that uses a little known mechanism in the original RakNet protocol to send a proper cookie to the client in the first response packet in order to prevent UDP source IP spoofing. See GeyserMC/Geyser#4554 which contains details and packet captures from before and after.

I believe that the OVH game firewall may already implement some sort of its own check (something along the lines of setting the MTU to a random value and checking if the client agrees to it). However, because it is not considering the cookie, I believe that our software rejects the connection as it expects to receive the valid cookie it sent the client.

Since the vanilla Minecraft Bedrock client correctly handles this, would there be any way to implement support for this on OVH so that the game firewall forwards the correct cookie to the backend server if it requests it?

[jslocinski]

Thanks @Kas-tle for the info. Will check it with the team.

[jslocinski]

Hello, the new implementation of RakNet is on the roadmap and will target next generation of GAME DDoS protection. That will be available with upcomming GAME servers (late summer).

[dries-c]

Is there a reason it won't be added to current GAME servers in the future?

[jslocinski]

Is there a reason it won't be added to current GAME servers in the future?

Yes, due to the complexity of this task for previous generations, we prioritized new one to be able to deliver quickly.

New platform will secure more frequent security upgrades and feature upgrades and will provide next-gen networking with more bandwidth which was also highly demanded.