QCherry: Document expanded scripting capacities and complete audited limits for 0.1.3 BUILD81

2026-09-12T11:51:31Z

Document expanded scripting capacities and complete audited limits for 0.1.3 BUILD81

New page

{{DISPLAYTITLE:Server configuration limits}}
<div style="border-left:4px solid #c33;padding:0.7em 1em;background:#fff5f5">'''CURRENT IN UPDATE 0.1.3 — expanded-budget BUILD81 (2026-09-12).'''</div>
All numeric ranges below are extracted from the production configuration parser, not guessed from a running server. Defaults are the compiled defaults; an explicit setting in your existing configuration overrides them. Invalid out-of-range values fail configuration loading instead of being silently clamped. Restart with the new server executable/configuration to apply changes. Do not overwrite your passwords, keys or other custom settings with a sample configuration.

See [[Scripting limits]] for fixed API capacities and client limits. Server <code>[lua]</code> settings do not propagate to the client VM.

== Complete numeric configuration table ==
{| class="wikitable sortable"
! Setting !! Compiled default !! Minimum !! Maximum !! Unit
|-
| <code>server.port</code> || 7777 || 1 || 65535 || TCP/UDP port
|-
| <code>server.maxPlayers</code> || 500 || 1 || 5000 || count / integer
|-
| <code>server.tickrate</code> || 30 || 1 || 240 || ticks/s
|-
| <code>server.syncDistance</code> || 15000 || 500 || 200000 || cm (100 cm = 1 m)
|-
| <code>server.peerTimeoutMinimumMs</code> || 20000 || 5000 || 60000 || ms
|-
| <code>server.peerTimeoutMaximumMs</code> || 40000 || 5000 || 120000 || ms
|-
| <code>server.peerTimeoutLimit</code> || 32 || 4 || 64 || count / integer
|-
| <code>http.port</code> || 7780 || 1 || 65535 || TCP/UDP port
|-
| <code>http.workerThreads</code> || 8 || 1 || 64 || count / integer
|-
| <code>http.maxQueuedRequests</code> || 1024 || 8 || 16384 || count / integer
|-
| <code>http.requestsPerMinutePerIp</code> || 1200 || 60 || 100000 || per minute
|-
| <code>http.maxTrackedAddresses</code> || 8192 || 256 || 1000000 || count / integer
|-
| <code>http.readTimeoutMs</code> || 5000 || 500 || 120000 || ms
|-
| <code>http.writeTimeoutMs</code> || 30000 || 1000 || 600000 || ms
|-
| <code>nameplates.maxPairs</code> || 250000 || 1 || 1000000 || count / integer
|-
| <code>nameplates.maxPairsPerResource</code> || 250000 || 1 || 1000000 || count / integer
|-
| <code>nameplates.mutationsPerSecond</code> || 4096 || 1 || 250000 || per second
|-
| <code>nameplates.mutationBurst</code> || 8192 || 1 || 250000 || count / integer
|-
| <code>voice.port</code> || 7778 || 1 || 65535 || TCP/UDP port
|-
| <code>voice.ticketTtlMs</code> || 15000 || 1000 || 120000 || ms
|-
| <code>voice.idleTimeoutMs</code> || 5000 || 2000 || 120000 || ms
|-
| <code>voice.heartbeatIntervalMs</code> || 1000 || 250 || 10000 || ms
|-
| <code>voice.maxFramesPerSecond</code> || 55 || 10 || 200 || per second
|-
| <code>voice.maxBytesPerSecond</code> || 65536 || 8192 || 1048576 || bytes/s
|-
| <code>voice.maxPendingHandshakes</code> || 128 || 1 || 4096 || count / integer
|-
| <code>voice.maxConnectionsPerIp</code> || 32 || 1 || 1000 || count / integer
|-
| <code>voice.maxTrackedAddresses</code> || 16384 || 256 || 1000000 || count / integer
|-
| <code>voice.whisperRange</code> || 500 || 50 || 200000 || cm (100 cm = 1 m)
|-
| <code>voice.defaultRange</code> || 1800 || 50 || 200000 || cm (100 cm = 1 m)
|-
| <code>voice.shoutRange</code> || 3500 || 50 || 200000 || cm (100 cm = 1 m)
|-
| <code>voice.maxRange</code> || 10000 || 50 || 200000 || cm (100 cm = 1 m)
|-
| <code>lua.memoryLimitMB</code> || 1024 || 4 || 4096 || MiB
|-
| <code>lua.instructionLimit</code> || 10000000 || 10000 || 1000000000 || count / integer
|-
| <code>lua.timeoutMs</code> || 5000 || 10 || 60000 || ms
|-
| <code>lua.hookInstructionInterval</code> || 10000 || 100 || 1000000 || count / integer
|-
