Security and abuse

What the relay sees

The connection between the agent and a node uses TLS. Game traffic between players and the node is whatever the game sends; Minecraft encrypts its own sessions in online mode. The relay does not inspect gameplay beyond the first bytes it uses to route and validate.

Protections

• Java and Bedrock ports accept only real Minecraft handshakes and RakNet requests.
• Per-IP rate limits, connection caps and a UDP reflection guard protect your server and the relay.
• Agent keys are stored hashed on our side and can be revoked from the dashboard.
• Custom domains are verified by DNS, re-checked every 6 hours, and can belong to one account only.

Reporting abuse

If an Enzonic Relay address is used for phishing, malware, attacks or spam, report it. We can suspend tunnels that break the acceptable use policy.

Security issues

Report vulnerabilities to admin@enzonic.com.