My Suggestion for a Private VPN Server for FAF – Test Run

Sturmgewehr

What is it?
A privately hosted VPN server based on a standard VPN protocol with split tunneling, created for FAF players.
The main focus is on DualGap Adaptive, but it can be used by anyone with connection problems in-game.

Note: If you have connection problems with the FAF Client (timeout login, login issues, etc.), it won't help you, as only game traffic goes through the VPN.

My intention:
I want to play a lag-free and stable DualGap Adaptive match again.

Who is it for?
Primarily DualGap players, but any regular FAF player who suffers from recurring connection issues in-game can use it.

Requirements:

You play FAF regularly and actively (preferably DualGap Adaptive / Global - since matchmaking does not appear to be affected by DDoS).
+1000 games played (experienced players who are better able to assess improvements/deteriorations).

What traffic goes through the VPN server?
java.exe
javaw.exe
ForgedAlliance.exe

Why not just use a normal VPN?
You can do that if your VPN provider supports split tunneling.
I am specifically adjusting the firewall filters so that it should still be possible to play even under DDoS (we'll see).

What might improve?
I want to test whether connection quality improves if all 12 players in a match use the same VPN server.

Summary:

Game traffic is routed through the VPN server.
Private IP addresses remain hidden.
The home internet connection is protected from direct DDoS attacks (line remains usable).
May reduce connection interruptions and improve stability.

When does it not help?

If your home internet connection is already poor.
If you are playing via weak Wi-Fi (WLAN).
If you are on mobile or satellite internet.
If your line is already saturated with other download/upload traffic.

Note: To play a match with 12 players, you generally need a download/upload speed of at least ~0.600 Mbit/sec up / ~0.600 Mbit/sec down for FAF.
This is what I have observed in various matches, which is the game traffic produced by FAF with 12 players (less with fewer players, more with more players in a match).
Simply put: your internet connection should have 1 Mbit/sec upload speed (download speed is significantly higher for most private connections and usually not the bottleneck).

Does it work for Russian players?
Issue: Current global political events and restrictions.
We'll find out.

Does it work for Australian players?
Issue: The distance may be too far, as the server location is in Europe.
We'll have to test it.

How to get access:

1.) Contact me in a private chat (“Start new chat with Sturmgewehr”).
You will receive both:

A personal yourname.conf file (only works for one user).
A download link for the required VPN client software (links are only provided privately, not here, due to FAF rules).

2.) Import the file into the client + connect.

3.) Restart your router before using it to obtain a new IP from your provider (most private connections have changing IPs, a few have static IPs or change automatically every 24 hours).
Otherwise, an attacker may still know your old IP, which would make the tunnel useless.

4.) Connect, then start FAF and host or join a match.

Note: If you are using the ICE Adapter Debugger, it takes +30 seconds to start up.

This should work normally.
If not, ask here in the topic so that others can also find a solution when troubleshooting.

Important:

Do not share your "yourname.conf"; it is bound to one user.
This is a test -> results may be negative or positive.
The duration of the test depends on the circumstances.
This is not an official FAF test, but is privately organized and has been agreed upon with the FAF moderators.

Legal aspect: Use at your own risk, no liability.

Defiant

interesting!

Newbie_recoverin

Interesting idea! I wonder how much it would improve tho
I mean okay people are connected to the same server but they are still at different locations irl
What affords are done to assure data security?

QuantumTyphoon

Even on LAN there are time outs and disconnects. How would VPN bypass the terrible MP code.

Sturmgewehr

@Newbie_recoverin
"What affords are done to assure data security?"

Modern VPN standard is used.
The client tells the server which data is sent. As long as the client (player) does not change any settings on their own, only in-game traffic is sent to the private vpn server.
In general, any other possible traffic is blocked on the server side, if only because I don't want it to be misused.
The VPN client software is not mine (trusted company), so I cannot change anything there.

@QuantumTyphoon
My idea behind a private VPN server for FAF (all 12 players in a match use the same private VPN) is as an alternative to relay (don't think of it like a Minecraft server, for example (Gameserver: player 1 <-> server <-> player 2) – that's a completely different architecture than FAF (p2p: player 1 <-> player 2 // p2p + privat vpn: player 1 -> private VPN server -> player 2 -> private VPN server -> player 1).

Since the test with force relay (only relay connections between players possible) was negative and there were massive connection problems.
And since it was not possible to determine why (statement by the faf team), I am interested in whether a better result can be achieved with an external solution (private VPN -> freely available VPN software) or whether the ICE adapter generally has problems with such a solution (privat VPN solution).

In other words: using freely available third-party vpn software to establish DDoS-protected player connections in-game over the unchagend faf ice adapter. Without having to change the existing code base (https://github.com/FAForever/faf-icebreaker), which works more or less well (force relay is currently causing problems), which costs time and money.
The latest attempt to replace it is (https://github.com/FAForever/faf-pioneer). However, this is also currently experiencing problems.

In general, there seems to be a misunderstanding.
The private VPN for faf is not intended to make connections “better.” It is intended to make the best of the worst connection options possible.
The best connection quality is achieved with faf, with direct p2p connections, as every relay/VPN connection increases the distance between players, which increases latency and can also add more sources of interference (different VPN providers/different relay servers).
Relay servers are basically only intended for players to connect to other players when no other connection is possible (as a last resort to be able to play). The DDoS protection of players against attacks by force relay is basically a misuse.

It has to be said that what the FAF team is achieving here is more than any normal game developer using any game engine such as Unreal or Unity has to achieve (old network code / no access to the source code / malicious attackers / unpaid work).

At least that's my personal understanding, which is what led to the idea of a private VPN.
So that I can play lag-free GAP matches again...

QuantumTyphoon

Yeah. But I used hamachi to play a 1 versus 1 in 2007. Two computers in two different bedrooms. That's vpn for u. And still it lagged out. So no. I don't think it'll work.

Newbie_recoverin

@QuantumTyphoon comparing 2007 to now O.o client and network code was different then FaF is different