Building a Velocity Proxy Network & Enabling Bedrock Crossplay with Geyser
Modern proxy networking with Velocity and bridging mobile/console players via Geyser and Floodgate.
Verified against
- Velocity
- 3.x
- Geyser
- 2.x (Standalone / plugin)
- Minecraft
- 1.20.x – 1.21.x
- Last checked
- 2026-09-13
Before you start
- At least two Minecraft services: one proxy (Velocity) and one backend
- Both servers active in the panel
- A separate UDP port for Bedrock players (an extra allocation in the panel)
On This Page
All Guides
When orchestrating multi-server networks (Lobby, Survival, Skyblock), Velocity is the modern industry standard over legacy BungeeCord. Pairing it with Geyser and Floodgate enables seamless mobile and console (Bedrock) crossplay.
Install Geyser
Installs Geyser so Bedrock players can join your Java server. Floodgate is added separately per the guide.
- A compatible Geyser build lands in the plugins folder
- config.yml is generated on first boot; set the Bedrock port there
The server must be restarted for this change to take effect.
If you have a Clodo service you can apply these steps without touching a terminal. You always see the diff before anything is written.
Velocity & GeyserMC Crossplay Network Topology
Secure packet flow starting from Cloudflare DNS down to isolated backend server instances.
Java & Bedrock Clients
Clients connect via TCP 25565 and UDP 19132 to play.clodo.net.
Cloudflare SRV / DNS-Only
The Minecraft protocol is not HTTP, so the Cloudflare proxy (orange cloud) cannot be used; the record must stay grey cloud (DNS-only).
Server IP and Port
A grey-cloud record exposes your real server IP. That is why in a proxy setup only the proxy port is reachable and backend servers stay closed.
Velocity Proxy (Port 25577)
Performs modern forwarding secret validation and handles routing.
Geyser & Floodgate Bridge
Translates Bedrock packets into Java protocol on-the-fly.
Backend Paper / Purpur
Sub-servers listen strictly on localhost/unix socket for ironclad isolation.
1. Modern Player Forwarding Secret#
To prevent IP spoofing and maintain player UUID integrity, enable modern velocity forwarding with a shared secret in `paper-global.yml`.
proxies:
velocity:
enabled: true
online-mode: true
secret: "gizli-anahtariniz-buraya-gelecek"How to Implement This?
Clodo Control Panel Quick Method
Engine selection in the panelThere is no wizard that wires a network together for you. The proxy and each backend are separate Clodo services; you pick the proxy engine in the panel and connect them using the config files in this guide.
Step-by-step Execution:
- 1Open a separate Minecraft service for the proxy and set its engine to Velocity on the 'Version & Engine' tab.
- 2Take each backend's IP and port from the address card on the 'Overview' tab and enter them in velocity.toml.
- 3Copy the value from forwarding.secret to every backend by hand -- the panel does not propagate it.
- 4For Bedrock, install Geyser from the 'Plugins & Mods' tab and request an extra UDP allocation from the panel.
Was this guide helpful?
Feedback goes straight to the team that maintains this guide.

