DCS Server Control

[blkspade]

Yup, I agree. Security through obscurity is not security in terms of a web app.

 

 

Sent from my iPhone using Tapatalk

 

If people are running the server as admin, then they are creating their own security problem. Not having all of the drives exposed, in the event a vulnerability is discovered is more than just an obscurity measure.

[speed-of-heat]

this if a service is running as local admin, it takes zero effort to translate this into arbitrary file access, regardless of this speed bump... does it need to run as admin?

[JaBoG32_Prinzartus]

Is Windows client OS(Win10) and a Direct-X graphics card still required to run the dedi exe?

That requirements exclude a majority, if not all hosting service provider. :doh:

[wildw1ng]

any plans for a linux dedicated server?

[Hobo]

Walk on the whole server's filesystem through the Web is not the good idea. That why we did 'Saved Games' as file dialog top level

 

I'll start by saying we are definitely appreciative that we even have a dedicated server. The old method was a pain in the butt and resource intensive. Thank you for the time and effort that you've put into it.

 

Taking away features because of walk on filesystem makes sense. Why not take advantage of Windows permissions? Give us the ability to give a RO account access to certain folders and call it good?

 

 

If people are running the server as admin, then they are creating their own security problem. Not having all of the drives exposed, in the event a vulnerability is discovered is more than just an obscurity measure.

 

Now we're jumping a little bit into hypothetical. A script living inside the defined locations still has the ability access everything that user has access to. Just because you can't see the D: drive through the web interface, doesn't mean it doesn't have access to it through Windows permissions. Hence security through obscurity.

 

This can be seen with the serverSettings.lua. I defined the D: drive and can access the files. I just can't browse the files.

Edited March 25, 2019 by Hobo

[Pand]

Walk on the whole server's filesystem through the Web is not the good idea. That why we did 'Saved Games' as file dialog top level

 

Hey USSR_Rik, have you had a chance to take a look at this post:

https://forums.eagle.ru/showpost.php?p=3850532&postcount=356

 

Am I missing something? Anything more I can do?

 

Thanks!:pilotfly:

[mkosmo]

I'll start by saying we are definitely appreciative that we even have a dedicated server. The old method was a pain in the butt and resource intensive. Thank you for the time and effort that you've put into it.

 

Taking away features because of walk on filesystem makes sense. Why not take advantage of Windows permissions? Give us the ability to give a RO account access to certain folders and call it good?

 

 

 

 

Now we're jumping a little bit into hypothetical. A script living inside the defined locations still has the ability access everything that user has access to. Just because you can't see the D: drive through the web interface, doesn't mean it doesn't have access to it through Windows permissions. Hence security through obscurity.

 

This can be seen with the serverSettings.lua. I defined the D: drive and can access the files. I just can't browse the files.

 

Bingo. This is what happens when folks yell "security" loudly but don't actually bother to perform a risk assessment or profile.

 

There's a reason security is an entirely separate career field from operations. Ops folks forget to look past their nose.

 

(former infra ops that was poached in to the infosec world here... I know it's true just as well)

[IRRE_Biluf]

Please make a real Dedicated Server quickly so I don't have to pay 120€ more per year to host unnecessary Christen Eagle liveries !

I only have 8GB of disk left on my remote server !

[speed-of-heat]

Bingo. This is what happens when folks yell "security" loudly but don't actually bother to perform a risk assessment or profile.

 

There's a reason security is an entirely separate career field from operations. Ops folks forget to look past their nose.

 

(former infra ops that was poached in to the infosec world here... I know it's true just as well)

nicely said

[SolUniverse]

What are the specs for a virtual dcs server?

[Trinacria]

Try loading it first in normal UI. Start a new server and create your prioritized list in the game UI. Launch the mission, then exit out and start in norender. It should start the same mission that you set up in the normal UI.

 

I am running this server on a VM on a ESXi host. The normal GUI will not load on it no matter what is done. This no render method is the only way to get it to run on it.

[SolUniverse]

I am running this server on a VM on a ESXi host. The normal GUI will not load on it no matter what is done. This no render method is the only way to get it to run on it.

 

yes it will try this:

I have mine running on a VM too :thumbup:

[Trinacria]

yes it will try this:

I have mine running on a VM too :thumbup:

 

I have done this. Does not work for me. What hypervisor are you using for you VM? Also what OS does your VM run on? To also add, (I think) some of the info in that link you provided has changed since then with the updates.

