Connection Methods

~~All~~You ~~connections~~will need to choose a connection method for reaching our services. The primary and strongly preferred method for connecting to our services ~~are~~is through a virtual private network (VPN) using software called ~~ZeroTier, and this is the primary and preferred method for connecting to our services.~~ZeroTier. There is another option for connecting but it has limited support. Both of these methods are briefly explained below.

VPN

Our VPN allows for direct, peer-to-peer communication between any of our services and your device. This means there is almost no latency overhead (even less isin rare circumstances), all data is encrypted, and only those we authorize can access our services. Furthermore, the VPN's firewall has been configured so that only communication between a client (one of your devices) and a server is possible, meaning other users of the VPN cannot directly see or interact with your device over the VPN.

DNS Configuration

~~As of 10/24/2024, this section (DNS Configuration) is irrelevant and will soon be removed.~~

There is a DNS server on our network that can resolve maxshub.net domains. This server can be used for easier usage of the network. For example, you can enter something like "game.maxshub.net" instead of a server's IP address. The VPN is configured to only send DNS queries to our server if part of the request contains "maxshub.net", and this check is performed client-side. This means that all of your other DNS queries will not be seen by our server. ~~Our VPN is not configured to nor has the capacity to route your internet-bound traffic through itself.~~

Privacy Concerns

Seeing the term "VPN" may cause some concern for the privacy and security of your internet activity while connected. These concerns are mostly a result of the unfortunate misuse of the VPN term by popular "VPN providers." If you have any unanswered questions or concerns about using the VPN, please please please reach out directly to me (Max). I will be more than happy to answer any questions or concerns you may have.

WAN IP Whitelist

Under certain circumstances, it may not be possible to use the ZeroTier VPN client. In such cases, or if latency is of upmost importance for your needs, you can register your WAN IP (aka public IP) on our IP Whitelist. You can simultaneously be set up to use the VPN and have your IP on the whitelist.

There are two important caveats to using the IP Whitelist. The first is that you will not have access to the wiki. As previously mentioned, the wiki is a crucial tool for finding information about servers and you will need to use it, so you will need at least one device with wiki access for this purpose (you can install ZeroTier on your phone if needed). The second is that anyone with a dynamic WAN IP is not allowed to use this method. If your IP is dynamic but infrequently changes then that is perfectly fine, but if you have a cellular WAN connection, you're behind a CGNAT, or your IP changes frequently, then you will not be allowed to whitelist your address. IP ranges will not be whitelisted. If none of this made sense to you, use the VPN.

Now would be a good time to reach out to me (Max) with any questions you may have. Once you're ready to get connected, proceed to the next page.