Lifesteal SMP Server: How to Set It Up From Scratch (2026)
Lifesteal SMP is a raw PvP sandbox with one brutal rule: kill a player, take one of their hearts. Hit zero, get banned. The format blew up through Clownpierce and Dream SMP, and now every second public server tries to copy the formula.
Building a proper Lifesteal server is harder than it looks. Here is the path from picking the core to surviving DDoS attacks.
What is Lifesteal SMP
The core mechanic is dead simple, and that is exactly why it works:
- Every player has a limited heart pool, usually 10 (20 HP)
- Killing a player gives the killer +1 heart, the victim loses 1
- Hitting 0 hearts means a ban (temporary or permanent)
- Hearts can be crafted as items, traded, or gifted
- Everything else is vanilla Minecraft with forced PvP
On top of this base you get variants (HeartsSMP, Bloodlust, Dream SMP style) that tweak parameters like ban length, recipe cost, max hearts, and rules on cheating.
Picking the platform
You want high PvP performance and a solid plugin API, so the core choice matters.
| Core | Recommended | Why |
|---|---|---|
| Paper 1.21.x | yes | Best TPS, Bukkit API, full plugin support |
| Purpur | yes | Paper plus extra tuning, great for 100+ players |
| Spigot | no | Outdated, worse performance |
| Vanilla | no | No plugins, datapacks are harder to maintain |
| Fabric | careful | Few Lifesteal mods, most plugins want Bukkit |
Hardware baseline:
- RAM: 4 GB for 30 players, 8 GB for 80-100 players
- CPU: Ryzen 7/9 5000+ or Intel 12th gen+, high single-core clock matters (Minecraft is mostly single-threaded)
- Disk: NVMe SSD, chunks are written constantly
- Network: 1 Gbps minimum with proper DDoS mitigation
Avoid cheap OpenVZ VPS hosts. Lifesteal attracts a toxic crowd and the attack frequency will be higher than on a normal SMP.
Installing Paper
Grab the latest 1.21.x Paper build:
cd /opt/minecraft
wget -O paper.jar https://api.papermc.io/v2/projects/paper/versions/1.21.4/builds/latest/downloads/paper.jar
First launch to generate configs:
echo "eula=true" > eula.txt
java -Xms4G -Xmx4G -jar paper.jar --nogui
Production start script with Aikar flags (tuned for Paper G1GC):
#!/bin/bash
java -Xms6G -Xmx6G \
-XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 \
-XX:+UnlockExperimentalVMOptions -XX:+DisableExplicitGC \
-XX:+AlwaysPreTouch -XX:G1NewSizePercent=30 \
-XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M \
-XX:InitiatingHeapOccupancyPercent=15 \
-jar paper.jar --nogui
Key server.properties values:
pvp=true
difficulty=hard
view-distance=8
simulation-distance=6
max-players=100
View-distance above 10 is wasted on Lifesteal - fights are close-range and extra chunk load just kills TPS.
The LifeStealZ plugin
This is your core plugin. Hosted on Modrinth, actively maintained, supports 1.20.x through 1.21.x.
cd plugins/
wget https://cdn.modrinth.com/data/<LIFESTEALZ_ID>/versions/latest/LifeStealZ.jar
After restart you get plugins/LifeStealZ/ with a default config. The important keys:
# Starting and maximum hearts
player-startHearts: 10
player-maxHearts: 20
player-minHearts: 1
# When to apply heart loss
lifeloss-conditions:
player-kill: true
natural-causes: false
suicide: false
# Heart transfer amount
heart-gain-per-kill: 1
heart-loss-per-death: 1
# Elimination behavior
elimination:
enabled: true
ban: true
ban-duration: 86400 # 24 hours in seconds, 0 = permanent
# Heart as item
heart-item:
enabled: true
material: PLAYER_HEAD
name: "&cLife Heart"
lore:
- "&7Right-click to gain +1 heart"
- "&7Max hearts: %maxhearts%"
give-on-kill: false # drop item vs. apply directly
# Heart crafting recipe
crafting:
enabled: true
shape:
- "DDD"
- "DTD"
- "DDD"
ingredients:
D: DIAMOND
T: TOTEM_OF_UNDYING
Reload with /lsz reload. Run /hearts in-game to confirm the plugin is tracking your heart count.
Alternatives: HeartSteal, LifeSteal (PabloMasters), SMPUtils. LifeStealZ wins on documentation and addon API.
Hearts as items
This is the core economic loop. A player already at 20 hearts does not gain hearts from kills anymore. Instead the heart drops into their inventory as an item. They can:
- Consume it themselves: right-click for +1 heart
- Gift it to new players or allies
- Trade for diamonds or netherite
- Drop it as a prize for events
The crafting recipe needs to be expensive but achievable. Bad example:
# Do not ship this - too cheap
shape: ["I I", "IDI", " I "]
ingredients: {I: IRON_INGOT, D: DIAMOND}
With a recipe that cheap, one hour of farming gives 5 hearts and everyone runs 20 HP permanently. Good recipes need rare materials:
- 8 diamonds + 1 totem of undying
- 4 netherite ingots + 1 Wither star
- 1 Heart of the Sea + 8 echo shards
Target cost: 20-40 minutes of active play for an experienced player.
