Introduction
Enterprise-grade DDoS protection for Minecraft Java, Bedrock & Geyser servers.
PixelShield protects Minecraft servers from DDoS attacks using protocol-aware filtering, kernel-level eBPF, and a global edge network. Set up in under 5 minutes — no plugins, no mods, no server changes.
Guides
- Quick Start — Get your server behind PixelShield in 5 minutes
- DNS Setup — CNAME configuration for all DNS providers
- Java Edition — TCP protocol support and bot detection
- Bedrock Edition — UDP/RakNet protocol support and attack mitigation
- Geyser (Cross-Play) — Dual TCP+UDP proxy for cross-play servers
- Firewall Rules — IP, country, protocol, and username filtering
- API Reference — Manage everything programmatically
Supported games
| Edition | Protocol | DNS | Firewall |
|---|---|---|---|
| Java | TCP | CNAME to *.proxy.pixelshield.net | All condition types |
| Bedrock | UDP (RakNet) | CNAME to *.edge.pixelshield.net | IP, CIDR, Country |
| Geyser | TCP + UDP | CNAME to *.edge.pixelshield.net | All condition types |
How it works
- Point your DNS — Add a CNAME record pointing your game domain to our edge network.
- Traffic is filtered — Every connection passes through protocol-aware inspection. Bots and attacks are dropped at the kernel level.
- Players connect — Legitimate players are proxied to your backend with sub-millisecond overhead.