Open your Java server to Bedrock

Geyser translates the Bedrock protocol into Java: players on console, mobile and Windows join your Java server without installing anything. Answer three questions and the tool gives you the steps, the configuration and the firewall commands.

Where to install Geyser

Plugin on the serverPaper, Spigot, Purpur: a single serverPlugin on the proxyVelocity or BungeeCord in front of several serversStandalone GeyserA separate program, on the same machine or another one

Java port (TCP)Bedrock port (UDP)

My host only opens one portBedrock will use the Java port, in UDP.Floodgate: join without a Java accountRecommended, most console and mobile players don't have one.

Bedrock MOTD line 1Line 2

Steps

1Put Geyser-Spigot.jar in the server's plugins folder.
2Put Floodgate-Spigot.jar in plugins too.
3Start once to generate config.yml, stop, copy the values below, restart.
4Open port 19132 in UDP (not just TCP) in the firewall and, at home, on your router.
5For Bedrock players: Servers › Add Server, with your address and port 19132.

With Floodgate, Bedrock players join without a Java account. Their username gets a prefix (a dot by default): check that your permission and whitelist plugins accept it.

Geyser's config.yml

Copy these values into the file generated on first start; key names are those of Geyser 2.x.

# Excerpt of Geyser's config.yml, generated on cubevote.net/en/tools/geyser-bedrock
bedrock:
  address: 0.0.0.0
  port: 19132
  clone-remote-port: false
  motd1: "My server"
  motd2: "Open to Bedrock players"
remote:
  address: auto
  port: 25565
  auth-type: floodgate

Linux firewall

On a VPS or a dedicated server.

sudo ufw allow 19132/udp
# or, without ufw:
sudo iptables -A INPUT -p udp --dport 19132 -j ACCEPT

Windows firewall

In a command prompt run as administrator.

netsh advfirewall firewall add rule name="Geyser Bedrock" dir=in action=allow protocol=UDP localport=19132

Not working?

Nine times out of ten, the port is open in TCP but not in UDP. Bedrock only speaks UDP.
Consoles don't accept a custom address without a DNS trick or a companion app: that's a console limitation, not your server's.
The server tester checks in full diagnostics that the Bedrock port answers from outside.