Jump to content

DCS Server Control


Recommended Posts

Yup, I agree. Security through obscurity is not security in terms of a web app.

 

 

Sent from my iPhone using Tapatalk

 

If people are running the server as admin, then they are creating their own security problem. Not having all of the drives exposed, in the event a vulnerability is discovered is more than just an obscurity measure.

Link to comment
Share on other sites

this if a service is running as local admin, it takes zero effort to translate this into arbitrary file access, regardless of this speed bump... does it need to run as admin?

SYSTEM SPECS: Hardware Intel Corei7-9700K @ 5.1 GHz, 32Gb RAM, EVGA 3090 XC3, Dell S2716DG, Virpil T50CM3 Throttle, T-50CM2 Base & Constellation Alpha + MFG Crosswinds V2, HP Reverb G2 @ 2836 x 2768
SOFTWARE: Microsoft Windows 11, VoiceAttack & VIACOM PRO, TacView

VR Stuff:   My Settings for 3090 and G2  My Settings for 1080ti  Shaders MOD for VR  My variant of Kegetys mod with clear water and also IC PASS for current beta & stable, Patch Status

1569924735_WildcardsBadgerFAASig.jpg.dbb8c2a337e37c2bfb12855f86d70fd5.jpg

Link to comment
Share on other sites

Is Windows client OS(Win10) and a Direct-X graphics card still required to run the dedi exe?

That requirements exclude a majority, if not all hosting service provider. :doh:

Windows 10, I7 8700k@5,15GHz, 32GB Ram, GTX1080, HOTAS Warthog, Oculus Rift CV1, Obutto R3volution, Buttkicker



[sIGPIC][/sIGPIC] ЯБоГ32_Принз





Link to comment
Share on other sites

Walk on the whole server's filesystem through the Web is not the good idea. That why we did 'Saved Games' as file dialog top level

 

I'll start by saying we are definitely appreciative that we even have a dedicated server. The old method was a pain in the butt and resource intensive. Thank you for the time and effort that you've put into it.

 

Taking away features because of walk on filesystem makes sense. Why not take advantage of Windows permissions? Give us the ability to give a RO account access to certain folders and call it good?

 

 

If people are running the server as admin, then they are creating their own security problem. Not having all of the drives exposed, in the event a vulnerability is discovered is more than just an obscurity measure.

 

Now we're jumping a little bit into hypothetical. A script living inside the defined locations still has the ability access everything that user has access to. Just because you can't see the D: drive through the web interface, doesn't mean it doesn't have access to it through Windows permissions. Hence security through obscurity.

 

This can be seen with the serverSettings.lua. I defined the D: drive and can access the files. I just can't browse the files.


Edited by Hobo
Link to comment
Share on other sites

I'll start by saying we are definitely appreciative that we even have a dedicated server. The old method was a pain in the butt and resource intensive. Thank you for the time and effort that you've put into it.

 

Taking away features because of walk on filesystem makes sense. Why not take advantage of Windows permissions? Give us the ability to give a RO account access to certain folders and call it good?

 

 

 

 

Now we're jumping a little bit into hypothetical. A script living inside the defined locations still has the ability access everything that user has access to. Just because you can't see the D: drive through the web interface, doesn't mean it doesn't have access to it through Windows permissions. Hence security through obscurity.

 

This can be seen with the serverSettings.lua. I defined the D: drive and can access the files. I just can't browse the files.

 

Bingo. This is what happens when folks yell "security" loudly but don't actually bother to perform a risk assessment or profile.

 

There's a reason security is an entirely separate career field from operations. Ops folks forget to look past their nose.

 

(former infra ops that was poached in to the infosec world here... I know it's true just as well)

Link to comment
Share on other sites

Please make a real Dedicated Server quickly so I don't have to pay 120€ more per year to host unnecessary Christen Eagle liveries !

I only have 8GB of disk left on my remote server !

Windows 10 Pro x64, i7-9700K, 32Go DDR4, GeForce RTX 3090, ASUS ROG Swift PG348Q 3440*1440

VPC MongoosT-50CM2 Grip on VPC MongoosT-50CM2 Base, VPC TM50 Throttle, MFG Crosswind, TrackIR 5 / HP Reverb

Link to comment
Share on other sites

Bingo. This is what happens when folks yell "security" loudly but don't actually bother to perform a risk assessment or profile.