| <code>magic.projectileTickrate</code> || 30 || 10 || 120 || ticks/s
|-
| <code>magic.maxCastsPerSecond</code> || 6 || 1 || 30 || per second
|-
| <code>magic.maxSnapshotAgeMs</code> || 1000 || 100 || 10000 || ms
|-
| <code>magic.playerCapsuleRadius</code> || 45 || 10 || 500 || cm (100 cm = 1 m)
|-
| <code>magic.playerCapsuleHalfHeight</code> || 90 || 20 || 1000 || cm (100 cm = 1 m)
|-
| <code>ranged.projectileTickrate</code> || 30 || 10 || 120 || ticks/s
|-
| <code>ranged.maxShotsPerSecond</code> || 8 || 1 || 30 || per second
|-
| <code>ranged.maxSnapshotAgeMs</code> || 1000 || 100 || 10000 || ms
|-
| <code>ranged.developmentArrowCount</code> || 0 || 0 || 65535 || count / integer
|-
| <code>ranged.developmentBoltCount</code> || 0 || 0 || 65535 || count / integer
|-
| <code>ranged.playerCapsuleRadius</code> || 45 || 10 || 500 || cm (100 cm = 1 m)
|-
| <code>ranged.playerCapsuleHalfHeight</code> || 90 || 20 || 1000 || cm (100 cm = 1 m)
|-
| <code>rcon.port</code> || 7781 || 1 || 65535 || TCP/UDP port
|-
| <code>rcon.timestampWindowSeconds</code> || 30 || 5 || 300 || s
|-
| <code>rcon.requestsPerMinute</code> || 60 || 1 || 600 || per minute
|-
| <code>security.handshakeTimeoutMs</code> || 5000 || 1000 || 30000 || ms
|-
| <code>security.maxConnectionsPerIp</code> || 32 || 1 || 1000 || count / integer
|-
| <code>security.maxPendingHandshakes</code> || 128 || 1 || 2048 || count / integer
|-
| <code>security.connectionAttemptsPerMinute</code> || 120 || 1 || 100000 || per minute
|-
| <code>security.preAuthPacketsPerSecond</code> || 12 || 1 || 1000 || per second
|-
| <code>security.authenticatedPacketsPerSecond</code> || 240 || 30 || 10000 || per second
|-
| <code>security.authenticatedBytesPerSecond</code> || 524288 || 65536 || 67108864 || bytes/s
|-
| <code>security.invalidPacketsPerMinute</code> || 16 || 1 || 10000 || per minute
|-
| <code>security.temporaryBlockSeconds</code> || 120 || 10 || 86400 || s
|-
| <code>security.maxTrackedAddresses</code> || 16384 || 256 || 1000000 || count / integer
|-
| <code>security.maxPacketBytes</code> || 65536 || 16384 || 1048576 || bytes
|-
| <code>security.maxWaitingDataPerPeerBytes</code> || 524288 || 65536 || 16777216 || bytes
|-
| <code>world.day</code> || 0 || 0 || 1000000 || count / integer
|-
| <code>world.hour</code> || 8 || 0 || 23 || count / integer
|-
| <code>world.minute</code> || 0 || 0 || 59 || count / integer
|-
| <code>world.minuteDurationMs</code> || 1000 || 0 || 3600000 || ms
|-
| <code>world.weatherTransitionMs</code> || 3000 || 0 || 300000 || ms
|-
| <code>world.syncIntervalMs</code> || 5000 || 500 || 60000 || ms
|-
| <code>database.workerThreads</code> || 8 || 1 || 64 || count / integer
|-
| <code>database.maxConnectionsPerResource</code> || 16 || 1 || 128 || count / integer
|-
| <code>database.maxPendingQueriesPerResource</code> || 1024 || 1 || 100000 || count / integer
|-
| <code>database.maxQueryBytes</code> || 4194304 || 1024 || 67108864 || bytes
|-
| <code>database.maxResultRows</code> || 50000 || 1 || 1000000 || count / integer
|-
| <code>database.maxResultBytes</code> || 67108864 || 1024 || 536870912 || bytes
|-
| <code>database.connectTimeoutMs</code> || 5000 || 100 || 120000 || ms
|-
| <code>database.readTimeoutMs</code> || 15000 || 100 || 300000 || ms
|-
| <code>database.writeTimeoutMs</code> || 15000 || 100 || 300000 || ms
|-
| <code>database.maxBlockingPollMs</code> || 100 || 0 || 5000 || ms
|-
| <code>security.passwordWorkerThreads</code> || 4 || 1 || 8 || count / integer
|-
| <code>security.passwordQueueCapacity</code> || 1024 || 8 || 4096 || count / integer
|-
| <code>security.passwordPendingPerResource</code> || 256 || 1 || 512 || count / integer
|-
| <code>security.passwordMemoryKiB</code> || 65536 || 8192 || 1048576 || KiB
|-
| <code>security.passwordIterations</code> || 3 || 1 || 10 || count / integer
|-
| <code>security.passwordParallelism</code> || 1 || 1 || 4 || count / integer
|}

