[{"_1":2,"_190":-5,"_191":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_164":165},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_95":-5,"_96":97,"_153":-5,"_154":11,"_155":21,"_156":11,"_157":-5,"_158":11,"_159":-5,"_160":161,"_162":98,"_163":-7},"canonicalUrl","https://hub.docker.com/r/renorris/openfsd/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","renorris","reponame","openfsd","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_50":51,"_53":54,"_55":56,"_57":11,"_58":59,"_60":61,"_62":63,"_43":35,"_32":33,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":69,"_76":77,"_78":11,"_79":33,"_80":81,"_86":11,"_87":88,"_92":33,"_93":94},"categories",[42,47],{"_43":44,"_45":46},"name","Networking","slug","networking",{"_43":48,"_45":49},"Web servers","web-servers","content_types",[52],"image","date_registered","2024-10-04T17:19:20.223253Z","description","Multiplayer flight simulation server","is_private","last_updated","2025-05-18T16:46:04.858342Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[64],"application/vnd.oci.image.index.v1+json","pull_count",649,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# openfsd\n\n[![license](https://img.shields.io/github/license/renorris/openfsd)](https://github.com/renorris/openfsd/blob/main/LICENSE)\n [![docker](https://img.shields.io/docker/image-size/renorris/openfsd/latest)](https://hub.docker.com/repository/docker/renorris/openfsd)\n\n**openfsd** is a multiplayer flight simulation server implementing the protocol colloquially known as \"FSD\" (Flight Sim Daemon).\nIt is specifically modelled to reflect the VATSIM [Velocity](https://forums.vatsim.net/topic/32619-vatsim-announces-velocity-release-date-and-rollout-plan/) protocol revision for pilot clients.\n\n## About\n\nFSD is the software/protocol responsible for connecting home flight simulator clients to a single, shared multiplayer world on hobbyist networks such as [VATSIM](https://vatsim.net/docs/about/about-vatsim) and [IVAO](https://www.ivao.aero/).\nFSD was originally written in the late 90's by [Marty Bochane](https://github.com/kuroneko/fsd) for [SATCO](https://web.archive.org/web/20000619145015/http://www.satco.org/), later to be forked and taken closed-source by VATSIM in 2001. \nAs of October 2024, FSD is still used to facilitate over 140,000 active members connecting their flight simulators to the [network](https://vatsim-radar.com/).\n\n## Docker\n\n[Prebuilt images](https://hub.docker.com/r/renorris/openfsd) are available for x86_64 and arm64.\n\nExample:\n\n```\ndocker run -e IN_MEMORY_DB=true -e PLAINTEXT_PASSWORDS=true \\\n-p 6809:6809 -p 8080:8080 renorris/openfsd:latest\n```\n\nAlso see the example [docker-compose.yml](https://github.com/renorris/openfsd/blob/main/docker-compose.yml).\n\n## Manual Build\n```\ngit clone https://github.com/renorris/openfsd && cd openfsd/\ngo build -o openfsd .\n```\n\n## Setup\n\nPersistent storage utilizes MySQL. You will need a MySQL server to point openfsd at.\n\nUse the following environment variables to configure the server:\n\n| Variable Name | Default Value | Description |\n|-----------------------|---------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `FSD_ADDR` | 0.0.0.0:6809 | FSD listen address |\n| `HTTP_ADDR` | 0.0.0.0:8080 | HTTP listen address |\n| `TLS_CERT_FILE` | | TLS certificate file path (setting this enables HTTPS. otherwise, plaintext HTTP will be used.) |\n| `TLS_KEY_FILE` | | TLS key file path |\n| `IN_MEMORY_DB` | false | Enables an ephemeral in-memory database in place of a real MySQL server.
This should only be used for testing. |\n| `MYSQL_USER` | | MySQL username |\n| `MYSQL_PASS` | | MySQL password |\n| `MYSQL_NET` | | MySQL network protocol e.g. `tcp` |\n| `MYSQL_ADDR` | | MySQL network address e.g. `127.0.0.1:3306` |\n| `MYSQL_DBNAME` | | MySQL database name |\n| `MOTD` | openfsd | \"Message of the Day.\" This text is sent as a chat message to each client upon successful login to FSD. |\n| `PLAINTEXT_PASSWORDS` | false | Setting this flag disables JSON web token authentication over FSD and instead treats the token field in the #AP packet as a plaintext password.