 

There's a reason security is an entirely separate career field from operations. Ops folks forget to look past their nose.

 

(former infra ops that was poached in to the infosec world here... I know it's true just as well)

nicely said

SYSTEM SPECS: Hardware Intel Corei7-9700K @ 5.1 GHz, 32Gb RAM, EVGA 3090 XC3, Dell S2716DG, Virpil T50CM3 Throttle, T-50CM2 Base & Constellation Alpha + MFG Crosswinds V2, HP Reverb G2 @ 2836 x 2768
SOFTWARE: Microsoft Windows 11, VoiceAttack & VIACOM PRO, TacView

VR Stuff:   My Settings for 3090 and G2  My Settings for 1080ti  Shaders MOD for VR  My variant of Kegetys mod with clear water and also IC PASS for current beta & stable, Patch Status

1569924735_WildcardsBadgerFAASig.jpg.dbb8c2a337e37c2bfb12855f86d70fd5.jpg

Link to comment
Share on other sites

Try loading it first in normal UI. Start a new server and create your prioritized list in the game UI. Launch the mission, then exit out and start in norender. It should start the same mission that you set up in the normal UI.

 

I am running this server on a VM on a ESXi host. The normal GUI will not load on it no matter what is done. This no render method is the only way to get it to run on it.

Link to comment
Share on other sites

yes it will try this:

I have mine running on a VM too :thumbup:

 

I have done this. Does not work for me. What hypervisor are you using for you VM? Also what OS does your VM run on? To also add, (I think) some of the info in that link you provided has changed since then with the updates.


Edited by Trinacria
Link to comment
Share on other sites

My dedicated server is now running on a virtual machine (Windows 10 64bit, 4 virtuel cores, 16 GB ram) which is part of a vSphere cluster with three ESX hosts. No dx11 graphic card is needed! But initial dcs configuration was complicated.

 

Because I was unable to start DCS in gui mode I wasn't able to configure the server settings in gui and I had to create some folders manually. To get a working configuration I used my gaming pc, start a normal server and uploaded the created files to my vm server.

 

 

I created Config folder and added autoexec.cfg with settings found in some tutorials:

options.graphics.fullScreen = false
options.graphics.width = 1024
options.graphics.height = 768
options.graphics.render3D = false
net.use_upnp = false

I copied serverSettings.lua from my gaming pc and modified dedicatedServerGUI.lua to change server player name.

The folder Missions was created manually and the mission file placed within that folder.

 

 

 

On the desktop I created shortcut with: C:\DCS\bin\DCS.exe --server --norender

 

 

And now it is up and running. I open WebGUI\index.html locally with firefox and it is working. I don't want to reach it from outside.

 

The only thing that is left: It is not shown in the server list. But connection by IP is working. I think I need to change somethnig in our business firewall.

 

 

I hope this helps other vm users.

 

 

Regards,

kal


Edited by kaltokri

SYSTEM: Mainboard MSI Z270 Krait | CPU i7 7700k @ 4.8 GHz | RAM 32 GB @ 3200 MHz | GPU GIGABYTE RTX 3080 | 1 TB SSD | Win 10 x64

DEVICES: ASUS 27" LCD | TrackIR 5 | LukeClip | Rift S & HP Reverb G2 | PointCTRL | TM Warthog | MFG Crosswind | Throttle Quadrant Logitech | TableMount MonsterTech

MODULES: All

 

PROJECTS: OpenFlightSchool: DE / EN

 

Link to comment
Share on other sites

Hallo there,

 

i am experiencing some strange crashing with my dedicated server. I run server and client on the same install and it worked out fine. Connection was stable and performance was very good for up to 10 tested clients. Now, i did some changes to the mission, basically a hand full of static objects. Server loads the mission and runs. But when i try to connect the server shuts down for some reason with no hint in the log file, see here:

