Apply suggestions from code review

Co-authored-by: chris <github@onechris.mozmail.com>

blog/2024-05-05-raknet-amplification-attack.md

@@ -224,12 +224,12 @@ Geyser initially rolled out a fix that forced these defaults, but has since been
 These defaults may present an issue to those running a reverse proxy in front of their Geyser instance, particularly those utilizing DDoS mitigation services like TCPShield and CosmicGuard, as to Network it will appear that all connections are originating from the same IP. To make configuration on these services easier, Geyser will disable these rate limits provided proxy protocol is enabled for the bedrock connection, and the Geyser instance is properly configured to only accept connections from the IPs of the proxy. To simplify this configuration, Geyser’s config can now accept a URL to specify proxy server IP ranges. Many DDoS mitigation providers have a static link to an always up to date text file of these.
 
 ```yaml
-bedrock:
+advanced.bedrock:
 # ...
-  enable-proxy-protocol: true
-  proxy-protocol-whitelisted-ips: [ "https://cosmic.global/ips/", "https://tcpshield.com/v4/" ]
+  use-haproxy-protocol: true
+  haproxy-protocol-whitelisted-ips: [ "https://cosmic.global/ips/", "https://tcpshield.com/v4/" ]
 ```
-*Geyser configuration using a URL pointing a new-line separated text file containing allowed IPs for proxy-protocol usage.*
+*Geyser configuration using a URL pointing a new-line separated text file containing allowed IPs for haproxy-protocol usage.*
 
 
 ## Long Term Impact

blog/2025-11-30-early-packet-handling-attack.md

@@ -0,0 +1,472 @@
+---
+title: "Bedrock Early Packet Handling DoS Attack Summary and Response"
+slug: "early-packet-handling-attack"
+authors: Kas-tle
+hide_table_of_contents: false
+description: "A summary of how we addressed a series of exploits targeting Geyser's early handling of Bedrock game packets"
+---
+
+Back in July, we received reports of multiple Geyser instances experiencing targeted Denial of Service (DoS) attacks exhibiting similar characteristics. Out of an abundance of caution, we delayed making this post to ensure that users had adequate time to upgrade. The bugs that allowed for this string of attacks were patched on Geyser builds numbered 897 and later. In the unlikely event you are still running an outdated build of Geyser from many months ago, you should update immediately by downloading the latest build from [https://geysermc.org/download](https://geysermc.org/download). The original [security advisory](https://github.com/GeyserMC/Geyser/security/advisories/GHSA-m2q6-2hwr-643w) for this vulnerability was published on the [GeyserMC/Geyser](https://github.com/GeyserMC/Geyser) repository. This response will detail the timeline, attack vectors, how they were patched, and additional measures we took to prevent future attacks.
+
+<!-- truncate -->
+
+## Timeline (UTC)
+
+- **July 29th, 9:40PM:** Server being attacked privately reports the issue to Geyser and shares logs  
+- **July 29th, 11:45PM:** Preemptive patch is released to limit the number of authenticated connections per address  
+- **July 30th, 5:36PM:** Large servers continue to report attacks with newer builds of Geyser  
+- **July 30th, 6:20PM:** A server being attacked provides us with packet logs, illustrating what Bedrock packets malicious clients are using to carry out the attack  
+- **July 30th, 6:52PM:** Second patch is released to ensure the Bedrock client can only signal complete of resource pack sending once per session  
+- **July 30th, 7:45PM:** Issue regarding connections failing to close out is reported to upstream Bedrock protocol library  
+- **July 30th, 9:35PM:** Upstream Bedrock protocol library publishes patch to ensure connections are properly closed when Bedrock users are disconnected  
+- **July 30th, 10:45PM:** Third patch is released updating the upstream Bedrock protocol library and ensuring Bedrock connections that cause exceptions are closed immediately  
+- **July 31st, 11:24PM:** An @everyone ping is made in the Geyser Discord advising users to update their Geyser instances, and the initial security advisory is published to GitHub.
+
+## Initial Disclosure
+
+Use of this attack was first privately reported to us by multiple larger servers using Geyser. We were provided server logs showing a single user appearing to be authenticated multiple times. The logs generally took a form of:
+
+```log
+[17:26:09.183 GeyserServerChild-4-1/INFO] Player connected with username BedrockPleyer
+[17:26:09.183 GeyserServerChild-4-1/INFO] Player connected with username BedrockPleyer
+[17:26:09.183 GeyserServerChild-4-1/INFO] Player connected with username BedrockPleyer
+[17:26:09.183 GeyserServerChild-4-1/ERROR] BedrockPleyer is already logged in!
+[17:26:09.183 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[17:26:09.183 clientNetworkSession-6-3/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[17:26:09.183 clientNetworkSession-6-1/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[17:26:09.183 clientNetworkSession-6-2/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[17:26:09.184 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[17:26:09.184 clientNetworkSession-6-4/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[17:26:09.184 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[17:26:09.184 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[17:26:09.184 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[17:26:09.184 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[17:26:09.184 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[17:26:09.184 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[17:26:09.185 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[17:26:09.185 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+```
+
+Based on the content of these logs, we initially suspected that packets in the early phase of the Bedrock connection were being exploited. However, we were not yet sure of what specific packets the attacker was sending. Based on these logs, we released a preemptive patch to ensure that the number of authenticated users from a single IP address at any given time was limited. This alone, however, would prove to be insufficient to mitigate the attack.
+
+## Game Packet and Code Analysis of the First Attack Vector
+
+Understanding this attack requires a basic understanding of the general Bedrock login process. This is detailed below:
+
+![chart_04 Bedrock Login Process](/img/blog/2025-11-30-early-packet-handling-attack/chart_04.svg#gh-light-mode-only)![chart_04 Bedrock Login Process](/img/blog/2025-11-30-early-packet-handling-attack/chart_04_dark.svg#gh-dark-mode-only)
+
+In order to fully mitigate this attack, we required packet capture samples from a server being actively exploited. This is somewhat challenging to achieve, as traffic at the Bedrock protocol level is generally encrypted after the player has logged into the server. As a result, a modified build of Geyser is required to capture this traffic. We were fortunate to have the cooperation of a server being targeted with this attack, who installed a build of Geyser we provided to log packets. This was the resulting log, with IP addresses and usernames redacted:
+
+```log
+[18:16:37.767 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ClientToServerHandshakePacket
+[18:16:37.795 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.808 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.808 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.809 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.809 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.809 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.809 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.810 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.810 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.810 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.810 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.810 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.810 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.811 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.811 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.811 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.811 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.811 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.811 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.812 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.812 GeyserServerChild-4-1/INFO] null /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.820 clientNetworkSession-6-2/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[18:16:37.820 clientNetworkSession-6-1/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[18:16:37.820 clientNetworkSession-6-4/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[18:16:37.820 clientNetworkSession-6-3/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[18:16:37.848 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.849 GeyserServerChild-4-1/INFO] BedrockPlayer /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.849 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[18:16:37.849 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.849 GeyserServerChild-4-1/INFO] BedrockPlayer /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.850 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[18:16:37.850 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+[18:16:37.850 GeyserServerChild-4-1/INFO] BedrockPlayer /XXX.XXX.XXX.XXX ResourcePackClientResponsePacket(packIds=[], status=COMPLETED)
+[18:16:37.850 GeyserServerChild-4-1/ERROR] BedrockPlayer is already logged in!
+[18:16:37.850 GeyserServerChild-4-1/INFO] Player connected with username BedrockPlayer
+```
+
+The above log clearly indicates that the packet being exploited is the [ResourcePackClientResponsePacket](https://mojang.github.io/bedrock-protocol-docs/html/ResourcePackClientResponsePacket.html). This leads to code paths in Geyser being called multiple times a way that is not intended, ultimately leading to increased resource consumption. We can essentially summarize the attack as follows:
+
+![chart_02 Attack Summary](/img/blog/2025-11-30-early-packet-handling-attack/chart_02.svg#gh-light-mode-only)![chart_02 Attack Summary](/img/blog/2025-11-30-early-packet-handling-attack/chart_02_dark.svg#gh-dark-mode-only)
+
+The initial response to the ResourcePackClientResponsePacket is handled by `UpstreamPacketHandler`:
+
+```java
+package org.geysermc.geyser.network;
+// ...
+public class UpstreamPacketHandler extends LoggingPacketHandler {
+    // ...
+    public PacketSignal handle(ResourcePackClientResponsePacket packet) {
+        // ...
+        switch (packet.getStatus()) {
+            case COMPLETED -> {
+                if (geyser.getConfig().getRemote().authType() != AuthType.ONLINE) {
+                    session.authenticate(session.getAuthData().name());
+                } else if (!couldLoginUserByName(session.getAuthData().name())) {
+                    // We must spawn the white world
+                    session.connect();
+                }
+                geyser.getLogger().info(GeyserLocale.getLocaleStringLog("geyser.network.connect", session.getAuthData().name()));
+            }
+            // ...
+        }
+        return PacketSignal.HANDLED;
+    }
+    // ...
+}
+```
+
+We see in the code above that this will lead to the invocation of `GeyserSession#authenticate` for most connections, as most Geyser instances use `AuthType.FLOODGATE`:
+
+```java
+package org.geysermc.geyser.session;
+// ...
+public class GeyserSession implements GeyserConnection, GeyserCommandSource {
+    // ...
+    public void authenticate(String username) {
+        if (loggedIn) {
+            geyser.getLogger().severe(GeyserLocale.getLocaleStringLog("geyser.auth.already_loggedin", username));
+            return;
+        }
+
+        loggingIn = true;
+        // Always replace spaces with underscores to avoid illegal nicknames, e.g. with GeyserConnect
+        protocol = new MinecraftProtocol(username.replace(' ', '_'));
+
+        try {
+            connectDownstream();
+        } catch (Throwable t) {
+            t.printStackTrace();
+        }
+    }
+    // ...
+}
+```
+
+This leads to the calling of `GeyserSession#connectDownstream`, which triggers a variety of logic to open a connection to the Java server:
+
+```java
+package org.geysermc.geyser.session;
+// ...
+public class GeyserSession implements GeyserConnection, GeyserCommandSource {
+    // ...
+    private void connectDownstream() {
+        SessionLoginEvent loginEvent = new SessionLoginEvent(this, remoteServer, new Object2ObjectOpenHashMap<>());
+        GeyserImpl.getInstance().eventBus().fire(loginEvent);
+        if (loginEvent.isCancelled()) {
+            String disconnectReason = loginEvent.disconnectReason() == null ?
+                BedrockDisconnectReasons.DISCONNECTED : loginEvent.disconnectReason();
+            disconnect(disconnectReason);
+            return;
+        }
+
+        this.cookies = loginEvent.cookies();
+        // Don't allow changing the remote server when it's not up to us
+        // Just imagine the chaos of using an integrated world manager for an external server :)
+        this.remoteServer = this.geyser.platformType() == PlatformType.STANDALONE ? loginEvent.remoteServer() : remoteServer;
+
+        // Start ticking
+        tickThread = tickEventLoop.scheduleAtFixedRate(this::tick, nanosecondsPerTick, nanosecondsPerTick, TimeUnit.NANOSECONDS);
+
+        ClientSession downstream;
+        if (geyser.getBootstrap().getSocketAddress() != null) {
+            // We're going to connect through the JVM and not through TCP
+            downstream = new LocalSession(geyser.getBootstrap().getSocketAddress(),
+                upstream.getAddress().getAddress().getHostAddress(),
+                this.protocol, this.tickEventLoop);
+            downstream.setFlag(MinecraftConstants.CLIENT_HOST, this.remoteServer.address());
+            downstream.setFlag(MinecraftConstants.CLIENT_PORT, this.remoteServer.port());
+            this.downstream = new DownstreamSession(downstream);
+        } else {
+            downstream = new ClientNetworkSession(new InetSocketAddress(this.remoteServer.address(), this.remoteServer.port()), this.protocol, tickEventLoop, null, null);
+            this.downstream = new DownstreamSession(downstream);
+
+            boolean resolveSrv = false;
+            try {
+                resolveSrv = this.remoteServer.resolveSrv();
+            } catch (AbstractMethodError | NoSuchMethodError ignored) {
+                // Ignore if the method doesn't exist
+                // This will happen with extensions using old APIs
+            }
+            this.downstream.getSession().setFlag(BuiltinFlags.ATTEMPT_SRV_RESOLVE, resolveSrv);
+        }
+
+        // Disable automatic creation of a new TcpClientSession when transferring - we don't use that functionality.
+        this.downstream.getSession().setFlag(MinecraftConstants.FOLLOW_TRANSFERS, false);
+
+        if (geyser.getConfig().getRemote().isUseProxyProtocol()) {
+            downstream.setFlag(BuiltinFlags.CLIENT_PROXIED_ADDRESS, upstream.getAddress());
+        }
+        if (geyser.getConfig().isForwardPlayerPing()) {
+            // Let Geyser handle sending the keep alive
+            downstream.setFlag(MinecraftConstants.AUTOMATIC_KEEP_ALIVE_MANAGEMENT, false);
+        }
+        // We'll handle this since we have the registry data on hand
+        downstream.setFlag(MinecraftConstants.SEND_BLANK_KNOWN_PACKS_RESPONSE, false);
+
+        // We manually add the default listener to ensure the order of listeners.
+        protocol.setUseDefaultListeners(false);
+
+        // MCPL listener comes first to handle protocol state switching before Geyser translates packets
+        downstream.addListener(new ClientListener(HandshakeIntent.LOGIN));
+        // Geyser adapter second to ensure translating packets in the correct states
+        downstream.addListener(new GeyserSessionAdapter(this));
+
+        downstream.setFlag(BuiltinFlags.CLIENT_TRANSFERRING, loginEvent.transferring());
+        downstream.connect(false);
+
+        if (!daylightCycle) {
+            setDaylightCycle(true);
+        }
+    }
+    // ...
+}
+```
+
+Notably, this allows for multiple downstream sessions (representing Geyser's connection to the Java server per player) to be created for a single Bedrock session. This is not intended behavior, as it leads to significantly increased resource consumption. This is especially true on Geyser Standalone, which, as seen in the code above, must open a TCP session to the Java server. The window of time for an attacker to pull this off is relatively short, as once Geyser completes the Java login process on behalf of the Bedrock client, `GeyserSession.loggedIn` is set to true, preventing further calls to `GeyserSession#connectDownstream`. However, this is still enough time for an attacker to create numerous downstream sessions, leading to a DoS attack. We attempted to mitigate this by disconnecting clients that send multiple ResourcePackClientResponsePacket in a single session. The following class diagram summarizes this:
+
+![chart_05 Multiple Sessions Class Diagram](/img/blog/2025-11-30-early-packet-handling-attack/chart_05.svg#gh-light-mode-only)![chart_05 Multiple Sessions Class Diagram](/img/blog/2025-11-30-early-packet-handling-attack/chart_05_dark.svg#gh-dark-mode-only)
+
+## Code Analysis of the Second Attack Vector
+
+While we thought we had addressed the root issue and provided the affected users with a patch for testing, we quickly received logs that indicated otherwise:
+
+```log
+[18:54:29.235 GeyserServerChild-4-3/INFO] Player connected with username BedrockPlayer
+[18:54:29.237 clientNetworkSession-6-2/INFO] BedrockPlayer (logged in as: BedrockPlayer) has connected to remote java server on address 127.0.0.1
+[18:54:49.257 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:54:49.259 GeyserServerChild-4-3/INFO] BedrockPlayer has disconnected from remote Java server on address 127.0.0.1 because of An internal error occurred!
+[18:54:52.836 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:54:55.620 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:54:56.186 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:54:56.872 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:54:59.508 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:02.551 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:03.025 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:03.619 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:04.254 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:04.922 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:05.435 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:07.662 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:08.139 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:08.650 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:11.066 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:13.498 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:14.023 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:14.466 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:15.057 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:15.712 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:16.211 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:18.431 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:18.966 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:19.443 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:21.599 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:23.904 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:24.409 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:24.971 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:25.539 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+[18:55:26.225 GeyserServerChild-4-3/WARN] Exception caught in session of BedrockPlayer: index: 13, length: 25710 (expected: range(0, 27))
+```
+
+These exceptions are thrown by Geyser's InvalidPacketHandler, which is designed to quickly disconnect players that send malformed packets or packets that exceed the expected size limits. This is a security measure to prevent potential exploits or crashes caused by invalid data.
+
+```java
+package org.geysermc.geyser.network;
+// ...
+public class InvalidPacketHandler extends ChannelInboundHandlerAdapter {
+    public static final String NAME = "rak-error-handler";
+
+    private final GeyserSession session;
+
+    @Override
+    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+        Throwable rootCause = Stream.iterate(cause, Throwable::getCause)
+                .filter(element -> element.getCause() == null)
+                .findFirst()
+                .orElse(cause);
+
+        GeyserLogger logger = GeyserImpl.getInstance().getLogger();
+
+        if (!(rootCause instanceof IllegalArgumentException)) {
+            // Kick users that cause exceptions
+            logger.warning("Exception caught in session of " + session.bedrockUsername() + ": " + rootCause.getMessage());
+            session.disconnect("An internal error occurred!");
+            return;
+        }
+
+        // Kick users that try to send illegal packets
+        logger.warning("Illegal packet from " + session.bedrockUsername() + ": " + rootCause.getMessage());
+        if (logger.isDebug()) {
+            cause.printStackTrace();
+        }
+        session.disconnect("Invalid packet received!");
+    }
+}
+```
+
+This makes the aforementioned logs of particular concern, as it should not be possible for any exceptions to be triggered from this handler multiple times. The first exception should be logged and trigger an immediate disconnect, preventing further exceptions from being thrown. Despite this, the log clearly indicates that multiple exceptions are being thrown in quick succession, suggesting that the disconnect is not being handled as intended. This is summarized below:
+
+![chart_03 Exception Handler](/img/blog/2025-11-30-early-packet-handling-attack/chart_03.svg#gh-light-mode-only)![chart_03 Exception Handler](/img/blog/2025-11-30-early-packet-handling-attack/chart_03_dark.svg#gh-dark-mode-only)
+
+We first followed the chain of `GeyserSession#disconnect`. This invokes Geyser's `UpstreamSession#disconnect`, which contains `BedrockServerSession` and invokes `BedrockServerSession#disconnect`. Beyond this, the disconnect logic is handled by the upstream Bedrock protocol library used by Geyser, [CloudburstMC/Protocol](https://github.com/CloudburstMC/Protocol). The overall logic is summarized below:
+
+![chart_01 GeyserSession Disconnect Chain](/img/blog/2025-11-30-early-packet-handling-attack/chart_01.svg#gh-light-mode-only)![chart_01 GeyserSession Disconnect Chain](/img/blog/2025-11-30-early-packet-handling-attack/chart_01_dark.svg#gh-dark-mode-only)
+
+Upon further investigation, we found that the Bedrock protocol library did not actually close the underlying Netty channel when a disconnect was triggered: 
+
+```java
+package org.cloudburstmc.protocol.bedrock;
+// ...
+public class BedrockServerSession extends BedrockSession {
+    // ...
+    public void disconnect(@Nullable String reason, boolean hideReason) {
+        this.checkForClosed();
+
+        DisconnectPacket packet = new DisconnectPacket();
+        if (reason == null || hideReason) {
+            packet.setMessageSkipped(true);
+            reason = BedrockDisconnectReasons.DISCONNECTED;
+        }
+        packet.setKickMessage(reason);
+        this.sendPacketImmediately(packet);
+    }
+}
+```
+
+This allows an attacker that should have been disconnected to continue to send malicous packets that lead to expensive deserialization logic. The result is another potential denial of service (DoS) attack vector.
+
+## Patch and Mitigation
+
+We mitigated the first attack vector by ensuring that the Bedrock client can only signal completion of resource pack sending once per session. This was done by modifying the `UpstreamPacketHandler` to check if the `finishedResourcePackSending` flag is already set before proceeding with authentication logic:
+
+```java
+package org.geysermc.geyser.network;
+// ...
+public class UpstreamPacketHandler extends LoggingPacketHandler {
+    // ...
+    public PacketSignal handle(ResourcePackClientResponsePacket packet) {
+        // ...
+        // highlight-start
+        if (finishedResourcePackSending) {
+            session.disconnect("Illegal duplicate resource pack response packet received!");
+            return PacketSignal.HANDLED;
+        }
+        // highlight-end
+        // ...
+        switch (packet.getStatus()) {
+            case COMPLETED -> {
+                // highlight-start
+                finishedResourcePackSending = true;
+                // highlight-end
+                if (geyser.getConfig().getRemote().authType() != AuthType.ONLINE) {
+                    session.authenticate(session.getAuthData().name());
+                } else if (!couldLoginUserByName(session.getAuthData().name())) {
+                    // We must spawn the white world
+                    session.connect();
+                }
+                geyser.getLogger().info(GeyserLocale.getLocaleStringLog("geyser.network.connect", session.getAuthData().name()));
+            }
+            // ...
+        }
+        return PacketSignal.HANDLED;
+    }
+    // ...
+}
+```
+
+This ensures that any further attempts to send a `ResourcePackClientResponsePacket` after the first one will result in an immediate disconnect, preventing the creation of multiple downstream sessions.
+
+The second attack vector was mitigated by ensuring that the disconnect logic in the Bedrock protocol library properly closes the underlying Netty channel. This was achieved by modifying the `BedrockServerSession#disconnect` method to schedule a task that closes the session after a timeout, ensuring that the channel is closed after the disconnect packet is sent. Packet serialzation is also stopped immediately for disconnected clients:
+
+```java
+package org.cloudburstmc.protocol.bedrock;
+// ...
+public class BedrockServerSession extends BedrockSession {
+    private static final int TIMEOUT_SECONDS = SystemPropertyUtil.getInt("org.cloudburstmc.protocol.bedrock.disconnectTimeout", 10);
+    // ...
+    public void disconnect(@Nullable String reason, boolean hideReason) {
+        this.checkForClosed();
+
+        DisconnectPacket packet = new DisconnectPacket();
+        String finalReason;
+        if (reason == null || hideReason) {
+            packet.setMessageSkipped(true);
+            finalReason = BedrockDisconnectReasons.DISCONNECTED;
+        } else {
+            finalReason = reason;
+        }
+        packet.setKickMessage(finalReason);
+        this.sendPacketImmediately(packet);
+        
+        // highlight-start
+        if (!this.isSubClient()) {
+            this.getPeer().blackholeInboundPackets();
+        }
+
+        this.getPeer().channel.eventLoop().schedule(() -> {
+            if (this.isConnected()) {
+                this.close(finalReason);
+            }
+        }, TIMEOUT_SECONDS, TimeUnit.SECONDS);
+        // highlight-end
+    }
+}
+```
+
+Logic was also added to Geyser's `InvalidPacketHandler` to ensure that invalid packets result in an immediate closing of the underlying Netty channel:
+
+```java
+package org.geysermc.geyser.network;
+// ...
+public class InvalidPacketHandler extends ChannelInboundHandlerAdapter {
+    public static final String NAME = "rak-error-handler";
+
+    private final GeyserSession session;
+
+    @Override
+    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+        Throwable rootCause = Stream.iterate(cause, Throwable::getCause)
+                .filter(element -> element.getCause() == null)
+                .findFirst()
+                .orElse(cause);
+
+        GeyserLogger logger = GeyserImpl.getInstance().getLogger();
+
+        if (!(rootCause instanceof IllegalArgumentException)) {
+            // Kick users that cause exceptions
+            logger.error("Exception caught in session of " + session.bedrockUsername(), cause);
+            session.disconnect("An internal error occurred!");
+            // highlight-start
+            session.forciblyCloseUpstream();
+            // highlight-end
+            return;
+        }
+
+        // Kick users that try to send illegal packets
+        logger.error("Illegal packet from " + session.bedrockUsername(), cause);
+        session.disconnect("Invalid packet received!");
+        // highlight-start
+        session.forciblyCloseUpstream();
+        // highlight-end
+    }
+}
+```
+
+## Long Term Impact
+
+All users of Geyser running outdated builds should update as soon as possible to ensure they are not vulnerable to the attacks described in this post. During the process of investigating this attack, we were made aware of multiple servers being exploited, meaning this is being exploited in the wild. Unlike the previous RakNet amplification attack, this attack is limited in scope to the selected Geyser instance. We expect the number of unpatched instances to decrease over time as Bedrock updates require server owners to update their Geyser instances. As of November 2025, we have not received any recent reports of Geyser instances being targeted by this attack vector, indicating that most instances have been patched. 
+
+## Acknowledgements
+
+We thank the community for their patience as we addressed this issue, the server owners who responsibly disclosed this issue to us, the developers at Cloudburst and Geyser that worked to mitigate the issue, all donors for their financial support of Geyser, and Cubecraft and Open Collaboration for their continued financial and operational support of the project.

docusaurus.config.ts

@@ -134,11 +134,6 @@ const config: Config = {
                     className: 'header-utilities-link',
                     position: 'left',
                     items: [
-                        {
-
-                            to: 'utilities/config-editor',
-                            label: 'Config Editor',
-                        },
                         {
 
