using proxy ip/overcoming ip limitations about haxball.js

[mertushka]

I've done a lot of work on this, but I still have 3 thoughts that are not clear in my mind. I don't think Basro checks IP Addresses via WebRTC, it's a little bit weird. We eliminated 1 option, 2 left. Most likely basro is doing IP checks over Websocket because it's the most logical option. The last option is API requests, which still leaves question marks in my mind. Before the room opens, basro receives 3 requests from us where he can get the IP Address. First, it may create an ip-based token via /headlesstoken, but it's unlikely. Secondly, it gets geolocation information from the ip address with /geo GET (HBInit:geo). Third and lastly, it checks with /token POST whether the token is correct. My advice to you is to proxy for both the node-fetch (API Requests) and the ws module (Websocket Connection). A little challenging, but possible. I'll take a look when I get home.

[jakjus]

Great insight! I tried to proxy WebSockets yesterday, but I couldn't get it to work (my room was not showing up at all).

I'll try my luck and I'll keep you updated))

[jakjus]

I made a mistake previously - Proxying WebSockets works 🎉

[mertushka]

I'm thinking about the way to fake it, but idk if I'll come up with one.

Is it good idea to do it in open source project like this? There will be so many abusers that I can't imagine.

[jakjus]

You're right, I've edited my comment not to urge anyone.