2019-03-29 09:38:08.416 INFO    NET: accepting connection from [fe80::e032:736b:dd23:2d4f%4]:20436
2019-03-29 09:38:08.428 INFO    NET: append: client 2
2019-03-29 09:38:09.598 INFO    NET: [2] UDP port changed from 20436 to 50503
2019-03-29 09:38:25.811 INFO    NET: client[2] is ready to start
2019-03-29 09:38:25.811 INFO    NET: spawning client[2]

The log just ends without closing properly or any message of an error. My client connects an then the server instance crashes. In my client i get the message of connection time out:

2019-03-29 09:38:25.804 INFO    Dispatcher: loadMission Done: Сontrol passed to the player
2019-03-29 09:38:25.805 INFO    NET: sync seems good, telling server we are ready
2019-03-29 09:38:30.256 INFO    NET: disconnected from server
2019-03-29 09:38:30.269 INFO    NET: client has stopped
2019-03-29 09:38:31.385 INFO    Config: netview stopped
2019-03-29 09:38:31.395 INFO    TERRAIN: lSystem::CleanScenes()
2019-03-29 09:38:31.400 INFO    VISUALIZER: StopSimulation
2019-03-29 09:38:31.541 INFO    EDCORE: (dDispatcher)enterToState_:3
2019-03-29 09:38:32.017 INFO    NET: client has started
2019-03-29 09:38:44.293 INFO    EDCORE: (dDispatcher)enterToState_:5
2019-03-29 09:38:44.325 INFO    DCS: application shutdown
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\tf-51d\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\ns430\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\mig-15bis\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\mig-21bis\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\m-2000c\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\ka-50\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\flaming cliffs\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\fw-190d9\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\fa-18c\sounds\sdef\"
2019-03-29 09:38:44.477 INFO    SOUND: detaching sdef path ".\mods\aircraft\f14\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\f-86\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\ajs37\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\mods\aircraft\a-10c\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\sa342\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\mig-21bis\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\m-2000c\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\f14\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\christen eagle ii\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\chinaassetpack\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\c-101\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\aircraft\av8bna\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\tech\uss john c stennis\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path ".\coremods\tech\techweaponpack\sounds\sdef\"
2019-03-29 09:38:44.485 INFO    SOUND: detaching sdef path "sounds\sdef\"
2019-03-29 09:38:44.699 INFO    NET: client has stopped
2019-03-29 09:38:44.706 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 0
2019-03-29 09:38:44.710 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 1
2019-03-29 09:38:44.710 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 2
2019-03-29 09:38:44.872 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 3
2019-03-29 09:38:45.014 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 4
2019-03-29 09:38:45.021 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 5
2019-03-29 09:38:45.024 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 6
2019-03-29 09:38:45.027 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 7
2019-03-29 09:38:45.027 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 8
2019-03-29 09:38:45.034 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 9
2019-03-29 09:38:45.034 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 10
2019-03-29 09:38:45.036 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 11
2019-03-29 09:38:45.036 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 12
2019-03-29 09:38:45.037 INFO    EDOBJECTS: lTypeObjectManagerImpl::clear 13
2019-03-29 09:38:45.988 INFO    VISUALIZER: SceneManager_Implement::~SceneManager_Implement()
2019-03-29 09:38:45.989 INFO    VISUALIZER: TerrainRenderer::release
2019-03-29 09:38:45.998 WARNING LOG: 1 duplicate message(s) skipped.
2019-03-29 09:38:45.998 INFO    TERRAIN: lSystem::exit()
2019-03-29 09:38:45.998 INFO    TERRAIN: lSystem::CleanScenes()
2019-03-29 09:38:46.592 INFO    EDTERRAINGRAPHICS41: Save scene: "C:\Users\Marc Marius\Saved Games\DCS.openbeta\failed.ofsh"
2019-03-29 09:38:54.819 INFO    DX11BACKEND: DX11Renderer::shutdown()
2019-03-29 09:38:55.880 INFO    DX11BACKEND: NVIDIA API exit OK
=== Log closed.

The previous mission without the changes runs fine and i cant get my hands on what have caused the crash. I thought maybe performance overload. Task manager told me that my system was indeed at max load but it does not seem like thats the initial problem. Do you have any suggestions where i can look for informations what could cause the crash?