                             to: 'utilities/dump-viewer',
@@ -152,12 +147,12 @@ const config: Config = {
                     position: 'left',
                     className: 'header-download-link'
                 },
-                {
+                { // Name on mobile sidebar specified in custom.scss
                     href: 'https://github.com/GeyserMC/Geyser',
                     position: 'right',
                     className: 'header-github-link'
                 },
-                {
+                { // Name on mobile sidebar specified in custom.scss
                     href: 'https://discord.gg/geysermc',
                     position: 'right',
                     className: 'header-discord-link'
@@ -175,6 +170,7 @@ const config: Config = {
                 href: '/',
                 width: 430,
             },
+            copyright: `Copyright © ${new Date().getFullYear()} GeyserMC. Built with Docusaurus.<br>This website is not an official Minecraft website and is not associated with Mojang Studios or Microsoft. All product and company names are trademarks or registered trademarks of their respective holders. Use of these names does not imply any affiliation or endorsement by them.`,
             links: [
                 {
                     title: 'Wiki',
@@ -193,7 +189,7 @@ const config: Config = {
                         },
                         {
                             label: 'Other',
-                            to: 'wiki/other/geyseroptionalpack',
+                            to: 'wiki/other/geyserintegratedpack',
                         },
                     ],
                 },

i18n/en/code.json

@@ -9,13 +9,13 @@
     "message": "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), and connect with the Java IP and port."
   },
   "providers.templates.ip_and_port": {
-    "message": "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), uncomment `bedrock address`, and change `0.0.0.0` to your Java server's IP. Connect with the Java IP and port."
+    "message": "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port) and change `bedrock address` from `0.0.0.0` to your Java server's IP. Connect with the Java IP and port."
   },
   "providers.templates.forwarding_option": {
     "message": "Offers a working port forwarding option."
   },
   "providers.templates.java_ip": {
-    "message": "Make sure your remote address is 'auto', uncomment `bedrock address`, and change `0.0.0.0` to your Java server's IP."
+    "message": "Change `bedrock address` from `0.0.0.0` to your Java server's IP."
   },
   "providers.provider.apex_hosting.description": {
     "message": "Full auto installation. Go to the Customizations tab in the panel and select 'Enabled' under the 'Geyser Auto Installer' option. Then, restart and connect to your server with your Java IP and port. See [Apex's article](https://apexminecrafthosting.com/geysermc/) for more details."
@@ -53,11 +53,14 @@
   "providers.provider.minehut.description": {
     "message": "Connect via `bedrock.minehut.com` and do `/join [servername]`, or connect directly via `[servername].bedrock.minehut.gg`."
   },
+  "providers.provider.omgserv.description": {
+    "message": "Select Geyser in the [Install Menu](https://i.imgur.com/Gewpsrq.png), it will be automatically installed. You can enable floodgate in the [server properties on the dashboard](https://i.imgur.com/jg5mzNj.png)."
+  },
   "providers.provider.piglinhost.description": {
     "message": "Order from the [cross-platform servers page](https://piglinhost.com/minecraft-java-hosting.html). Alternatively, contact their support by creating a [support ticket](https://billing.piglinhost.com/submitticket.php?step=2&deptid=5) or via discord for installation and configuration help."
   },
-  "providers.provider.omgserv.description": {
-    "message": "Select Geyser in the [Install Menu](https://i.imgur.com/Gewpsrq.png), it will be automatically installed. You can enable floodgate in the [server properties on the dashboard](https://i.imgur.com/jg5mzNj.png)."
+  "providers.provider.playhosting.description": {
+    "message": "Tick the 'Enable Bedrock crossplay?' option when changing your server software to automatically install and configure Geyser + Floodgate. For more details, navigate to [help.play.hosting/minecraft/crossplay](https://help.play.hosting/minecraft/crossplay)."
   },
   "providers.provider.pufferfish_host.description": {
     "message": "Geyser is installed and configured on all servers by default."
@@ -65,6 +68,9 @@
   "providers.provider.server.pro.description": {
     "message": "Different instructions for different plans: On VPS, select Geyser in the [Service Type Menu](https://i.imgur.com/loSNmvu.png), Floodgate can be enabled on the dashboard configuration. For manual installation: Using a Premium or Free plan, use the same port as your Java server for the Bedrock port in the configuration file and connect that; for the Free plan, also enable the `clone-remote-port` option. If you are using a PRO or a VPS plan, you can use any port, which can be opened on the Firewall tab."
   },
+  "providers.provider.serverprism.description": {
+    "message": "Order a [Minecraft server](https://serverprism.com/minecraft-server-hosting) on any plugin-compatible runtime (Paper, Spigot, Purpur, etc.), then install Geyser from the panel's plugin installer. Connect with the same IP and port as your Java server."
+  },
   "providers.provider.snakecraft_hosting.description": {
     "message": "Select 'Paper + Geyser with Floodgate' under the Jar Type at checkout to install the Geyser plugin. Players will Connect with the same IP and port as you would on Java."
   },
@@ -75,7 +81,7 @@
     "message": "Find the plugin in the control panel under the 'VG Recommended' category and restart your server. IP and port are the same as Java."
   },
   "providers.provider.wisehosting.description": {
-    "message": "Both auto and manual installation available. Find the GeyserMC presets from the `Properties` tab in the Game Panel. There, click `Install` and restart your server. See [Crossplay FAQ](https://help.wisehosting.com/en/articles/13-how-to-install-geysermc-java-bedrock-crossplay-to-your-server) for additional details."
+    "message": "Both auto and manual installation available. Find the GeyserMC presets from the `Addons` tab in the Game Panel. There, click `Install` and restart your server. See [Crossplay FAQ](https://wisehosting.com/help/how-to-install-geysermc-to-your-minecraft-server) for additional details."
   },
   "providers.provider.zaphosting.description": {
     "message": "Find the plugin in the control panel and restart your server. IP and port are the same as Java."
@@ -87,10 +93,10 @@
     "message": "Need to open a support ticket to get a UDP port, then use that as the `bedrock port`."
   },
   "providers.provider.bisecthosting.description": {
-    "message": "You must have a plan with a dedicated IP. In Geyser's config, uncomment the `bedrock address` and set it to the public IP of your server (e.g. `address: 51.79.129.18`). Leave the port as `19132`. Under the home tab, select 'Enable UDP Network' and restart the server. See Bisect's [article](https://www.bisecthosting.com/clients/index.php?rp=/knowledgebase/193/How-to-install-Geyser-and-Floodgate-on-a-Minecraft-Java-server.html) for full instructions. If you still cannot connect after following these instructions, contact Bisect Support as they reportedly have UDP disabled on some nodes."
+    "message": "Go to the Network tab and copy an available port not in use by other mods. In Geyser's config, under the bedrock section, on the port: line, edit the value to the port you copied. See Bisect's [article](https://www.bisecthosting.com/clients/index.php?rp=/knowledgebase/193/How-to-install-Geyser-and-Floodgate-on-a-Minecraft-Java-server.html) for full instructions. If you still cannot connect after following these instructions, contact Bisect Support, as they reportedly have UDP disabled on some nodes."
   },
   "providers.provider.bloomhost.description": {
-    "message": "See [Bloom's documentation](https://docs.bloom.host/plugins/geysermc/) for setup instructions."
+    "message": "See [Bloom's documentation](https://docs.bloom.host/multiplatform/geysermc) for setup instructions."
   },
   "providers.provider.craft-hosting.description": {
     "message": "Set the Bedrock port to the Java server's port and connect with that port; note that this provider appears to only provide service in Russia."
@@ -108,7 +114,7 @@
     "message": "Set the `bedrock port` in the config to the Java server's port or use one of the available ports allocated to your server, and connect with that port."
   },
   "providers.provider.falixnodes.description": {
-    "message": "Open a port yourself on the network page in the game panel, then use that port in the bedrock section of the Geyser config."
+    "message": "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), and connect with the Java IP and port."
   },
   "providers.provider.ferox_hosting.description": {
     "message": "Open a port yourself in their panel and check out the [knowledgebase article](https://feroxhosting.nl/kb/) for how to install and configure Geyser."
@@ -137,6 +143,9 @@
   "providers.provider.humbleservers.description": {
     "message": "Set the Bedrock port to the Java server's port, or to one of the two extra ports, and connect with that port. If the subdomain doesn't work, use your regular numbered IP address."
   },
+  "providers.provider.kaashosting.description": {
+    "message": "Automatic and manual installation supported. Go to the `Plugin Installer` tab, search for Geyser and click `Install Automatically`. Connect with the Java IP and port. See [KaasHosting's article](https://www.kaashosting.nl/help/nl/minecraft/hoe-maak-ik-mijn-minecraft-server-crossplay-met-geysermc) for more details."
+  },
   "providers.provider.kekshost.description": {
     "message": "Use the default bedrock port (19132) and the server ip to connect on Bedrock edition. No changes to the Geyser config are needed. You can also ask for a new port and use it instead."
   },
@@ -153,7 +162,7 @@
     "message": "Install Geyser with the dedicated Plugin installer. Use the same port as your Java server in your config. Connect with the same address and port as your Java server."
   },
   "providers.provider.nfoservers.description": {
-    "message": "Uncomment and set `bedrock address` to the server IP in the Geyser config file. As an alternative, you can run Geyser standalone separately on an Unmanaged VDS."
+    "message": "Set `bedrock address` to the server IP in the Geyser config file. As an alternative, you can run Geyser standalone separately on an Unmanaged VDS."
   },
   "providers.provider.nitrado.description": {
     "message": "Get Geyser as a plugin. Add 4 to the Port of the Java server. See [here](https://wiki.nitrado.net/en/How_to_install_GeyserMC_and_Floodgate) for specific instructions."
@@ -161,6 +170,9 @@
   "providers.provider.nodecraft.description": {
     "message": "Use the default server port and `0.0.0.0` or your server IP as the host address."
   },
+  "providers.provider.nolimithost.description": {
+    "message": "Check [NolimitHost's documentation](https://nolimithost.cc/docs/minecraft/geyser) for specific instructions."
+  },
   "providers.provider.pebblehost.description": {
     "message": "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), and connect with the Java IP and port. See [this video](https://youtu.be/v9lC80UBZF4) for a PebbleHost-specific tutorial."
   },
@@ -195,7 +207,7 @@
     "message": "Set the Bedrock port to the Java server's port and connect with that port. Alternatively, request an additional port, or buy a dedicated IP address."
   },
   "providers.provider.witherhosting.description": {
-    "message": "Either use the Java server's port, or create a port in the ports manager on the panel and use that for Bedrock. Refer to the hosts [support article](https://support.witherhosting.com/en/article/how-to-install-and-use-geysermc-1xn5l6v/) for further info."
+    "message": "Either use the Java server's port, or create a port in the ports manager on the panel and use that for Bedrock. Refer to the hosts [support article](https://my.witherhosting.com/kb/how-to-install-and-use-geysermc-java) for further info."
   },
   "providers.provider.myarena.description": {
     "message": "Does seem to be working, but the Java version is too old in order for Geyser to run properly."
@@ -206,20 +218,41 @@
   "providers.provider.feather.description": {
     "message": "Their proxy network does not support UDP. Therefore, Geyser is not supported. As an alternative, set up a paper server with e.g. playit.gg instead of port forwarding."
   },
+  "providers.provider.freemcserver_net.description": {
+    "message": "Install Geyser from the Plugins tab, then connect to your server using your Java IP and port."
+  },
+  "providers.provider.ultraservers.description": {
+    "message": "Select 'Paper + Geyser' under the Change version tab. You can connect to your server using the same IP and port as you would on Java. Existing servers can use the Plugins/Minecraft mods tab to install Geyser. See [Crossplay](https://docs.ultraservers.com/minecraft/plugins-mods/crossplay-on-java-and-bedrock) for more information."
+  },
+  "providers.provider.bedrockhost.description": {
+    "message": "Easiest solution is: Go to hosting panel > install new engine > Ready-made solutions and select Geyser. This will install Paper & Geyser-Spigot - no setup needed, just connect with your Java IP and port. See [BedrockHost's article](https://bedrockhost.pl/w/geyser-czyli-serwer-minecraft-java-i-bedrock-w-jednym) for more details or for custom setup instructions (available in Polish)."
+  },
+  "providers.provider.simplegamehosting.description": {
+    "message": "Contact live chat support to open a port and check out the [help center guide](https://help.simplegamehosting.com/how-to-enable-crossplay-with-geyser-on-your-minecraft-server/) for how to install and configure Geyser on your server."
+  },
+  "providers.provider.axenthost.description": {
+    "message": "For a quick installation, navigate to your server Variants tab and select GeyserMC. The server will be automatically reinstalled with Geyser-Spigot alongside a Paper server. For a manual install using any other variant such as Paper, you will need to upload the GeyserMC jar to your server and set the the clone-remote-port option to true. See AxentHost's [guide](https://axenthost.com/knowledgebase/categories/minecraft/create-a-crossplay-server-with-geyser/) to see all the steps."
+  },
   "pages.main.title": {
     "message": "Revolutionize Your Minecraft Server"
   },
   "pages.main.subtitle": {
     "message": "Enable clients from Minecraft Bedrock Edition to join your Minecraft Java server"
   },
-  "components.homepage_features.1": {
-    "message": "Geyser is a program that allows Minecraft: Bedrock Edition clients to join Minecraft: Java Edition servers, allowing for true crossplay between both editions of the game. The ultimate goal of this project is to allow Minecraft: Bedrock Edition users to join Minecraft: Java Edition servers as seamlessly as possible."
+  "components.homepage_features.1.line1": {
+    "message": "Geyser is a program that allows Minecraft: Bedrock Edition clients to join Minecraft: Java Edition servers, allowing for true crossplay between both editions of the game."
   },
-  "components.homepage_features.features.2": {
+  "components.homepage_features.1.line2": {
+    "message": "The ultimate goal of this project is to allow Minecraft: Bedrock Edition users to join Minecraft: Java Edition servers as seamlessly as possible."
+  },
+  "components.homepage_features.2": {
     "message": "Geyser acts as a translator which sits between the Bedrock client and the Java server. It takes data from the Bedrock client and translates it into a format the Java server understands and vice versa. Geyser works with any modern Minecraft version and can be installed either as a plugin or ran as a standalone program."
   },
-  "components.homepage_features.features.3": {
-    "message": "Geyser can be joined from Bedrock clients on Windows 10/11, iOS, Android, and even consoles. Geyser works with a wide array of hosting providers, but can also be used as its own standalone proxy to join any Minecraft server! If you are a server owner, you can install our Floodgate plugin which allows Xbox Live authenticated Bedrock users to join without a Java Edition account!"
+  "components.homepage_features.3.line1": {
+    "message": "Geyser can be joined from Bedrock clients on Windows 10/11, iOS, Android, and even consoles. Geyser works with a wide array of hosting providers, but can also be used as its own standalone proxy to join any Minecraft server!"
+  },
+  "components.homepage_features.3.line2": {
+    "message": "If you are a server owner, you can install our Floodgate plugin which allows Xbox Live authenticated Bedrock users to join without a Java Edition account!"
   },
   "pages.download.title": {
     "message": "Download"
@@ -236,32 +269,11 @@
   "pages.download.description.geyserconnect": {
     "message": "A plugin to allow for Geyser players to connect to your server without needing to use a proxy."
   },
-  "pages.download.description.geyseroptionalpack": {
-    "message": "An optional Bedrock resource pack to extend Geyser functionality."
-  },
   "pages.download.description.thirdpartycosmetics": {
     "message": "An extension that adds support for loading ears and other third party cosmetics on java players"
   },
-  "pages.configeditor.noconfigselected.heading": {
-    "message": "No config selected."
-  },
-  "pages.configeditor.noconfigselected.subheading": {
-    "message": "Upload a file or get started with the default config!"
-  },
-  "pages.configeditor.button.defaultconfig": {
-    "message": "Default"
-  },
-  "pages.configeditor.button.upload": {
-    "message": "Upload"
-  },
-  "pages.configeditor.button.export": {
-    "message": "Export"
-  },
-  "pages.configeditor.title": {
-    "message": "Config Editor"
-  },
-  "pages.configeditor.subheading": {
-    "message": "Edit your Geyser configuration."
+  "pages.download.description.emoteoffhand": {
+    "message": "An extension that allows Bedrock players to switch their offhand and mainhand item by emoting."
   },
   "pages.dumpviewer.title": {
     "message": "Dump Viewer"
@@ -811,5 +823,50 @@
   "theme.contentVisibility.draftBanner.message": {
     "message": "This page is a draft. It will only be visible in dev and be excluded from the production build.",
     "description": "The draft content banner message"
+  },
+  "providers.provider.arth_hosting.description": {
+    "message": "Geyser is installed and configured on all servers by default. You can disable it in the 'Manage Plugins' menu."
+  },
+  "providers.provider.mcserverhost.description": {
+    "message": "Under the server configuration, select 'Crossplay' to automatically install Geyser and Floodgate. Join with the connection address. To update Geyser and Floodgate, replace the plugin jars in the server manager and restart the server."
+  },
+  "providers.provider.vemox_hosting.description": {
+    "message": "Full automatic installation. Go to one of the panel options and select the option to enable GeyserMC. Then, restart and connect to your server using your Java IP and port."
+  },
+  "providers.provider.mcforfree.de.description": {
+    "message": "Create an extra port in the game panel, then change the `port` in the `bedrock` section to the newly created port. To connect on Bedrock edition, use the Java server's IP and the port you've created. It may take a few minutes for the port to become active."
+  },
+  "providers.provider.modrinth.description": {
+    "message": "Check [Modrinth's documentation](https://support.modrinth.com/en/articles/10986613-adding-geyser-to-your-server) for specific instructions."
+  },
+  "providers.provider.orionnodes.description": {
+    "message": "Open a port yourself from the network page in the game panel, use that port in the bedrock section of the Geyser config."
+  },
+  "providers.provider.papernodes.description": {
+    "message": "Enable clone-remote-port (or manually set the Bedrock port to the Java port), and connect with the Java IP and port. Alternatively, you can contact the host to request an additional port or a dedicated IP."
+  },
+  "providers.provider.wepwawet.description": {
+    "message": "Add a new port in the Network tab. Use this new port as the bedrock port."
+  },
+  "pages.download.description.offhandextension": {
+    "message": "An extension that allows Bedrock players to switch their offhand and mainhand item by emoting."
+  },
+  "pages.download.description.rainbow": {
+    "message": "A Minecraft mod to generate Geyser item mappings and bedrock resourcepacks for use with Geyser's custom item API (v2)."
+  },
+  "pages.download.description.hydraulic": {
+    "message": "A companion mod to Geyser which allows for Bedrock players to join modded Minecraft: Java Edition servers."
+  },
+  "pages.download.description.thunder": {
+    "message": "A java application to convert simple Java Edition resource packs to Bedrock Edition ones."
+  },
+  "pages.dumpviewer.extensions": {
+    "message": "Extensions"
+  },
+  "pages.dumpviewer.extensions.noextensions": {
+    "message": "No extensions to show."
+  },
+  "pages.dumpviewer.extensions.helptext": {
+    "message": "Click on an extension to view more information."
   }
 }

i18n/en/docusaurus-theme-classic/footer.json

@@ -1,8 +1,4 @@
 {
-  "copyright": {
-    "message": "Copyright © 2024 GeyserMC. Built with Docusaurus.",
-    "description": "The footer copyright"
-  },
   "link.title.Wiki": {
     "message": "Wiki",
     "description": "The title of the footer links column with title=Wiki in the footer"
@@ -70,5 +66,9 @@
   "logo.alt": {
     "message": "GeyserMC logo",
     "description": "The alt text of footer logo"
+  },
+  "copyright": {
+    "message": "Copyright © 2026 GeyserMC. Built with Docusaurus.<br>This website is not an official Minecraft website and is not associated with Mojang Studios or Microsoft. All product and company names are trademarks or registered trademarks of their respective holders. Use of these names does not imply any affiliation or endorsement by them.",
+    "description": "The footer copyright"
   }
 }

i18n/en/docusaurus-theme-classic/navbar.json

@@ -39,10 +39,6 @@
     "message": "Other",
     "description": "Navbar item with label Other"
   },
-  "item.label.Config Editor": {
-    "message": "Config Editor",
-    "description": "Navbar item with label Config Editor"
-  },
   "item.label.Dump Viewer": {
     "message": "Dump Viewer",
     "description": "Navbar item with label Dump Viewer"

sidebars.ts

@@ -68,10 +68,6 @@ const sidebars: SidebarsConfig = {
         {
             type: 'category',
             label: 'Configuring Geyser',
-            link: {
-                type: 'doc',
-                id: 'geyser/understanding-the-config',
-            },
             items: [
                 'geyser/commands',
                 'geyser/translations',
@@ -93,15 +89,18 @@ const sidebars: SidebarsConfig = {
         },
         {
             type: 'category',
-            label: 'Custom Resource Packs',
+            label: 'Custom Content',
             link: {
                 type: 'doc',
-                id: 'geyser/custom-resource-packs'
+                id: 'geyser/custom-content'
             },
             items: [
+                'geyser/packs',
                 'geyser/custom-items',
                 'geyser/custom-blocks',
                 'geyser/custom-skulls',
+                'geyser/custom-waypoints',
+                'geyser/custom-entities'
             ]
         },
         {
@@ -135,10 +134,12 @@ const sidebars: SidebarsConfig = {
         'other/index',
         'other/geyserconnect',
         'other/thirdpartycosmetics',
-        'other/geyseroptionalpack',
+        'other/geyserintegratedpack',
         'other/community-geyser-projects',
         'other/hurricane',
+        'other/rainbow',
         'other/hydraulic',
+        'other/thunder',
         'other/test-server',
         'other/developer-guide',
         'other/discord-bot-usage'

src/components/HomepageFeature/index.tsx

@@ -0,0 +1,25 @@
+import clsx from 'clsx';
+import { PropsWithChildren } from 'react';
+import styles from "./styles.module.scss";
+
+interface HomepageFeatureProps {
+    title: string;
+    image?: string;
+    flipped?: boolean;
+}
+
+export const HomepageFeature: React.FC<PropsWithChildren<HomepageFeatureProps>> = ({ title, image, flipped, children }) => {
+    return (
+        <div className={clsx(styles.feature, { [styles.flipped]: flipped })}>
+            <div className={clsx(styles.content, "text--left padding-horiz--md")}>
+                <h3 className={styles.title}>{title}</h3>
+                {children}
+            </div>
+            {image && (
+                <div>
+                    <img src={image} alt={title} />
+                </div>
+            )}
+        </div>
+    );
+}

src/components/HomepageFeature/styles.module.scss

@@ -0,0 +1,40 @@
+.feature {
+    display: grid;
+    grid-template-columns: 1fr 1fr;
+    gap: 10px;
+}
+
+.feature.flipped > *:first-child {
+    order: 2;
+}
+
+.feature.flipped > *:last-child {
+    order: 1;
+}
+
+.content {
+    margin-top: auto;
+    margin-bottom: auto;
+}
+
+.title {
+    font-size: 30px;
+}
+
+@media (max-width: 768px) {
+    .feature {
+        grid-template-columns: 1fr;
+    }
+
+    .feature > *:first-child {
+        order: 2;
+    }
+
+    .feature > *:last-child {
+        order: 1;
+    }
+
+    .title {
+        margin-top: 15px;
+    }
+}

src/components/HomepageFeatures/index.tsx

@@ -1,78 +0,0 @@
-import clsx from 'clsx';
-import Heading from '@theme/Heading';
-import styles from './styles.module.scss';
-import Crossplatform0Img from '@site/static/img/site/crossplatform_0.png';
-import Crossplatform1Img from '@site/static/img/site/crossplatform_1.png';
-import Crossplatform2Img from '@site/static/img/site/crossplatform_2.png';
-import Translate from '@docusaurus/Translate';
-
-type FeatureItem = {
-    title: string;
-    image?: string;
-    description: JSX.Element;
-    index?: number;
-};
-
-const FeatureList: FeatureItem[] = [
-    {
-        title: 'What is Geyser?',
-        image: Crossplatform2Img,
-        description: (
-            <>
-                <Translate id="components.homepage_features.1">Geyser is a program that allows Minecraft: Bedrock Edition clients to join Minecraft: Java Edition servers, allowing for true crossplay between both editions of the game. The ultimate goal of this project is to allow Minecraft: Bedrock Edition users to join Minecraft: Java Edition servers as seamlessly as possible.</Translate>
-            </>
-        ),
-    },
-    {
-        title: 'How does it work?',
-        image: Crossplatform1Img,
-        description: (
-            <>
-                <Translate id='components.homepage_features.features.2'>Geyser acts as a translator which sits between the Bedrock client and the Java server. It takes data from the Bedrock client and translates it into a format the Java server understands and vice versa. Geyser works with any modern Minecraft version and can be installed either as a plugin or ran as a standalone program.</Translate>
-            </>
-        ),
-    },
-    {
-        title: 'Join from anywhere',
-        image: Crossplatform0Img,
-        description: (
-            <>
-                <Translate id='components.homepage_features.features.3'>Geyser can be joined from Bedrock clients on Windows 10/11, iOS, Android, and even consoles. Geyser works with a wide array of hosting providers, but can also be used as its own standalone proxy to join any Minecraft server! If you are a server owner, you can install our Floodgate plugin which allows Xbox Live authenticated Bedrock users to join without a Java Edition account!</Translate>
-            </>
-        ),
-    },
-];
-
-function Feature({ title, image, description, index }: FeatureItem) {
-    const Content = () => (
-        <div className="text--left padding-horiz--md">
-            <Heading as="h3">{title}</Heading>
-            <p>{description}</p>
-        </div>
-    );
-    const Image = () => (
-        image &&
-        <div className="column text--left">
-            <img src={image} alt={title} />
-        </div>
-    );
-    return (
-        <div className={clsx('column')}>
-            {index % 2 === 0 ? <><Image /><Content /></> : <><Content /><Image /></>}
-        </div>
-    );
-}
-
-export default function HomepageFeatures(): JSX.Element {
-    return (
-        <section className={styles.features}>
-            <div className="container">
-                <div className="row">
-                    {FeatureList.map((props, idx) => (
-                        <Feature key={idx} {...props} index={idx} />
-                    ))}
-                </div>
-            </div>
-        </section>
-    );
-}

src/components/HomepageFeatures/styles.module.scss

@@ -1,11 +0,0 @@
-.features {
-    display: flex;
-    align-items: center;
-    padding: 2rem 0;
-    width: 100%;
-}
-
-.featureSvg {
-    height: 200px;
-    width: 200px;
-}

src/components/ProjectDownload.tsx

@@ -16,9 +16,10 @@ interface ProjectDownloadProps {
         [key: string]: { url: string, file: string };
     };
     gridColumns?: number;
+    warning?: React.ReactNode;
 }
 
-export const ProjectDownload: React.FC<ProjectDownloadProps> = ({ projectId, description, setup, downloadsInfo, additionalDownloads, gridColumns }) => {
+export const ProjectDownload: React.FC<ProjectDownloadProps> = ({ projectId, description, setup, downloadsInfo, additionalDownloads, gridColumns, warning }) => {
     const [platformInfo, setPlatformInfo] = useState<Downloads.Builds>({
         project_id: '',
         project_name: '',
@@ -79,6 +80,11 @@ export const ProjectDownload: React.FC<ProjectDownloadProps> = ({ projectId, des
                 <Column>
                     <h3>Build #{latestBuild.build} · {new Date(latestBuild.time).toLocaleDateString()}:</h3>
                     <Grid elementsPerRow={gridColumns || 2} gap="8px">
+                        { warning && 
+                            <div className='warning-box'>
+                                { warning }
+                            </div>
+                        }
                         { setup &&
                             <a href={setup} className='no-underline setup-button large-button'>
                                 <b><FontAwesomeIcon icon={faBook}/> Setup Instructions</b>

src/components/Provider.tsx

@@ -14,25 +14,37 @@ export const Provider = ({ type }) => {
     const hostingProviders: HostingProvider[] = providersData[type as ProviderType]
 
     return (
-        <div>
-            <ul>{hostingProviders.map((provider: HostingProvider) => (
-                <li>
-                    <a href={provider.url}>{provider.name}</a>
-                    {provider.description != null ? (
-                        <ReactMarkdown children={`&nbsp;&hyphen; ${provider.description}`} components={{ p: noP }} />
-                    ) : (
-                        ''
-                    )}
-                </li>
-            ))}</ul>
-        </div>
+        <table>
+            <thead>
+                <tr>
+                    <th>Provider</th>
+                    <th>Description</th>
+                </tr>
+            </thead>
+            <tbody>
+                {hostingProviders.map((provider: HostingProvider) => (
+                    <tr>
+                        <td>
+                            <a href={provider.url}>{provider.name}</a>
+                        </td>
+                        <td>
+                            {provider.description != null ? (
+                                <ReactMarkdown children={provider.description} components={{ p: noP }} />
+                            ) : (
+                                ''
+                            )}
+                        </td>
+                    </tr>
+                ))}
+            </tbody>
+        </table>
     )
 }
 
 export const ProviderSelector = () => {
     const providers: HostingProvider[] = [
         ...Object.values(providersData.built_in),
-        ...Object.values(providersData.support), 
+        ...Object.values(providersData.support),
         ...Object.values(providersData.no_support)
     ].flat().sort((a, b) => a.name.localeCompare(b.name));
 
@@ -43,7 +55,7 @@ export const ProviderSelector = () => {
             message: "If your hosting provider is not listed, try enabling the `clone-remote-port` option in the config. Then, restart the server, and try connecting with the same IP and port as on Java Edition. <br> If this does not work, ask your server hosting provider for a UDP port, and use that. For VPS/KVM servers please follow the self-hosting steps."
         })
     } as HostingProvider);
-    
+
 
     const [selectedProvider, setSelectedProvider] = useState(null);
 

src/css/custom.scss

@@ -16,6 +16,7 @@
     --ifm-color-primary-light: #33925d;
     --ifm-color-primary-lighter: #359962;
     --ifm-color-primary-lightest: #3cad6e;
+    --ifm-color-warning: #e4f126;
     --ifm-code-font-size: 95%;
     --ifm-footer-color: rgb(238, 249, 253);
     --ifm-footer-background-color: #303846;
@@ -74,6 +75,7 @@ html[data-theme='dark'] {
         display: inline-block;
         background-color: var(--ifm-navbar-link-color);
         mask-image: $url;
+        mask-repeat: no-repeat;
         transition: background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default);
     }
 