Edited March 28, 2019 by Trinacria

[kaltokri]

My dedicated server is now running on a virtual machine (Windows 10 64bit, 4 virtuel cores, 16 GB ram) which is part of a vSphere cluster with three ESX hosts. No dx11 graphic card is needed! But initial dcs configuration was complicated.

 

Because I was unable to start DCS in gui mode I wasn't able to configure the server settings in gui and I had to create some folders manually. To get a working configuration I used my gaming pc, start a normal server and uploaded the created files to my vm server.

 

 

I created Config folder and added autoexec.cfg with settings found in some tutorials:

options.graphics.fullScreen = false
options.graphics.width = 1024
options.graphics.height = 768
options.graphics.render3D = false
net.use_upnp = false

I copied serverSettings.lua from my gaming pc and modified dedicatedServerGUI.lua to change server player name.

The folder Missions was created manually and the mission file placed within that folder.

 

 

 

On the desktop I created shortcut with: C:\DCS\bin\DCS.exe --server --norender

 

 

And now it is up and running. I open WebGUI\index.html locally with firefox and it is working. I don't want to reach it from outside.

 

The only thing that is left: It is not shown in the server list. But connection by IP is working. I think I need to change somethnig in our business firewall.

 

 

I hope this helps other vm users.

 

 

Regards,

kal

Edited March 28, 2019 by kaltokri

[SkipperSMG]

Hallo there,

 

i am experiencing some strange crashing with my dedicated server. I run server and client on the same install and it worked out fine. Connection was stable and performance was very good for up to 10 tested clients. Now, i did some changes to the mission, basically a hand full of static objects. Server loads the mission and runs. But when i try to connect the server shuts down for some reason with no hint in the log file, see here:

2019-03-29 09:38:08.416 INFO    NET: accepting connection from [fe80::e032:736b:dd23:2d4f%4]:20436
2019-03-29 09:38:08.428 INFO    NET: append: client 2
2019-03-29 09:38:09.598 INFO    NET: [2] UDP port changed from 20436 to 50503
2019-03-29 09:38:25.811 INFO    NET: client[2] is ready to start
2019-03-29 09:38:25.811 INFO    NET: spawning client[2]

The log just ends without closing properly or any message of an error. My client connects an then the server instance crashes. In my client i get the message of connection time out:

2019-03-29 09:38:25.804 INFO    Dispatcher: loadMission Done: Сontrol passed to the player
2019-03-29 09:38:25.805 INFO    NET: sync seems good, telling server we are ready
2019-03-29 09:38:30.256 INFO    NET: disconnected from server
2019-03-29 09:38:30.269 INFO    NET: client has stopped
2019-03-29 09:38:31.385 INFO    Config: netview stopped
2019-03-29 09:38:31.395 INFO    TERRAIN: lSystem::CleanScenes()
2019-03-29 09:38:31.400 INFO    VISUALIZER: StopSimulation
2019-03-29 09:38:31.541 INFO    EDCORE: (dDispatcher)enterToState_:3
2019-03-29 09:38:32.017 INFO    NET: client has started
2019-03-29 09:38:44.293 INFO    EDCORE: (dDispatcher)enterToState_:5
2019-03-29 09:38:44.325 INFO    DCS: application shutdown
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\tf-51d\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\ns430\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\mig-15bis\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\mig-21bis\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\m-2000c\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\ka-50\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\flaming cliffs\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\fw-190d9\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\fa-18c\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\f14\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\f-86\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\ajs37\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\a-10c\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\sa342\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\mig-21bis\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\m-2000c\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\f14\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\christen eagle ii\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\chinaassetpack\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\c-101\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\av8bna\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\tech\uss john c stennis\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\tech\techweaponpack\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path "sounds\sdef\"
2019-03-29 09:38:44.699 INFO    NET: client has stopped
2019-03-29 09:38:44.706 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 0
2019-03-29 09:38:44.710 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 1
2019-03-29 09:38:44.710 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 2
2019-03-29 09:38:44.872 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 3
2019-03-29 09:38:45.014 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 4
2019-03-29 09:38:45.021 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 5
2019-03-29 09:38:45.024 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 6
2019-03-29 09:38:45.027 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 7
2019-03-29 09:38:45.027 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 8
2019-03-29 09:38:45.034 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 9
2019-03-29 09:38:45.034 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 10
2019-03-29 09:38:45.036 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 11
2019-03-29 09:38:45.036 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 12
2019-03-29 09:38:45.037 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 13
2019-03-29 09:38:45.988 INFO    VISUALIZER: SceneManager_Implement::~SceneManager_Implement()
2019-03-29 09:38:45.989 INFO    VISUALIZER: TerrainRenderer::release
2019-03-29 09:38:45.998 WARNING LOG: 1 duplicate message(s) skipped.
2019-03-29 09:38:45.998 INFO    TERRAIN: lSystem::exit()
2019-03-29 09:38:45.998 INFO    TERRAIN: lSystem::CleanScenes()
2019-03-29 09:38:46.592 INFO    EDTERRAINGRAPHICS41: Save scene: "C:\Users\Marc Marius\Saved Games\DCS.openbeta\failed.ofsh"
2019-03-29 09:38:54.819 INFO    DX11BACKEND: DX11Renderer::shutdown()
2019-03-29 09:38:55.880 INFO    DX11BACKEND: NVIDIA API exit OK
=== Log closed.

