chipmunk.land-kaboomserver/framework
2
0
Fork 1
forked from kaboomserver/framework
Code Issues Pull requests Projects Releases Packages Wiki Activity

Reduce false positives from alive checker

Browse source
This commit is contained in:
mathiascode 2020-08-02 14:51:56 +03:00
parent e8d24444be
commit d402fc464a
3 changed files with 37 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
config/iptables
View file

@ -1 +1,9 @@
iptables -t nat -A INPUT -p tcp --dport 25565 -j SNAT --to-source 192.168.1.100 # IPv4
iptables -t nat -A INPUT -p tcp --dport 25565 -j SNAT --to-source 192.168.1.0-192.168.100.100
iptables -t nat -A INPUT -p udp --dport 19132 -j SNAT --to-source 192.168.1.0-192.168.100.100
iptables -A INPUT -p tcp --syn --dport 25565 -m connlimit --connlimit-above 5 --connlimit-mask 32 -j REJECT --reject-with tcp-reset
# IPv6
ip6tables -t nat -A INPUT -p tcp --dport 25565 -j SNAT --to-source 2001:db8::1-2001:db8::6464
ip6tables -t nat -A INPUT -p udp --dport 19132 -j SNAT --to-source 2001:db8::1-2001:db8::6464
ip6tables -A INPUT -p tcp --syn --dport 25565 -m connlimit --connlimit-above 5 --connlimit-mask 32 -j REJECT --reject-with tcp-reset

44
script/server.sh
View file

@ -5,27 +5,37 @@
PATH="$HOME/framework/vendor/java/bin/:$PATH" PATH="$HOME/framework/vendor/java/bin/:$PATH"
dtach -n alivecheck ~/framework/script/alivecheck.sh
# Make sure we're in the server folder, located in the home directory # Make sure we're in the server folder, located in the home directory
cd ~/server/ cd ~/server/
# Make certain files and folders read-only
chmod -R 500 plugins/bStats/
chmod -R 500 plugins/PluginMetrics/
chmod -R 500 plugins/ProtocolLib/
chmod 400 bukkit.yml
chmod 400 commands.yml
chmod 400 eula.txt
chmod 400 paper.yml
chmod 400 permissions.yml
chmod 400 server-icon.png
chmod 400 server.properties
chmod 400 spigot.yml
chmod 400 wepif.yml
while true; do while true; do
# Make certain files and folders read-only
chmod -R 500 plugins/bStats/
chmod -R 500 plugins/PluginMetrics/
chmod -R 500 plugins/ProtocolLib/
chmod 400 bukkit.yml
chmod 400 commands.yml
chmod 400 eula.txt
chmod 400 paper.yml
chmod 400 permissions.yml
chmod 400 server-icon.png
chmod 400 server.properties
chmod 400 spigot.yml
chmod 400 wepif.yml
# Start alive checker
dtach -n alivecheck ~/framework/script/alivecheck.sh
# Start Minecraft server
java -Xmx1800M -Xss8M -Xtune:virtualized -Xaggressive -Xcompressedrefs -Xdump:heap+java+snap+system:none -Xdump:tool:events=throw+systhrow,filter=java/lang/OutOfMemoryError,exec="kill -9 %pid" -Xgc:concurrentScavenge -Xgc:dnssExpectedTimeRatioMaximum=3 -Xgc:scvNoAdaptiveTenure -Xdisableexplicitgc -Xshareclasses -Xshareclasses:noPersistentDiskSpaceCheck -XX:MaxDirectMemorySize=128M -XX:+ClassRelationshipVerifier -XX:+GlobalLockReservation -XX:+UseContainerSupport -DPaper.IgnoreJavaVersion=true -Dpaper.playerconnection.keepalive=360 -DIReallyKnowWhatIAmDoingISwear -jar server.jar nogui java -Xmx1800M -Xss8M -Xtune:virtualized -Xaggressive -Xcompressedrefs -Xdump:heap+java+snap+system:none -Xdump:tool:events=throw+systhrow,filter=java/lang/OutOfMemoryError,exec="kill -9 %pid" -Xgc:concurrentScavenge -Xgc:dnssExpectedTimeRatioMaximum=3 -Xgc:scvNoAdaptiveTenure -Xdisableexplicitgc -Xshareclasses -Xshareclasses:noPersistentDiskSpaceCheck -XX:MaxDirectMemorySize=128M -XX:+ClassRelationshipVerifier -XX:+GlobalLockReservation -XX:+UseContainerSupport -DPaper.IgnoreJavaVersion=true -Dpaper.playerconnection.keepalive=360 -DIReallyKnowWhatIAmDoingISwear -jar server.jar nogui
# Stop alive checker (will be started again on the next run)
killall alivecheck.sh
# Ensure we don't abuse the CPU in case of failure
sleep 1 sleep 1
done done