@@ -87,7 +89,11 @@ html[data-theme='dark'] {
 }
 
 .header-discord-link {
-    @include header-link(32px, 26px, url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><!--!Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free Copyright 2024 Fonticons, Inc.--><path d="M524.5 69.8a1.5 1.5 0 0 0 -.8-.7A485.1 485.1 0 0 0 404.1 32a1.8 1.8 0 0 0 -1.9 .9 337.5 337.5 0 0 0 -14.9 30.6 447.8 447.8 0 0 0 -134.4 0 309.5 309.5 0 0 0 -15.1-30.6 1.9 1.9 0 0 0 -1.9-.9A483.7 483.7 0 0 0 116.1 69.1a1.7 1.7 0 0 0 -.8 .7C39.1 183.7 18.2 294.7 28.4 404.4a2 2 0 0 0 .8 1.4A487.7 487.7 0 0 0 176 479.9a1.9 1.9 0 0 0 2.1-.7A348.2 348.2 0 0 0 208.1 430.4a1.9 1.9 0 0 0 -1-2.6 321.2 321.2 0 0 1 -45.9-21.9 1.9 1.9 0 0 1 -.2-3.1c3.1-2.3 6.2-4.7 9.1-7.1a1.8 1.8 0 0 1 1.9-.3c96.2 43.9 200.4 43.9 295.5 0a1.8 1.8 0 0 1 1.9 .2c2.9 2.4 6 4.9 9.1 7.2a1.9 1.9 0 0 1 -.2 3.1 301.4 301.4 0 0 1 -45.9 21.8 1.9 1.9 0 0 0 -1 2.6 391.1 391.1 0 0 0 30 48.8 1.9 1.9 0 0 0 2.1 .7A486 486 0 0 0 610.7 405.7a1.9 1.9 0 0 0 .8-1.4C623.7 277.6 590.9 167.5 524.5 69.8zM222.5 337.6c-29 0-52.8-26.6-52.8-59.2S193.1 219.1 222.5 219.1c29.7 0 53.3 26.8 52.8 59.2C275.3 311 251.9 337.6 222.5 337.6zm195.4 0c-29 0-52.8-26.6-52.8-59.2S388.4 219.1 417.9 219.1c29.7 0 53.3 26.8 52.8 59.2C470.7 311 447.5 337.6 417.9 337.6z"/></svg>'));
+    @include header-link(24px, 24px, url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><!--!Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free Copyright 2024 Fonticons, Inc.--><path d="M524.5 69.8a1.5 1.5 0 0 0 -.8-.7A485.1 485.1 0 0 0 404.1 32a1.8 1.8 0 0 0 -1.9 .9 337.5 337.5 0 0 0 -14.9 30.6 447.8 447.8 0 0 0 -134.4 0 309.5 309.5 0 0 0 -15.1-30.6 1.9 1.9 0 0 0 -1.9-.9A483.7 483.7 0 0 0 116.1 69.1a1.7 1.7 0 0 0 -.8 .7C39.1 183.7 18.2 294.7 28.4 404.4a2 2 0 0 0 .8 1.4A487.7 487.7 0 0 0 176 479.9a1.9 1.9 0 0 0 2.1-.7A348.2 348.2 0 0 0 208.1 430.4a1.9 1.9 0 0 0 -1-2.6 321.2 321.2 0 0 1 -45.9-21.9 1.9 1.9 0 0 1 -.2-3.1c3.1-2.3 6.2-4.7 9.1-7.1a1.8 1.8 0 0 1 1.9-.3c96.2 43.9 200.4 43.9 295.5 0a1.8 1.8 0 0 1 1.9 .2c2.9 2.4 6 4.9 9.1 7.2a1.9 1.9 0 0 1 -.2 3.1 301.4 301.4 0 0 1 -45.9 21.8 1.9 1.9 0 0 0 -1 2.6 391.1 391.1 0 0 0 30 48.8 1.9 1.9 0 0 0 2.1 .7A486 486 0 0 0 610.7 405.7a1.9 1.9 0 0 0 .8-1.4C623.7 277.6 590.9 167.5 524.5 69.8zM222.5 337.6c-29 0-52.8-26.6-52.8-59.2S193.1 219.1 222.5 219.1c29.7 0 53.3 26.8 52.8 59.2C275.3 311 251.9 337.6 222.5 337.6zm195.4 0c-29 0-52.8-26.6-52.8-59.2S388.4 219.1 417.9 219.1c29.7 0 53.3 26.8 52.8 59.2C470.7 311 447.5 337.6 417.9 337.6z"/></svg>'));
+
+    &::before { // Fixes the Discord icon being a little shorter than the others causing an offset
+        mask-position: 0 2px;
+    }
 }
 
 .header-utilities-link {
@@ -106,6 +112,16 @@ html[data-theme='dark'] {
     @include header-link(22px, 25px, url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--!Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free Copyright 2024 Fonticons, Inc.--><path d="M96 0C43 0 0 43 0 96V416c0 53 43 96 96 96H384h32c17.7 0 32-14.3 32-32s-14.3-32-32-32V384c17.7 0 32-14.3 32-32V32c0-17.7-14.3-32-32-32H384 96zm0 384H352v64H96c-17.7 0-32-14.3-32-32s14.3-32 32-32zm32-240c0-8.8 7.2-16 16-16H336c8.8 0 16 7.2 16 16s-7.2 16-16 16H144c-8.8 0-16-7.2-16-16zm16 48H336c8.8 0 16 7.2 16 16s-7.2 16-16 16H144c-8.8 0-16-7.2-16-16s7.2-16 16-16z"/></svg>'));
 }
 
+@media screen and (max-width: 996px) { // Magic numbers! This was the value which caused the site to go to mobile navigation
+    .header-discord-link::after {
+        content: 'Discord'
+    }
+
+    .header-github-link::after {
+        content: 'GitHub'
+    }
+}
+
 .api-method>.menu__link {
     align-items: center;
     justify-content: start;
@@ -158,6 +174,7 @@ html[data-theme='dark'] {
     align-items: center;
     width: 100%;
     position: relative;
+    cursor: pointer;
 
     h3 {
         margin: 0;
@@ -303,6 +320,16 @@ html[data-theme='dark'] {
     }
 }
 
+.warning-box {
+    width: 100%;
+    border-left: 3px solid var(--ifm-color-warning);
+    text-align: center;
+    font-size: 18px;
+    padding-top: 5px;
+    padding-bottom: 5px;
+    padding-left: 5px;
+}
+
 .tabs {
     flex-wrap: wrap;
     border-bottom-color: var(--ifm-horizontal-line-color);
@@ -344,4 +371,9 @@ html[data-theme='dark'] {
         border-radius: var(--ifm-global-radius);
         color: #fff
     }
+}
+
+[data-theme='light'] img[src$='#gh-dark-mode-only'],
+[data-theme='dark'] img[src$='#gh-light-mode-only'] {
+    display: none;
 }

src/data/providers.ts

@@ -10,7 +10,7 @@ const descriptionTemplates = {
     }),
     ipAndPort: translate({
         id: 'providers.templates.ip_and_port',
-        message: "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), uncomment `bedrock address`, and change `0.0.0.0` to your Java server's IP. Connect with the Java IP and port."
+        message: "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port) and change `bedrock address` from `0.0.0.0` to your Java server's IP. Connect with the Java IP and port."
     }),
     forwardingOption: translate({
         id: 'providers.templates.forwarding_option',
@@ -18,7 +18,7 @@ const descriptionTemplates = {
     }),
     javaIp: translate({
         id: 'providers.templates.java_ip',
-        message: "Make sure your remote address is 'auto', uncomment `bedrock address`, and change `0.0.0.0` to your Java server's IP."
+        message: "Change `bedrock address` from `0.0.0.0` to your Java server's IP."
     })
 }
 
@@ -49,7 +49,23 @@ export const providersData: Providers = {
             })
         },
         {
-            name: 'Cloud Nord',
+            name: 'AxentHost',
+            url: 'https://axenthost.com/games/minecraft/',
+            description: translate({
+                id: 'providers.provider.axenthost.description',
+                message: "For a quick installation, navigate to your server Variants tab and select GeyserMC. The server will be automatically reinstalled with Geyser-Spigot alongside a Paper server. For a manual install using any other variant such as Paper, you will need to upload the GeyserMC jar to your server and set the the clone-remote-port option to true. See AxentHost's [guide](https://axenthost.com/knowledgebase/categories/minecraft/create-a-crossplay-server-with-geyser/) to see all the steps."
+            })
+        },
+        {
+            name: 'BedrockHost',
+            url: 'https://bedrockhost.pl/',
+            description: translate({
+                id: 'providers.provider.bedrockhost.description',
+                message: "Easiest solution is: Go to hosting panel > install new engine > Ready-made solutions and select Geyser. This will install Paper & Geyser-Spigot - no setup needed, just connect with your Java IP and port. See [BedrockHost's article](https://bedrockhost.pl/w/geyser-czyli-serwer-minecraft-java-i-bedrock-w-jednym) for more details or for custom setup instructions (available in Polish)."
+            })
+        },
+        {
+            name: 'CloudNord',
             url: 'https://cloudnord.net/',
             description: translate({
                 id: 'providers.provider.cloud_nord.description',
@@ -80,6 +96,14 @@ export const providersData: Providers = {
                 message: "Install Geyser in the exaroton plugin list and connect to your server with your Java IP and port. See [exaroton's article](https://support.exaroton.com/hc/en-us/articles/360019857918-Geyser) for more details."
             })
         },
+        {
+            name: 'FreeMcServer.net',
+            url: 'https://freemcserver.net',
+            description: translate({
+                id: 'providers.provider.freemcserver_net.description',
+                message: "Install Geyser from the Plugins tab, then connect to your server using your Java IP and port."
+            })
+        },
         {
             name: 'GGServers',
             url: 'https://ggservers.com',
@@ -88,6 +112,14 @@ export const providersData: Providers = {
                 message: "Can be installed to any server from their auto plugin setups. No further configuration needed."
             })
         },
+        {
+            name: 'KaasHosting',
+            url: 'https://www.kaashosting.nl/minecraft-servers',
+            description: translate({
+                id: 'providers.provider.kaashosting.description',
+                message: "Automatic and manual installation supported. Go to the `Plugin Installer` tab, search for Geyser and click `Install Automatically`. Connect with the Java IP and port. See [KaasHosting's article](https://www.kaashosting.nl/help/nl/minecraft/hoe-maak-ik-mijn-minecraft-server-crossplay-met-geysermc) for more details."
+            })
+        },
         {
             name: 'Lilypad',
             url: 'https://lilypad.gg',
@@ -96,6 +128,14 @@ export const providersData: Providers = {
                 message: "Tick the 'Enable Bedrock crossplay?' option when changing your server software to automatically install and configure Geyser + Floodgate. For more details, navigate to [lilypad.gg/bedrock](https://lilypad.gg/bedrock)."
             })
         },
+        {
+            name: 'MCServerHost',
+            url: 'https://mcserverhost.com/',
+            description: translate({
+                id: 'providers.provider.mcserverhost.description',
+                message: "Under the server configuration, select 'Crossplay' to automatically install Geyser and Floodgate. Join with the connection address. To update Geyser and Floodgate, replace the plugin jars in the server manager and restart the server."
+            })
+        },
         {
             name: 'Minefort',
             url: 'https://minefort.com/',
@@ -112,6 +152,14 @@ export const providersData: Providers = {
                 message: "Connect via `bedrock.minehut.com` and do `/join [servername]`, or connect directly via `[servername].bedrock.minehut.gg`."
             })
         },
+        {
+            name: 'OMGServ',
+            url: 'https://www.omgserv.com/en/',
+            description: translate({
+                id: 'providers.provider.omgserv.description',
+                message: "Select Geyser in the [Install Menu](https://i.imgur.com/Gewpsrq.png), it will be automatically installed. You can enable floodgate in the [server properties on the dashboard](https://i.imgur.com/jg5mzNj.png)."
+            })
+        },
         {
             name: 'Physgun',
             url: 'https://physgun.com/',
@@ -126,11 +174,11 @@ export const providersData: Providers = {
             })
         },
         {
-            name: 'OMGServ',
-            url: 'https://www.omgserv.com/en/',
+            name: 'Play Hosting',
+            url: 'https://play.hosting',
             description: translate({
-                id: 'providers.provider.omgserv.description',
-                message: "Select Geyser in the [Install Menu](https://i.imgur.com/Gewpsrq.png), it will be automatically installed. You can enable floodgate in the [server properties on the dashboard](https://i.imgur.com/jg5mzNj.png)."
+                id: 'providers.provider.playhosting.description',
+                message: "Tick the 'Enable Bedrock crossplay?' option when changing your server software to automatically install and configure Geyser + Floodgate. For more details, navigate to [help.play.hosting/minecraft/crossplay](https://help.play.hosting/minecraft/crossplay)."
             })
         },
         {
@@ -149,6 +197,14 @@ export const providersData: Providers = {
                 message: "Different instructions for different plans: On VPS, select Geyser in the [Service Type Menu](https://i.imgur.com/loSNmvu.png), Floodgate can be enabled on the dashboard configuration. For manual installation: Using a Premium or Free plan, use the same port as your Java server for the Bedrock port in the configuration file and connect that; for the Free plan, also enable the `clone-remote-port` option. If you are using a PRO or a VPS plan, you can use any port, which can be opened on the Firewall tab."
             })
         },
+        {
+            name: 'ServerPrism',
+            url: 'https://serverprism.com/',
+            description: translate({
+                id: 'providers.provider.serverprism.description',
+                message: "Order a [Minecraft server](https://serverprism.com/minecraft-server-hosting) on any plugin-compatible runtime (Paper, Spigot, Purpur, etc.), then install Geyser from the panel's plugin installer. Connect with the same IP and port as your Java server."
+            })
+        },
         {
             name: 'Snakecraft Hosting',
             url: 'https://snakecrafthosting.com/',
@@ -165,6 +221,22 @@ export const providersData: Providers = {
                 message: "You can enable Geyser on the version changer page. Geyser will run on the given port by the host."
             })
         },
+        {
+            name: 'UltraServers',
+            url: 'https://ultraservers.com/',
+            description: translate({
+                id: 'providers.provider.ultraservers.description',
+                message: "Select 'Paper + Geyser' under the Change version tab. You can connect to your server using the same IP and port as you would on Java. Existing servers can use the Plugins/Minecraft mods tab to install Geyser. See [Crossplay](https://docs.ultraservers.com/minecraft/plugins-mods/crossplay-on-java-and-bedrock) for more information."
+            })
+        },
+        {
+            name: 'VemoxHost',
+            url: 'https://vemoxhost.com/',
+            description: translate({
+                id: 'providers.provider.vemox_hosting.description',
+                message: "Full automatic installation. Go to one of the panel options and select the option to enable GeyserMC. Then, restart and connect to your server using your Java IP and port."
+            })
+        },
         {
             name: 'Virtual Gladiators',
             url: 'https://virtualgladiators.com/',
@@ -178,7 +250,7 @@ export const providersData: Providers = {
             url: 'https://wisehosting.com',
             description: translate({
                 id: 'providers.provider.wisehosting.description',
-                message: "Both auto and manual installation available. Find the GeyserMC presets from the `Properties` tab in the Game Panel. There, click `Install` and restart your server. See [Crossplay FAQ](https://help.wisehosting.com/en/articles/13-how-to-install-geysermc-java-bedrock-crossplay-to-your-server) for additional details."
+                message: "Both auto and manual installation available. Find the GeyserMC presets from the `Addons` tab in the Game Panel. There, click `Install` and restart your server. See [Crossplay FAQ](https://wisehosting.com/help/how-to-install-geysermc-to-your-minecraft-server) for additional details."
             })
         },
         {
@@ -217,7 +289,7 @@ export const providersData: Providers = {
             url: 'https://www.bisecthosting.com/',
             description: translate({
                 id: 'providers.provider.bisecthosting.description',
-                message: "You must have a plan with a dedicated IP. In Geyser's config, uncomment the `bedrock address` and set it to the public IP of your server (e.g. `address: 51.79.129.18`). Leave the port as `19132`. Under the home tab, select 'Enable UDP Network' and restart the server. See Bisect's [article](https://www.bisecthosting.com/clients/index.php?rp=/knowledgebase/193/How-to-install-Geyser-and-Floodgate-on-a-Minecraft-Java-server.html) for full instructions. If you still cannot connect after following these instructions, contact Bisect Support as they reportedly have UDP disabled on some nodes."
+                message: "Go to the Network tab and copy an available port not in use by other mods. In Geyser's config, under the bedrock section, on the port: line, edit the value to the port you copied. See Bisect's [article](https://www.bisecthosting.com/clients/index.php?rp=/knowledgebase/193/How-to-install-Geyser-and-Floodgate-on-a-Minecraft-Java-server.html) for full instructions. If you still cannot connect after following these instructions, contact Bisect Support, as they reportedly have UDP disabled on some nodes."
             })
         },
         {
@@ -233,7 +305,7 @@ export const providersData: Providers = {
             url: 'https://www.bloom.host/',
             description: translate({
                 id: 'providers.provider.bloomhost.description',
-                message: "See [Bloom's documentation](https://docs.bloom.host/plugins/geysermc/) for setup instructions."
+                message: "See [Bloom's documentation](https://docs.bloom.host/multiplatform/geysermc) for setup instructions."
             })
         },
         {
@@ -301,7 +373,7 @@ export const providersData: Providers = {
             url: 'https://falixnodes.net/',
             description: translate({
                 id: 'providers.provider.falixnodes.description',
-                message: "Open a port yourself on the network page in the game panel, then use that port in the bedrock section of the Geyser config."
+                message: "Enable `clone-remote-port` (or manually set `bedrock port` to the Java port), and connect with the Java IP and port."
             })
         },
         {
@@ -322,11 +394,6 @@ export const providersData: Providers = {
             url: 'https://freakhosting.com/',
             description: descriptionTemplates.default
         },
-        {
-            name: 'FreeMcServer.net',
-            url: 'https://freemcserver.net',
-            description: descriptionTemplates.default
-        },
         {
             name: 'Fusion Hosting',
             url: 'https://fusionhostingltd.co.uk',
@@ -461,6 +528,14 @@ export const providersData: Providers = {
             url: 'https://www.minecraft-hosting.pro/',
             description: descriptionTemplates.default
         },
+        {
+            name: 'Modrinth Hosting',
+            url: 'https://modrinth.com/hosting',
+            description: translate({
+                id: 'providers.provider.modrinth.description',
+                message: "Check [Modrinth's documentation](https://support.modrinth.com/en/articles/10986613-adding-geyser-to-your-server) for specific instructions."
+            })
+        },
         {
             name: 'Netbela',
             url: 'https://netbela.nl/store/minecraft',
@@ -474,7 +549,7 @@ export const providersData: Providers = {
             url: 'https://nfoservers.com/',
             description: translate({
                 id: 'providers.provider.nfoservers.description',
-                message: "Uncomment and set `bedrock address` to the server IP in the Geyser config file. As an alternative, you can run Geyser standalone separately on an Unmanaged VDS."
+                message: "Set `bedrock address` to the server IP in the Geyser config file. As an alternative, you can run Geyser standalone separately on an Unmanaged VDS."
             })
         },
         {
@@ -493,6 +568,22 @@ export const providersData: Providers = {
                 message: "Use the default server port and `0.0.0.0` or your server IP as the host address."
             })
         },
+        {
+            name: 'NolimitHost',
+            url: 'https://nolimithost.cc',
+            description: translate({
+                id: 'providers.provider.nolimithost.description',
+                message: "Check [NolimitHost's documentation](https://nolimithost.cc/docs/minecraft/geyser) for specific instructions."
+            })
+        },
+        {
+            name: 'OrionNodes',
+            url: 'https://orionnodes.com',
+            description: translate({
+                id: 'providers.provider.orionnodes.description',
+                message: "Open a port yourself from the network page in the game panel, use that port in the bedrock section of the Geyser config."
+            })
+        },
         {
             name: 'PaperNodes',
             url: 'https://papernodes.com/',
@@ -553,6 +644,14 @@ export const providersData: Providers = {
                 message: "The port will be automatically set after you download Geyser and restart the server. Connect with the same IP and port as on Java. For Geyser Standalone installation instructions, see [here](https://shockbyte.com/billing/knowledgebase/173/Introduction-to-GeyserMCorDragonProxy-How-GeyserMC-Works.html)."
             })
         },
+        {
+            name: 'SimpleGameHosting',
+            url: 'https://simplegamehosting.com/',
+            description: translate({
+                id: 'providers.provider.simplegamehosting.description',
+                message: "Contact live chat support to open a port and check out the [help center guide](https://help.simplegamehosting.com/how-to-enable-crossplay-with-geyser-on-your-minecraft-server/) for how to install and configure Geyser on your server."
+            })
+        },
         {
             name: 'Skynode.pro',
             url: 'https://skynode.pro/',
@@ -628,7 +727,7 @@ export const providersData: Providers = {
             url: 'https://vultam.net/',
             description: translate({
                 id: 'providers.provider.vultam.description',
-                message: "Enable `clone-remote-port` in the Geyser config, and connect with the Java IP and port. Alternatively, allocate an additional port to your server from the Network section of the control panel and set it as the `bedrock.port` in the Geyser config. Use that port to connect from Bedrock. Please contact [Vultam support](https://clients.vultam.net/submitticket.php?step=2&deptid=1) if you need assistance."
+                message: "Enable `clone-remote-port` in the Geyser config, and connect with the Java IP and port. Alternatively, allocate an additional port to your server from the Network section of the control panel and set it as the `bedrock port` in the Geyser config. Use that port to connect from Bedrock. Please contact [Vultam support](https://clients.vultam.net/submitticket.php?step=2&deptid=1) if you need assistance."
             })
         },
         {
@@ -660,7 +759,7 @@ export const providersData: Providers = {
             url: 'https://witherhosting.com/',
             description: translate({
                 id: 'providers.provider.witherhosting.description',
-                message: "Either use the Java server's port, or create a port in the ports manager on the panel and use that for Bedrock. Refer to the hosts [support article](https://support.witherhosting.com/en/article/how-to-install-and-use-geysermc-1xn5l6v/) for further info."
+                message: "Either use the Java server's port, or create a port in the ports manager on the panel and use that for Bedrock. Refer to the hosts [support article](https://my.witherhosting.com/kb/how-to-install-and-use-geysermc-java) for further info."
             })
         }
     ],

src/data/versions.json

@@ -1,12 +1,12 @@
 {
     "bedrock": {
-        "supported": "1.21.40-1.21.51",
+        "supported": "26.0-26.32",
         "latest": {
-            "id": 766,
-            "name": "1.21.51"
+            "id": 1001,
+            "name": "26.32"
         }
     },
     "java": {
-        "supported": "1.21.4"
+        "supported": "26.2"
     }
 }

src/pages/download.tsx

@@ -69,21 +69,6 @@ const DownloadPage: React.FC = () => (
             </TabItem>
             <TabItem value="other-projects" label="Other Projects">
                 <Collapsibles>
-                    <Collapsible
-                        title='GeyserOptionalPack'
-                        subtitle={<Translate id='pages.download.description.geyseroptionalpack'>An optional Bedrock resource pack to extend Geyser functionality.</Translate>}
-                        id='geyseroptionalpack'
-                        inner={
-                            <ProjectDownload
-                                projectId="geyseroptionalpack"
-                                setup='/wiki/other/geyseroptionalpack'
-                                downloadsInfo={{
-                                    geyseroptionalpack: <><FontAwesomeIcon icon={faFileZipper} /> GeyserOptionalPack</>,
-                                }}
-                                gridColumns={1}
-                            />
-                        }
-                    />
                     <Collapsible
                         title='ThirdPartyCosmetics'
                         subtitle={<Translate id='pages.download.description.thirdpartycosmetics'>An extension that adds support for loading ears and other third party cosmetics on java players</Translate>}
@@ -99,6 +84,20 @@ const DownloadPage: React.FC = () => (
                             />
                         }
                     />
+                    <Collapsible
+                        title='EmoteOffhand'
+                        subtitle={<Translate id='pages.download.description.offhandextension'>An extension that allows Bedrock players to switch their offhand and mainhand item by emoting.</Translate>}
+                        id='emoteoffhand'
+                        inner={
+                            <ProjectDownload
+                                projectId="emoteoffhand"
+                                downloadsInfo={{
+                                    emoteoffhand: <><FontAwesomeIcon icon={faFileZipper} /> EmoteOffhand</>,
+                                }}
+                                gridColumns={1}
+                            />
+                        }
+                    />
                     <Collapsible
                         title='Hurricane'
                         subtitle={<Translate id='pages.download.description.hurricane'>A plugin with various workarounds for Geyser players that modify the server in order to achieve their goal.</Translate>}
@@ -129,7 +128,22 @@ const DownloadPage: React.FC = () => (
                             />
                         }
                     />
-{/*                     <Collapsible
+                    <Collapsible
+                        title='Rainbow'
+                        subtitle={<Translate id='pages.download.description.rainbow'>A Minecraft mod to generate Geyser item mappings and bedrock resourcepacks for use with Geyser's custom item API (v2). </Translate>}
+                        id='rainbow'
+                        inner={
+                            <ProjectDownload
+                                projectId="rainbow"
+                                setup='/wiki/other/rainbow'
+                                downloadsInfo={{
+                                    rainbow: <PlatformIcon img={FabricIcon} text="Fabric" />,
+                                }}
+                                gridColumns={1}
+                            />
+                        }
+                    />
+                    <Collapsible
                         title='Hydraulic'
                         subtitle={<Translate id='pages.download.description.hydraulic'>A companion mod to Geyser which allows for Bedrock players to join modded Minecraft: Java Edition servers.</Translate>}
                         id='hydraulic'
@@ -145,7 +159,23 @@ const DownloadPage: React.FC = () => (
                                 gridColumns={1}
                             />
                         }
-                    /> */}
+                    />
+                    <Collapsible
+                        title='Thunder'
+                        subtitle={<Translate id='pages.download.description.thunder'>A java application to convert simple Java Edition resource packs to Bedrock Edition ones.</Translate>}
+                        id='thunder'
+                        tags={['Beta']}
+                        inner={
+                            <ProjectDownload
+                                projectId="thunder"
+                                setup='/wiki/other/thunder'
+                                downloadsInfo={{
+                                    thunder: <><FontAwesomeIcon icon={faFileZipper} /> Thunder</>,
+                                }}
+                                gridColumns={1}
+                            />
+                        }
+                    />
                 </Collapsibles>
             </TabItem>
         </Tabs>

src/pages/index.module.scss

@@ -66,4 +66,11 @@
     display: flex;
     align-items: center;
     justify-content: center;
+}
+
+.features {
+    padding: 50px 0;
+    display: flex;
+    flex-direction: column;
+    gap: 40px;
 }

src/pages/index.tsx

@@ -1,18 +1,21 @@
 import clsx from 'clsx';
 import Layout from '@theme/Layout';
-import HomepageFeatures from '@site/src/components/HomepageFeatures';
+import Crossplatform0Img from '@site/static/img/site/crossplatform_0.png';
+import Crossplatform1Img from '@site/static/img/site/crossplatform_1.png';
+import Crossplatform2Img from '@site/static/img/site/crossplatform_2.png';
 import Heading from '@theme/Heading';
 import HeroImage from '@site/static/img/site/geyser.png';
 
 import styles from './index.module.scss';
 import Translate from '@docusaurus/Translate';
+import { HomepageFeature } from '../components/HomepageFeature';
 