See below for further configuration. |\n\nFor 99.9% of use cases, it is also recommended to set:\n```\nGOMAXPROCS=1\n```\nThis environment variable limits the number of operating system threads that can execute user-level Go code simultaneously.\nScaling to multiple threads will generally only make the process slower.\n\nopenfsd supports \"fsd-jwt\" authentication over HTTP, assuming `PLAINTEXT_PASSWORDS=false` is set.\nVATSIM uses this standard; clients first obtain a login token by POSTing to `/api/fsd-jwt` with:\n\n```json\n{\n \"cid\": \"9999999\",\n \"password\": \"supersecretpassword\"\n}\n```\n\nA token is returned. That token is placed in the \ntoken/password field of the `#AP` FSD login packet.\nTo use a vanilla VATSIM client with openfsd,\n(except Swift, see below) it will need to be modified to point to openfsd's \"fsd-jwt\" endpoint:\n```\n/api/v1/fsd-jwt\n```\n\n### Credentials\n\nA default administrator user will be printed to stdout on first startup:\n```\n DEFAULT ADMINISTRATOR USER:\n CID: 100000\n PRIMARY PASSWORD: \n FSD PASSWORD: \n```\nTwo unique passwords are stored for each user since FSD runs over an insecure channel.\nUse the primary password over a secure channel if possible (web interface over HTTPS) to perform sensitive account-related management. \nUse the FSD password in your pilot client to connect to FSD.\n\n### Web Interface\n\nOne can access their account via the web interface served by the HTTP endpoint.\nAdministrators and supervisors can create/mutate user records via the administrator dashboard.\n\n### Available HTTP calls\n\n- `/api/v1/users` (See [documentation](https://github.com/renorris/openfsd/web))\n- `/api/v1/data/openfsd-data.json` VATSIM-esque [data feed](https://github.com/renorris/openfsd/web/DATAFEED.md)\n- `/login ... etc` front-end interface\n\n## Connecting\n\nVarious clients such as [vPilot](https://vpilot.rosscarlson.dev/), [xPilot](https://docs.xpilot-project.org/) and [swift](https://swift-project.org/) are used to connect to VATSIM FSD servers.\n\nAlthough it is possible to use vPilot with openfsd, the binary would need to be modified directly.\nTo use xPilot, one would need to manually recompile with the correct HTTP /api/fsd-jwt and FSD server addresses.\n\nThe Swift pilot client works out of the box if openfsd is configured with the `PLAINTEXT_PASSWORDS=true` environment variable option.\n\n**Swift Instructions:**\n\n1. In the Settings > Servers menu: Make a new server entry for openfsd with the correct address and port.\n2. Select **FSD (Private)** for the \"Eco.\" field\n3. Select **FSD [VATSIM]** for the \"Type\" field.\n4. In the FSD tab, enable the following flags (send and receive to TRUE):\n - \"Parts\"\n - \"Gnd. flag\"\n - \"Fast pos\"\n - \"Send visual pos.\"\n\n## Protocol Details\n\nAt its core, FSD is a message forwarder.\nOther than a few direct client/server transactions, the main purpose of the FSD server is to facilitate the passing of messages between flight simulator clients.\nAlbeit, none of this is P2P—all messages are forwarded via a centralized server.\nThe protocol is entirely plaintext, and can be easily sniffed using packet capture tools such as Wireshark.\nIt conventionally listens on TCP port 6809.\nOne can use telnet to interact with an FSD server, try it out:\n\n```\ntelnet 6809\n```\n\nThe few mainstream implementations of FSD have their own nuances within their respective protocols. This project attempts to replicate VATSIM-specific behavior (which differs from other implementations such as [IVAO](https://www.ivao.aero/)).\n\nThroughout this project, FSD messages are referred to as \"packets\" or \"lines.\" The term \"packet\" is referring to the application-layer implementation of FSD and has nothing to do with any transport or IP layers.\n\nFSD packets are plaintext MS-DOS-style lines that end with (CR/LF) characters.\nEach line starts with a packet identifier, which is either 1 or 3 characters in length.\nEach field within the packet is delimited by a colon `:` character.\nAll numerical values are represented as base-10 (or rarely base-16) encoded ASCII strings.\nNothing is encoded as raw binary.\n\nClients are addressed by their plaintext aviation callsigns, e.g. N7938C. FSD packets generally have \"From\" and \"To\" fields, where the \"From\" field can be thought of as a source address (or source callsign, in this case) and the \"To\" field being a recipient address/callsign. Depending on the packet type, the \"To\" field can be either a single client address (representing a \"Direct Message\" of sorts), or another special identifier representing several clients.