Complete Minecraft coverage
When we launched PixelShield, we supported Minecraft Java Edition. Today, we're extending that protection to Bedrock Edition and Geyser cross-play servers.
This isn't a bolt-on or a wrapper around our Java proxy. We built a dedicated RakNet protocol parser from scratch — the same approach we took for Java's TCP protocol, but for Bedrock's UDP-based networking.
RakNet protocol support
Bedrock Edition uses RakNet, a reliable UDP networking library. Unlike Java's straightforward TCP connection flow, RakNet has its own handshake sequence, session management, and reliability layer on top of UDP.
Our Bedrock proxy handles the complete RakNet lifecycle: unconnected pings, open connection requests, session tracking, and data forwarding. Each stage is validated against the protocol specification, and connections that deviate from expected behavior are dropped.
We also rate-limit unconnected pong responses per source IP, which prevents the amplification attacks that plague Bedrock servers.
Geyser dual-protocol protection
Geyser bridges Bedrock and Java, letting mobile and console players join Java servers. PixelShield supports this with a dual-protocol proxy — we run both our Java TCP parser and our Bedrock RakNet parser on the same domain.
Java clients connect over TCP and go through our standard handshake/login validation. Bedrock clients connect over UDP and go through the RakNet state machine. Both streams share the same firewall rules, so you can manage everything from one place.
Getting started
Adding Bedrock or Geyser protection works the same way as Java: create a domain in the dashboard, select your game type, point your DNS, and you're protected. The dashboard gives you the correct CNAME target for each game type.
If you're already using PixelShield for Java, you can add Bedrock or Geyser domains on the same account. Get started here.