 function HomepageHeader() {
     return (
         <header className={clsx('hero hero--primary', styles.heroBanner)}>
             <div className={styles.heroContent}>
-                <img src={HeroImage} alt="Geyser Logo" className={styles.heroImage}/>
-                <img src={HeroImage} alt="Geyser Logo" className={styles.heroImageBackgroundBlur}/>
+                <img src={HeroImage} alt="Geyser Logo" className={styles.heroImage} />
+                <img src={HeroImage} alt="Geyser Logo" className={styles.heroImageBackgroundBlur} />
                 <div className={styles.textSection}>
                     <Heading as="h1" className="hero__title">
                         <Translate id='pages.main.title'>Revolutionize Your Minecraft Server</Translate>
@@ -33,8 +36,35 @@ export default function Home(): JSX.Element {
             description="Enable clients from Minecraft Bedrock Edition to join your Minecraft Java server."
         >
             <HomepageHeader />
+
             <main>
-                <HomepageFeatures />
+                <div className={clsx(styles.features, "container")}>
+                    <HomepageFeature
+                        title="What is Geyser?"
+                        image={Crossplatform2Img}
+                    >
+                        <Translate id="components.homepage_features.1.line1">Geyser is a program that allows Minecraft: Bedrock Edition clients to join Minecraft: Java Edition servers, allowing for true crossplay between both editions of the game.</Translate>
+                        <br /><br />
+                        <Translate id="components.homepage_features.1.line2">The ultimate goal of this project is to allow Minecraft: Bedrock Edition users to join Minecraft: Java Edition servers as seamlessly as possible.</Translate>
+                    </HomepageFeature>
+
+                    <HomepageFeature
+                        title="How does it work?"
+                        image={Crossplatform1Img}
+                        flipped
+                    >
+                        <Translate id="components.homepage_features.2">Geyser acts as a translator which sits between the Bedrock client and the Java server. It takes data from the Bedrock client and translates it into a format the Java server understands and vice versa. Geyser works with any modern Minecraft version and can be installed either as a plugin or ran as a standalone program.</Translate>
+                    </HomepageFeature>
+
+                    <HomepageFeature
+                        title="Join from anywhere"
+                        image={Crossplatform0Img}
+                    >
+                        <Translate id="components.homepage_features.3.line1">Geyser can be joined from Bedrock clients on Windows 10/11, iOS, Android, and even consoles. Geyser works with a wide array of hosting providers, but can also be used as its own standalone proxy to join any Minecraft server!</Translate>
+                        <br /><br />
+                        <Translate id="components.homepage_features.3.line2">If you are a server owner, you can install our Floodgate plugin which allows Xbox Live authenticated Bedrock users to join without a Java Edition account!</Translate>
+                    </HomepageFeature>
+                </div>
             </main>
         </Layout>
     );

src/pages/utilities/config-editor.tsx

@@ -1,362 +0,0 @@
-import Translate from '@docusaurus/Translate';
-import HeroBanner from '@site/src/components/HeroBanner';
-import HeroBackground from '@site/static/img/site/split-background.webp';
-import Layout from '@theme/Layout';
-import styles from './utilities.module.scss';
-import {useRef, useState} from 'react';
-
-const ConfigEditorPage: React.FC = () => {
-    const [config, setConfig] = useState('');
-    const [parsedConfig, setParsedConfig] = useState<any>({});
-    // match optional key
-    const keyReg = /^#? ?[^:\sA-Z]+:(?!\S)/
-    const editedConfig = useRef<any>({});
-    const uploadRef = useRef<any>(null);
-
-    const loadDefault = async () => {
-        try {
-            const response = await fetch('https://raw.githubusercontent.com/GeyserMC/Geyser/master/core/src/main/resources/config.yml');
-            if (!response.ok) {
-                throw new Error('Network response was not ok');
-            }
-            const text = await response.text();
-            handleConfigLoad(text);
-        } catch (error) {
-            console.error('Failed to fetch default config:', error);
-        }
-    }
-
-    const handleUpload = async (e) => {
-        const fileName = e.target.files[0];
-
-        // Makse sure the file is a .yml file
-        if (!fileName.name.endsWith('.yml')) {
-            alert('Please select a .yml config file!');
-            return;
-        }
-
-        // Read the file
-        const fileReader = new FileReader();
-        fileReader.onload = (e) => {
-            handleConfigLoad(e.target.result as string);
-        }
-        fileReader.readAsText(fileName);
-    }
-
-    const handleConfigLoad = (config: string) => {
-        setConfig(config);
-        setParsedConfig(loadConfig(config));
-    }
-
-    const loadConfig = (config: string) => {
-        const lines = config.split('\n');
-        let currentSection = '';
-        let currentComment = '';
-
-        const newConfig = {"": {}};
-
-        let ignore = false;
-
-        // Parse each line of the config
-        for (let i = 0; i < lines.length; i++) {
-            let line = lines[i];
-            // Reset the section if we are no indented
-            if (!line.startsWith('  ')) {
-                currentSection = '';
-            }
-
-            // Ignore any empty lines
-            line = line.trim()
-            if (line === '') {
-                currentComment = '';
-                continue;
-            }
-
-            const commented = line.startsWith('#');
-
-            const match = line.match(keyReg);
-            if (match === null) {
-                // Check if we are in a comment
-                if (commented) {
-                    currentComment += line.replace(/^# ?/i, '') + '<br>';
-                }
-                continue;
-            }
-
-            // Check if we are in a new section
-            if (line.endsWith(':')) {
-                currentSection = line.replace(':', '');
-
-                // Ignore user auths section
-                if (currentSection === 'saved-user-logins') {
-                    ignore = true;
-                    continue;
-                }
-                ignore = false;
-                if (commented) {
-                    currentComment += '<strong>Note: This option is commented out by default. It will be automatically uncommented if modified.</strong>' + '<br>';
-                }
-
-                currentComment = currentComment.replace(URL_REGEX, function ($0) {
-                    return '<a href="' + $0 + '">' + $0 + '</a>';
-                })
-                newConfig[currentSection] = {sectionDesc0: currentComment};
-                currentComment = '';
-                continue;
-            }
-
-            if (ignore) {
-                continue;
-            }
-
-            // Get the key and value
-            const splitLine = line.split(':');
-            splitLine[0] = splitLine[0].trim();
-            let val = '';
-            for (let j = 1; j < splitLine.length; j++) {
-                val += splitLine[j];
-            }
-            val = val.trim();
-
-            if (splitLine[0].includes('proxy-protocol-whitelisted-ips')) {
-                currentComment = '';
-                continue;
-            }
-
-            if (commented) {
-                currentComment += '<strong>Note: This option is commented out by default. It will be automatically uncommented if modified.</strong>' + '<br>';
-            }
-
-            currentComment = currentComment.replace(URL_REGEX, function ($0) {
-                return '<a href="' + $0 + '">' + $0 + '</a>';
-            })
-
-            // Add the config option to the config object
-            newConfig[currentSection][splitLine[0]] = {
-                desc: currentComment,
-                value: val,
-                line: i
-            };
-
-            // Reset the comment
-            currentComment = '';
-        }
-        return newConfig;
-    }
-
-    const generateHTML = (config: any) => {
-        return Object.keys(config).map(configKey => (
-            <div key={configKey} className={styles.card}>
-                <div className={styles.cardHeader}>{configKey === '' ? 'Root' : configKey}</div>
-                <div className={styles.cardBody}>
-                    {Object.keys(config[configKey]).map(configOption => {
-                        const configOptionInfo = config[configKey][configOption];
-                        if (configOption == "sectionDesc0") {
-                            if (configOptionInfo === "") {
-                                return;
-                            }
-                            return (
-                                <div className={styles.configOption}>
-                                    <p dangerouslySetInnerHTML={{__html: configOptionInfo}}/>
-                                </div>
-                            )
-                        }
-                        const configOptionKey = configKey === '' ? configOption : `${configKey}.${configOption}`;
-                        const showOptionName = configOption.replace('#', '').trim()
-                        return (
-                            <div key={configOptionKey} className={styles.configOption}>
-                                <h3>{showOptionName}</h3>
-                                <p dangerouslySetInnerHTML={{__html: configOptionInfo.desc}}/>
-                                {getInput(configOptionKey, configOptionInfo.value)}
-                            </div>
-                        )
-                    })}
-                </div>
-            </div>
-        ))
-    }
-
-    const URL_REGEX = /https?:\/\/(([0-9a-z.]+\.[a-z]+)|(([0-9]{1,3}\.){3}[0-9]{1,3}))(:[0-9]+)?(\/[0-9a-z%\/.\-_]*)?(\?[0-9a-z=&%_\-]*)?(#[0-9a-z=&%_\-]*)?/ig;
-
-    const handleExport = () => {
-        let newConfig = config;
-        const lines = newConfig.split('\n');
-        Object.entries(editedConfig.current).forEach(([key, value]) => {
-            const keys = key.split('.');
-            let currentObj = parsedConfig;
-
-            keys.forEach((nestedKey, index) => {
-                if (currentObj.hasOwnProperty(nestedKey)) {
-                    if (index === keys.length - 1) {
-                        const option = currentObj[nestedKey];
-                        const oldValue = option.value;
-                        const index = option.line;
-                        const newKey = nestedKey.replace('#', '').trim();
-                        lines[index] = lines[index].replace(`  ${nestedKey}: ${oldValue}`, `  ${newKey}: ${value}`);
-                    } else {
-                        currentObj = currentObj[nestedKey];
-                    }
-                }
-            });
-        });
-        newConfig = lines.join('\n');
-
-        // Trigger a download of the final config
-        downloadString(newConfig, 'text/plain', 'config.yml');
-    }
-
-    function getInput(name, value) {
-        const handleChange = (event) => {
-            const {id, value, type, checked} = event.target;
-
-            editedConfig.current = {
-                ...editedConfig.current,
-                [id]: type === 'checkbox' ? checked.toString() : value
-            };
-        }
-
-        switch (name) {
-            // Handle all the dropdowns
-            case 'remote.auth-type':
-                return (
-                    <select key={name} className={styles.formInput} id={name} defaultValue={value}
-                            onChange={handleChange}>
-                        <option value='offline'>offline</option>
-                        <option value='online'>online</option>
-                        <option value='floodgate'>floodgate</option>
-                    </select>
-                );
-            case 'show-cooldown':
-                return (
-                    <select key={name} className={styles.formInput} id={name} defaultValue={value}
-                            onChange={handleChange}>
-                        <option value='title'>title</option>
-                        <option value='actionbar'>actionbar</option>
-                        <option value='false'>false</option>
-                    </select>
-                );
-            case 'emote-offhand-workaround':
-                return (
-                    <select key={name} className={styles.formInput} id={name} defaultValue={value}
-                            onChange={handleChange}>
-                        <option value='disabled'>disabled</option>
-                        <option value='no-emotes'>no-emotes</option>
-                        <option value='emotes-and-offhand'>emotes-and-offhand</option>
-                    </select>
-                );
-            case 'config-version':
-                return <input key={name} className={styles.formInput} type='text' disabled
-                              defaultValue={value.replace(/"/g, '')}/>;
-            case 'metrics.uuid':
-                return <input key={name} className={styles.formInput} id={name} type='text' disabled
-                              defaultValue={value === 'generateduuid' ? crypto.randomUUID() : value}/>;
-
-            default:
-                // Handle all the other inputs
-                if (value.toLowerCase() === 'true' || value.toLowerCase() === 'false') {
-                    // Boolean
-                    return (
-                        <div key={name}>
-                            <input className={styles.checkbox} type='checkbox' id={name}
-                                   defaultChecked={value.toLowerCase() === 'true'} onChange={handleChange}/>
-                            <label htmlFor={name} className='switch'></label>
-                        </div>
-                    );
-                } else if (!isNaN(value)) {
-                    // Number
-                    return <input key={name} className={styles.formInput} type='number' defaultValue={value}
-                                  id={name} onChange={handleChange}/>;
-                } else {
-                    // String
-                    return <input key={name} className={styles.formInput} type='text'
-                                  defaultValue={value.replace(/"/g, '')} id={name} onChange={handleChange}/>;
-                }
-        }
-    }
-
-    // From https://gist.github.com/danallison/3ec9d5314788b337b682
-    function downloadString(text, fileType, fileName) {
-        const blob = new Blob([text], {type: fileType})
-
-        const a = document.createElement('a')
-        a.download = fileName
-        a.href = URL.createObjectURL(blob)
-        a.dataset.downloadurl = [fileType, a.download, a.href].join(':')
-        a.style.display = 'none'
-        document.body.appendChild(a)
-        a.click()
-        document.body.removeChild(a)
-
-        setTimeout(() => {
-            URL.revokeObjectURL(a.href)
-        }, 1500)
-    }
-
-    const NoConfigSection = () => (
-        <>
-            <h1><Translate id='pages.configeditor.noconfigselected.heading'>No config selected.</Translate></h1>
-            <h3 className={styles.fontNormal}><Translate id='pages.configeditor.noconfigselected.subheading'>Upload a
-                file or get started with the default config!</Translate></h3>
-
-            <div className={styles.buttonsContainer}>
-                <button className={styles.button} onClick={loadDefault}>
-                    <Translate id='pages.configeditor.button.defaultconfig'>Default</Translate>
-                </button>
-
-                <button className={styles.button} onClick={() => uploadRef.current.click()}>
-                    <input
-                        ref={uploadRef}
-                        type='file'
-                        className={styles.hidden}
-                        accept='.yml'
-                        onChange={handleUpload}
-                    />
-                    <Translate id='pages.configeditor.button.upload'>Upload</Translate>
-                </button>
-            </div>
-        </>
-    )
-
-    const EditorView = () => (
-        <>
-            <div className={styles.buttonsContainer} style={{marginBottom: '30px'}}>
-                <button className={styles.button} onClick={handleExport}>
-                    <Translate id='pages.configeditor.button.export'>Export</Translate>
-                </button>
-            </div>
-            {generateHTML(parsedConfig)}
-        </>
-    )
-
-    return (
-        <>
-            <HeroBanner
-                title={<Translate id='pages.configeditor.title'>Config Editor</Translate>}
-                subheading={<Translate id='pages.configeditor.subheading'>Edit your Geyser configuration.</Translate>}
-                backgroundImage={HeroBackground}
-            />
-
-            <div className='container' style={{marginTop: '30px'}}>
-                {Object.keys(parsedConfig).length === 0 ? <NoConfigSection/> : <EditorView/>}
-            </div>
-
-
-            <section id='config-options'></section>
-        </>
-    )
-}
-
-export default function ConfigEditor(): JSX.Element {
-    return (
-        <Layout
-            title={`Config Editor`}
-            description='Edit your Geyser configuration.'
-        >
-            <main>
-                <div className='container container--fluid margin-vert--lg'>
-                    <ConfigEditorPage/>
-                </div>
-            </main>
-        </Layout>
-    )
-}

src/pages/utilities/dump-viewer.tsx

@@ -8,16 +8,10 @@ import { Grid } from '@site/src/components/Grid';
 import CodeBlock from '@theme/CodeBlock';
 import clsx from 'clsx';
 
-const DumpViewerPage: React.FC = () => {
-    const [dumpId, setDumpId] = useState('');
-    const [data, setData] = useState<any>({});
-    const [statusMessage, setStatusMessage] = useState('');
+const PluginList = ({plugins}, {}) => {
     const [activePlugin, setActivePlugin] = useState<any>({});
-
     const pluginPopoverRef = useRef<any>(null);
 
-    const urlReg = /^(https?:\/\/)?dump\.geysermc\.org/;
-
     useEffect(() => {
         const handleClickOutside = (event) => setActivePlugin({});
         document.addEventListener("mousedown", handleClickOutside);
@@ -27,6 +21,37 @@ const DumpViewerPage: React.FC = () => {
         };
     }, [pluginPopoverRef]);
 
+    return <Grid elementsPerRow={5}>
+        {plugins.map(plugin => (
+            <div key={plugin.main}>
+                <div onClick={() => setActivePlugin(plugin)} className={styles.pluginName}>
+                    <b>{plugin.name}</b> <div className={styles.pluginEnabledIndicator} style={{ backgroundColor: plugin.enabled ? "green" : "red" }} />
+                </div>
+
+                {activePlugin?.main === plugin.main ? (
+                    <div ref={pluginPopoverRef} className={styles.pluginInfoPopover}>
+                        <p className={styles.pluginNamePopover}>{plugin.name}</p>
+                        <p>{plugin.version}</p>
+                        <p className={styles.pluginEnabled} style={{ backgroundColor: plugin.enabled ? "green" : "red" }}>{plugin.enabled ? "Enabled" : "Disabled"}</p>
+
+                        <p className={styles.pluginAuthorsLabel}>Authors:</p>
+                        <ul>
+                            {plugin.authors.map(author => <li>{author}</li>)}
+                        </ul>
+                    </div>
+                ) : undefined}
+            </div>
+        ))}
+    </Grid>
+};
+
+const DumpViewerPage: React.FC = () => {
+    const [dumpId, setDumpId] = useState('');
+    const [data, setData] = useState<any>({});
+    const [statusMessage, setStatusMessage] = useState('');
+
+    const urlReg = /^(https?:\/\/)?dump\.geysermc\.org/;
+
     useEffect(() => {
         // Get the ID from the URL
         let id = window.location.href.includes('?') ? window.location.href.split('?').pop() : '';
@@ -76,10 +101,6 @@ const DumpViewerPage: React.FC = () => {
         return string.charAt(0).toUpperCase() + string.slice(1)
     }
 
-    const handlePluginClick = (plugin) => {
-        setActivePlugin(plugin);
-    }
-
     return (
         <>
             <HeroBanner
@@ -159,7 +180,7 @@ const DumpViewerPage: React.FC = () => {
                                             </div>
                                             <div>
                                                 <b><Translate id='pages.dumpviewer.platform.name'>Platform Name</Translate></b><br />
-                                                <p id='platformName'>{data.bootstrapInfo.platformName ?? capitalizeFirstLetter(data.bootstrapInfo.platform.toLowerCase())}</p>
+                                                <p id='platformName'>{data.bootstrapInfo.platformName ?? capitalizeFirstLetter(data.bootstrapInfo.platform.platformName.toLowerCase())}</p>
                                             </div>
                                             <div>
                                                 <b><Translate id='pages.dumpviewer.platform.version'>Platform Version</Translate></b><br />
@@ -211,35 +232,30 @@ const DumpViewerPage: React.FC = () => {
                                 </div>
                                 <div className={styles.card}>
                                     <div className={styles.cardHeader}>
-                                        <Translate id='pages.dumpviewer.plugins'>Plugins</Translate> ({data.bootstrapInfo.plugins.length})
+                                        <Translate id='pages.dumpviewer.plugins'>Plugins</Translate> ({data.bootstrapInfo.plugins?.length ?? 0})
                                     </div>
                                     <div className={styles.cardBody}>
-                                        {data.bootstrapInfo.plugins.length === 0 ? <p><Translate id='pages.dumpviewer.plugins.noplugins'>No plugins to show.</Translate></p> : (
+                                        {!data.bootstrapInfo.plugins || data.bootstrapInfo.plugins.length === 0 ? (
+                                            <p><Translate id='pages.dumpviewer.plugins.noplugins'>No plugins to show.</Translate></p>) : (
                                             <>
                                                 <p><Translate id='pages.dumpviewer.plugins.helptext'>Click on a plugin to view more information.</Translate></p>
 
-                                                <Grid elementsPerRow={5}>
-                                                    {data.bootstrapInfo.plugins.map(plugin => (
-                                                        <div>
-                                                            <b onClick={() => handlePluginClick(plugin)} className={styles.pluginName}>
-                                                                {plugin.name} <div className={styles.pluginEnabledIndicator} style={{ backgroundColor: plugin.enabled ? "green" : "red" }} />
-                                                            </b>
+                                                <PluginList plugins={data.bootstrapInfo.plugins}></PluginList>
+                                            </>
+                                        )}
+                                    </div>
+                                </div>
+                                <div className={styles.card}>
+                                    <div className={styles.cardHeader}>
+                                        <Translate id='pages.dumpviewer.extensions'>Extensions</Translate> ({data.extensionInfo?.length ?? 0})
+                                    </div>
+                                    <div className={styles.cardBody}>
+                                        {!data.extensionInfo || data.extensionInfo.length === 0 ? (
+                                            <p><Translate id='pages.dumpviewer.extensions.noextensions'>No extensions to show.</Translate></p>) : (
+                                            <>
+                                                <p><Translate id='pages.dumpviewer.extensions.helptext'>Click on an extension to view more information.</Translate></p>
 
-                                                            {activePlugin?.main === plugin.main ? (
-                                                                <div ref={pluginPopoverRef} className={styles.pluginInfoPopover}>
-                                                                    <p className={styles.pluginNamePopover}>{plugin.name}</p>
-                                                                    <p>{plugin.version}</p>
-                                                                    <p className={styles.pluginEnabled} style={{ backgroundColor: plugin.enabled ? "green" : "red" }}>{plugin.enabled ? "Enabled" : "Disabled"}</p>
-
-                                                                    <p className={styles.pluginAuthorsLabel}>Authors:</p>
-                                                                    <ul>
-                                                                        {plugin.authors.map(author => <li>{author}</li>)}
-                                                                    </ul>
-                                                                </div>
-                                                            ) : undefined}
-                                                        </div>
-                                                    ))}
-                                                </Grid>
+                                                <PluginList plugins={data.extensionInfo}></PluginList>
                                             </>
                                         )}
                                     </div>

src/pages/utilities/utilities.module.scss

@@ -109,41 +109,6 @@
     border-radius: 50%;
 }
 
-/* https://codepen.io/JAGATHISH1123/pen/PvayMB */
-.switch {
-    position: relative;
-    display: inline-block;
-    width: 40px;
-    height: 20px;
-    background-color: var(--switch-background-color);
-    border-radius: 20px;
-    transition: all 0.3s;
-
-    &::after {
-        content: '';
-        position: absolute;
-        width: 18px;
-        height: 18px;
-        border-radius: 50%;
-        background-color: white;
-        top: 1px;
-        left: 1px;
-        transition: all 0.3s;
-    }
-}
-
-.checkbox:checked+.switch::after {
-    left: 20px;
-}
-
-.checkbox:checked+.switch {
-    background-color: var(--ifm-color-secondary);
-}
-
-.checkbox {
-    display: inline-block;
-}
-
 .hidden {
     display: none;
 }
@@ -199,3 +164,41 @@
         min-width: 100%;
     }
 }
+
+/* Modified from https://danklammer.com/articles/simple-css-toggle-switch */
+.checkbox {
+    appearance: none;
+    position: relative;
+    display: inline-block;
+    box-sizing: content-box;
+    width: 4.5em;
+    height: 1.8em;
+    padding: 0.2em;
+    border: none;
+    cursor: pointer;
+    border-radius: 1.5em;
+    overflow: hidden;
+    background-color: #707070;
+    transition: background ease 0.3s;
+
+    &:before {
+        content: "";
+        display: block;
+        position: absolute;
+        z-index: 2;
+        width: 1.8em;
+        height: 1.8em;
+        background: #fff;
+        color: #fff;
+        border-radius: 1.5em;
+        transition: transform cubic-bezier(0.3, 1.5, 0.7, 1) 0.3s;
+    }
+      
+    &:checked {
+        background-color: var(--ifm-color-secondary);
+    }
+      
+    &:checked:before {
+        transform: translateX(2.5em);
+    }
+}