\n\nFor example, the following is a \"Server Identification\" FSD packet represented as a string:\n\n```go\n\"$DISERVER:CLIENT:VATSIM FSD V3.43:d95f57db664f\\r\\n\"\n```\n\nHex representation:\n\n```\n 00000000 24 44 49 53 45 52 56 45 52 3a 43 4c 49 45 4e 54 $DISERVE R:CLIENT\n 00000010 3a 56 41 54 53 49 4d 20 46 53 44 20 56 33 2e 34 :VATSIM FSD V3.4\n 00000020 33 3a 64 39 35 66 35 37 64 62 36 36 34 66 0d 0a 3:d95f57 db664f..\n```\n\n> See the `protocol` package for packet parsers and serializers.\n\n### Connection Flow\n\n1. **Server Identification packet:** Once the TCP connection has been established, the server identifies itself with a \"Server Identification\" message, as seen in the example above. The packet identifier is `$DI` (Server Identification). The first field is the \"From\" field: `SERVER`. The second field is the \"To\" field: `CLIENT` (`CLIENT` is used here as a generic recipient callsign because the client hasn't announced itself yet.) The third field is the server version identifier. The fourth field is a random hexadecimal string used later for 'VatsimAuth' client verification (see fsd/vatsimauth) \n\n\n2. **Login Token request:** Up until 2022, user's passwords were sent in plaintext over FSD (yikes.) Now, login tokens are obtained over HTTPS via `auth.vatsim.net/api/fsd-jwt` (implemented in http_server.go.) Now, logging into FSD, this token is sent in place where the old password used to be... in plaintext (still yikes.)\n\n\n3. **Client Identification packet:** The client identifies itself in its first message:\n\n```go\n\"$IDN12345:SERVER:88e4:vPilot:3:8:1000000:5816673295:35df255c\\r\\n\"\n```\n\nThis includes their callsign (N12345 in this case), client information, \"cert ID\" aka user ID, an identifier based on the client's MAC address, and another random hexadecimal string used for 'VatsimAuth'\n\n4. **Add Pilot packet:** The client sends its second message containing more login information:\n\n```go\n\"#APN12345:SERVER:1000000::1:101:2:John Doe\\r\\n\"\n```\n\nThis includes the source callsign again, the cert ID again, the login token previously obtained, the user's requested network rating, the protocol revision they're using, their simulator type, and their real name.\n\n\n5. **Server MOTD packet:** If all goes well for the login, the server sends a Text Message packet with the message of the day. This serves as the \"login successful\" message. If the login does not go well, the server will send an error packet and close the connection.\n\n\n```go\n\"#TMSERVER:N12345:openfsd\\r\\n\"\n```\n\n### Post-Login\n\nAfter the client has logged in, it's generally free to send whatever it wants. This project implements logic for the following packets:\n\n### Login-only packets\n\n| Name | Identifier | Direction | Description |\n|-----------------------|------------|-----------|-----------------------------------------------------------------------------------------------------------------------------------|\n| Server Identification | `$DI` | S → C | Server identification |\n| Client Identification | `$ID` | C → S | Client identification |\n| Add Pilot | `#AP` | C ↔ S | Client login information. Broadcasted to all other clients on server with the \"Token\" field omitted, assuming a successful login. |\n\n\n### Post-login packets\n\n| Name | Identifier | Description |\n|------------------------------------|------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| Auth Challenge | `$ZC` | 'VatsimAuth' challenge |\n| Auth Challenge Response | `$ZR` | Response for an Auth Challenge. |\n| Client Query | `$CQ` | Query another client for some information. In some cases, `SERVER` can be the recipient. There are cases when this packet type can also be used to broadcast unsolicited information to several other clients. |\n| Client Query Response | `$CR` | Respond to a client query. |\n| Delete Pilot | `#DP` | Sent when a client would like to disconnect. Broadcasted to all other clients on server. |\n| Fast Pilot Position (Fast Type) | `^` | Contains position and velocity information for the client's airplane. Broadcasted to all clients within reasonable geographical range. Sent 5 times per second. This packet is only sent when the server signals the client with a \"Send Fast\" packet marked as `true`, and the velocity of the airplane is > 0. |\n| Fast Pilot Position (Slow Type) | `#SL` | Contains position and velocity information for the client's airplane. Broadcasted to all clients within reasonable geographical range. Sent once every 5 seconds. This packet is only sent when the server signals the client with a \"Send Fast\" packet marked as `false`. |\n| Fast Pilot Position (Stopped Type) | `#ST` | Contains position and velocity information for the client's airplane. Broadcasted to all clients within reasonable geographical range. Sent 5 times per second. This packet is only sent when the server signals the client with a \"Send Fast\" packet marked as `true`, and the velocity of the airplane is zero. |\n| Normal Pilot Position | `@` | Contains position and other miscellaneous airplane-related information. Broadcasted to all clients within reasonable geographical range. Sent once every 5 seconds. This packet is repeatedly broadcasted from the client throughout the entire lifetime of the connection. |\n| Send Fast | `$SF` | Sent by the server to signal whether the client should send Fast Pilot Position packets 5 times per second, rather than just the standard pilot positions once per 5 seconds. |\n| Error | `$ER` | Sent by the server when it encounters an error |\n| Kill | `$!!