Hello.

I've always wondered this on my mind and I've had a hard time looking for papers or articles on how this is done exactly.

Take for example the game: GunZ:

http://mmohuts.com/wp-content/gallery/gunz/gunz-game-lobby.jpg?ec9f9b

In this game you can connect to a certain number of servers after you've logged in.

Once you're logged in, you're connected to the lobby where you can chat with other players

connected to the main server.

However, you can also create your own "rooms" and "host" your own game for others to play on.

Now it's not 100% for sure that anyone here may know how exactly GunZ does it, but does anyone have an idea

on how this actually works?

When a player hosts a room, and someone wishes to join your room, are other people connecting to that player?

But that player hasn't even port forwarded and they're managing to connect to him anyways, are they using some sort of

UDP holepunch / NAT traversal?

Are players technically actually hosting their own servers for other players to connect to? Because if that's the case isn't this a huge security risk since they can simply just edit memory on their server?

If they aren't indeed hosting their own servers (rooms), then does that mean every single room on the server is being emulated through the main server? Meaning when you connect to a players room, you're still actually sending datagrams/packets to the main server?

I don't know how GunZ does it. I can think of two ways of doing it:
- If serving the game is cheap in CPU and RAM resources, then a new "room" would just be another instance on the server -- it could be in-process, or a new process.
- If serving the game is not cheap enough to do that, then it's likely NAT traversal/hole-punching is used, and the server process runs on the user's machine.

When you say instances in-process, are you talking about instances of some sort of "server" class?

And obviously 'new process' I'm assuming would be just multiple processes of servers.

But would you be using the same socket for each? Or different sockets?

What about ports? Would each "instance" be using a different port?

What if the game was insanely popular and it had a TON of rooms (hundreds) of rooms.

Wouldn't the server need to port forward all of those ports if they all use different ports? And if so, isn't that a huge security risk?

In your other case, where the players themselves have the server running through a NAT holepunch method, what exactly can a developer do to prevent the players from manipulating data in their servers to better themselves in the game? (e.g. increasing their score)