static/img/blog/2025-11-30-early-packet-handling-attack/chart_01.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="classDiagram" style="max-width: 1267.4666748046875px;" viewBox="0 0 1267.4666748046875 673" role="graphics-document document" aria-roledescription="class"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#28253D;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:#ffffff;}#export-svg .error-text{fill:#000000;stroke:#000000;}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#000000;stroke:#000000;}#export-svg .marker.cross{stroke:#000000;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg g.classGroup text{fill:#28253D;stroke:none;font-family:"Recursive Variable",arial,sans-serif;font-size:10px;}#export-svg g.classGroup text .title{font-weight:bolder;}#export-svg .nodeLabel,#export-svg .edgeLabel{color:#28253D;}#export-svg .noteLabel .nodeLabel,#export-svg .noteLabel .edgeLabel{color:#28253D;}#export-svg .edgeLabel .label rect{fill:#ffffff;}#export-svg .label text{fill:#28253D;}#export-svg .labelBkg{background:#ffffff;}#export-svg .edgeLabel .label span{background:#ffffff;}#export-svg .classTitle{font-weight:bolder;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#ffffff;stroke:#28253D;stroke-width:2;}#export-svg .divider{stroke:#28253D;stroke-width:1;}#export-svg g.clickable{cursor:pointer;}#export-svg g.classGroup rect{fill:#ffffff;stroke:#28253D;}#export-svg g.classGroup line{stroke:#28253D;stroke-width:1;}#export-svg .classLabel .box{stroke:none;stroke-width:0;fill:#ffffff;opacity:0.5;}#export-svg .classLabel .label{fill:#28253D;font-size:10px;}#export-svg .relation{stroke:#000000;stroke-width:2;fill:none;}#export-svg .dashed-line{stroke-dasharray:3;}#export-svg .dotted-line{stroke-dasharray:1 2;}#export-svg #compositionStart,#export-svg .composition{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #compositionEnd,#export-svg .composition{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #extensionStart,#export-svg .extension{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #extensionEnd,#export-svg .extension{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #aggregationStart,#export-svg .aggregation{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #aggregationEnd,#export-svg .aggregation{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #lollipopStart,#export-svg .lollipop{fill:#ffffff!important;stroke:#000000!important;stroke-width:1;}#export-svg #lollipopEnd,#export-svg .lollipop{fill:#ffffff!important;stroke:#000000!important;stroke-width:1;}#export-svg .edgeTerminals{font-size:11px;line-height:initial;}#export-svg .classTitleText{text-anchor:middle;font-size:18px;fill:#28253D;}#export-svg .edgeLabel{background-color:hsl(-120, 0%, 80%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(-120, 0%, 80%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(-120, 0%, 80%);fill:hsl(-120, 0%, 80%);}#export-svg .cluster rect{fill:#F9F9FB;stroke:#BDBCCC;stroke-width:2px;}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#28253D;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#28253D;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#28253D;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node circle .state-start{fill:#000000;}#export-svg [data-look="neo"].statediagram-cluster rect{fill:#F9F9FB;stroke:#28253D;stroke-width:2;}#export-svLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_01_dark.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="classDiagram" style="max-width: 1267.47px;" viewBox="0 0 1267.4666748046875 673" role="graphics-document document" aria-roledescription="class"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,d09GMgABAAAAAPP4ABQAAAACC1AAAPOFAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoRTG+58HJRkP01WQVKBEAZgP1NUQVSBYic8AIUuL4EoEQgKgrlQgo1LC4UeADCEmGIBNgIkA4o0BCAFjXYHj1kMB1tP8XFBnDDsYOLjdY5tyxhP1ODemquETQc3Z3pudCVj86rVErZNi3i3Y//2nORI8v//eUljjLWdtR0QKKbl20eS7FRQsiY7ZVRRptH0yqJXr2OtTaO1imIUpLbm1BAmJ01DbFHubzrOejQ6IZzx4KbA1Nb6Uefj6wvCSyqOqh1aZFkSC39rci0YSByiIZTD9Lmpc/ssLQ7lUAp1xX3bL+ReBGUOlM2UwpgsYb4rXVD3N9ygMjLwLTR0RbefbwtNGV09EkQXTH6a43fHVcFbscQThc1CkeLzYWWPfl664n/SvbTyfERbWp/mYTAGF8MMsezJuSqinvr+PL/NP/e+ByIl2jMxhorIGBZzBhYywYlRhYWRMzC3Odbqyrlyrly331X8qHJRMsSf+nePyQv08poU8MCb1Ym/o8vf/AkqOLn14HaoBhZ/VRod9M/bwTtz7tsPM0nnCgYr1+kg7ABNZ9eYNHYxvag3aSoxb6NNzSk1aFEbBYbo5pjYrMjgmcPkYS5sAEW1H2/PvR/WqRgH5FgYQA1AlmWsi3LREYp2eFrO/1+zET/jurOz4tlNsjFSCpSaPzHlTvWratsrr70VBQp18CREB97N6qkxZmfiUD3Rzyf2J6LQVKhiFiAQCAlRIwmmNd+ZticmQ3PpQ0cltlNzGoWdApJ4Yf5PrwCI+XHuc8hCTagjwgLl2lfAhNvmz52UswKF28A71f93uM3WNCUY4UWmz8sPpnUHiMrbUgg7TgwoWxZYFgCbZTuOM19N7atqQIFlyYAJz8wngtNf5Ou/rtWKA0tw37dHQM5wgAwCbKm5AOEF76nYl4eXKzBy8nm5PFw5qZxUVsqRk/DjcA5z1vcqkNiSHQec5pl+ALxMh8tejrufkzR/hCsyDlHCtid1mrNaBQJTALFkxQWA8YGX+SdYCwwBOfrr9LnV/58rNm6ttCk0BIsbIUKMkMYamjadqak8W73av8XGfGtiX0SHoLj07MefPo1DzaKlNZD08WAAPZjVDQdRRN+nTp32af3/71Tv3fg9eyhwrAIalBKAIa6XOHA6d/UYpF/pFw2JQ05lDlIZ/fW//gegUPjju/kfmpN46/igTNSQXVG29ZmYfjkBOJeX9IF4QKxclRyQ8RNKjAB+f/igP4GRuSMuxLw7mrOMOiPuhVGt7dmkjBviTbjEM7MfATzP/9V4MJsLGH58bmXLjlm6LdTJaaE/Uf9/r7Pa6mNwCVxBQGMErq4CU+F/Gdv/Y6jeXnV056qeVDUpdsgr6ekLfQWwEIYSErhAUFUE2yUkcAkJbMDGY1O4QsiuTu5M568vgb+EcH1J4IQ9bXBVB3fVBHdKdqXYIeXd5LCs5cx2diGverYhbzdz9rNejf+fqn4tQP6QcvWbUvbmotyqA+68wQMxGIACRcoiFSk6JclR/oEzoGgQpKI35eqfrUKskuxNud+23abdogyxK7do1/9/XWmrq7sks4KT8B5H54S4NlBTBppm9KVZ7debv1qg2W+i8ZgntGwvnVkDVQEqXaYoPQGEqqOqS5mySlmlD/H405LeaGUpsPN8uHABSzqkXp9Pe09fvjRUm5OOWrvSUgAJwAE8/tdy2tv7vDvS2nhUYiRvUXFolLq2V9mUUlSrNnGAQ7jIYmw6gUaGIQb0/+VPq3pS0zby5xLQD5DJLFbZZlZzxn9izX/PGRnNq/3NzarGkIhKgCAiIrKOiGB3qM3Cm5XGzxUaRESChH/3pI/+0p4d2GXXqFEVFRUVeVF51f3c9xcHkzUpEghgH+yIkd3+Lfe+YUz9/pmA5prR3mpj4sCBDEFEREXh/jRfnK/O32461gAwSC3rkrdCRGt7syqiQCTkudtvgCDwBmBCutEiaGCscSCwBmhBy4a6Lu5unwSp27ihXF4RTFggjL6xMWdV7Dhy5sydkBdfEkvGS6tFSIeKJBdFQSVeigxZshQopVYz1gjRANEE0QLR8Q7RQ4ugT//MoKHxahGs2RHSEUMsxGEilZmM5CoC6aqKUCMfSyyxVLBeEcpGcnugb4BGAgbADngZAot4gL7j6pPl4OP1RAH85v/br9MFUVU7/aO57Pth2Eraz9pVhiqMIuXInUsJNpa8nNZWYGWtDg4Kjjnhm3ZcEimkOLNJFVZSd4H+z14AoAcIHTbifnFeQJAwfpXX0WNxAIq2kKGqEM/Dcmav7WGJuht3u1J6S8/bO/7Gr4OqHoYbT0IaQLzOmctIFbxaKcQsslTwZcRKMsVY3aZwNFnUZzQ9iAvYdB5dxJKwIS68RiegCVRipdyrUOhtJWVl1RNOqkioAiwBeD/dANKmmWACn/kTgY6bInjNtZUJwD5wN40a2JAAgF6PVIDnzpoD9qpVg8Syy8B9Xm63ATMAJHQY/7lAJNHB/1Wr0DDM/4VkY7T85uKRxUrRZ0aT5i8KVwnlAq17h3uSu5PzmrIBuDA08NiLgQ4ewYUEjA/DFwniBp6RANCp617/MoqgnIoNwMfNXqmaMzrpXbKUh0h50wN3wjwgyMvu/IatSIg3KvxzKAOaSnbKe64gmwOO+FAjF9SjIFo+xiRPiupwMRuJmnnNOoqda1EBloMIOslL6DRfTwklqbNx4jLbCT2r/0dk3UMbYu3u6MDmFWexmsOhmOjeOQ1RItmBzWEcsBJEd79r7wpgu/uI5UBG/WpeI1ckCnpqd/IzfwfV1jH+Fh8agy9tBuSaPl/S2LZjjSe71gUTbKPt2bQE7eI0tgYwjYxDEZd1lnWzmTIBituQ6RYvUTsDI09Fqko7dIayzIEPRs3AztEnBbTg/kfOCIstCgxkmX0afxgHnbK9y8CoSygZ52lyqHWRrjc9ALxz3h0x/Lmv9DMiRzQTiXE/ZMcBr2OHMEUqi8dQMzNuwoKopP7zMBE360CYthwnT0opyDnWxxEIA4izAf2Ox9UDTRbumA1P/utnORf9Lt4e7ye1OMAzoi8M3ZgHd5tnpdKKyvYjCzpnEE20QFfQWAqCCfgEeDrBIH7Sr7nk2eNrXupe0peiyXvODexYpqyJESZHaUEKdo1ZE7uaI/TVh6YZN4hlqjh9RLIiW3AQzzBYQ1sfdVPpmxnrTZOINrG736WxCOhMr+AR5IL/B4CUBymQT3y03gtQNKm35jph/ojo1unboTnM0hhF3Jw7tQgtyzzLDKVMyrtjyvphgIDGlOGzZj7m4mClNPP5ek76nhB3fygrJU2OzQNLOAUioJ5JDrrljwhbRiLiM7YYZOu6LMZbI3vyshYgxx/4mG53ceaI2J0uf8R9Ta26hiXblmjR4cW4YvZAu79S5GkdG8jq1nOwLLKnsRWtTpLbaEDt8zWmQKZmrOi2Vmcf5nFJ5rZU4JVB7DaOd1n0VHCwLVSlsjTj7olR+mta8fHMQ6k2heh2/mfBDQefmDNvSwkEKiiHIt0ynio8NzvqpBantxXOZqeLbjC4lZvMKLbZ/d12T7y5uv1Cld1+xkH/V0a98NaYeXo42W8LE1nyg1056GB3/ga59OShvJNCBXcfi1FgwIR3FFiwITDCvI4tQGB5a8+KHdO8c2AIl8Zx7GS3ztwQuIMCH4EHCgJmPNOGkJgR3mnHlx9zEgsswcQfhaUIAhgSxJDgJJCSIYmssZGLglGIQUX1sBWLIy7ZxEuBSMUmrUYnXSYaWfJhCh40CmGK0ChmrCStlapkgJqJKpaq01WNOiY0rNRj05AkjZpgmpNNi1aINnTa5/j50XgFGHQ+OujSjatzYzEgLRxzAotTXJzh7FzdyUWXLHTZNRKuezwe34SM22R8lK5mFRPcJ3hC8JSEZzvBFz5x+EoViS2weNkEZFAirOdvYmuOTl5Z89bhIuWQuu4cbN0uAdZdHVSFTw5OhvBkRVqfZ2lbvbSvDmj6W4GBwZbDJHcOyzxH4JrX8LY9wB6sCj7tqrDB5BuOXVhGZzhAUVECCATbUQhUmQcU4JsPgcCXgtCngkjkFiQqNh+R5JFOPlElMdgk0kBmMwMu3QWBIqkrEoAuR4AGUQQVCaeExStiMlGwHYA2HLErklhEMlkUkUyQAsA3TQW01ZTJmuF2DsDZizKyyS7hgZwtaj+hUhSBGuKE7S3A503wgTKyySaObOKA159WqTSZ8h/iySCdowQqGwIqIGxFNOEsFoy9VhQRRjJZFJEsoI9F0mq/O3oRgAAA3OePgztviUvACRPbwMJ0lJuUs5TDjfdS1lPWUhaO9GGok15zr72GtJo0hRgkuid1osC8aQYWwjSh+ipcW/cSKm6PNxDyfPVmK/jH+K1jjtfiX8AvxW/F2/GY8D1wD+AO4taTVsMybi1uyYWfEM8sAZcQCEEQRUvpp3EN5qbnpNgnXN0Hb96OXYkdwmYfxjUoadkpBtrTNOY7n7sBJTWfLvJX5MNaoJHKI9+o9DORD5AeK2h/NU39V9W5lICuNcylz/uZzEWXoUuj/0YuYOkBRTkDBWFRbYXLhPNUeCMvy/AodAs0b6ne2JaGyEa2sR2JtsR6Y5a3eeQNyz9RZg/38Qi3chvPYI8Vstd6b3wkdx1MF2yQK65Uf4arxzRbrHAdCg+nHBcnZ0+Tc+x8uSAuuuRyueK6Kk5Fij3Ni2le5bwmb1CeilCpSrMWRq1MbPB0IMBq44ScwIMnL958+PLXCepZm9syW/dfmrjz3wx+bR225pprrrnmqm7m/rO5Qil1GN+Pg2xMBJxoZmYiIlJiYmZmZmbe2yykCc4F5ycE4MHNRQCAmbkxgwEAAIBj4Pem3Vjj9Y3aZMKWQSOQTuwT+HFzERHhJucutci2/4PTETsriWkClmLj4OLhf4dcTa2pLine truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#ccc;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:hsl(20, 1.5873015873%, 12.3529411765%);}#export-svg .error-text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);stroke:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#cccccc;stroke:#cccccc;}#export-svg .marker.cross{stroke:#cccccc;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg g.classGroup text{fill:#FFFFFF;stroke:none;font-family:"Recursive Variable",arial,sans-serif;font-size:10px;}#export-svg g.classGroup text .title{font-weight:bolder;}#export-svg .nodeLabel,#export-svg .edgeLabel{color:#ccc;}#export-svg .noteLabel .nodeLabel,#export-svg .noteLabel .edgeLabel{color:#28253D;}#export-svg .edgeLabel .label rect{fill:#111113;}#export-svg .label text{fill:#ccc;}#export-svg .labelBkg{background:#111113;}#export-svg .edgeLabel .label span{background:#111113;}#export-svg .classTitle{font-weight:bolder;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#111113;stroke:#FFFFFF;stroke-width:2;}#export-svg .divider{stroke:#FFFFFF;stroke-width:1;}#export-svg g.clickable{cursor:pointer;}#export-svg g.classGroup rect{fill:#111113;stroke:#FFFFFF;}#export-svg g.classGroup line{stroke:#FFFFFF;stroke-width:1;}#export-svg .classLabel .box{stroke:none;stroke-width:0;fill:#111113;opacity:0.5;}#export-svg .classLabel .label{fill:#FFFFFF;font-size:10px;}#export-svg .relation{stroke:#cccccc;stroke-width:2;fill:none;}#export-svg .dashed-line{stroke-dasharray:3;}#export-svg .dotted-line{stroke-dasharray:1 2;}#export-svg #compositionStart,#export-svg .composition{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #compositionEnd,#export-svg .composition{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #extensionStart,#export-svg .extension{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #extensionEnd,#export-svg .extension{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #aggregationStart,#export-svg .aggregation{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #aggregationEnd,#export-svg .aggregation{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #lollipopStart,#export-svg .lollipop{fill:#111113!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #lollipopEnd,#export-svg .lollipop{fill:#111113!important;stroke:#cccccc!important;stroke-width:1;}#export-svg .edgeTerminals{font-size:11px;line-height:initial;}#export-svg .classTitleText{text-anchor:middle;font-size:18px;fill:#ccc;}#export-svg .edgeLabel{background-color:hsl(180, 1.5873015873%, 28.3529411765%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(180, 1.5873015873%, 28.3529411765%);fill:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .cluster rect{fill:#1E1A2E;stroke:#BDBCCC;stroke-width:2px;}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#FFFFFF;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#FFFFFF;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#FFFFFF;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#FFFFFF;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#FFFFFF;filter:url(#drLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_02.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" style="max-width: 1332px;" viewBox="-50 -10 1332 1090" role="graphics-document document" aria-roledescription="sequence"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><rect x="40" y="618" fill="rgb(255, 235, 235)" width="1138" height="249" class="rect"/><rect x="40" y="346" fill="rgb(255, 245, 235)" width="636" height="213" class="rect"/><rect x="40" y="75" fill="rgb(235, 245, 255)" width="636" height="261" class="rect"/><g><rect x="1082" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="JavaServer" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(251, 146, 60); fill: rgb(255, 247, 237);" filter="url(#drop-shadow)"/><text x="1157" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="1157" dy="0">Java Server</tspan></text></g><g><rect x="566" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(45, 212, 191); fill: rgb(240, 253, 250);" filter="url(#drop-shadow)"/><text x="641" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g><g><rect x="0" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(232, 121, 249); fill: rgb(253, 244, 255);" filter="url(#drop-shadow)"/><text x="75" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g><g><line id="actor222" x1="1157" y1="65" x2="1157" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="JavaServer" data-et="life-line" data-id="JavaServer"/><g id="root-222" data-look="neo" data-et="participant" data-id="JavaServer"><rect x="1082" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="JavaServer" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(251, 146, 60); fill: rgb(255, 247, 237);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><text x="1157" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="1157" dy="0">Java Server</tspan></text></g></g><g><line id="actor221" x1="641" y1="65" x2="641" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Geyser" data-et="life-line" data-id="Geyser"/><g id="root-221" data-look="neo" data-et="participant" data-id="Geyser"><rect x="566" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(45, 212, 191); fill: rgb(240, 253, 250);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><text x="641" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g></g><g><line id="actor220" x1="75" y1="65" x2="75" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Client" data-et="life-line" data-id="Client"/><g id="root-220" data-look="neo" data-et="participant" data-id="Client"><rect x="0" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(232, 121, 249); fill: rgb(253, 244, 255);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><text x="75" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g></g><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#28253D;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:#ffffff;}#export-svg .error-text{fill:#000000;stroke:#000000;}#export-svg .edge-thickness-normal{stroke-width:2pLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_02_dark.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" style="max-width: 1332px;" viewBox="-50 -10 1332 1090" role="graphics-document document" aria-roledescription="sequence"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><rect x="40" y="618" fill="rgb(1, 50, 50)" width="1138" height="249" class="rect"/><rect x="40" y="346" fill="rgb(1, 25, 50)" width="636" height="213" class="rect"/><rect x="40" y="75" fill="rgb(1, 1, 50)" width="636" height="261" class="rect"/><g><rect x="1082" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="JavaServer" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(251, 146, 60);" filter="url(#drop-shadow)"/><text x="1157" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="1157" dy="0">Java Server</tspan></text></g><g><rect x="566" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(45, 212, 191);" filter="url(#drop-shadow)"/><text x="641" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g><g><rect x="0" y="974" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(232, 121, 249);" filter="url(#drop-shadow)"/><text x="75" y="1006.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g><g><line id="actor5" x1="1157" y1="65" x2="1157" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="JavaServer" data-et="life-line" data-id="JavaServer"/><g id="root-5" data-look="neo" data-et="participant" data-id="JavaServer"><rect x="1082" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="JavaServer" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(251, 146, 60);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#FFFFFF"/></filter></defs><text x="1157" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="1157" dy="0">Java Server</tspan></text></g></g><g><line id="actor4" x1="641" y1="65" x2="641" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Geyser" data-et="life-line" data-id="Geyser"/><g id="root-4" data-look="neo" data-et="participant" data-id="Geyser"><rect x="566" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(45, 212, 191);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#FFFFFF"/></filter></defs><text x="641" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g></g><g><line id="actor3" x1="75" y1="65" x2="75" y2="974" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Client" data-et="life-line" data-id="Client"/><g id="root-3" data-look="neo" data-et="participant" data-id="Client"><rect x="0" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(232, 121, 249);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#FFFFFF"/></filter></defs><text x="75" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g></g><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#ccc;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:hsl(20, 1.5873015873%, 12.3529411765%);}#export-svg .error-text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);stroke:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-Line truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_03.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="flowchart" style="max-width: 1814.8438720703125px;" viewBox="308.9886474609375 -207.49822998046875 1814.8438720703125 937.8803100585938" role="graphics-document document" aria-roledescription="flowchart-v2"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,d09GMgABAAAAAPP4ABQAAAACC1AAAPOFAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoRTG+58HJRkP01WQVKBEAZgP1NUQVSBYic8AIUuL4EoEQgKgrlQgo1LC4UeADCEmGIBNgIkA4o0BCAFjXYHj1kMB1tP8XFBnDDsYOLjdY5tyxhP1ODemquETQc3Z3pudCVj86rVErZNi3i3Y//2nORI8v//eUljjLWdtR0QKKbl20eS7FRQsiY7ZVRRptH0yqJXr2OtTaO1imIUpLbm1BAmJ01DbFHubzrOejQ6IZzx4KbA1Nb6Uefj6wvCSyqOqh1aZFkSC39rci0YSByiIZTD9Lmpc/ssLQ7lUAp1xX3bL+ReBGUOlM2UwpgsYb4rXVD3N9ygMjLwLTR0RbefbwtNGV09EkQXTH6a43fHVcFbscQThc1CkeLzYWWPfl664n/SvbTyfERbWp/mYTAGF8MMsezJuSqinvr+PL/NP/e+ByIl2jMxhorIGBZzBhYywYlRhYWRMzC3Odbqyrlyrly331X8qHJRMsSf+nePyQv08poU8MCb1Ym/o8vf/AkqOLn14HaoBhZ/VRod9M/bwTtz7tsPM0nnCgYr1+kg7ABNZ9eYNHYxvag3aSoxb6NNzSk1aFEbBYbo5pjYrMjgmcPkYS5sAEW1H2/PvR/WqRgH5FgYQA1AlmWsi3LREYp2eFrO/1+zET/jurOz4tlNsjFSCpSaPzHlTvWratsrr70VBQp18CREB97N6qkxZmfiUD3Rzyf2J6LQVKhiFiAQCAlRIwmmNd+ZticmQ3PpQ0cltlNzGoWdApJ4Yf5PrwCI+XHuc8hCTagjwgLl2lfAhNvmz52UswKF28A71f93uM3WNCUY4UWmz8sPpnUHiMrbUgg7TgwoWxZYFgCbZTuOM19N7atqQIFlyYAJz8wngtNf5Ou/rtWKA0tw37dHQM5wgAwCbKm5AOEF76nYl4eXKzBy8nm5PFw5qZxUVsqRk/DjcA5z1vcqkNiSHQec5pl+ALxMh8tejrufkzR/hCsyDlHCtid1mrNaBQJTALFkxQWA8YGX+SdYCwwBOfrr9LnV/58rNm6ttCk0BIsbIUKMkMYamjadqak8W73av8XGfGtiX0SHoLj07MefPo1DzaKlNZD08WAAPZjVDQdRRN+nTp32af3/71Tv3fg9eyhwrAIalBKAIa6XOHA6d/UYpF/pFw2JQ05lDlIZ/fW//gegUPjju/kfmpN46/igTNSQXVG29ZmYfjkBOJeX9IF4QKxclRyQ8RNKjAB+f/igP4GRuSMuxLw7mrOMOiPuhVGt7dmkjBviTbjEM7MfATzP/9V4MJsLGH58bmXLjlm6LdTJaaE/Uf9/r7Pa6mNwCVxBQGMErq4CU+F/Gdv/Y6jeXnV056qeVDUpdsgr6ekLfQWwEIYSErhAUFUE2yUkcAkJbMDGY1O4QsiuTu5M568vgb+EcH1J4IQ9bXBVB3fVBHdKdqXYIeXd5LCs5cx2diGverYhbzdz9rNejf+fqn4tQP6QcvWbUvbmotyqA+68wQMxGIACRcoiFSk6JclR/oEzoGgQpKI35eqfrUKskuxNud+23abdogyxK7do1/9/XWmrq7sks4KT8B5H54S4NlBTBppm9KVZ7debv1qg2W+i8ZgntGwvnVkDVQEqXaYoPQGEqqOqS5mySlmlD/H405LeaGUpsPN8uHABSzqkXp9Pe09fvjRUm5OOWrvSUgAJwAE8/tdy2tv7vDvS2nhUYiRvUXFolLq2V9mUUlSrNnGAQ7jIYmw6gUaGIQb0/+VPq3pS0zby5xLQD5DJLFbZZlZzxn9izX/PGRnNq/3NzarGkIhKgCAiIrKOiGB3qM3Cm5XGzxUaRESChH/3pI/+0p4d2GXXqFEVFRUVeVF51f3c9xcHkzUpEghgH+yIkd3+Lfe+YUz9/pmA5prR3mpj4sCBDEFEREXh/jRfnK/O32461gAwSC3rkrdCRGt7syqiQCTkudtvgCDwBmBCutEiaGCscSCwBmhBy4a6Lu5unwSp27ihXF4RTFggjL6xMWdV7Dhy5sydkBdfEkvGS6tFSIeKJBdFQSVeigxZshQopVYz1gjRANEE0QLR8Q7RQ4ugT//MoKHxahGs2RHSEUMsxGEilZmM5CoC6aqKUCMfSyyxVLBeEcpGcnugb4BGAgbADngZAot4gL7j6pPl4OP1RAH85v/br9MFUVU7/aO57Pth2Eraz9pVhiqMIuXInUsJNpa8nNZWYGWtDg4Kjjnhm3ZcEimkOLNJFVZSd4H+z14AoAcIHTbifnFeQJAwfpXX0WNxAIq2kKGqEM/Dcmav7WGJuht3u1J6S8/bO/7Gr4OqHoYbT0IaQLzOmctIFbxaKcQsslTwZcRKMsVY3aZwNFnUZzQ9iAvYdB5dxJKwIS68RiegCVRipdyrUOhtJWVl1RNOqkioAiwBeD/dANKmmWACn/kTgY6bInjNtZUJwD5wN40a2JAAgF6PVIDnzpoD9qpVg8Syy8B9Xm63ATMAJHQY/7lAJNHB/1Wr0DDM/4VkY7T85uKRxUrRZ0aT5i8KVwnlAq17h3uSu5PzmrIBuDA08NiLgQ4ewYUEjA/DFwniBp6RANCp617/MoqgnIoNwMfNXqmaMzrpXbKUh0h50wN3wjwgyMvu/IatSIg3KvxzKAOaSnbKe64gmwOO+FAjF9SjIFo+xiRPiupwMRuJmnnNOoqda1EBloMIOslL6DRfTwklqbNx4jLbCT2r/0dk3UMbYu3u6MDmFWexmsOhmOjeOQ1RItmBzWEcsBJEd79r7wpgu/uI5UBG/WpeI1ckCnpqd/IzfwfV1jH+Fh8agy9tBuSaPl/S2LZjjSe71gUTbKPt2bQE7eI0tgYwjYxDEZd1lnWzmTIBituQ6RYvUTsDI09Fqko7dIayzIEPRs3AztEnBbTg/kfOCIstCgxkmX0afxgHnbK9y8CoSygZ52lyqHWRrjc9ALxz3h0x/Lmv9DMiRzQTiXE/ZMcBr2OHMEUqi8dQMzNuwoKopP7zMBE360CYthwnT0opyDnWxxEIA4izAf2Ox9UDTRbumA1P/utnORf9Lt4e7ye1OMAzoi8M3ZgHd5tnpdKKyvYjCzpnEE20QFfQWAqCCfgEeDrBIH7Sr7nk2eNrXupe0peiyXvODexYpqyJESZHaUEKdo1ZE7uaI/TVh6YZN4hlqjh9RLIiW3AQzzBYQ1sfdVPpmxnrTZOINrG736WxCOhMr+AR5IL/B4CUBymQT3y03gtQNKm35jph/ojo1unboTnM0hhF3Jw7tQgtyzzLDKVMyrtjyvphgIDGlOGzZj7m4mClNPP5ek76nhB3fygrJU2OzQNLOAUioJ5JDrrljwhbRiLiM7YYZOu6LMZbI3vyshYgxx/4mG53ceaI2J0uf8R9Ta26hiXblmjR4cW4YvZAu79S5GkdG8jq1nOwLLKnsRWtTpLbaEDt8zWmQKZmrOi2Vmcf5nFJ5rZU4JVB7DaOd1n0VHCwLVSlsjTj7olR+mta8fHMQ6k2heh2/mfBDQefmDNvSwkEKiiHIt0ynio8NzvqpBantxXOZqeLbjC4lZvMKLbZ/d12T7y5uv1Cld1+xkH/V0a98NaYeXo42W8LE1nyg1056GB3/ga59OShvJNCBXcfi1FgwIR3FFiwITDCvI4tQGB5a8+KHdO8c2AIl8Zx7GS3ztwQuIMCH4EHCgJmPNOGkJgR3mnHlx9zEgsswcQfhaUIAhgSxJDgJJCSIYmssZGLglGIQUX1sBWLIy7ZxEuBSMUmrUYnXSYaWfJhCh40CmGK0ChmrCStlapkgJqJKpaq01WNOiY0rNRj05AkjZpgmpNNi1aINnTa5/j50XgFGHQ+OujSjatzYzEgLRxzAotTXJzh7FzdyUWXLHTZNRKuezwe34SM22R8lK5mFRPcJ3hC8JSEZzvBFz5x+EoViS2weNkEZFAirOdvYmuOTl5Z89bhIuWQuu4cbN0uAdZdHVSFTw5OhvBkRVqfZ2lbvbSvDmj6W4GBwZbDJHcOyzxH4JrX8LY9wB6sCj7tqrDB5BuOXVhGZzhAUVECCATbUQhUmQcU4JsPgcCXgtCngkjkFiQqNh+R5JFOPlElMdgk0kBmMwMu3QWBIqkrEoAuR4AGUQQVCaeExStiMlGwHYA2HLErklhEMlkUkUyQAsA3TQW01ZTJmuF2DsDZizKyyS7hgZwtaj+hUhSBGuKE7S3A503wgTKyySaObOKA159WqTSZ8h/iySCdowQqGwIqIGxFNOEsFoy9VhQRRjJZFJEsoI9F0mq/O3oRgAAA3OePgztviUvACRPbwMJ0lJuUs5TDjfdS1lPWUhaO9GGok15zr72GtJo0hRgkuid1osC8aQYWwjSh+ipcW/cSKm6PNxDyfPVmK/jH+K1jjtfiX8AvxW/F2/GY8D1wD+AO4taTVsMybi1uyYWfEM8sAZcQCEEQRUvpp3EN5qbnpNgnXN0Hb96OXYkdwmYfxjUoadkpBtrTNOY7n7sBJTWfLvJX5MNaoJHKI9+o9DORD5AeK2h/NU39V9W5lICuNcylz/uZzEWXoUuj/0YuYOkBRTkDBWFRbYXLhPNUeCMvy/AodAs0b6ne2JaGyEa2sR2JtsR6Y5a3eeQNyz9RZg/38Qi3chvPYI8Vstd6b3wkdx1MF2yQK65Uf4arxzRbrHAdCg+nHBcnZ0+Tc+x8uSAuuuRyueK6Kk5Fij3Ni2le5bwmb1CeilCpSrMWRq1MbPB0IMBq44ScwIMnL958+PLXCepZm9syW/dfmrjz3wx+bR225pprrrnmqm7m/rO5Qil1GN+Pg2xMBJxoZmYiIlJiYmZmZmbe2yykCc4F5ycE4MHNRQCAmbkxgwEAAIBj4Pem3Vjj9Y3aZMKWQSOQTuwT+HFzERHhJucutci2/4PTETsriWkClmLj4OLhf4dcTa2pLine truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#28253D;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:#ffffff;}#export-svg .error-text{fill:#000000;stroke:#000000;}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#000000;stroke:#000000;}#export-svg .marker.cross{stroke:#000000;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg .label{font-family:"Recursive Variable",arial,sans-serif;color:#28253D;}#export-svg .cluster-label text{fill:#000000;}#export-svg .cluster-label span{color:#000000;}#export-svg .cluster-label span p{background-color:transparent;}#export-svg .label text,#export-svg span{fill:#28253D;color:#28253D;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#ffffff;stroke:#28253D;stroke-width:2px;}#export-svg .rough-node .label text,#export-svg .node .label text,#export-svg .image-shape .label,#export-svg .icon-shape .label{text-anchor:middle;}#export-svg .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#export-svg .rough-node .label,#export-svg .node .label,#export-svg .image-shape .label,#export-svg .icon-shape .label{text-align:center;}#export-svg .node.clickable{cursor:pointer;}#export-svg .root .anchor path{fill:#000000!important;stroke-width:0;stroke:#000000;}#export-svg .arrowheadPath{fill:#000000;}#export-svg .edgePath .path{stroke:#000000;stroke-width:2px;}#export-svg .flowchart-link{stroke:#000000;fill:none;}#export-svg .edgeLabel{background-color:hsl(-120, 0%, 80%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(-120, 0%, 80%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(-120, 0%, 80%);fill:hsl(-120, 0%, 80%);}#export-svg .labelBkg{background-color:rgba(204, 204, 204, 0.5);}#export-svg .cluster rect{fill:#F9F9FB;stroke:#BDBCCC;stroke-width:2px;}#export-svg .cluster text{fill:#000000;}#export-svg .cluster span{color:#000000;}#export-svg div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"Recursive Variable",arial,sans-serif;font-size:12px;background:#ffffff;border:1px solid hsl(0, 0%, 90%);border-radius:2px;pointer-events:none;z-index:100;}#export-svg .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#28253D;}#export-svg rect.text{fill:none;stroke-width:0;}#export-svg .icon-shape,#export-svg .image-shape{background-color:hsl(-120, 0%, 80%);text-align:center;}#export-svg .icon-shape p,#export-svg .image-shape p{background-color:hsl(-120, 0%, 80%);padding:2px;}#export-svg .icon-shape rect,#export-svg .image-shape rect{opacity:0.5;background-color:hsl(-120, 0%, 80%);fill:hsl(-120, 0%, 80%);}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#28253D;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#28253D;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#28253D;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node circle .state-start{fill:#000000;}#export-svg [data-look="neo"].statediagram-cluster rect{fill:#F9F9FB;stroke:#28253D;stroke-width:2;}#export-svg [data-look="neo"].icon-shape .icon{fill:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].icon-shape .icon-neo path{stroke:#28253D;filter:url(#drop-shadow);}#export-svg :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;}</style><g><marker id="export-svg_flowchart-v2-pointEnd" class="marker flowchart-v2" viewBox="0 0 11.5 14" refX="7.75" refY="7" markerUnits="userSpaceOnUse" markerWidth="10.5" markerHeight="14" orient="auto"><path d="M 0 0 L 11.5 7 L 0 14 z" class="arrowMarkerPath" style="stroke-width: 0pLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_03_dark.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="flowchart" style="max-width: 1814.84px;" viewBox="308.9886474609375 -207.49822998046875 1814.8438720703125 937.8803100585938" role="graphics-document document" aria-roledescription="flowchart-v2"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,d09GMgABAAAAAPP4ABQAAAACC1AAAPOFAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoRTG+58HJRkP01WQVKBEAZgP1NUQVSBYic8AIUuL4EoEQgKgrlQgo1LC4UeADCEmGIBNgIkA4o0BCAFjXYHj1kMB1tP8XFBnDDsYOLjdY5tyxhP1ODemquETQc3Z3pudCVj86rVErZNi3i3Y//2nORI8v//eUljjLWdtR0QKKbl20eS7FRQsiY7ZVRRptH0yqJXr2OtTaO1imIUpLbm1BAmJ01DbFHubzrOejQ6IZzx4KbA1Nb6Uefj6wvCSyqOqh1aZFkSC39rci0YSByiIZTD9Lmpc/ssLQ7lUAp1xX3bL+ReBGUOlM2UwpgsYb4rXVD3N9ygMjLwLTR0RbefbwtNGV09EkQXTH6a43fHVcFbscQThc1CkeLzYWWPfl664n/SvbTyfERbWp/mYTAGF8MMsezJuSqinvr+PL/NP/e+ByIl2jMxhorIGBZzBhYywYlRhYWRMzC3Odbqyrlyrly331X8qHJRMsSf+nePyQv08poU8MCb1Ym/o8vf/AkqOLn14HaoBhZ/VRod9M/bwTtz7tsPM0nnCgYr1+kg7ABNZ9eYNHYxvag3aSoxb6NNzSk1aFEbBYbo5pjYrMjgmcPkYS5sAEW1H2/PvR/WqRgH5FgYQA1AlmWsi3LREYp2eFrO/1+zET/jurOz4tlNsjFSCpSaPzHlTvWratsrr70VBQp18CREB97N6qkxZmfiUD3Rzyf2J6LQVKhiFiAQCAlRIwmmNd+ZticmQ3PpQ0cltlNzGoWdApJ4Yf5PrwCI+XHuc8hCTagjwgLl2lfAhNvmz52UswKF28A71f93uM3WNCUY4UWmz8sPpnUHiMrbUgg7TgwoWxZYFgCbZTuOM19N7atqQIFlyYAJz8wngtNf5Ou/rtWKA0tw37dHQM5wgAwCbKm5AOEF76nYl4eXKzBy8nm5PFw5qZxUVsqRk/DjcA5z1vcqkNiSHQec5pl+ALxMh8tejrufkzR/hCsyDlHCtid1mrNaBQJTALFkxQWA8YGX+SdYCwwBOfrr9LnV/58rNm6ttCk0BIsbIUKMkMYamjadqak8W73av8XGfGtiX0SHoLj07MefPo1DzaKlNZD08WAAPZjVDQdRRN+nTp32af3/71Tv3fg9eyhwrAIalBKAIa6XOHA6d/UYpF/pFw2JQ05lDlIZ/fW//gegUPjju/kfmpN46/igTNSQXVG29ZmYfjkBOJeX9IF4QKxclRyQ8RNKjAB+f/igP4GRuSMuxLw7mrOMOiPuhVGt7dmkjBviTbjEM7MfATzP/9V4MJsLGH58bmXLjlm6LdTJaaE/Uf9/r7Pa6mNwCVxBQGMErq4CU+F/Gdv/Y6jeXnV056qeVDUpdsgr6ekLfQWwEIYSErhAUFUE2yUkcAkJbMDGY1O4QsiuTu5M568vgb+EcH1J4IQ9bXBVB3fVBHdKdqXYIeXd5LCs5cx2diGverYhbzdz9rNejf+fqn4tQP6QcvWbUvbmotyqA+68wQMxGIACRcoiFSk6JclR/oEzoGgQpKI35eqfrUKskuxNud+23abdogyxK7do1/9/XWmrq7sks4KT8B5H54S4NlBTBppm9KVZ7debv1qg2W+i8ZgntGwvnVkDVQEqXaYoPQGEqqOqS5mySlmlD/H405LeaGUpsPN8uHABSzqkXp9Pe09fvjRUm5OOWrvSUgAJwAE8/tdy2tv7vDvS2nhUYiRvUXFolLq2V9mUUlSrNnGAQ7jIYmw6gUaGIQb0/+VPq3pS0zby5xLQD5DJLFbZZlZzxn9izX/PGRnNq/3NzarGkIhKgCAiIrKOiGB3qM3Cm5XGzxUaRESChH/3pI/+0p4d2GXXqFEVFRUVeVF51f3c9xcHkzUpEghgH+yIkd3+Lfe+YUz9/pmA5prR3mpj4sCBDEFEREXh/jRfnK/O32461gAwSC3rkrdCRGt7syqiQCTkudtvgCDwBmBCutEiaGCscSCwBmhBy4a6Lu5unwSp27ihXF4RTFggjL6xMWdV7Dhy5sydkBdfEkvGS6tFSIeKJBdFQSVeigxZshQopVYz1gjRANEE0QLR8Q7RQ4ugT//MoKHxahGs2RHSEUMsxGEilZmM5CoC6aqKUCMfSyyxVLBeEcpGcnugb4BGAgbADngZAot4gL7j6pPl4OP1RAH85v/br9MFUVU7/aO57Pth2Eraz9pVhiqMIuXInUsJNpa8nNZWYGWtDg4Kjjnhm3ZcEimkOLNJFVZSd4H+z14AoAcIHTbifnFeQJAwfpXX0WNxAIq2kKGqEM/Dcmav7WGJuht3u1J6S8/bO/7Gr4OqHoYbT0IaQLzOmctIFbxaKcQsslTwZcRKMsVY3aZwNFnUZzQ9iAvYdB5dxJKwIS68RiegCVRipdyrUOhtJWVl1RNOqkioAiwBeD/dANKmmWACn/kTgY6bInjNtZUJwD5wN40a2JAAgF6PVIDnzpoD9qpVg8Syy8B9Xm63ATMAJHQY/7lAJNHB/1Wr0DDM/4VkY7T85uKRxUrRZ0aT5i8KVwnlAq17h3uSu5PzmrIBuDA08NiLgQ4ewYUEjA/DFwniBp6RANCp617/MoqgnIoNwMfNXqmaMzrpXbKUh0h50wN3wjwgyMvu/IatSIg3KvxzKAOaSnbKe64gmwOO+FAjF9SjIFo+xiRPiupwMRuJmnnNOoqda1EBloMIOslL6DRfTwklqbNx4jLbCT2r/0dk3UMbYu3u6MDmFWexmsOhmOjeOQ1RItmBzWEcsBJEd79r7wpgu/uI5UBG/WpeI1ckCnpqd/IzfwfV1jH+Fh8agy9tBuSaPl/S2LZjjSe71gUTbKPt2bQE7eI0tgYwjYxDEZd1lnWzmTIBituQ6RYvUTsDI09Fqko7dIayzIEPRs3AztEnBbTg/kfOCIstCgxkmX0afxgHnbK9y8CoSygZ52lyqHWRrjc9ALxz3h0x/Lmv9DMiRzQTiXE/ZMcBr2OHMEUqi8dQMzNuwoKopP7zMBE360CYthwnT0opyDnWxxEIA4izAf2Ox9UDTRbumA1P/utnORf9Lt4e7ye1OMAzoi8M3ZgHd5tnpdKKyvYjCzpnEE20QFfQWAqCCfgEeDrBIH7Sr7nk2eNrXupe0peiyXvODexYpqyJESZHaUEKdo1ZE7uaI/TVh6YZN4hlqjh9RLIiW3AQzzBYQ1sfdVPpmxnrTZOINrG736WxCOhMr+AR5IL/B4CUBymQT3y03gtQNKm35jph/ojo1unboTnM0hhF3Jw7tQgtyzzLDKVMyrtjyvphgIDGlOGzZj7m4mClNPP5ek76nhB3fygrJU2OzQNLOAUioJ5JDrrljwhbRiLiM7YYZOu6LMZbI3vyshYgxx/4mG53ceaI2J0uf8R9Ta26hiXblmjR4cW4YvZAu79S5GkdG8jq1nOwLLKnsRWtTpLbaEDt8zWmQKZmrOi2Vmcf5nFJ5rZU4JVB7DaOd1n0VHCwLVSlsjTj7olR+mta8fHMQ6k2heh2/mfBDQefmDNvSwkEKiiHIt0ynio8NzvqpBantxXOZqeLbjC4lZvMKLbZ/d12T7y5uv1Cld1+xkH/V0a98NaYeXo42W8LE1nyg1056GB3/ga59OShvJNCBXcfi1FgwIR3FFiwITDCvI4tQGB5a8+KHdO8c2AIl8Zx7GS3ztwQuIMCH4EHCgJmPNOGkJgR3mnHlx9zEgsswcQfhaUIAhgSxJDgJJCSIYmssZGLglGIQUX1sBWLIy7ZxEuBSMUmrUYnXSYaWfJhCh40CmGK0ChmrCStlapkgJqJKpaq01WNOiY0rNRj05AkjZpgmpNNi1aINnTa5/j50XgFGHQ+OujSjatzYzEgLRxzAotTXJzh7FzdyUWXLHTZNRKuezwe34SM22R8lK5mFRPcJ3hC8JSEZzvBFz5x+EoViS2weNkEZFAirOdvYmuOTl5Z89bhIuWQuu4cbN0uAdZdHVSFTw5OhvBkRVqfZ2lbvbSvDmj6W4GBwZbDJHcOyzxH4JrX8LY9wB6sCj7tqrDB5BuOXVhGZzhAUVECCATbUQhUmQcU4JsPgcCXgtCngkjkFiQqNh+R5JFOPlElMdgk0kBmMwMu3QWBIqkrEoAuR4AGUQQVCaeExStiMlGwHYA2HLErklhEMlkUkUyQAsA3TQW01ZTJmuF2DsDZizKyyS7hgZwtaj+hUhSBGuKE7S3A503wgTKyySaObOKA159WqTSZ8h/iySCdowQqGwIqIGxFNOEsFoy9VhQRRjJZFJEsoI9F0mq/O3oRgAAA3OePgztviUvACRPbwMJ0lJuUs5TDjfdS1lPWUhaO9GGok15zr72GtJo0hRgkuid1osC8aQYWwjSh+ipcW/cSKm6PNxDyfPVmK/jH+K1jjtfiX8AvxW/F2/GY8D1wD+AO4taTVsMybi1uyYWfEM8sAZcQCEEQRUvpp3EN5qbnpNgnXN0Hb96OXYkdwmYfxjUoadkpBtrTNOY7n7sBJTWfLvJX5MNaoJHKI9+o9DORD5AeK2h/NU39V9W5lICuNcylz/uZzEWXoUuj/0YuYOkBRTkDBWFRbYXLhPNUeCMvy/AodAs0b6ne2JaGyEa2sR2JtsR6Y5a3eeQNyz9RZg/38Qi3chvPYI8Vstd6b3wkdx1MF2yQK65Uf4arxzRbrHAdCg+nHBcnZ0+Tc+x8uSAuuuRyueK6Kk5Fij3Ni2le5bwmb1CeilCpSrMWRq1MbPB0IMBq44ScwIMnL958+PLXCepZm9syW/dfmrjz3wx+bR225pprrrnmqm7m/rO5Qil1GN+Pg2xMBJxoZmYiIlJiYmZmZmbe2yykCc4F5ycE4MHNRQCAmbkxgwEAAIBj4Pem3Vjj9Y3aZMKWQSOQTuwT+HFzERHhJucutci2/4PTETsriWkClmLj4OLhf4dcTa2pLine truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#ccc;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:hsl(20, 1.5873015873%, 12.3529411765%);}#export-svg .error-text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);stroke:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#cccccc;stroke:#cccccc;}#export-svg .marker.cross{stroke:#cccccc;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg .label{font-family:"Recursive Variable",arial,sans-serif;color:#e0dfdf;}#export-svg .cluster-label text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .cluster-label span{color:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .cluster-label span p{background-color:transparent;}#export-svg .label text,#export-svg span{fill:#e0dfdf;color:#e0dfdf;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#111113;stroke:#FFFFFF;stroke-width:2px;}#export-svg .rough-node .label text,#export-svg .node .label text,#export-svg .image-shape .label,#export-svg .icon-shape .label{text-anchor:middle;}#export-svg .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#export-svg .rough-node .label,#export-svg .node .label,#export-svg .image-shape .label,#export-svg .icon-shape .label{text-align:center;}#export-svg .node.clickable{cursor:pointer;}#export-svg .root .anchor path{fill:#cccccc!important;stroke-width:0;stroke:#cccccc;}#export-svg .arrowheadPath{fill:#cccccc;}#export-svg .edgePath .path{stroke:#cccccc;stroke-width:2px;}#export-svg .flowchart-link{stroke:#cccccc;fill:none;}#export-svg .edgeLabel{background-color:hsl(180, 1.5873015873%, 28.3529411765%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(180, 1.5873015873%, 28.3529411765%);fill:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .labelBkg{background-color:rgba(71.1523809525, 73.4476190477, 73.4476190477, 0.5);}#export-svg .cluster rect{fill:#1E1A2E;stroke:#BDBCCC;stroke-width:2px;}#export-svg .cluster text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .cluster span{color:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"Recursive Variable",arial,sans-serif;font-size:12px;background:hsl(20, 1.5873015873%, 12.3529411765%);border:1px solid rgba(255, 255, 255, 0.25);border-radius:2px;pointer-events:none;z-index:100;}#export-svg .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#ccc;}#export-svg rect.text{fill:none;stroke-width:0;}#export-svg .icon-shape,#export-svg .image-shape{background-color:hsl(180, 1.5873015873%, 28.3529411765%);text-align:center;}#export-svg .icon-shape p,#export-svg .image-shape p{background-color:hsl(180, 1.5873015873%, 28.3529411765%);padding:2px;}#export-svg .icon-shape rect,#export-svg .image-shape rect{opacity:0.5;background-color:hsl(180, 1.5873015873%, 28.3529411765%);fill:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#FFFFFF;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#FFFFFF;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#FFFFFF;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#FFFFFF;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#FFFFFF;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node circle .state-start{fill:#000000;}#export-svg [data-look="neo"].statediagram-cluster rect{fill:#16141F;stroke:#FFFFFF;stroke-width:2;}#export-svg [data-look="nLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_04.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" style="max-width: 816px;" viewBox="-50 -10 816 1062" role="graphics-document document" aria-roledescription="sequence"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><rect x="40" y="617" fill="rgb(255, 235, 235)" width="636" height="309" class="rect"/><rect x="40" y="346" fill="rgb(255, 245, 235)" width="636" height="261" class="rect"/><rect x="40" y="75" fill="rgb(235, 245, 255)" width="636" height="261" class="rect"/><g><rect x="566" y="946" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(45, 212, 191); fill: rgb(240, 253, 250);" filter="url(#drop-shadow)"/><text x="641" y="978.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g><g><rect x="0" y="946" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(232, 121, 249); fill: rgb(253, 244, 255);" filter="url(#drop-shadow)"/><text x="75" y="978.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g><g><line id="actor447" x1="641" y1="65" x2="641" y2="946" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Geyser" data-et="life-line" data-id="Geyser"/><g id="root-447" data-look="neo" data-et="participant" data-id="Geyser"><rect x="566" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(45, 212, 191); fill: rgb(240, 253, 250);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><text x="641" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g></g><g><line id="actor446" x1="75" y1="65" x2="75" y2="946" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Client" data-et="life-line" data-id="Client"/><g id="root-446" data-look="neo" data-et="participant" data-id="Client"><rect x="0" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(232, 121, 249); fill: rgb(253, 244, 255);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><text x="75" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g></g><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#28253D;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:#ffffff;}#export-svg .error-text{fill:#000000;stroke:#000000;}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#000000;stroke:#000000;}#export-svg .marker.cross{stroke:#000000;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg .actor{stroke:#28253D;fill:#ffffff;stroke-width:2;}#export-svg rect.actor.outer-path[data-look="neo"]{filter:url(#drop-shadow);}#export-svg rect.note[data-look="neo"]{stroke:#FACC15;fill:#fff5ad;filter:url(#drop-shadow);stroke-width:2;}#export-svg text.actor&gt;tspan{fill:#28253D;stroke:none;}#export-svg .actor-line{stroke:#28253D;}#export-svg .messageLine0{stroke-width:2;stroke-dasharray:none;stroke:#28253D;}#export-svg .messageLine1{stroke-width:2;stroke-dasharray:2,2;stroke:#28253D;}#export-svg #arrowhead path{fill:#28253D;stroke:#28253D;}#export-svg .sequenceNumber{fill:#ffffff;}#export-svg #sequencenumber{fill:#28253D;}#export-svg #crosshead path{fill:#28253D;stroke:#28253D;}#export-svg .messageText{fill:#28253D;stroke:none;}#export-svg .labelBox{stroke:#28253D;fill:#ffffff;filter:url(#drop-shadow);}#export-svg .labelText,#export-svg .labelTexLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_04_dark.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" style="max-width: 816px;" viewBox="-50 -10 816 1062" role="graphics-document document" aria-roledescription="sequence"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><rect x="40" y="617" fill="rgb(1, 50, 50)" width="636" height="309" class="rect"/><rect x="40" y="346" fill="rgb(1, 25, 50)" width="636" height="261" class="rect"/><rect x="40" y="75" fill="rgb(1, 1, 50)" width="636" height="261" class="rect"/><g><rect x="566" y="946" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(45, 212, 191);" filter="url(#drop-shadow)"/><text x="641" y="978.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g><g><rect x="0" y="946" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-bottom" data-look="neo" style="stroke: rgb(232, 121, 249);" filter="url(#drop-shadow)"/><text x="75" y="978.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g><g><line id="actor473" x1="641" y1="65" x2="641" y2="946" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Geyser" data-et="life-line" data-id="Geyser"/><g id="root-473" data-look="neo" data-et="participant" data-id="Geyser"><rect x="566" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Geyser" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(45, 212, 191);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#FFFFFF"/></filter></defs><text x="641" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="641" dy="0">Geyser</tspan></text></g></g><g><line id="actor472" x1="75" y1="65" x2="75" y2="946" class="actor-line 200" stroke-width="0.5px" stroke="#999" name="Client" data-et="life-line" data-id="Client"/><g id="root-472" data-look="neo" data-et="participant" data-id="Client"><rect x="0" y="0" fill="#eaeaea" stroke="#666" width="150" height="65" name="Client" rx="6" ry="6" class="actor actor-top" data-look="neo" style="stroke: rgb(232, 121, 249);" filter="url(#drop-shadow)"/><defs><filter id="drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#FFFFFF"/></filter></defs><text x="75" y="32.5" style="text-anchor: middle; font-size: 16px; font-weight: 400;" dominant-baseline="central" alignment-baseline="central" class="actor actor-box"><tspan x="75" dy="0">Client</tspan></text></g></g><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#ccc;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:hsl(20, 1.5873015873%, 12.3529411765%);}#export-svg .error-text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);stroke:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#cccccc;stroke:#cccccc;}#export-svg .marker.cross{stroke:#cccccc;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg .actor{stroke:#FFFFFF;fill:#111113;stroke-width:2;}#export-svg rect.actor.outer-path[data-look="neo"]{filter:url(#drop-shadow);}#export-svg rect.note[data-look="neo"]{stroke:#FACC15;fill:#FEF9C3;filter:url(#drop-shadow);stroke-width:2;}#export-svg text.actor&gt;tspan{fill:#e0dfdf;stroke:none;}#export-svg .actor-line{stroke:#FFFFFF;}#export-svg .messageLine0{stroke-width:2;stroke-dasharray:none;stroke:#FFFFFF;}#export-svg .messageLine1{stroke-width:2;stroke-dasharray:2,2;stroke:#FFFFFF;}#export-svg #arrowhead path{fill:#FFFFFF;stroke:#FFFFFF;}#export-svg .sequenceNumber{fill:#333333;}#export-svg #sequencenumber{fill:#FFFFFF;}#export-svg #crosshead path{fill:#FFFFFF;stroke:#FFFFFF;}#export-svg .messageText{fill:#ccc;stroke:none;}#export-svg .labelBox{stroke:#BDBCCC;fill:#111113;filter:url(#drop-shadow);}#export-svg .labelText,#export-svg .labelText&gtLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_05.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="classDiagram" style="max-width: 1155.88330078125px;" viewBox="0 0 1155.88330078125 1208" role="graphics-document document" aria-roledescription="class"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#28253D;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:#ffffff;}#export-svg .error-text{fill:#000000;stroke:#000000;}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#000000;stroke:#000000;}#export-svg .marker.cross{stroke:#000000;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg g.classGroup text{fill:#28253D;stroke:none;font-family:"Recursive Variable",arial,sans-serif;font-size:10px;}#export-svg g.classGroup text .title{font-weight:bolder;}#export-svg .nodeLabel,#export-svg .edgeLabel{color:#28253D;}#export-svg .noteLabel .nodeLabel,#export-svg .noteLabel .edgeLabel{color:#28253D;}#export-svg .edgeLabel .label rect{fill:#ffffff;}#export-svg .label text{fill:#28253D;}#export-svg .labelBkg{background:#ffffff;}#export-svg .edgeLabel .label span{background:#ffffff;}#export-svg .classTitle{font-weight:bolder;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#ffffff;stroke:#28253D;stroke-width:2;}#export-svg .divider{stroke:#28253D;stroke-width:1;}#export-svg g.clickable{cursor:pointer;}#export-svg g.classGroup rect{fill:#ffffff;stroke:#28253D;}#export-svg g.classGroup line{stroke:#28253D;stroke-width:1;}#export-svg .classLabel .box{stroke:none;stroke-width:0;fill:#ffffff;opacity:0.5;}#export-svg .classLabel .label{fill:#28253D;font-size:10px;}#export-svg .relation{stroke:#000000;stroke-width:2;fill:none;}#export-svg .dashed-line{stroke-dasharray:3;}#export-svg .dotted-line{stroke-dasharray:1 2;}#export-svg #compositionStart,#export-svg .composition{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #compositionEnd,#export-svg .composition{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#000000!important;stroke:#000000!important;stroke-width:1;}#export-svg #extensionStart,#export-svg .extension{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #extensionEnd,#export-svg .extension{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #aggregationStart,#export-svg .aggregation{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #aggregationEnd,#export-svg .aggregation{fill:transparent!important;stroke:#000000!important;stroke-width:1;}#export-svg #lollipopStart,#export-svg .lollipop{fill:#ffffff!important;stroke:#000000!important;stroke-width:1;}#export-svg #lollipopEnd,#export-svg .lollipop{fill:#ffffff!important;stroke:#000000!important;stroke-width:1;}#export-svg .edgeTerminals{font-size:11px;line-height:initial;}#export-svg .classTitleText{text-anchor:middle;font-size:18px;fill:#28253D;}#export-svg .edgeLabel{background-color:hsl(-120, 0%, 80%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(-120, 0%, 80%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(-120, 0%, 80%);fill:hsl(-120, 0%, 80%);}#export-svg .cluster rect{fill:#F9F9FB;stroke:#BDBCCC;stroke-width:2px;}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#28253D;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#28253D;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#28253D;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#28253D;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node circle .state-start{fill:#000000;}#export-svg [data-look="neo"].statediagram-cluster rect{fill:#F9F9FB;stroke:#28253D;stroke-width:2;}#export-svLine truncated

