Velocity / Bungee
A proxy-side install is the best way to unlock SecurityX. Banned players can never reach your backend servers in the first place.
For anti-VPN checks and alt detection to see the real player IP— not the proxy's — you must enable player-info forwarding. Without it, every player appears from the same address.
player-info-forwarding-mode = "modern"
Backend servers too
Game servers must accept forwarded data (they usually do by default with Paper).
Global enforcement
The proxy intercepts joins before any backend server sees the player.
One install on the proxy handles every global ban and subcommand. Backend servers only need SecurityX when you want local reporting from that game server too.
Speed
All ban checks run fully async and are streamed over a real-time event channel. A live ban lands on every server within a 20-second sync cycle.