# NeoProtect

> neoprotect.net | Egress and tunnels; 1 record: free tier, limits, identity cost and evidence.

HTML https://fshy.ajam.dev/p/neoprotect/ | JSON https://fshy.ajam.dev/api/v1/entity/neoprotect.json | how to read a record: https://fshy.ajam.dev/llms-full.txt

## NeoProtect (GameShield)

- `egress/neoprotect` | paid-only | evidence documented | binding none | category game L4/L7 reverse proxy (Minecraft) | tier free
- needs card no, phone no, ID no, institution no | verified 2026-10-23 (live) | stale on 2026-11-23
- url https://neoprotect.net/gameshield
- price USD 0
- free tier: A permanently free Basic shield, then plan-based tiers that add bandwidth, domains, backends and advanced protection. | unit: none | metered on: unstated | read on: 2026-10-23 | source: [1]
- per-object cap: not applicable | source: [1]
- retention: not applicable | source: [1]
- egress: No byte figure is published for the free Basic shield: 'Plan limits and exact pricing are shown in the order process on our panel.'; ingress: tcp | metered: no | free allowance: none published | source: [1]
- identity: email | detail: An account at panel.neoprotect.net. The register form was not opened, so the required fields are unread. | country: None
- interface: rest
- limits:
  - write-gated: the free Basic shield is '1 GameShield, Minecraft Java'; Bedrock / Geyser protection is listed only on the plan-based tier [1]
  - write-gated: the default RakNet port 19132 requires at least the Neo plan and a Discord ticket [2]
- binding note: The free Basic shield carries no UDP port at all, so no byte allowance is ever reached: the gate is the plan tier. Bedrock is the paid product, and the vendor's own docs put it behind a paid plan plus a ticket for port 19132.
- interface detail: Self-serve panel at panel.neoprotect.net; API keys are a plan-based feature.
- tooling: DNS record in the panel, no client or plugin to install
- composes with: Point a domain at the shield and keep the origin hidden; no tunnel or agent, so it needs a public origin rather than composing with a private VM.
- reliability: Bedrock traffic on the paid tier needs both TCP and UDP open from NeoProtect's published IP list; the default 19132 allocation is manual.
- notes: The free shield is real and permanently free, but it is Java/TCP plus DNS, so it fails UDP test on the free tier. The Bedrock path does carry UDP 19132 and a WebRTC UDP port, on paid tiers.
- evidence note: The free-tier contents and the Bedrock gating are quoted from first-party pages. What the free shield's actual bandwidth allowance is would only come from the order flow behind a login.
- extras:
  - wg_path: none
  - wg_detail: No WireGuard offering, and the free tier publishes no UDP port to put one behind.
  - ingress: tcp
  - volume_stated: No byte figure is published for the free Basic shield: 'Plan limits and exact pricing are shown in the order process on our panel.'
  - bytes_transit: yes
  - transit_note: NeoProtect's GameShield edge proxies the game traffic
- evidence:
  - [1] 2026-10-23: The Basic free plan is '1 GameShield, Minecraft Java'; 'Bedrock / Geyser protection' appears only under the plan-based tier, and voice proxies only under Enterprise
  - [2] 2026-10-23: Protecting Bedrock players requires a paid plan, and the default 19132 port requires at least the Neo plan; 19132 UDP is RakNet and 19132 TCP is NetherNet
  - [1] 2026-10-23: Plan limits and exact pricing are shown in the order process on the panel
- sources:
  - [1] https://neoprotect.net/gameshield
  - [2] https://docs.neoprotect.net/gameshield/bedrock/