Connecting to Minecraft server via TCP trhough Traefik

Traefik Traefik v2
,
1

Hi all,

I'm trying to connect to my minecraft-server container via TCP as shown bellow:

mc_bug_reseau
mc_bug_reseau610×1072 57.4 KB

Here is my traefik docker-compose

traefik:
  container_name: traefik
  restart: unless-stopped
  image: traefik:rocamadour
  command:
    - --log.level=INFO
  ports: #Liste les ports a exposer
    - 80:80
    - 443:443
    - 2565:25565/tcp

  volumes: #On décrit les volumes a monter dans le container
    - /var/run/docker.sock:/var/run/docker.sock
    - /home/louison/turbonas/traefik/acme.json:/acme.json
    - /home/louison/turbonas/traefik/.htpasswd:/.htpasswd
    - /home/louison/turbonas/traefik/traefik.yaml:/traefik.yaml
    - /home/louison/turbonas/traefik/traefik_dynamic.yaml:/traefik_dynamic.yaml

  environment:
    - TZ=Europe/Paris

And here is entryPoint configured:

entryPoints:
  minecraft:
    address: ':25565/tcp'

And finally here is my container:

vanilla:
  container_name: vanilla
  restart: unless-stopped
  image: itzg/minecraft-server
  volumes:
  - /home/louison/turbonas/minecraft/vanilla/data:/data
  environment:
    EULA: "true"
    DEBUG: "true"
  labels:
  - traefik.tcp.routers.vanilla.rule=HostSNI(`my.domain.fr`)
  - traefik.tcp.routers.vanilla.entrypoints=minecraft

When I try to access my container I can see using sudo tcpdump -i any -vv tcp port 25565 that some packets are incorrects:

image
image941×413 15.8 KB

I think that Traefik is reading or alter packets while sending them to my container.

Is there a way to configure Traefik not to read or not to alter packets?

Thanks all

P.S.: Sorry if it's not really clear, I'm a French network newbie.

2

As far as I know, Minecraft doesn't use TLS, so you can't use HostSNI as a rule since there is no SNI header.

3

Oh thanks, ok I can see my mistake now!
So since Minecraft doesn't need TLS I cannot use any rule like my.domain.fr or is it possible to configure a specific rule?

Thank you

4

No, you'll have to go port based. Each entrypoint = 1 route to a minecraft server. To attach a hostname to it, you want to look into SRV records (DNS); SRV records can have pointers that if you visit my.domain.fr it will look up not just the IP, but also the port for Minecraft.

That's why if you want to host multiple minecraft servers you don't really need Traefik at all, just need SRV records in DNS and that'll do the trick.

5

Thanks, it's much more clear.
I think I will go without Traefik for Minecraft for now.

Have a nice day !

6

You seem to have a typo on the docker-compose file

And you don't have to use TLS for TCP routing with Traefik.
You can use the HostSNI(`*`) matcher special case for this.

Here's how I would do it 
version: '3.9'

services:
  traefik:
    image: traefik:v2.7
    command:
      - --providers.docker
      - --entrypoints.minecraft.address=:25565
    ports:
      - 25565:25565/tcp
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

  vanilla:
    container_name: vanilla
    restart: unless-stopped
    image: itzg/minecraft-server
    volumes:
      - ./data:/data
    environment:
      EULA: "true"
      DEBUG: "true"
    labels:
      - traefik.tcp.routers.vanilla.rule=HostSNI(`*`)
      - traefik.tcp.routers.vanilla.entrypoints=minecraft
7

I'm a french guy too...

Here is how I setup Docker/Pterodactyl/Minecraft behind Cloudflare/Traefik:

With this you'll need to have setup before:

  • Docker
  • Portainer
  • Traefik

And you'll get:

  • Pterodactyl
  • A subdomain for the panel and another for a node
  • SSL
  • Cloudflare protection & caching

I realized that I need to update my tuto as I also works on amd64 :stuck_out_tongue:

8

Can't update my previous post.
I switch from Grav to Ghost and changed my subdomain...
So, article is now here: Pterodactyl
My apologizes.

9

English version anytime soon? I think it would help others a lot

10

:innocent:

11

Google-translate-dog
Google-translate-dog1240×500 46.6 KB

:rofl:

The link seems broken, but Google translate is a good answer to be used with https://infos.zogg.fr/pterodactyl/.

12

I tried it in private browsing mode to make sure it worked... no luck :frowning :

I'm writing in French because there are few detailed articles in French compared to all those written in English. It's a conscious choice of popularization :slight_smile: