Comment by Thaxll
4 years ago
Player should be authenticated first to be able to to talk to the gameserver ( I'm talking about the accept() syscall ).
1h timeout is way too long, you should not have more than a couple of minutes max.
I worked on some popular online games and it was a combination of 1) + some IP tables rules ( to allow the traffic ).
Too many login would block the IP etc ...
With proper auth ( based on TCP ), IPtables, kernel tuning you can get a lot of good results without doing some complicated things like UDP proxy / relay / load balancing.
Have you found any good resources/write-ups on the best practices for this sort of thing?
Unfortunatly like a lot of things in video games it's a lot in-house r&d, public doc for those kind of problems is non existent.
The idea from my original post is that your gameserver should allow traffic only if the player is authenticated.