static/img/blog/2025-11-30-early-packet-handling-attack/chart_05_dark.svg

@@ -0,0 +1,102 @@
+<svg id="export-svg" width="100%" xmlns="http://www.w3.org/2000/svg" class="classDiagram" style="max-width: 1155.88px;" viewBox="0 0 1155.88330078125 1208" role="graphics-document document" aria-roledescription="class"><style xmlns="http://www.w3.org/1999/xhtml">/* Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION &amp; CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+ */
+@font-face {
+  font-family: 'Recursive Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 300 1000;
+  src: url("data:font/woff2;base64,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 truncated
+  unicode-range: U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;
+}</style><style xmlns="http://www.w3.org/1999/xhtml">@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css"); p {margin: 0;}</style><style>#export-svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;fill:#ccc;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#export-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#export-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#export-svg .error-icon{fill:hsl(20, 1.5873015873%, 12.3529411765%);}#export-svg .error-text{fill:rgb(222.9999999999, 223.6666666666, 223.9999999999);stroke:rgb(222.9999999999, 223.6666666666, 223.9999999999);}#export-svg .edge-thickness-normal{stroke-width:2px;}#export-svg .edge-thickness-thick{stroke-width:3.5px;}#export-svg .edge-pattern-solid{stroke-dasharray:0;}#export-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#export-svg .edge-pattern-dashed{stroke-dasharray:3;}#export-svg .edge-pattern-dotted{stroke-dasharray:2;}#export-svg .marker{fill:#cccccc;stroke:#cccccc;}#export-svg .marker.cross{stroke:#cccccc;}#export-svg svg{font-family:"Recursive Variable",arial,sans-serif;font-size:14px;}#export-svg p{margin:0;}#export-svg g.classGroup text{fill:#FFFFFF;stroke:none;font-family:"Recursive Variable",arial,sans-serif;font-size:10px;}#export-svg g.classGroup text .title{font-weight:bolder;}#export-svg .nodeLabel,#export-svg .edgeLabel{color:#ccc;}#export-svg .noteLabel .nodeLabel,#export-svg .noteLabel .edgeLabel{color:#28253D;}#export-svg .edgeLabel .label rect{fill:#111113;}#export-svg .label text{fill:#ccc;}#export-svg .labelBkg{background:#111113;}#export-svg .edgeLabel .label span{background:#111113;}#export-svg .classTitle{font-weight:bolder;}#export-svg .node rect,#export-svg .node circle,#export-svg .node ellipse,#export-svg .node polygon,#export-svg .node path{fill:#111113;stroke:#FFFFFF;stroke-width:2;}#export-svg .divider{stroke:#FFFFFF;stroke-width:1;}#export-svg g.clickable{cursor:pointer;}#export-svg g.classGroup rect{fill:#111113;stroke:#FFFFFF;}#export-svg g.classGroup line{stroke:#FFFFFF;stroke-width:1;}#export-svg .classLabel .box{stroke:none;stroke-width:0;fill:#111113;opacity:0.5;}#export-svg .classLabel .label{fill:#FFFFFF;font-size:10px;}#export-svg .relation{stroke:#cccccc;stroke-width:2;fill:none;}#export-svg .dashed-line{stroke-dasharray:3;}#export-svg .dotted-line{stroke-dasharray:1 2;}#export-svg #compositionStart,#export-svg .composition{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #compositionEnd,#export-svg .composition{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #dependencyStart,#export-svg .dependency{fill:#cccccc!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #extensionStart,#export-svg .extension{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #extensionEnd,#export-svg .extension{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #aggregationStart,#export-svg .aggregation{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #aggregationEnd,#export-svg .aggregation{fill:transparent!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #lollipopStart,#export-svg .lollipop{fill:#111113!important;stroke:#cccccc!important;stroke-width:1;}#export-svg #lollipopEnd,#export-svg .lollipop{fill:#111113!important;stroke:#cccccc!important;stroke-width:1;}#export-svg .edgeTerminals{font-size:11px;line-height:initial;}#export-svg .classTitleText{text-anchor:middle;font-size:18px;fill:#ccc;}#export-svg .edgeLabel{background-color:hsl(180, 1.5873015873%, 28.3529411765%);text-align:center;}#export-svg .edgeLabel p{background-color:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .edgeLabel rect{opacity:0.5;background-color:hsl(180, 1.5873015873%, 28.3529411765%);fill:hsl(180, 1.5873015873%, 28.3529411765%);}#export-svg .cluster rect{fill:#1E1A2E;stroke:#BDBCCC;stroke-width:2px;}#export-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#export-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#export-svg .node .neo-node{stroke:#FFFFFF;}#export-svg [data-look="neo"].node rect,#export-svg [data-look="neo"].cluster rect,#export-svg [data-look="neo"].node polygon{stroke:#FFFFFF;filter:url(#drop-shadow);}#export-svg [data-look="neo"].node path{stroke:#FFFFFF;stroke-width:2;}#export-svg [data-look="neo"].node .outer-path{filter:url(#drop-shadow);}#export-svg [data-look="neo"].node .neo-line path{stroke:#FFFFFF;filter:none;}#export-svg [data-look="neo"].node circle{stroke:#FFFFFF;filter:url(#drLine truncated

wiki/api/index.mdx

@@ -6,7 +6,7 @@ description: 'These REST APIs provide web endpoints to query different informati
 
 import DocCardList from '@theme/DocCardList'
 