== Additional validation and units ==
* Peer timeout maximum must be at least the minimum. Voice idle timeout must be at least twice its heartbeat interval.
* Voice ranges must satisfy whisper <= default <= shout <= max. These configuration values and <code>server.syncDistance</code> are '''centimetres''', not the metre units used by camera, NPC route and 3D-text Lua functions.
* <code>world.minuteDurationMs=0</code> pauses time. Day 0..1000000, hour 0..23 and minute 0..59 are separate limits.
* Enabled voice must use a different port from gameplay, resource HTTP and enabled RCON.
* At least one autostart resource and a nonempty navigation map filename are required. Navigation geometry settings are not exposed as numeric serverconf settings; see [[Scripting limits#Navigation]].
* Listing/name text: server name at most 96 UTF-8 bytes and 48 codepoints; description at most 320 bytes and 160 codepoints. Game mode is an ASCII token up to 24 bytes, region 12, version 24; at most 8 tags of 16 bytes each. Join password is at most 128 bytes.
* Production master-list heartbeat is fixed at 20 seconds and authorization maximum staleness at 300 seconds. These are not operator-adjustable Lua limits. Device identity verification remains mandatory.
* Rate controls are shared traffic budgets, not one independent allowance per Lua event. Increasing Lua storage does not disable anti-abuse controls.

== Source audit ==
<code>server/src/config/ServerConfig.cpp</code> (every numeric <code>parse_unsigned</code> setting), <code>ServerConfig.hpp</code>, <code>server/src/database/DatabaseTypes.hpp</code>, <code>shared/native_protocol.hpp</code>. Audit: 2026-09-12, protocol 34, expanded-budget 0.1.3 BUILD81.

[[Category:Lua API]]

Server configuration limits - Revision history

QCherry: Document expanded scripting capacities and complete audited limits for 0.1.3 BUILD81