Edited by SkipperSMG

i5-2400 | 16GB Corsair XMS3 | MSI GTX 970 4GB | 500GB Samsung 850 Evo | TrackIR 5 | TM Warthog | Saitek Rudder Pedals | Windows 10 64 bit

 

[sIGPIC][/sIGPIC]

Link to comment
Share on other sites

I'd use the old serverSettings.lua file to achieve that. Notice the version field and the missing uri and current fields.

 

cfg = 
{
   ["listShuffle"] = false,
   ["isPublic"] = true,
   ["description"] = "",
   ["require_pure_textures"] = true,
   ["version"] = 1,
   ["missionList"] = 
   {
       [1] = "C:\\Users\\USERNAME\\Saved Games\\DCS.openbeta\\Missions\\awesome.miz",
   }, -- end of ["missionList"]
   ["advanced"] = 
   {
       ["allow_change_tailno"] = true,
       ["allow_ownship_export"] = false,
       ["allow_object_export"] = false,
       ["pause_on_load"] = false,
       ["allow_sensor_export"] = false,
       ["event_Takeoff"] = false,
       ["pause_without_clients"] = false,
       ["client_outbound_limit"] = 0,
       ["client_inbound_limit"] = 0,
       ["event_Role"] = true,
       ["allow_change_skin"] = true,
       ["event_Connect"] = true,
       ["event_Ejecting"] = false,
       ["event_Kill"] = true,
       ["event_Crash"] = true,
       ["resume_mode"] = 1,
       ["maxPing"] = 200,
   }, -- end of ["advanced"]
   ["require_pure_models"] = true,
   ["require_pure_clients"] = true,
   ["name"] = "SERVER TEST",
   ["port"] = "10308",
   ["password"] = "",
   ["listLoop"] = false,
   ["bind_address"] = "",
   ["maxPlayers"] = 50,
} -- end of cfg

 

Riojax, you genius, this did it! Thank you!:thumbup:

Link to comment
Share on other sites

My dedicated server is now running on a virtual machine (Windows 10 64bit, 4 virtuel cores, 16 GB ram) which is part of a vSphere cluster with three ESX hosts. No dx11 graphic card is needed! But initial dcs configuration was complicated.

 

Because I was unable to start DCS in gui mode I wasn't able to configure the server settings in gui and I had to create some folders manually. To get a working configuration I used my gaming pc, start a normal server and uploaded the created files to my vm server.

 

 

I created Config folder and added autoexec.cfg with settings found in some tutorials:

options.graphics.fullScreen = false
options.graphics.width = 1024
options.graphics.height = 768
options.graphics.render3D = false
net.use_upnp = false

I copied serverSettings.lua from my gaming pc and modified dedicatedServerGUI.lua to change server player name.

The folder Missions was created manually and the mission file placed within that folder.

 

 

 

On the desktop I created shortcut with: C:\DCS\bin\DCS.exe --server --norender

 

 

And now it is up and running. I open WebGUI\index.html locally with firefox and it is working. I don't want to reach it from outside.

 

The only thing that is left: It is not shown in the server list. But connection by IP is working. I think I need to change somethnig in our business firewall.

 

 

I hope this helps other vm users.

 

 

Regards,

kal

 

Thanks for the writeup.

 

I personally use a standalone ESXi 6.7 running Win10.

I had none of these problems, maybe cause I'm running on a whitebox so I have an Inter GPU present.

 

anyways, port 10308 is the default. and you need to make sure you tick the "public" option for it to be showing on the server list.

 

So far, I've had good experience, however, I've yet to stress test the rig beyond 4 cuncurrent clients.

Link to comment
Share on other sites

The public option was already set. But I changed the kind of NAT use by the firewall and now the server is on the list.

