Bedrock / Geyser Setup

🔒 Premium Feature

Geyser lets Bedrock Edition players join your Java server. This guide shows how to set it up behind Game Shield so those players are protected too.

TIP

Protecting Bedrock players requires a paid plan. Requesting the default RakNet port (19132) requires at least the Neo plan.

NetherNet and RakNet

Bedrock Edition can connect to a server in two ways, called transports:

• NetherNet is the new connection method. It is built on WebRTC and works with your own domain, the same one your Java players use.
• RakNet is the old connection method. Mojang is replacing it with NetherNet and will stop supporting it in a future version. RakNet cannot tell domains apart, so it needs its own protected address.

Geyser's transport option decides which of them your server accepts:

transport	Accepts	When to use it
both	NetherNet, RakNet	Recommended. Players on current and older Bedrock versions can join.
nethernet	NetherNet only	You do not need to support older Bedrock versions.
raknet	RakNet only	Not recommended. RakNet is deprecated with Bedrock Edition 26.60.

Ports

With the recommended transport: both, Geyser uses three ports:

Port	Used by	Geyser option	Purpose
19132 (UDP)	RakNet	port	RakNet game connections
19132 (TCP)	NetherNet	port	Signaling: server list pings and connection setup
19133¹ (UDP)	NetherNet	webrtc-port	WebRTC: the game traffic itself

¹: The WebRTC port does not have to be 19133. Any free UDP port works, as long as it is not the one RakNet already uses.

All of these ports must be reachable from NeoProtect's IP addresses. If you use a firewall (and you should, see the firewall guide), allow both TCP and UDP from every address in our IP list. If your server sits behind a NAT or in a container, forward each port to Geyser using the same port number on both sides.

Setup

These steps set up transport: both. If you only want one transport, follow the NetherNet or RakNet guide instead.

1. Add your Bedrock backend

1. In the panel, open the Backends section of your server and click Add Backend Group.
2. Set Game to Minecraft Bedrock. You cannot change this later.
3. Turn on Proxy Protocol. This switch only affects RakNet; see Real player IPs for NetherNet.
4. Open the new group, click Add Backend and enter your Geyser server's public IPv4 address and its port (19132 by default).

2. Configure Geyser

Open Geyser's config.yml and set these options. Leave everything else as it is.

bedrock:
  address: 0.0.0.0
  port: 19132
  # UDP port for NetherNet. Must differ from "port" when using "both".
  webrtc-port: 19133
  transport: both
  signaling:
    mode: builtin

advanced:
  bedrock:
    # RakNet: must match the "Proxy Protocol" switch of your Bedrock backend group
    use-haproxy-protocol: true
    haproxy-protocol-whitelisted-ips:
      - https://api.neoprotect.net/v2/public/servers/txt
    # NetherNet: lets Geyser trust the player IP that NeoProtect forwards
    signaling-trusted-proxies:
      - https://api.neoprotect.net/v2/public/servers/txt

If your config.yml has no transport or signaling-trusted-proxies option, your Geyser version is too old for NetherNet. Update Geyser first.

After updating your config, restart Geyser to activate both RakNet and NetherNet.

WARNING

Please see Real player IPs for more information on IP forwarding.

3. Set up NetherNet

Add your domain in the panel and request a TLS certificate for it, so players on iOS/iPadOS can join too. Follow the NetherNet guide.

4. Set up RakNet

Request a Bedrock RakNet address and point a subdomain at it. Follow the RakNet guide.

Where players connect

Players using:

• Current Bedrock (NetherNet): can connect with any domain you added in the panel on port 19132. Your Bedrock RakNet address also accepts NetherNet, both on its own port and on port 19132.
• Older Bedrock (RakNet): can connect with your Bedrock RakNet address and port.

TIP

This means that if you create a RakNet default port address and point it to a subdomain of yours, every Bedrock client can join this subdomain using port 19132 - regardless of whether using RakNet or NetherNet.
You still need to add the subdomain in the panel, and also request a certificate for it to support iOS/iPadOS clients.

---

NOTE

Stuck on any step? Contact support and we will help.