-# Overview of available REST APIs
+# Overview of available REST APIs \{#overview-of-available-rest-apis}
 
 Currently, there are two different Rest APIs you can use.
 

wiki/floodgate/index.md

@@ -5,8 +5,8 @@ description: 'Floodgate is a hybrid mode plugin that allows Minecraft: Bedrock A
 ---
 
 # Overview
-Floodgate is a hybrid mode plugin. It introduces new features:
-- Ability to join Minecraft: Java Edition servers with Minecraft: Bedrock accounts without needing a paid Minecraft: Java Edition account. 
+Floodgate is a hybrid mode server-plugin. It introduces new features:
+- Ability for clients to join Minecraft: Java Edition servers with Minecraft: Bedrock accounts without needing a paid Minecraft: Java Edition account. 
 - Ability to [see Bedrock player skins on Java edition](/wiki/floodgate/features#what-is-skin-uploading).
 - Ability for plugins to [send Bedrock forms](/wiki/geyser/forms/).
 - Ability to query players through the [Global Api](/wiki/api/api.geysermc.org/global-api/), 

wiki/floodgate/setup/proxy-servers.mdx

@@ -14,7 +14,7 @@ Additionally, it will display Bedrock edition skins properly.
 3. Change `auth-type` in Geyser's config to `floodgate`.
 4. Restart the server.
 
-### Installing Floodgate on servers behind the proxy {#installing-floodgate-on-servers-behind-the-proxy}
+### Installing Floodgate on servers behind the proxy \{#installing-floodgate-on-servers-behind-the-proxy}
 
 This is only needed when you want to use the Floodgate API on your backend server(s) behind a proxy.
 

wiki/geyser/anticheat-compatibility.md

@@ -14,9 +14,7 @@ This is a community-compiled list and does not indicate any endorsement from Gey
 
 Full Compatibility (Checks Bedrock Players Accurately)
 
-- [AntiAura](https://www.spigotmc.org/resources/1368/) (Paid) - Last checked on 24th January 2023
-- [LightAntiCheat](https://modrinth.com/plugin/lightanticheat) - Last checked on 19rd July 2024
-- [Spartan: Bedrock Edition](https://builtbybit.com/resources/12832/) (Paid) - Last checked on 18th July 2024
+- [Boar](https://modrinth.com/plugin/boar) - Last checked on 13th March 2026
 - [Themis](https://www.spigotmc.org/resources/90766/) - Last checked on 11th July 2024
 
 Partially Compatible (Does not Check/Ignores Bedrock Players)

wiki/geyser/api.md

@@ -97,7 +97,7 @@ The skin package contains some records representing skin data. If you want to ch
 
 #### [Pack](https://github.com/GeyserMC/Geyser/tree/master/api/src/main/java/org/geysermc/geyser/api/pack) {#pack}
 The pack package contains classes and interfaces related to resource packs in Geyser. You can create custom resource packs and send them to individual sessions before they log in using the [SessionLoadResourcePacksEvent](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/event/bedrock/SessionLoadResourcePacksEvent.java).
-If you wish to send a resource pack to all sessions, you can use the [GeyserLoadResourcePacksEvent](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/event/lifecycle/GeyserLoadResourcePacksEvent.java).
+If you wish to send a resource pack to all sessions, you can use the [GeyserDefineResourcePacksEvent](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/event/lifecycle/GeyserDefineResourcePacksEvent.java).
 
 Packs can be created using a [PackCodec](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/pack/PackCodec.java), such as the provided [PathPackCodec](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/pack/PathPackCodec.java).
 This allows you to load a Bedrock resource pack from a file path:

wiki/geyser/commands.md

@@ -31,6 +31,9 @@ on the proxy server to assign permissions to players. Assigning permissions on t
 |           `geyser version`            |   `geyser.command.version`    |                       Shows the current Geyser version and checks for updates.                       |
 |           `geyser tooltips`           |   `geyser.command.tooltips`   |                          Toggle showing Advanced Tooltips (F3 + H on Java)                           |
 |          `geyser extensions`          |  `geyser.command.extensions`  | Lists all currently loaded extensions. This command is only registered if any extensions are loaded. |
+|             `geyser ping`             |     `geyser.command.ping`     |                      Shows the ping between the player and the Geyser instance.                      |
+|           `geyser options`            |   `geyser.command.options`    |               Opens the "pause screen additions" dialogue, if sent by the Java server                |
+|         `geyser quickactions`         | `geyser.command.quickactions` |                   Opens the "quick actions" dialogue, if sent by the Java server.                    |
 
 ## Permissions for Geyser extensions {#extension-permissions}
 

wiki/geyser/common-issues.md

@@ -13,7 +13,7 @@ If you still can't make it work, join [our Discord](https://discord.gg/geysermc)
 For Floodgate issues see: [Floodgate: Known Issues/Caveats](/wiki/floodgate/issues/).
 
 # I can't connect! (Either the server doesn't show up in the friends list or I get "Unable to connect to world")
-* If you don't use a reverse proxy such as TCPShield make sure that `enable-proxy-protocol` is set to false.
+* If you don't use a reverse proxy such as TCPShield make sure that `advanced.java.use-haproxy-protocol` is set to false.
 To fix "Unable to connect to world" with no console errors, see [here](/wiki/geyser/fixing-unable-to-connect-to-world/).
 
 ## If the server doesn't show up in the friends list {#if-the-server-doesnt-show-up-in-the-friends-list}
@@ -35,9 +35,9 @@ See [here](/wiki/geyser/fixing-unable-to-connect-to-world/) for fixing "Unable t
 ### `java.net.BindException: Address already in use: bind` on startup. {#javanetbindexception-address-already-in-use-bind-on-startup}
 This means something (likely another instance of Geyser) is running on the port you have specified in the config. Please make sure you close all applications running on this port. If you don't recall opening anything, usually restarting your computer fixes this.
 
-### [...]` has been compiled by a more recent version of the Java Runtime (class file version 60.0)` {#-has-been-compiled-by-a-more-recent-version-of-the-java-runtime-class-file-version-600}
+### [...]` has been compiled by a more recent version of the Java Runtime (class file version 65.0)` {#-has-been-compiled-by-a-more-recent-version-of-the-java-runtime}
 
-See this link for updating to Java 17: https://docs.papermc.io/misc/java-install.
+See this link for updating to Java 21: https://docs.papermc.io/misc/java-install.
 
 ### Hosting provider will not immediately open up UDP. {#hosting-provider-will-not-immediately-open-up-udp}
 
@@ -51,7 +51,7 @@ One way to get around this (if you're using an online host) is to shut down your
 
 You may need to update your Java version. If so, update at [Adoptium.net](https://adoptium.net/).
 
-Sometimes this happens in poor-network environments. There is an `mtu` option in the Geyser config; lower this number slowly (in batches of 100), restart each time, and re-test joining.
+Sometimes this happens in poor-network environments. There is an `advanced.bedrock.mtu` option in the Geyser config; lower this number slowly (in batches of 100), restart each time, and re-test joining.
 
 This option will most likely not help if you are getting "Unable to Connect to World" with no console logs indicating a connection.
 
@@ -76,8 +76,6 @@ If you have your configuration set up like this, put simply, it won't work. If a
 Connection Refused usually means that a Java server could not be found on that port, or the server denied access to the connection on a network level. 
 The latter can happen with anti-DDOS plugins such as TCPShield, but otherwise ensure that the server you're trying to connect to is spelled correctly in the config, is up and is port forwarded correctly.
 
-If you're updating from an old build of Geyser, set your remote address to `auto` and try again.
-
 ### Floodgate Misconfiguration {#floodgate-misconfiguration}
 See [this page](/wiki/floodgate/setup/) for more information.
 
@@ -109,12 +107,6 @@ The server is too new or Geyser is outdated. Make sure you're on the latest Geys
 
 Update the server or ask them to install [ViaVersion](https://viaversion.com/). You can also try [VIAaaS](https://github.com/ViaVersion/VIAaaS) (ViaVersion as a Service).
 
-# Query: Incorrect Magic!
-
-See here: https://www.spigotmc.org/threads/query-incorrect-magic-and-high-cpu-usage.159386/#post-2709057
-
-* If you don't use a reverse proxy such as TCPShield make sure that `enable-proxy-protocol` is set to false.
-
 # Only for BungeeCord with floodgate
 
 If you use floodgate ensure that it is installed on all of your Spigot backend servers as following:
@@ -129,6 +121,3 @@ And so on.
 * Please also make sure that you have the same `key.pem` and `config.yml` on all of your servers.
 
 If your players can't connect from the lobby to another backend server, check console.
-
-### Plugins that can cause issues {#plugins-that-can-cause-issues}
-* `HamsterAPI`

wiki/geyser/creating-a-startup-script.md

@@ -7,7 +7,7 @@ description: Learn how to create a startup script for Geyser-Standalone.
 
 :::caution
 
-In order for this to work, you MUST have Java 17 (or higher) installed!
+In order for this to work, you MUST have Java 21 (or higher) installed!
 
 :::
 

wiki/geyser/current-limitations.md

@@ -14,16 +14,15 @@ The following things cannot be fixed without changes to Bedrock or the Java prot
 
 - Clickable links in chat
 - Glowing effect
-- Crafting in the 2x2 menu while in creative mode - with the GeyserOptionalPack, this grid is hidden as it does not exist on Java.
 - Distinguishing between left and right clicks in inventories
 - Redstone dot blockstates
-- Potion colors implemented using NBT
+- Potion colors implemented using the PotionContents data component
 - Various command arguments for any command that doesn't use the Minecraft Brigadier library
 - Anything that relies on tab complete or typing in the chat UI (related to the above) - Bedrock sends no packet that indicates they are in this menu
 - Unable to see banner layers past 6
 - Movement issues around bamboo due to offset differences between Java and Bedrock. Use [Hurricane](/wiki/other/hurricane) to work around it.
 - Custom anvil recipes or custom smithing table ingredients/patterns ([GeyserMC/Geyser#4706](https://github.com/GeyserMC/Geyser/issues/4706))
-- Heights lower than -64 or higher than 320 in the overworld with extended height enabled, and heights lower than 0 or higher than 256 in other dimensions ([GeyserMC/Geyser#3804](https://github.com/GeyserMC/Geyser/issues/3804))
+- Heights lower than -512 or higher than 512 in the overworld (and custom dimensions mapped by Geyser to the overworld), and heights lower than 0 or higher than 256 in other dimensions ([GeyserMC/Geyser#3804](https://github.com/GeyserMC/Geyser/issues/3804))
 - Dolphin's Grace potion effect visuals (effects should still work correctly)
 - Invisible item frames - however, there are Bedrock edition resource packs making *all* item frames invisible 
 - Blocks (excluding jack-o-lantern) on entity heads (E.G. armor stands, players)
@@ -31,14 +30,16 @@ The following things cannot be fixed without changes to Bedrock or the Java prot
 - Custom beacon base blocks ([GeyserMC/Geyser#2301](https://github.com/GeyserMC/Geyser/issues/2301)) - these are hardcoded on Bedrock edition.
 - Climbable blocks changed by datapacks ([GeyserMC/Geyser#4051](https://github.com/GeyserMC/Geyser/issues/4051))
 - Custom enchantments/sweeping edge ([GeyserMC/Geyser#3121](https://github.com/GeyserMC/Geyser/issues/3121))
-- "Bordure Indented" pattern shape not appearing on the Bedrock side in the loom ([GeyserMC/Geyser#3183](https://github.com/GeyserMC/Geyser/issues/3183))
 - Gliding without elytras/custom elytras (https://github.com/GeyserMC/Geyser/issues/3255, https://github.com/GeyserMC/Geyser/issues/3299)
 - Custom furnace cook times ([GeyserMC/Geyser#4104](https://github.com/GeyserMC/Geyser/issues/4104))
 - Maximum sign length different on Java/Bedrock edition ([GeyserMC/Geyser#4130](https://github.com/GeyserMC/Geyser/issues/4130))
+- Second line on advancement toasts ([GeyserMC/Geyser#3205](https://github.com/GeyserMC/Geyser/issues/3205))
+- Showing non-vanilla enchantment levels, such as "Silk Touch 2" ([GeyserMC/Geyser#5252](https://github.com/GeyserMC/Geyser/issues/5252))
+- Test instance blocks are not available in Bedrock ([GeyserMC/Geyser#6164](https://github.com/GeyserMC/Geyser/issues/6164))
 
-## Fixable With GeyserOptionalPack {#fixable-with-geyseroptionalpack}
+## Fixed with the included GeyserIntegratedPack {#fixed-with-geyserintegratedpack}
 
-The following changes **are supported** with the [GeyserOptionalPack](/wiki/other/geyseroptionalpack/), which is a Bedrock resource pack you can install for additional functionality for features Bedrock does not natively support:
+The following changes **are supported** with the included GeyserIntegratedPack, which is a Bedrock resource pack to add features Bedrock doesn't natively support:
 - Custom armor stand poses
 - Illusioners
 - Hit particles and other miscellaneous particles not natively in Bedrock
@@ -52,4 +53,4 @@ The following changes **are supported** with the [GeyserOptionalPack](/wiki/othe
 
 The following issues can be worked around with the [Hurricane](/wiki/other/hurricane) plugin/mod. However, these involve Java server
 modifications.
-- Movement issues around bamboo due to offset differences between Java and Bedrock.
+- Movement issues around bamboo due to offset differences between Java and Bedrock.

wiki/geyser/custom-blocks.md

@@ -7,9 +7,14 @@ To setup custom blocks in geyser, you have to choose how you are going to regist
 
 It should be noted that blocks and their associated components are not very stable. Mojang tends to make changes to these much more often than they do for items. This means that any components Geyser allows you to register are liable to break in future versions of Bedrock.
 
+:::warning
+Geyser does not convert resource packs from Java Edition, and also does not generate custom block mappings automatically.
+However, you can use automatic tools such as [Rainbow](/wiki/other/rainbow/) to make converting content simpler.
+:::
+
 ## Enabling custom blocks {#enabling-custom-blocks}
 
-Before beginning, ensure that `add-non-bedrock-items` is set to `true` in your `config.yml` file.
+Before beginning, ensure that `gameplay.enable-custom-content` is set to `true` in your `config.yml` file.
 
 ```yml
 # Whether to add any items and blocks which normally does not exist in Bedrock Edition.
@@ -17,7 +22,7 @@ Before beginning, ensure that `add-non-bedrock-items` is set to `true` in your `
 # If this is disabled, furnace minecart items will be mapped to hopper minecart items.
 # Geyser's block, item, and skull mappings systems will also be disabled.
 # This option requires a restart of Geyser in order to change its setting.
-add-non-bedrock-items: true
+enable-custom-content: true
 ```
 
 ## JSON mappings {#json-mappings}
@@ -99,12 +104,12 @@ The following details the schema for the mappings file. Only the `name` field is
                             - Default: none
                             - Description: The name of the custom block.
                     - `collision_box`:
-                        - Type: `object`
+                        - Type: `object` or array of `object`s for multiple collision boxes
                             - `origin`: 
                                 - Type: `array`
                                     - Default: Inferred from overridden block
                                     - Description: An array of x, y, and z origin values
-                                    - Range: Must be in range `[-8, 0, -8]` to `[8, 16, 8]`, inclusive
+                                    - Range: Must be in range `[-8, 0, -8]` to `[8, 24, 8]`, inclusive
                                         - `items`:
                                             - Type: `float`
                                                 - Default: Inferred from overridden block
@@ -113,11 +118,12 @@ The following details the schema for the mappings file. Only the `name` field is
                                 - Type: `array`
                                     - Default: Inferred from overridden block
                                     - Description: An array of x, y, and z size values
+                                    - Range: Must be in range `[0, 0, 0]` to `[16, 24, 16]`, inclusive
                                         - `items`:
                                             - Type: `float`
                                                 - Default: Inferred from overridden block
                                                 - Description: An size value for a single axis
-                            - Range: Addittion of `origin` and `size` must be in range `[-8, 0, -8]` to `[8, 16, 8]`, inclusive.
+                            - Range: The sum of `origin` and `size` must be in range `[-8, 0, -8]` to `[8, 24, 8]`, inclusive.
                     - `destructible_by_mining`:
                         - Type: `integer`
                             - Default: Inferred from overridden block
@@ -126,26 +132,6 @@ The following details the schema for the mappings file. Only the `name` field is
                         - Type: `string`
                             - Default: the name of the custom block
                             - Description: The display name of the block.
-                    - `extended_collision_box`:
-                        - Type: `object`
-                            - `origin`: 
-                                - Type: `array`
-                                    - Default: Inferred from overridden block
-                                    - Description: An array of x, y, and z origin values
-                                    - Range: Must be in range `[-8, 0, -8]` to `[8, 16, 8]`, inclusive
-                                        - `items`:
-                                            - Type: `float`
-                                                - Default: Inferred from overridden block
-                                                - Description: An origin value for a single axis
-                            - `size`: 
-                                - Type: `array`
-                                    - Default: Inferred from overridden block
-                                    - Description: An array of x, y, and z size values
-                                        - `items`:
-                                            - Type: `float`
-                                                - Default: Inferred from overridden block
-                                                - Description: An size value for a single axis
-                            - Range: Addittion of `origin` and `size` must be in range `[-8, 0, -8]` to `[8, 16, 8]`, inclusive.
                     - `friction`:
                         - Type: `float`
                             - Range: `0.0` to `1.0`

wiki/geyser/custom-content.md

@@ -0,0 +1,17 @@
+---
+title: Custom Content
+description: How to use custom content (requiring resource packs) with Geyser.
+---
+
+Geyser supports mapping various custom additions to the game via resource packs and mappings, such as custom items, blocks, and skulls. See:
+
+- [Custom items](/wiki/geyser/custom-items)
+- [Custom blocks](/wiki/geyser/custom-blocks)
+- [Custom skulls](/wiki/geyser/custom-skulls)
+- [Custom waypoint icons](/wiki/geyser/custom-waypoints)
+- [Custom entities](/wiki/geyser/custom-entities)
+
+:::info
+Geyser does not convert resource packs from Java Edition automatically.
+However, you can use automatic tools such as [Rainbow](/wiki/other/rainbow/) or [Thunder](/wiki/other/thunder) to make converting custom content simpler.
+:::

wiki/geyser/custom-entities.md

@@ -0,0 +1,234 @@
+---
+title: Geyser Entity API
+description: Geyser extensions can register custom Bedrock entity definitions, modify existing entities, and replace built-in types in entity spawning events.
+---
+
+:::warning Experimental API
+The (Custom) Entity API was introduced with Geyser API **2.11.0** (26.2 update) and is currently marked `@ApiStatus.Experimental`. This means that the API may change or be rewritten in parts in a future version without prior deprecation.
+If you have feedback on this API, encounter issues, or wish to request further features, please reach out to us!
+
+The `GeyserDefineEntityPropertiesEvent` has been available since **2.9.0**, but its identifier parameter changed in 2.11.0: it now takes a **Bedrock** entity identifier instead of a Java one. See [Entity Properties](#entity-properties) for details.
+:::
+
+:::info
+This API currently cannot be used via JSON mappings. In the future, we are planning to support entity variants, which would likely also be usable through JSON mappings. 
+:::
+
+Custom entities currently (as of 26.2) do not exist in Minecraft: Java Edition. Instead, they can be simulated with armor stands holding item models, or item/block display entity combinations.
+Unlike Java Edition, Bedrock does support custom entity types, but does not have item or block display entities. With this API, Geyser extensions can register custom Bedrock entity definitions to use instead of Java
+entity types in entity spawning events to properly support custom entities for Bedrock players. Further, it allows modifying entity properties and data for any entity sent to a Bedrock player at runtime.
+
+Additionally to registering custom entity definitions, you will also need to provide a resource pack to players [defining custom entity textures and animations](https://wiki.bedrock.dev/guide/custom-entity).
+
+## Prerequisites: Vocabulary {#vocabulary}
+
+- **Bedrock Entity Definition** (`GeyserEntityDefinition` / `CustomEntityDefinition`): Identifies the Bedrock entity type to spawn, either a built-in type, or a custom type
+- **Entity Properties**: Bedrock Molang-queryable values (`query.property(...)`) registered per Bedrock entity type. See [here](https://learn.microsoft.com/en-us/minecraft/creator/documents/introductiontoentityproperties?view=minecraft-bedrock-stable) for official documentation.
+- **Entity Data Types**: Properties on entities that can be changed dynamically, such as scale, size, hitboxes, and color.
+
+## Registering a Custom Entity Definition {#registering-entity-definition}
+
+Custom entity definitions are registered using `GeyserDefineEntitiesEvent`, which fires once during Geyser's startup:
+
+```java
+@Subscribe
+public void onDefineEntities(GeyserDefineEntitiesEvent event) {
+    CustomEntityDefinition myEntity = CustomEntityDefinition.of(Identifier.of("mynamespace:my_entity"));
+    event.register(myEntity);
+}
+```
+
+Do note:
+- Custom entity definition type identifier must not use the `minecraft` namespace
+- Entity types must have a unique identifier
+
+## Summoning custom entities {#custom-entity-spawning}
+
+Whenever the Java server creates a new non-player entity for any connection, a `ServerSpawnEntityEvent` is fired. It can be used to change which Bedrock entity definition is sent to the Bedrock player or cancel the spawn entirely. 
+Each connection has its own entity cache, so different players will never share the same entity instance.
+
+Example:
+
+```java
+private static final Identifier ZOMBIE = Identifier.of("minecraft:zombie");
+private static final CustomEntityDefinition MY_ENTITY = CustomEntityDefinition.of(Identifier.of("mynamespace:my_entity"));
+
+@Subscribe
+public void onDefineEntities(GeyserDefineEntitiesEvent event) {
+    event.register(MY_ENTITY);
+}
+
+@Subscribe
+public void onSpawn(ServerSpawnEntityEvent event) {
+    if (event.entityType().is(ZOMBIE)) {
+        event.definition(MY_ENTITY); // definition must be registered beforehand
+    }
+}
+```
+
+This example replaces all spawned zombies with our custom entity, which we registered in `onDefineEntities`.
+
+:::info
+The `ServerSpawnEntityEvent` fires before the entity is spawned (since it could be canceled). You can provide a consumer for the resulting `GeyserEntity` to set initial entity data values before the entity is spawned on the client:
+
+```java
+private static final Identifier ZOMBIE = Identifier.of("minecraft:zombie");
+private static final CustomEntityDefinition MY_ENTITY = CustomEntityDefinition.of(Identifier.of("mynamespace:my_entity"));
+
+@Subscribe
+public void onSpawn(ServerSpawnEntityEvent event) {
+    if (!event.entityType().is(ZOMBIE)) {
+        return;
+    }
+    event.definition(MY_ENTITY);
+    event.preSpawnConsumer(entity -> {
+        entity.override(GeyserEntityDataTypes.SCALE, 2.0f);
+        entity.override(GeyserEntityDataTypes.COLOR, (byte) 5);
+    });
+}
+```
+:::
+
+### Modifying shoulder parrots {#shoulder-parrots}
+
+`ServerAttachParrotsEvent` fires when a parrot is attached to a player's shoulder. It extends `ServerSpawnEntityEvent`, so definition replacement, cancellation, and setting a pre spawn consumer for the 
+resulting `GeyserEntity` instance are all available.
+
+```java
+@Subscribe
+public void onParrotAttach(ServerAttachParrotsEvent event) {
+    event.definition(myParrotReplacement); // this entity definition would also be registered previously
+}
+```
+
+## Modifying entity data {#entity-data}
+
+Entity data consists of runtime-modifiable values such as scale, size, and hitboxes. All constants live in `GeyserEntityDataTypes`. Values for these types can be updated on a `GeyserEntity` 
+at any time using `entity.override(type, value)`, or set inside a pre-spawn consumer in the entity spawn events to modify it before the spawn packet is sent.
+
+Updating any of these values will override the value sent by the server until the override is removed. To remove an override, a `null` value can be used.
+
+| Constant                           | Value Type     | Description                                                                  |
+|------------------------------------|----------------|------------------------------------------------------------------------------|
+| `COLOR`                            | `Byte`         | Bedrock color component (0–15)                                               |
+| `VARIANT`                          | `Integer`      | Numeric variant index, queryable via `query.variant` in resource packs       |
+| `WIDTH`                            | `Float`        | Collision box width                                                          |
+| `HEIGHT`                           | `Float`        | Collision box height                                                         |
+| `VERTICAL_OFFSET`                  | `Float`        | Y-axis offset applied on top of the Java entity position                     |
+| `SCALE`                            | `Float`        | Visual scale multiplier                                                      |
+| `HITBOXES`                         | `List<Hitbox>` | Custom hitboxes. Set an empty list to remove all hitboxes                    |
+| `SEAT_OFFSET`                      | `Vector3f`     | Riding position offset                                                       |
+| `ROTATION_LOCKED_TO_VEHICLE`       | `Boolean`      | Whether the rider's rotation is locked to the vehicle's rotation             |
+| `SEAT_LOCK_RIDER_ROTATION_DEGREES` | `Float`        | The degrees of rotation a rider may rotate within when mounted on an entity. |
+| `SEAT_HAS_ROTATION`                | `Boolean`      | Whether a seat has rotation                                                  | 
+| `ROTATE_RIDER_DEGREES`             | `Float`        | Rotation offset for the seat in degrees                                      |
+
+:::info
+Hitbox `min`, `max` and `pivot` are absolute world coordinates, not relative to the entity's position.
+:::
+
+## Entity Properties {#entity-properties}
+
+Entity properties expose Java-side state to Bedrock resource packs via `query.property('namespace:name')` in Molang. Entity properties can be registered for both custom, and vanilla entity types using the `GeyserDefineEntityPropertiesEvent`, which fires during Geyser startup.
+
+:::warning Breaking Change in 2.11.0
+`GeyserDefineEntityPropertiesEvent` has been available since **2.9.0**, but its first parameter changed in 2.11.0: it now takes a **Bedrock** entity type identifier.
+:::
+
+A maximum of 32 properties per entity type can be registered.
+
+```java
+private GeyserFloatEntityProperty aggression = null;
+private GeyserIntEntityProperty state = null;
+private GeyserBooleanEntityProperty enraged = null;
+private GeyserEnumEntityProperty<Phase> phase = null;
+private GeyserStringEnumProperty mode = null;
+
+@Subscribe
+public void onDefineProperties(GeyserDefineEntityPropertiesEvent event) {
+    Identifier zombieType = Identifier.of("minecraft:zombie");
+
+    // Float property: min, max, default (null default uses min)
+    aggression = event.registerFloatProperty(zombieType, Identifier.of("mynamespace:aggression"), 0f, 1f, 0f);
+
+    // Integer property
+    state = event.registerIntegerProperty(zombieType, Identifier.of("mynamespace:state"), 0, 10, null);
+
+    // Boolean property
+    enraged = event.registerBooleanProperty(zombieType, Identifier.of("mynamespace:enraged"), false);
+
+    // Enum from a Java enum class (max 16 values, names max 32 chars, must start with a letter)
+    phase = event.registerEnumProperty(zombieType, Identifier.of("mynamespace:phase"), Phase.class, Phase.IDLE);
+
+    // Enum from a string list
+    mode = event.registerEnumProperty(zombieType, Identifier.of("mynamespace:mode"), List.of("idle", "active", "fleeing"), "idle");
+}
+```
+
+Properties can be updated on a `GeyserEntity` instance at any time:
+
+```java
+// Single property
+entity.updateProperty(aggression, 0.5f);
+```
+
+## Looking up entities {#looking-up-entities}
+
+After an entity has spawned it can be looked up through `GeyserConnection#entities()`. All lookup methods are thread-safe.
+
+```java
+EntityData entityData = connection.entities();
+
+// By Java entity ID (int)
+GeyserEntity entity = entityData.byJavaId(javaId);
+
+// By UUID
+GeyserEntity entity = entityData.byUuid(uuid);
+
+// By Geyser/Bedrock runtime ID (long)
+GeyserEntity entity = entityData.byGeyserId(geyserId);
+```
+
+All three return `null` if no entity is found. A `GeyserEntity` exposes various properties, such as the entity uuid, current passengers / vehicle if applicable, and it can further be used to update
+entity properties or entity data type values.
+
+## Full Example {#full-example}
+
+<details>
+<summary>Expand for a full extension example</summary>
+
+```java
+public class MyExtension implements Extension {
+    // Create a custom entity definition
+    private final CustomEntityDefinition enhancedZombie = CustomEntityDefinition.of(Identifier.of("myext:enhanced_zombie"));
+    private GeyserFloatEntityProperty healthFraction = null;
+
+    // Register the custom entity type
+    @Subscribe
+    public void onDefineEntities(GeyserDefineEntitiesEvent event) {
+        event.register(enhancedZombie);
+    }
+
+    // Optionally: Register entity properties (Bedrock identifier)
+    @Subscribe
+    public void onDefineProperties(GeyserDefineEntityPropertiesEvent event) {
+        healthFraction = event.registerFloatProperty(
+            enhancedZombie.identifier(),
+            Identifier.of("myext:health_fraction"), 
+            0f, 1f, 1f
+        );
+    }
+
+    // Replace a default Bedrock entity definition with our custom one
+    @Subscribe
+    public void onSpawn(ServerSpawnEntityEvent event) {
+        // Unless you want to replace everything, you should probably add checks for e.g., entity type, or entity UUID
+        event.definition(enhancedZombie);
+        event.preSpawnConsumer(entity -> {
+            entity.override(GeyserEntityDataTypes.SCALE, 1.5f);
+            entity.override(GeyserEntityDataTypes.COLOR, (byte) 4);
+        });
+    }
+}
+```
+</details>

