📖About TLSBridge

🛡️ TLSBridge – Secure Minecraft Connections Over TLS

TLSBridge is a lightweight Paper plugin designed for Minecraft servers hosted behind CGNAT or without public IP access. It enables encrypted TLS connections to your server, allowing players to connect seamlessly using secure tunneling (via Tailscale Funnel or similar) on port 443.

🔧 Features

✅ TLS Support for Minecraft: Accepts inbound connections over TLS (HTTPS-style), translating them into standard Minecraft connections.

🌐 Use with Tailscale Funnel: Perfectly integrates with Tailscale's funnel to expose your server on 443, even behind CGNAT.

🛠️ No Port Forwarding Needed: Avoid router configuration and host your server securely using a domain like your-server.tailnet.ts.net.

🔒 Built-in Certificate Generation: Automatically generates a self-signed TLS certificate for secure tunneling.

⚙️ Plug and Play: Just drop the plugin in and run your Paper server. Simple config, no bloat.

🧠 How It Works

When the plugin is enabled:

It launches a TLS listener on port 10000

Decrypts incoming TLS connections (from a service like Tailscale Funnel)

Forwards them into the Minecraft server on port 25565

With Tailscale set to forward external :443 traffic to localhost:10000, TLSBridge acts as a secure gateway into your Minecraft world.

🚀 Setup (Quick Start)

Install Tailscale and enable Funnel.
Add this plugin to your plugins/ folder.
Run the server — TLSBridge will auto-generate a cert and listen on port 10000.
Connect via your Funnel domain like: yourname.tail1234.ts.net
Enjoy secure, lag-free access — no public IP required!

🔐 Ideal For:

Players behind Carrier-Grade NAT (CGNAT)

Private LAN or hobby servers

Raspberry Pi or WSL-hosted servers

Minecraft devs and network tinkerers 🧪

📦 Requirements

PaperMC 1.21.5 or higher

Java 21

Tailscale (with funnel enabled) or equivalent tunnel service

📣 Credits

Made with ❤️ by Voltasonic

Built out of frustration, finished with determination.

Now go play — safely and securely! 🧱🌍