The previous mission without the changes runs fine and i cant get my hands on what have caused the crash. I thought maybe performance overload. Task manager told me that my system was indeed at max load but it does not seem like thats the initial problem. Do you have any suggestions where i can look for informations what could cause the crash?

Edited March 29, 2019 by SkipperSMG

[Trinacria]

I'd use the old serverSettings.lua file to achieve that. Notice the version field and the missing uri and current fields.

 

cfg = 
{
   ["listShuffle"] = false,
   ["isPublic"] = true,
   ["description"] = "",
   ["require_pure_textures"] = true,
   ["version"] = 1,
   ["missionList"] = 
   {
       [1] = "C:\\Users\\USERNAME\\Saved Games\\DCS.openbeta\\Missions\\awesome.miz",
   }, -- end of ["missionList"]
   ["advanced"] = 
   {
       ["allow_change_tailno"] = true,
       ["allow_ownship_export"] = false,
       ["allow_object_export"] = false,
       ["pause_on_load"] = false,
       ["allow_sensor_export"] = false,
       ["event_Takeoff"] = false,
       ["pause_without_clients"] = false,
       ["client_outbound_limit"] = 0,
       ["client_inbound_limit"] = 0,
       ["event_Role"] = true,
       ["allow_change_skin"] = true,
       ["event_Connect"] = true,
       ["event_Ejecting"] = false,
       ["event_Kill"] = true,
       ["event_Crash"] = true,
       ["resume_mode"] = 1,
       ["maxPing"] = 200,
   }, -- end of ["advanced"]
   ["require_pure_models"] = true,
   ["require_pure_clients"] = true,
   ["name"] = "SERVER TEST",
   ["port"] = "10308",
   ["password"] = "",
   ["listLoop"] = false,
   ["bind_address"] = "",
   ["maxPlayers"] = 50,
} -- end of cfg

 

Riojax, you genius, this did it! Thank you!:thumbup:

[uri_ba]

My dedicated server is now running on a virtual machine (Windows 10 64bit, 4 virtuel cores, 16 GB ram) which is part of a vSphere cluster with three ESX hosts. No dx11 graphic card is needed! But initial dcs configuration was complicated.

 

Because I was unable to start DCS in gui mode I wasn't able to configure the server settings in gui and I had to create some folders manually. To get a working configuration I used my gaming pc, start a normal server and uploaded the created files to my vm server.

 

 

I created Config folder and added autoexec.cfg with settings found in some tutorials:

options.graphics.fullScreen = false
options.graphics.width = 1024
options.graphics.height = 768
options.graphics.render3D = false
net.use_upnp = false

I copied serverSettings.lua from my gaming pc and modified dedicatedServerGUI.lua to change server player name.

The folder Missions was created manually and the mission file placed within that folder.

 

 

 

On the desktop I created shortcut with: C:\DCS\bin\DCS.exe --server --norender

 

 

And now it is up and running. I open WebGUI\index.html locally with firefox and it is working. I don't want to reach it from outside.