` | When sent by a privileged user, it is forwarded to the \"victim\" client, then the victim client is kicked from the server. |\n| Ping | `$PI` | Ping |\n| Pong | `$PO` | Respond to a Ping |\n| Plane Info Request | `#SB` | Query another client for model matching information |\n| Plane Info Response | `#SB` | Respond to a Plane Info Request |\n| Text Message | `#TM` | Used to send text messages. Depending on the value of the recipient field, a text message can represent any of the following:
— Radio message: a message to be broadcasted to all airplanes on a simulated VHF frequency
— Direct message: addressed to a single client
— \"Wallop\" message: a message that is forwarded to all users with \"Supervisor\" or higher privilege)
— Broadcast message: forwarded to all connected clients. |\n\n\n","has_starred","hub_user","immutable_tags_settings",{"_82":11,"_83":84},"enabled","rules",[85],".*","is_automated","permissions",{"_89":21,"_90":11,"_91":11},"read","write","admin","user","storage_size",447929730,"orgData","recentTags",[98],{"_99":52,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_58":142,"_143":101,"_144":33,"_145":64,"_43":146,"_147":148,"_149":135,"_150":142,"_151":73,"_152":21},"content_type","creator",29580933,"digest","sha256:811b451e602f7fea492adadc16c738f09fac01d54a5704ab6ad7fdf56a47e8bf","full_size",12254889,"id",770354404,"images",[110,126,132,138],{"_111":112,"_102":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":115,"_123":-5,"_124":105,"_70":73,"_125":-5},"architecture","amd64","sha256:16c54cd269d7d1cd8331634a66eecf001a750178a25b611be3f759ff37399091","features","","last_pulled","2026-10-13T16:36:38.170924908Z","last_pushed","2025-05-18T16:46:00.775841372Z","os","linux","os_features","os_version","size","variant",{"_111":127,"_102":128,"_114":115,"_116":129,"_118":130,"_120":121,"_122":115,"_123":-5,"_124":131,"_70":73,"_125":-5},"arm64","sha256:d2680030f5fa50baaf807fcc18564976c650c85054046582c3a821c0c500861c","2026-10-09T05:18:59.417412953Z","2025-05-18T16:46:01.574123291Z",10912458,{"_111":133,"_102":134,"_114":115,"_116":135,"_118":136,"_120":133,"_122":115,"_123":-5,"_124":137,"_70":73,"_125":-5},"unknown","sha256:2dc35be5827998a7c9dd9dc91039047f90ca0049a2067e87c7402718bf2ac4c8","2026-10-13T16:36:42.962749903Z","2025-05-18T16:46:02.309539874Z",1488,{"_111":133,"_102":139,"_114":115,"_116":140,"_118":141,"_120":133,"_122":115,"_123":-5,"_124":137,"_70":73,"_125":-5},"sha256:32a70c4bbdf3ee62f6d5c31857e9bb22b2856d7276cc04b773b88206263fce37","2026-10-09T05:18:59.427426769Z","2025-05-18T16:46:02.760383007Z","2025-05-18T16:46:03.644968Z","last_updater","last_updater_username","media_type","latest","repository",25296314,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":166,"_175":176,"_160":188,"_189":11},{"_40":167,"_50":170,"_53":54,"_55":56,"_57":11,"_58":59,"_60":61,"_62":171,"_43":35,"_32":33,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":69,"_76":77,"_78":11,"_79":33,"_80":172,"_86":11,"_87":174,"_92":33,"_93":94},[168,169],{"_43":44,"_45":46},{"_43":48,"_45":49},[52],[64],{"_82":11,"_83":173},[85],{"_89":21,"_90":11,"_91":11},"tags",{"_177":71,"_178":-5,"_179":-5,"_180":181},"count","next","previous","results",[182],{"_99":52,"_100":101,"_102":103,"_104":105,"_106":107,"_108":183,"_58":142,"_143":101,"_144":33,"_145":64,"_43":146,"_147":148,"_149":135,"_150":142,"_151":73,"_152":21},[184,185,186,187],{"_111":112,"_102":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":115,"_123":-5,"_124":105,"_70":73,"_125":-5},{"_111":127,"_102":128,"_114":115,"_116":129,"_118":130,"_120":121,"_122":115,"_123":-5,"_124":131,"_70":73,"_125":-5},{"_111":133,"_102":134,"_114":115,"_116":135,"_118":136,"_120":133,"_122":115,"_123":-5,"_124":137,"_70":73,"_125":-5},{"_111":133,"_102":139,"_114":115,"_116":140,"_118":141,"_120":133,"_122":115,"_123":-5,"_124":137,"_70":73,"_125":-5},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
16c54cd269d7	linux/amd64	11.69 MB
d2680030f5fa	linux/arm64	10.41 MB

renorris/openfsd

Tags for renorris/openfsd