LtStaffel

Why is the entire function body in a try statement?

Either the file exists and you do not have permissions to write to it, or one of the directories in that tree does not exist. I'm guessing it is the latter case and that you copy and pasted that line, which was correct at some point but now one of the numbers in the directory names changed or something like that. Start at /sys/ and go down through the directory chain until you find the one that does not exist, and then try to figure out which one DOES exist now that you can use instead. Hope that made sense

Yes, but why? You would just be calling java to do what the launcher does.

Seems like you generally know what you're doing. As far as hardware is concerned, consumer grade CPUs and RAM will always be hugely faster for anything that isn't extremely parallel or virtualized (or containerized). An R720 would be nice and they are plentiful but the main consideration with them is noise and power. They will be much louder (60-70 dB) than any consumer grade hardware, which is why I ended up going with a whitebox similar to what you specced out on PCPP. However, DDR4 RAM is still really expensive. Pick your poison: loud and power hungry with cheap ram, or quiet and efficient with $$$ upgrades. For a firewall, it depends how much network security know-how you have and want, but starting in a VM with a couple passthrough ethernet ports is a good idea. From there you can see exactly how much hardware you need in order to run the stuff you want, and you may find you don't do enough on it to justify having a separate box (besides single-point-of-failure reasons). Also, use OPNsense instead of pfSense. It's largely the same thing (it forked pfSense) but without being largely owned by Netgate and without the less-desirable licensing of pfSense. Haproxy is probably not worth learning compared to the other, newer things you could be looking at instead. Nginx is huge in the industry and overall a good performer (and linuxserver.io's "swag" container has Nginx with Lets Encrypt builtin!!) that you seem to already be using. You could also look at Envoy, if you want to get really distributed.

This may sound silly but you didn't say you installed the game servers. You should also be aware that installing either Minecraft or Rust in the conventional way will not make it a server either. Have you installed the servers?

This will not be much of a VPN in the conventional sense because it will not change your apparent IP to servers you connect to, nor will it encrypt any traffic that will be going outside your local network.

Python can't pass functions as arguments

That's not really what functional means. Functional programming is a much broader topic than that. Python is not a functional language. Python is a good language, but it is object oriented, not functional.

I thought you meant functional vs object-oriented. OOP is much easier for a new person to understand than functional which is very mathematical, and lots of people dislike math.

Why functional?

Why this over pfSense?

@Lurick is correct in that if your line is saturated, then the only way to still serve stuff is to have someone with a line big enough to eat the data. You should be able to get cloudflare DDoS protection without hosting all of your stuff on their servers. What would happen is that all traffic going to you would first go through them, and if a ddos happens then cloudflare eats the data and only passes on what you want from there. PS: Your picture in your edit is correct

Yes, there is

No, I'm saying you should put a firewall between your modem and router such that all traffic going in or out of your network must pass through the firewall both ways. No offense but, do you know what a firewall is? I think it's exactly what you need here and you seem knowledgeable on everything but firewalls, so I'd suggest you do some reading up on what they are and what they do. If you think you know anyone who's into network security and could help you with this, then I'd recommend you get them involved so they can help you more easily in ways that are hard to do over a forum.

clarifying question: Does any of this stuff you're serving need to be accessed from outside the office? If it needs to be accessed from outside your office, does it need to be world-accessible, or can you afford to whitelist IPs or have a VPN to get in?

You definitely need a better firewall and try to contact your ISP. I can't advise you much on the ISP side, but on the firewall side I can give some pointers. I highly doubt you have the funds necessary to put in a serious Next Generation Firewall (NGFW), so instead I'd recommend building your own. I'm assuming you are relatively able with things like Linux and networking (if not, you really need someone local with more expertise, preferably a friend, to help you out with this). Build the smallest PC you can and put a couple high speed Ethernet NICs in it (PCIe expansion cards) and install pfSense. That will thoroughly outperform anything else in the few-hundred-dollar price range. If you need something even cheaper, then get a small embedded box to run pfSense on. There are a few options depending on your price-range. If you decide you really need to go with a prebuilt solution, then do your research on what kind of throughput you need, how many concurrent connections you will have, and if you need more advanced features than just IP blocking. http://firewalls.com will help you if you go this route. Lastly, there are also cloud options like others have mentioned (CloudFlare chiefly). You can also look into those if you'd rather have it all done for you, but it will probably cost a lot more in the long run and really only give you DDoS protection whereas a firewall gives you more control over your network.

I don't think you want to do this remote thing you're so set on. My two cents

spend 1000 euros per laptop and get actual gaming laptops then make a 500 euro nas?

I really can't recommend this setup. Instead, get two 500 euro laptops, then build two separate, decent 500 euro desktops, and a 500 euro small starter NAS. Attach them all to a 50 euro managed switch. Upgrade the desktops and NAS later if necessary. Use NoMachine (aka NX) or something like it for low latency remote access to the desktops.

You won't be able to do it because your home upload speed won't be fast enough to service this kind of workload. Google Stadia has massive upload speeds that can handle sending huge video buffers fast to you

Unfortunately they are kinda expensive. I'm seeing $350 new for a 7600k

You want a CPU with good architecture and a high clock rate. Unfortunately, you already have about as good a CPU as you're going to get in that board. Might be better to go to Realms or rent out a Minecraft server till you can build something more substantial with a modern i5 or Ryzen CPU.

even separate, an i3 is just not enough for latest Minecraft versions. Minecraft is very poorly made and cares only about single core performance. Try running 1.12 or lower before Minecraft got really bad

you can't run esxi in a container, you need a different hypervisor. Since you already have Debian, Redhat's KVM (virt-manager package) is exactly what you need and will do a great job. It installs on top of Linux and can run many VMs with minimal overhead.