Supporting plugins
A Lifesteal server without anticheat and combat-log protection turns into garbage within 24 hours. Bare minimum:
plugins/
├── LifeStealZ.jar # core
├── CombatLogX.jar # 15s combat tag, kill on quit
├── WorldGuard.jar # safe zone on spawn
├── WorldEdit.jar # WorldGuard dependency
├── LuckPerms.jar # groups and permissions
├── Grim.jar # anticheat (or Vulcan)
├── CoreProtect.jar # grief logs
├── EssentialsX.jar # base commands
└── ChunkyBorder.jar # world border
CombatLogX
Tag players for 15 seconds after any PvP hit. If they disconnect while tagged, they die and lose a heart:
combat:
timer: 15
punishment:
kill: true
drop-inventory: true
expansions:
- NoEntry # block tagged players from entering safe zones
- NoCommand # no /tpa, /home, etc.
- NoEnderpearl # optional
WorldGuard safe spawn
You need a PvP-free zone where new players can spawn in, grab a starter kit, and choose a direction without getting slaughtered:
//wand
# select a 64x64 cube around spawn
/rg define spawn
/rg flag spawn pvp deny
/rg flag spawn invincible allow
/rg flag spawn greeting &aEntered safe zone
/rg flag spawn farewell &cLeaving safe zone - PvP enabled
Absolutely set the NoEntry expansion in CombatLogX so tagged fighters cannot run to spawn to break combat.
Anticheat
Grim or Vulcan. Grim is free and catches 90% of cheats: reach, killaura, scaffold, fly, speed. Vulcan is paid with more aggressive detections. At minimum ship Grim. Without anticheat the server dies in a week because cheaters ban every legit player.
Server rules
Rules are not bureaucracy, they are a moderation manual. Without them you will argue with every appeal. Baseline:
- Cheats - permanent ban, no warning
- Macros/autoclickers - 7 day ban, second offence permanent
- Duping or exploits - inventory rollback plus 3 day ban
- Doxxing or IRL threats - permanent, no appeal
- Teaming in 1v1 zones - warn then ban
- Griefing spawn - CoreProtect rollback plus ban
- Clans allowed, no shared heart pool
- Alt accounts - one account per player, no ban evasion
Publish rules on your website and Discord, require agreement during registration.
Hosting and DDoS protection
Lifesteal servers are attack magnets. Banned players retaliate, competitors knock you offline before an update drop, script kiddies test their booters. Generic TCP mitigation does not stop application-layer attacks.
You need Minecraft-aware protection: a filter that parses the protocol and separates real players from bots emulating handshakes. MineGuard handles this through a reverse proxy with handshake validation, captcha for suspicious connections, and UDP flood filtering (for PlasmoVoice or Geyser). Setup is a DNS change plus pointing server.properties to an internal IP.
Also plan hourly backups, TPS monitoring via Plan, and CoreProtect logs for dispute resolution.
Common mistakes
- No safe spawn - first-time players die in 5 seconds and never come back
- Cheap heart crafting - everyone sits at 20 HP after one hour, mechanic dies
- Instant perma-ban - 24h is enough, perma kills retention
- No anticheat - one week later only cheaters remain, Grim is not optional
- PvP on spawn - new players die in the starter zone and leave
- No combat-log plugin - Alt+F4 before dying dodges heart loss
- Cheap CPU - Minecraft is single-threaded, high clocks matter
Monetization without pay-to-win
The Minecraft EULA forbids selling gameplay advantage. On Lifesteal this matters double: if buyers automatically get 20 HP, the server loses its point. Legal items:
- Cosmetics: prefixes, colored names, particles, death messages
- Unban: one week after elimination for $5-10
- Cosmetic crates: keys at $2-5
- VIP ranks: access to /hat, /nickname, extra /sethome slots
- Queue skip: when the server fills
Platform: Tebex (industry standard) or Craftingstore. The TebexPlugin applies purchases automatically in-game.
What you cannot sell: extra hearts, enchanted gear, safe-zone access, rule exemptions.
Launch checklist
[ ] Paper 1.21.x on dedicated hardware with NVMe
[ ] Aikar JVM flags in start script
[ ] LifeStealZ installed, heart recipe balanced
[ ] CombatLogX 15s tag with NoEntry expansion
[ ] WorldGuard safe spawn defined
[ ] LuckPerms with default/vip/staff groups
[ ] Grim anticheat + CoreProtect enabled
[ ] Hourly backups to a separate disk
[ ] DNS proxied through DDoS protection
[ ] Tebex store set up, no pay-to-win items
[ ] Admin dry run: kill, gain heart, test unban
If all that is green, open publicly. First week you live in the admin panel handling bugs and the first cheater wave. If the gameplay grips players, retention is excellent.
Protect Your Server from DDoS Attacks
Free protection with 5-minute setup. 1 TB bandwidth included.
Try for FreeRelated Articles
Layer 4 vs Layer 7 DDoS Attacks - What's the Difference
Breaking down the OSI model in plain terms, explaining the difference between L3/L4 and L7 attacks with gaming examples: SYN flood, UDP flood, HTTP flood, bot joins and invalid packet crafting. Why real protection requires both layers.
How to Create a Minecraft Server from Scratch
Step-by-step guide to creating a Minecraft server: choosing the right Java version, downloading the server jar, configuring server.properties, port forwarding, accepting EULA, first launch, installing plugins, and basic optimization tips.
Anti-Grief Protection: Complete Guide for Minecraft Server Admins
All types of griefing and how to stop them: land claim plugins, permission systems, damage rollback, chat protection, anti-cheat, moderation and automated detection. Practical guide with config examples.