 

The only thing that is left: It is not shown in the server list. But connection by IP is working. I think I need to change somethnig in our business firewall.

 

 

I hope this helps other vm users.

 

 

Regards,

kal

 

Thanks for the writeup.

 

I personally use a standalone ESXi 6.7 running Win10.

I had none of these problems, maybe cause I'm running on a whitebox so I have an Inter GPU present.

 

anyways, port 10308 is the default. and you need to make sure you tick the "public" option for it to be showing on the server list.

 

So far, I've had good experience, however, I've yet to stress test the rig beyond 4 cuncurrent clients.

[kaltokri]

The public option was already set. But I changed the kind of NAT use by the firewall and now the server is on the list.

[phant]

 

 

 

Free Maps and Assets Pack for Dedicated Servers

 

With the release of the dedicated server, the most requested item from clients has been that dedicated servers no longer provide opportunity to purchase maps and asset packs to host missions. We have been listening, and new feature will be brought to you this next week along with the 10th April Open Beta! Dedicated servers with “no-render” option activated will be able to host all DC World maps and asset packs for free! We see DCS World Online as a critical feature of DCS World to move forward, and the ability to run interesting and varied mission servers is a great thing for you, clients, and us.

 

In addition, we will be working on further ways to improve and expand the DCS World online experience.

 

 

Bye

Phant

[TGW]

Not quite sure on the "-w" switch usage. Could you please elaborate more on the setup for a second dedicated server on same machine. Thank you in advance!

[SolUniverse]

Not quite sure on the "-w" switch usage. Could you please elaborate more on the setup for a second dedicated server on same machine. Thank you in advance!

 

Run your server via command line with -w {servername}

IE:

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w {MYSERVERNAME}

 

Then in your Saved games you will see a new folder called "{MYSERVERNAME}"

There you can copy your old server folder with all settings/missions etc that is probably named:

"DCS.openbeta"

or

"DCS"

 

in each savedgames/{MYSERVERNAME}/config/

add a file if not already there called:

autoexec.cfg

 

there you can specify per server what the GUI port is:

webgui_port = 8088

 

in savedgames/{MYSERVERNAME}/config/

change:

serversettings.lua

line 44:

["port"] = 10308,

to something different per server too.

 

ie:

SERVER1:

(Run from command line)

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w server1

 

savedgames/server1/config/

Create or Edit: autoexec.cfg

webgui_port = 8088

 

savedgames/server1/config/

Edit: serversettings.lua

line 44: ["port"] = 10308,

 

SERVER2:

(Run from command line)

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w server2

 

savedgames/server2/config/

Create or Edit: autoexec.cfg

webgui_port = 8089

 

savedgames/server2/config/

Edit: serversettings.lua

line 44: ["port"] = 10310,

 

you will have to open these new ports in your firewall and also forward them from your router.

GL!

 

Port fowarding from external ip X.x.x.X to local DCS server:

ie: 74.88.88.88 ---> 192.168.1.15 (your dcs server)

server1:

TCP/UDP (*both protocols)

10308

TCP

8088

 

server2:

TCP/UDP (*both protocols)

10310

TCP

8089

Edited April 7, 2019 by maestro72x

[3rd Wing - Raiden]

Hi everyone,

 

I have this issue where I can't browse the Saved Games Dir in the WebGUI. When I want to add a .miz, the pop up window opens on /Saved Games/, I can see the folders in it but when I click/double click on them, nothing happens. I can't browse those folders.

 

I am running dedicated servers with -w option, the user currently running the server is the owner of the /Saved Games/ folder. I don't understand what I am missing.

 

Has anyone a clue?

 

Cheers,

Edited April 8, 2019 by 3rd Wing - Raiden

[astazou]

How did I change the name of the "server player" conected ? Actually it is juste "player" ?

https://forums.eagle.ru/showpost.php?p=3821064&postcount=208

I tried it again this morning, it doesn't seem to work anymore :cry:

 

I hope the 10th april patch will give a solution ^^

[kaltokri]

I tried it again this morning, it doesn't seem to work anymore :cry:

 

I hope the 10th april patch will give a solution ^^

 

 

On my two server it works without a problem.

After each update you have to change the file again.

[wildw1ng]

the enemies on my sever start to jump all over the sky after i played a while. don't know if this is a server bug or my server hard ware is too bad.