SYSTEM: Mainboard MSI Z270 Krait | CPU i7 7700k @ 4.8 GHz | RAM 32 GB @ 3200 MHz | GPU GIGABYTE RTX 3080 | 1 TB SSD | Win 10 x64

DEVICES: ASUS 27" LCD | TrackIR 5 | LukeClip | Rift S & HP Reverb G2 | PointCTRL | TM Warthog | MFG Crosswind | Throttle Quadrant Logitech | TableMount MonsterTech

MODULES: All

 

PROJECTS: OpenFlightSchool: DE / EN

 

Link to comment
Share on other sites

 

attachment.php?attachmentid=207991&stc=1&d=1554475816

 

 

Free Maps and Assets Pack for Dedicated Servers

 

With the release of the dedicated server, the most requested item from clients has been that dedicated servers no longer provide opportunity to purchase maps and asset packs to host missions. We have been listening, and new feature will be brought to you this next week along with the 10th April Open Beta! Dedicated servers with “no-render” option activated will be able to host all DC World maps and asset packs for free! We see DCS World Online as a critical feature of DCS World to move forward, and the ability to run interesting and varied mission servers is a great thing for you, clients, and us.

 

In addition, we will be working on further ways to improve and expand the DCS World online experience.

 

 

Bye

Phant

AMVI

Link to comment
Share on other sites

Not quite sure on the "-w" switch usage. Could you please elaborate more on the setup for a second dedicated server on same machine. Thank you in advance!

 

Run your server via command line with -w {servername}

IE:

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w {MYSERVERNAME}

 

Then in your Saved games you will see a new folder called "{MYSERVERNAME}"

There you can copy your old server folder with all settings/missions etc that is probably named:

"DCS.openbeta"

or

"DCS"

 

in each savedgames/{MYSERVERNAME}/config/

add a file if not already there called:

autoexec.cfg

 

there you can specify per server what the GUI port is:

webgui_port = 8088

 

in savedgames/{MYSERVERNAME}/config/

change:

serversettings.lua

line 44:

["port"] = 10308,

to something different per server too.

 

ie:

SERVER1:

(Run from command line)

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w server1

 

savedgames/server1/config/

Create or Edit: autoexec.cfg

webgui_port = 8088

 

savedgames/server1/config/

Edit: serversettings.lua

line 44: ["port"] = 10308,

 

SERVER2:

(Run from command line)

"C:\Program Files\Eagle Dynamics\DCS World OpenBeta\bin\DCS.exe" --server --norender -w server2

 

savedgames/server2/config/

Create or Edit: autoexec.cfg

webgui_port = 8089

 

savedgames/server2/config/

Edit: serversettings.lua

line 44: ["port"] = 10310,

 

you will have to open these new ports in your firewall and also forward them from your router.

GL!

 

Port fowarding from external ip X.x.x.X to local DCS server:

ie: 74.88.88.88 ---> 192.168.1.15 (your dcs server)

server1:

TCP/UDP (*both protocols)

10308

TCP

8088

 

server2:

TCP/UDP (*both protocols)

10310

TCP

8089


Edited by maestro72x
Link to comment
Share on other sites

Hi everyone,

 

I have this issue where I can't browse the Saved Games Dir in the WebGUI. When I want to add a .miz, the pop up window opens on /Saved Games/, I can see the folders in it but when I click/double click on them, nothing happens. I can't browse those folders.

 

I am running dedicated servers with -w option, the user currently running the server is the owner of the /Saved Games/ folder. I don't understand what I am missing.

 

Has anyone a clue?

 

Cheers,


Edited by 3rd Wing - Raiden
Link to comment
Share on other sites

I tried it again this morning, it doesn't seem to work anymore :cry:

 

I hope the 10th april patch will give a solution ^^

 

 

On my two server it works without a problem.

After each update you have to change the file again.

SYSTEM: Mainboard MSI Z270 Krait | CPU i7 7700k @ 4.8 GHz | RAM 32 GB @ 3200 MHz | GPU GIGABYTE RTX 3080 | 1 TB SSD | Win 10 x64

DEVICES: ASUS 27" LCD | TrackIR 5 | LukeClip | Rift S & HP Reverb G2 | PointCTRL | TM Warthog | MFG Crosswind | Throttle Quadrant Logitech | TableMount MonsterTech

MODULES: All

 

PROJECTS: OpenFlightSchool: DE / EN

 

Link to comment
Share on other sites

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...