Blog
Colyseus game servers: CORS authority, room filtering, and matchmaking HTTP APIs alongside WebSocket gameplay
HTTP endpoints for matchmaking need CORS; gameplay WebSockets still require origin checks to prevent CSWSH.
1 min read
colyseusmultiplayercors
Schema serialization
Delta compression changes payload sizes—CORS-unrelated but can interact with MTU issues on mobile.
Custom serializers must stay backward compatible across client versions.
Scaling
Presence across processes uses Redis—ensure CORS docs cover both HTTP and WS hostnames.