Always on
Limited new connections per IP, invalid packets dropped, login checks against invalid names and mass logins.

Players connect to your address, and the CDN passes them on to your server. Your server’s IP stays secret, bot waves and attacks hit us instead of you – and your players won’t notice a thing.
The CDN answers the server list itself – ping floods never reach your server. Only players who actually join are passed on.
e.g. play.your-domain.com, plus your server’s address and port. The portal immediately checks whether it responds.
A CNAME from play to your personal target – with one click or yourself. For the bare domain there’s an SRV record. If the domain is in the CDN’s DNS, this step is skipped.
Hostname and secret are already inside the jar: drop it into plugins or mods, restart, done. Without a plugin it works via the PROXY protocol.
/khcdn status # protection status /khcdn stats # connections, rejected (24 h) /khcdn spieler <name> # edge, ping, best edge /khcdn block <player|IP> # block on all edges /khcdn wartung an [text] # maintenance mode
Limited new connections per IP, invalid packets dropped, login checks against invalid names and mass logins.
During a login flood, unknown players reconnect once – bots usually can’t, humans take a second. Then they’re cleared for 24 hours.
Make connections from VPN and cloud networks reconnect, or reject them. Regulars and names you approve still get in.
Ban names on all edges within seconds – also on Velocity, BungeeCord and servers without the plugin. With the plugin, the edges also enforce your /ban-ip bans and whitelist.
Players only see the edges. The plugin only allows connections via the CDN – like a firewall, without you having to set one up.
Just like websites: block or always allow addresses, networks and countries.
From Minecraft 1.20.5, the plugin sends players to the fastest edge when they join – based on distance and response time to your server. They only see “Connecting…” briefly.
If the server is full or restarting, players wait on the loading screen and get in one after another – from Minecraft 1.13.
Two lines of text with color codes and your own icon – even while your server has crashed or is restarting.
Immediately or scheduled, with your own text in the server list. If the plugin reports a restart, the CDN shows “restarting” – without an outage alert.
Bans, logs and plugins like LuckPerms see the correct address – via plugin or PROXY protocol.
Who was last online, via which edge, from which country and with which connection – and what was rejected.
Player and TPS history, peak times by weekday and hour, response time per edge.
If the server stays below 15 TPS for several minutes, you get an alert – with the reason when it can be identified: memory, entities or tick time.
If no edge has reached your server for 2 minutes, you’re notified – and when it’s resolved.
Status card, badge and JSON for your website or Discord – online, maintenance, players, version. Without the server address.
After an attack, share a public page with the numbers – for your community.
Up to 10 servers per game server – with weights, backup servers and automatic checks via the Minecraft status.
| Platform | Versions | Installation |
|---|---|---|
| Paper, Purpur, Pufferfish | 1.18.2 to 26.x | Plugin → plugins/ |
| Spigot, Paper (older) | 1.8.8 to 1.18.1 | Plugin → plugins/ |
| Velocity | 3.3 and later | Plugin → plugins/ |
| BungeeCord, Waterfall | Java 17 or newer | Plugin → plugins/ |
| Fabric, Quilt | 1.14 to 26.x | Mod → mods/ |
| NeoForge | 1.20.1 to 26.x | Mod → mods/ |
| Forge | 1.8.9 to 1.20.x | Mod → mods/ (modpacks too) |
| Vanilla, Sponge and others | – | PROXY protocol |
The plugin updates itself – signed versions only.
No. They connect to your usual address. Only during a bot wave do unknown players have to reconnect once.
Minecraft Java Edition: plugin for Spigot and Paper from 1.8.8, Velocity and BungeeCord, or a mod for Forge from 1.8.9, Fabric from 1.14 and NeoForge. Other servers use the PROXY protocol. Bedrock is coming.
No. Protection, bot detection, availability and statistics also work with the PROXY protocol. Without the plugin you don’t get player count and TPS in the portal, lag diagnostics, bans and whitelist at the edges, or the /khcdn commands.
Yes. The plugin runs on Velocity 3.3 and later and on BungeeCord and Waterfall; player bans at the edges work there too.
Yes – with a device in the CDN without any port forwarding, or via DynDNS if your address changes. Your home address stays hidden.

Free plan, forever · no credit card required · set up in minutes
Privacy
No cookies. No tracking.
We only store your choice between the light and dark design and that you closed this notice – locally in your browser.