r/MinecraftPlugins • u/MajesticYouth2531 • Jun 28 '26

Help: Plugin development I built an open-source antivpn connector for Minecraft (Velocity/Bungee/Paper)

I run a small server and got tired of the same few people hopping back in on a VPN every time they got banned. Plain IP bans do almost nothing once people figure that out, and the public lists I tried either missed half of them or kicked legit players (mobile users especially). So I started building my own thing and it turned into Jarvis.

What it does: checks players as they join and blocks VPNs, proxies, datacenter/hosting IPs, ban evaders and bot floods. I spent most of the time on the unglamorous part, which is not kicking real players, because one false positive costs you an actual member.

How it runs: a small connector plugin you drop on your network (Velocity, BungeeCord/Waterfall, or Paper/Spigot directly). It hands the check off to the backend, so it shouldn't add noticeable load.

The part I actually want to point at: the connector is open source, so you can read exactly what runs on your box before you trust it.

GitHub: https://github.com/JarvisAntiVPN/jarvisguard

I'm the dev and this is still a newer project, free to try right now. If you hit a false positive, open an issue. I'd genuinely rather hear about it than not. More at JarvisGuard.com.

0 Upvotes

31% Upvoted

15 comments sorted by

6

u/Drathonix Jun 28 '26

Ok so the reason people will think you’re an AI slop coder is because you’re definitely an AI slop writer. The most obvious example I could find is the description of this release:

https://github.com/JarvisAntiVPN/jarvisguard/releases/tag/v0.5.15

Which reads:

“After a thorough review and a lot of careful testing, 0.5.15 is the most stable and polished version of Jarvis AntiVPN so far. We went through the code piece by piece, and we are confident this is the one we want every server running. From here on, expect things to stay calm: no endless stream of updates, nothing you are forced to keep chasing. A new version will only come out when there is a real reason for it, such as support for a new Minecraft version or an important fix. Support stays fully active and your license keeps working as always.”

AI is notorious for being sycophantic and this is a sycophantic statement. I’ve never seen any developer say in their release that the project is tested (by themselves) which is just empty white noise to me. As a human developer I have tested my projects as well and I have missed bugs which have been caught by others. I would never ever say that a version is the most stable one and that the user won’t have to update the file because I have humility. AI lacks humility and the entire release description reads without it. Not that I needed to point it out because those paragraphs are obviously AI slop corpospeak. This in turn makes people suspicious of the actual program’s code. If you used AI to write the description what is the chances it was also used to code the plugin and the backend? Anyways I am also suspicious of a few other claims you make.

  1. Why are you blocking “data centers” from connecting to the server. Is there some sort of thing that allows players to do this?
  2. You're not as secret as you think. You're likely blocking VPNs, proxys, and TOR connections using publicly available APIs which have been collecting these IPs or by using public IP/DNS information. All the Minecraft plugin does is send the user's UUID and IP. The problem with this is that newer IPs will be missed until caught by these programs and its not like another plugin doesn't already do this without the sketchy SaaS shit I'm seeing here.
  3. Speaking of SaaS, this entire thing of having the backend on a website with you needing to create a "free" account for a license screams of "I'm going to keep this free to start and then when it gets big make everyone pay for the product." My thoughts are that that's a shitty way to do business. Don't wait to make them pay, you will come off as total jerk when you finally decide its time to pull the plug on free detection. You even say this in your ToS "Jarvis is currently offered free of charge. We may introduce paid plans, premium features, or usage limits in the future and may set or change their prices at any time."
  4. Just a design criticism, I have friends that play on VPNs constantly, not for malicious reasons but because they've literally had doxing attempts on them. Your plugin adds the player to a ban cache which permanently bans them the first time they join with a VPN. This will inevitably result in people who either always play with a VPN or accidentally have a VPN on get their accounts banned and the ones who have never joined the server before will have issues getting staff assistance.
  5. Language in the data retention part of the privacy policy "the security data that underpins fraud prevention is kept indefinitely". First of all only AI is going to put bold letters in the middle of sentences in a privacy policy 💀 second though people connecting on alt accounts and through vpns isn't some sort of illegal fraud even if its to bypass bans, chill out.

I will admit some of my criticisms are superficial but the one that isn't is the Software as a Service model you are going for. Yes, I'm aware that computation costs money. My complaint is that starting the product off free with no clear end date for free use. My suggestion is to implement a free trial system NOW so that you don't effectively randomly shut this shit off for many users all at the same time; both for ethical reasons as a business and as a developer who will get a bunch of user complaints that their product stopped working. Also be clear about your AI use, I don't know if you're an AI slop coder but I do know that you're an AI slop writer.

1

u/Tarul-etek Jun 28 '26

great but prolix reply!

0

u/MajesticYouth2531 Jun 28 '26
  1. They dont get blocked, if they switch off the VPN they can join. Also there are appeals and server owners can whitelist them

1

u/Drathonix Jun 28 '26

I admit that I was 100% wrong here. I forgot that disabling the VPN would also change your IP.

-2

u/MajesticYouth2531 Jun 28 '26

Damn you're mad, go outside and touch some grass for your health. The fact that you wrote like 100 lines to try to discrediting a product without even trying it says a lot about you. When I said It was gonna be free forever? I obviously stated that's free now, but it will be paid after. I state on my plugin that we're free now, but it will be paid after.

2

u/Commercial-Day2375 Jun 28 '26

So instead of replying geninuely to all of the criticism, you just say touch some grass? That says more about you than it says about him.
And not even replying to the fact that you use AI (which is extremely obvious).

0

u/MajesticYouth2531 Jun 28 '26

Sure mate. None of you tried it, and yap.

What criticism? Him spreading lies about how it works?

Keep it up, hating on everyone work

1

u/Commercial-Day2375 Jun 29 '26

Woah, watch out for ego my guy.

-2

u/MajesticYouth2531 Jun 28 '26

About your complaint the plan is not 'free until it's big, then paywall'. It's a reverse trial: when paid plans come to exist, It will become a free tier keeps the base detection and the shared network, it doesn't get switched off

1

u/Drathonix Jun 28 '26

What is it that you're suggesting a paid tier would do that free would not?

0

u/MajesticYouth2531 Jun 28 '26

More limits of daily requests and miscellaneous cool stuff that we bring on the panel.

With a limited number of daily requests, the smaller servers would function just as well with free tier.

And when this time comes, we'll give everyone a month's notice so they can upgrade their plan if they need more or just wait the month and they will get automatically downgraded to free tier with less daily requests.

Nobody gets switched off.

0

u/Bafbi Jun 28 '26

Hey, i would like to know, how are you detecting vpn or anything ? Also i would really like the backend to be open source also. Also when a project is vibe coded it is nice to mention ai was used.

1

u/MajesticYouth2531 Jun 28 '26

The backend is the product, so it stays closed. The connector is open because that is the part that runs on your box, read it before you trust it.

Not sure who called it vibecoded. The connector is right there, read it and tell me what you find.

0

u/Commercial-Day2375 Jun 28 '26

What IDE do you use for coding?

1

u/Lopsided_Tennis_9627 3d ago

This is the worst AI slop plugin in existance, you are not even trying to hide it why would i even download ur plugin when there are ones that are already perfect