wiki/geyser/custom-items-old.mdx

@@ -1,11 +1,18 @@
 ---
-title: Custom Items
-description: Geyser allows custom Bedrock items to be added for an equivalency to Vanilla Java item predicates or modded items.
+title: Custom Items (v1)
+description: Legacy documentation for the first version of the custom item API
 ---
 
-To setup custom items in geyser, you have to choose how you are going to register your items. The easiest is [using a json file](#json-mappings) but you can also [use a Geyser extension](#geyser-extensions).
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
-## JSON mappings {#json-mappings}
+### Format version 1 (legacy)
+
+:::warning
+`format_version: 1` is no longer receiving updates. New features will only be added to format version 2.
+:::
+
+## JSON mappings (v1)
 
 1. Start your server, and you should have a folder called `custom_mappings` that is created. That would be with the folder of `Geyser.jar` file for standalone and inside your Geyser data folder for a plugin.
 2. Create a `.json` file, it can be any name you like and as many files as you like. You don't need to make one file per item. Here is the structure of the file:
@@ -74,9 +81,9 @@ To setup custom items in geyser, you have to choose how you are going to registe
     }
     ```
 
-## Geyser extensions {#geyser-extensions}
+## Geyser extensions (v1)
 
-### Extending a vanilla item {#extending-a-vanilla-item}
+### Extending a vanilla item (v1)
 
 1. Create your custom item options or registrations, to which you can add any of the following. They can be stacked, so that all of the specified types need to match, but you **do NOT need all of them.**
 ```java
@@ -109,7 +116,7 @@ public void onGeyserPreInitializeEvent(GeyserDefineCustomItemsEvent event) {
 }
 ```
 
-### Non vanilla (modded) items with Geyser extensions (for example to use with Fabric) {#non-vanilla-modded-items-with-geyser-extensions-for-example-to-use-with-fabric}
+### Non vanilla (modded) items with Geyser extensions (for example to use with Fabric) (v1)
 
 1. Create your item data:
 ```java
@@ -127,28 +134,4 @@ public void onGeyserDefineCustomItemsEvent(GeyserDefineCustomItemsEvent event) {
 }
 ```
 
-## Resource pack {#resource-pack}
 
-1. Setup a basic bedrock resource pack. If you need help, you can find it [here](https://wiki.bedrock.dev/guide/project-setup.html#rp-manifest).
-2. Make a `textures` folder.
-3. Create `item_texture.json` in the `textures`, and put this in it:
-
-```json
-{
-  "resource_pack_name": "MY_PACK_NAME_HERE",
-  "texture_name": "atlas.items",
-  "texture_data": {
-    
-  }
-}
-```
-4. Inside texture data, you can add your items. The texture name and path must match the name that you set in your mappings.
-
-```json
-"my_item": {
-    "textures": [
-        "textures/items/my_item"
-    ]
-}
-```
-5. Then you need to put your textures inside the `textures/items`. Make sure to have it match the texture path that you specified in `item_texture.json`!

wiki/geyser/custom-resource-packs.md

@@ -1,9 +0,0 @@
----
-title: Custom Resource Packs
-description: How to use custom resource packs for Geyser.
----
-
-Geyser supports custom resource packs for use with custom items, blocks, and skulls. See:
-- [Custom items](/wiki/geyser/custom-items)
-- [Custom blocks](/wiki/geyser/custom-blocks)
-- [Custom skulls](/wiki/geyser/custom-skulls)

wiki/geyser/custom-skulls.md

@@ -9,7 +9,7 @@ To setup custom skulls in geyser, you have to choose how you are going to regist
 
 ## Enabling custom skulls {#enabling-custom-skulls}
 
-To enable custom skulls, you must set `add-non-bedrock-items` to `true` in the `config.yml` file. This will enable the generation of the custom resource pack and the translation of custom skulls to custom blocks. You can then add custom skulls to the `custom-skulls.yml` file.
+To enable custom skulls, you must set `gameplay.enable-custom-content` to `true` in the `config.yml` file. This will enable the generation of the custom resource pack and the translation of custom skulls to custom blocks. You can then add custom skulls to the `custom-skulls.yml` file.
 
 ```yaml
 # Whether to add any items and blocks which normally does not exist in Bedrock Edition.
@@ -17,7 +17,7 @@ To enable custom skulls, you must set `add-non-bedrock-items` to `true` in the `
 # If this is disabled, furnace minecart items will be mapped to hopper minecart items.
 # Geyser's block, item, and skull mappings systems will also be disabled.
 # This option requires a restart of Geyser in order to change its setting.
-add-non-bedrock-items: true
+enable-custom-content: true
 ```
 
 ## custom-skulls.yml {#custom-skullsyml}

wiki/geyser/custom-waypoints.mdx

@@ -0,0 +1,226 @@
+---
+title: Custom Waypoint Icons
+description: Geyser supports custom locator bar icons (also known as waypoint icons), though they have to be mapped manually.
+---
+
+import Tabs from "@theme/Tabs";
+import TabItem from "@theme/TabItem";
+
+Minecraft: Java Edition supports showing custom icons on the locator bar. These are known as custom waypoints and, on
+Java Edition, are implemented through custom "waypoint styles" in a resource pack. These waypoint styles specify a near
+and far distance in blocks, and a list of sprites to display on the locator bar.
+
+Bedrock Edition also supports custom waypoint icons through behaviour + resource packs. In Geyser, these are implemented through custom JSON mappings, similar to custom block or item mappings, alongside a Bedrock resource pack.
+
+Geyser extensions can also make use out of Bedrock's support for custom waypoint icons. Unlike JSON mappings however,
+extensions have more freedom in how icons are displayed to the client.
+
+When an unknown custom waypoint style is sent to Geyser by the Java server,
+Geyser will display the waypoint using vanilla's default icons.
+
+:::info
+This guide only describes the steps required to write custom waypoint style mappings. You still need to create a resource pack
+for Bedrock Edition, add the waypoint icons to it, and use it in Geyser. Geyser cannot automatically pull icons from
+Java Edition resource packs.
+:::
+
+:::warning
+As with custom blocks and items, Geyser does not convert resource packs from Java Edition, and also does not generate
+custom waypoint mappings automatically. However, [Rainbow](/wiki/other/rainbow/) is planning
+support for these conversions.
+:::
+
+## Simple icons
+
+Custom waypoint icons following Java's system of having a near- and far-distance should be mapped using JSON mappings, or,
+when using Geyser extensions, Geyser's `CustomWaypointStyle.VanillaBuilder` helper builder. Both of these methods follow
+the same format as Java's custom waypoint styles and should feel very familiar.
+
+<Tabs groupId="custom-waypoint-implementation">
+    <TabItem value="json" label="JSON-mappings">
+        JSON mappings have to specify the `format_version` set to `1`, and list all custom waypoint styles under the
+        `waypoint_styles` key. This key holds an object in which keys are identifiers of waypoint styles, and each
+        value is the definition of that waypoint style.
+
+        For example, take the following `waypoint_mappings.json` file:
+        ```json
+        {
+          "format_version": 1,
+          "waypoint_styles": {
+            "geyser:my_first_waypoint": {
+              "near_distance": 10,
+              "far_distance": 100,
+              "sprites": [
+                "geyser:custom_waypoint_0",
+                "geyser:custom_waypoint_1"
+              ]
+            },
+            "geyser:my_second_waypoint": {
+              "sprites": [
+                "geyser:second_waypoint/texture_1",
+                "geyser:second_waypoint/texture_2",
+                "geyser:second_waypoint/texture_3",
+                "geyser:second_waypoint/texture_4"
+              ]
+            },
+            "geyser:the_best_waypoint": {
+              "near_distance": 50,
+              "sprites": [
+                "geyser:ultimate_waypoint/near",
+                "geyser:ultimate_waypoint/far"
+              ]
+            }
+          }
+        }
+        ```
+
+        These mappings specify 3 custom waypoint styles, `geyser:my_first_waypoint`, `geyser:my_second_waypoint`, and
+        `geyser:the_best_waypoint`.
+
+        Just like on Java Edition, the default value for `near_distance` when not specified is 128, and for `far_distance`
+        it is 332. And, just like on Java Edition, at least one texture sprite must be specified.
+
+        Since namespaces do not exist in Bedrock Edition's resource packs, Geyser must flatten the texture sprite identifier
+        to be used in the resource pack on Bedrock Edition. Geyser does this using the following format:
+
+        > `textures/ui/<namespace>/locator_bar_dot/<path>`
+
+        As such, in the example above, the `geyser:my_first_waypoint` waypoint style refers to the following textures in the Bedrock resource pack:
+
+        - `textures/ui/geyser/locator_bar_dot/custom_waypoint_0`
+        - `textures/ui/geyser/locator_bar_dot/custom_waypoint_1`
+    </TabItem>
+    <TabItem value="api" label="Geyser API">
+        The Geyser API provides a helper builder, called `VanillaBuilder` in `CustomWaypointStyle`, to implement custom
+        waypoint icons that are similar to Java Edition's custom icons. The builder is similar to JSON-mappings in use
+        and requires the same fields to be specified.
+
+        Custom waypoint styles are registered per-connection in the `SessionDefineCustomWaypointsEvent`,
+        and as such you can check the `GeyserConnection` before registering a custom waypoint style. If a custom waypoint
+        style is used across multiple connections, it can be useful to only create it once to save memory.
+
+        `VanillaBuilder` instances are created by using `CustomWaypointStyle#vanillaLike(int nearDistance, int farDistance)`.
+        When not specifying a near- and far-distance, the Java defaults of 128 and 332 are used.
+
+        ```java
+        @Subscribe
+        public void onSessionDefineCustomWaypoints(SessionDefineCustomWaypointsEvent event) {
+            event.register(Identifier.of("geyser:my_first_waypoint"), CustomWaypointStyle.vanillaLike(10, 100)
+                .withTexture(Identifier.of("geyser:custom_waypoint_0"))
+                .withTexture(Identifier.of("geyser:custom_waypoint_1"))
+                .build());
+
+            event.register(Identifier.of("geyser:my_second_waypoint"), CustomWaypointStyle.vanillaLike()
+                .withTexture(Identifier.of("geyser:second_waypoint/texture_1"))
+                .withTexture(Identifier.of("geyser:second_waypoint/texture_2"))
+                .withTexture(Identifier.of("geyser:second_waypoint/texture_3"))
+                .withTexture(Identifier.of("geyser:second_waypoint/texture_4"))
+                .build());
+
+            event.register(Identifier.of("geyser:the_best_waypoint"), CustomWaypointStyle.vanillaLike(50, 332)
+                .withTexture(Identifier.of("geyser:ultimate_waypoint/near"))
+                .withTexture(Identifier.of("geyser:ultimate_waypoint/far"))
+                .build());
+        }
+        ```
+
+        As with JSON mappings, Geyser flattens the texture identifier into a string using the following format:
+
+        > `textures/ui/<namespace>/locator_bar_dot/<path>`
+
+        However, you can also pass a literal texture string to `withTexture`. This string must not be prefixed with
+        `textures/` and must also not be suffixed with the texture extension (e.g. `.png`).
+
+        You can register the same custom waypoint style for multiple waypoint style identifiers. However, each
+        waypoint style identifier may only have one custom waypoint style attached to it. If a duplicate is registered,
+        a `CustomWaypointStyleRegisterException` will be thrown.
+    </TabItem>
+</Tabs>
+
+---
+
+<details>
+    <summary>Changing vanilla waypoint styles</summary>
+    Creating custom waypoint styles for vanilla waypoint styles, like `minecraft:default`, is allowed, and can be done
+    as follows:
+
+    <Tabs groupId="custom-waypoint-implementation">
+        <TabItem value="json" label="JSON-mappings">
+            ```json
+            {
+              "format_version": 1,
+              "waypoint_styles": {
+                "minecraft:default": {
+                  "sprites": [
+                    "geyser:custom_vanilla_0",
+                    "geyser:custom_vanilla_1",
+                    "geyser:custom_vanilla_2",
+                    "geyser:custom_vanilla_3",
+                    "geyser:custom_vanilla_4"
+                  ]
+                }
+              }
+            }
+            ```
+        </TabItem>
+        <TabItem value="api" label="Geyser API">
+            ```java
+            @Subscribe
+            public void onSessionDefineCustomWaypoints(SessionDefineCustomWaypointsEvent event) {
+                event.register(Identifier.of("minecraft:default"), CustomWaypointStyle.vanillaLike(128, 332)
+                    .withTexture(Identifier.of("geyser:custom_vanilla_0"))
+                    .withTexture(Identifier.of("geyser:custom_vanilla_1"))
+                    .withTexture(Identifier.of("geyser:custom_vanilla_2"))
+                    .withTexture(Identifier.of("geyser:custom_vanilla_3"))
+                    .withTexture(Identifier.of("geyser:custom_vanilla_4"))
+                    .build());
+            }
+            ```
+        </TabItem>
+    </Tabs>
+</details>
+
+## Advanced icons
+
+Geyser API users may write custom implementations of `CustomWaypointStyle`, to run custom checks for waypoint textures
+and waypoint icon sizes. Just like waypoint styles created using the `VanillaBuilder`, these can be registered for one
+or more custom waypoint style identifiers in the `SessionDefineCustomWaypointsEvent`. For example, the following
+implementation will always use the same texture and icon size, no matter the distance:
+
+```java
+public final class MyCustomWaypointStyle implements CustomWaypointStyle {
+    public static final CustomWaypointStyle INSTANCE = new MyCustomWaypointStyle();
+    private static final Vector2f SIZE = Vector2f.from(0.5, 0.5);
+
+    private MyCustomWaypointStyle() {}
+
+    @Override
+    public String texturePath(Identifier style, float distance) {
+        return "ui/geyser/locator_bar_dot/my_icon";
+    }
+
+    @Override
+    public Vector2f textureSize(Identifier style, float distance) {
+        return SIZE;
+    }
+}
+```
+
+Implementations must always implement `texturePath(Identifier, float)` and `textureSize(Identifier, float)`. The first
+returns the texture path to use for that waypoint style and distance (not prefixed with `textures/`), and the second
+returns the size of the texture to use (where a size of `[1, 1]` is the size icons normally appear as when the waypoint
+is close to the player).
+
+Implementations can then be registered through the `SessionDefineCustomWaypointsEvent` as follows:
+
+```java
+@Subscribe
+public void onSessionDefineCustomWaypoints(SessionDefineCustomWaypointsEvent event) {
+    event.register(Identifier.of("geyser:my_style", MyCustomWaypointStyle.INSTANCE));
+}
+```
+
+Like with `VanillaBuilder`, should you use a custom waypoint style across multiple connections,
+it can be useful to only keep one instance of it, to save memory. Also, avoid running time-taking operations in your
+`texturePath` or `textureSize` implementations, since these methods are called frequently. For full implementation details,
+refer to the Javadocs of `CustomWaypointStyle`.

wiki/geyser/extensions.md

@@ -25,11 +25,7 @@ The underlying Geyser API is steadily expanding, creating more and more opportun
 
 ## Which Geyser Extensions exist? {#which-geyser-extensions-exist}
 
-At the moment, extensions are still a new system, so there is only a small list of known extensions for Geyser. 
-However, new extensions are always being created!
-
-There is an [official list](https://github.com/GeyserMC/GeyserExtensionList) of available extensions you can check out. 
-If you have an extension you'd like to see on this list, feel free to open a PR!
+Check out Modrinth's Geyser extensions section under the "plugins" tab!
 
 ## Installing Extensions {#installing-extensions}
 
@@ -39,13 +35,13 @@ Then, restart Geyser (or the server Geyser runs on).
 ## Updating Extensions {#updating-extensions}
 To update extensions, use the `update` folder within the extensions directory as follows:
 
-1. Copy the updated versions of your extension jars into the `update` folder inside the extensions directory.
+1. Copy the updated versions of your extension jars into the `update` folder inside the `extensions` directory.
 2. On the next server or application restart, any extensions in the `update` folder will automatically replace the corresponding extensions in the main extensions directory. If an extension is new, it will be added.
 3. If an update fails, it will be logged, and the server/application will proceed with loading extensions as usual. You can review the logs to address any issues.
 
 ## Creating Geyser Extensions {#creating-geyser-extensions}
 
-The easiest way to create an extension would be utilizing [this official template](https://github.com/GeyserMC/GeyserExampleExtension/). 
+The easiest way to create an extension would be utilizing [this official template](https://github.com/GeyserMC/GeyserExtensionTemplate/). 
 Simply create a new repository from the template, customize the `extension.yml` & `settings.gradle` files, and get started making the extension.
 
 Geyser recognizes extensions when they have a file called `extension.yml` in the jars `resources` folder.
@@ -54,9 +50,15 @@ Geyser recognizes extensions when they have a file called `extension.yml` in the
 id: exampleid
 name: ExampleExtension
 main: org.geyser.extension.exampleid.ExampleExtension
-api: 2.4.1
+api: 2.9.0
 version: 1.0.0
 authors: [ExampleAuthor]
+dependencies: # Optional
+  exampledependency:
+    # When this dependency should be loaded (BEFORE or AFTER your extension)
+    load: BEFORE # Default: BEFORE
+    # This determines whether or not this dependency is required for this extension to load
+    required: true # Default: true
 ```
 
 Explanations for the individual fields:
@@ -65,10 +67,11 @@ Explanations for the individual fields:
 - main: The main class of your extension.
 - api: The Geyser API version your extension targets.
 - authors: The author(s) of the extension. To add more than one entry, separate entries with a comma.
+- dependencies: The dependencies of the extension. Each dependency has a load order and required property with defaults of `BEFORE` and `true` respectively.
 
 ## Creating the main class {#creating-the-main-class}
 
-The main class, the entrypoint for the extension, needs to [implement the **Extension** interface provided by Geyser](https://github.com/GeyserMC/GeyserExampleExtension/blob/master/src/main/java/org/geyser/extension/exampleid/ExampleExtension.java#L12). 
+The main class, the entrypoint for the extension, needs to [implement the **Extension** interface provided by Geyser](https://github.com/GeyserMC/GeyserExtensionTemplate/blob/master/src/main/java/org/geyser/extension/exampleid/ExampleExtension.java#L15). 
 That way, Geyser recognizes the extension, and gives you access to important methods - such as `logger()`, to get your extensions logger.
 To see all the methods provided by that interface, see [here](https://github.com/GeyserMC/Geyser/blob/master/api/src/main/java/org/geysermc/geyser/api/extension/Extension.java).
 

wiki/geyser/faq.mdx

@@ -6,7 +6,7 @@ description: Frequently asked questions about Geyser, including how it works, wh
 import { Questions, Q, A } from "@site/src/components/Questions";
 import { Versions } from '@site/src/components/Versions'
 
-### General Questions {#general-questions}
+### General Questions \{#general-questions}
 
 Here you can find answers to frequently asked questions about Geyser - if you have a question that isn't answered here, feel free to ask in our [Discord](https://discord.gg/GeyserMC)!
 
@@ -150,7 +150,7 @@ Here you can find answers to frequently asked questions about Geyser - if you ha
     <Q>
         Sometimes, when I go really far out, the world starts to experience very odd visual bugs...
         <A>
-            This is a Bedrock client issue caused by Bedrock being 32-bit and Java being 64-bit. For more information read [here](https://minecraft.wiki/w/Bedrock_Edition_distance_effects).
+            This is a Bedrock client issue caused by Bedrock being 32-bit and Java being 64-bit. For more information read [here](https://minecraft.wiki/w/Bedrock_Edition_distance_effects). This can be worked around using an [unofficial Geyser extension](https://github.com/oryxel1/GeyserFloatingPoints) that spoofs the player position.
         </A>
     </Q>
     <Q>
@@ -209,7 +209,7 @@ Here you can find answers to frequently asked questions about Geyser - if you ha
 
             Note: you need to be running DiscordSRV v1.22.0 or newer. Floodgate 2.0 or GeyserSkinRestorer is still required for skins to show up for Java players and for this to work.
 
-            Alternatively, if you cannot get the above AvatarUrl to work with DiscordSRV, or you'd like to use it with another plugin that does not support texture ids, you can use the [TydiumCraft Skin API.](https://tydiumcraft.net/docs/skinapi)
+            Alternatively, if you cannot get the above AvatarUrl to work with DiscordSRV, or you'd like to use it with another plugin that does not support texture ids, you can use the [Starlight Skin API.](https://docs.lunareclipse.studio/)
         </A>
     </Q>
     <Q>
@@ -240,7 +240,7 @@ Here you can find answers to frequently asked questions about Geyser - if you ha
     </Q>
 </Questions>
 
-### Additional Questions {#additional-questions}
+### Additional Questions \{#additional-questions}
 
 These additional frequently asked questions are not related to Geyser gameplay.
 
@@ -257,4 +257,4 @@ These additional frequently asked questions are not related to Geyser gameplay.
             No. They have their own bedrock server tech you can find out more info about [here](https://www.cubecraft.net/threads/behind-the-cube-1-feelin-lucky.264600/).
         </A>
     </Q>
-</Questions>
+</Questions>

wiki/geyser/fixing-unable-to-connect-to-world.md

@@ -98,22 +98,3 @@ Your firewall is likely in the way. Try adding an exception to Java, or disable
 ## As a last resort for troubleshooting... {#as-a-last-resort-for-troubleshooting}
 
 Minecraft offers a vanilla Bedrock server [here](https://www.minecraft.net/download/server/bedrock). Downloading, running, and attempting to connect to it may help isolate if the issue is on Geyser's end, or your computer/network's end.
-
-## Using Geyser on the same computer {#using-geyser-on-the-same-computer}
-
-### Windows 10/11 {#windows-1011}
-
-_This only affects people trying to join Geyser from Windows 10/11 Edition with Geyser hosted on the same computer._
-
-This is an issue caused by Loopback restrictions not being lifted. By default, Microsoft Apps have this restriction on all their apps for local connections. Geyser will attempt to resolve this automatically; however, if you're still having connection problems, you can lift it by typing the following in Windows PowerShell in administrator mode: (it should return `OK.` if it worked)
-```powershell
-CheckNetIsolation LoopbackExempt -a -n="Microsoft.MinecraftUWP_8wekyb3d8bbwe"
-```
-
-Should this not work, you can try this set of steps:
-
-1. Hold down Windows Key + R
-2. In the prompt, type `hdwwiz.exe`, then press Enter then Next
-3. Install the Hardware Manually
-4. Choose Network Adapter > Next > Microsoft > "Microsoft KM-TEST Loopback Adapter" then hit Next until it's done.
-

wiki/geyser/forms.md

@@ -23,7 +23,7 @@ Then we'll talk about sending the form, receiving a response and doing advanced
 While this is the easiest form type it's also the least customisable.  
 You have a title, description (content) and two buttons.
 
-![Example of a ModalForm](https://i.imgur.com/kMpMgOh.png)
+![Example of a ModalForm](/img/wiki/cumulus/modalform-example.png)
 
 Code used in the image:
 
@@ -40,7 +40,7 @@ ModalForm.builder()
 While this one is less easy than ModalForm is, it also has more customizability.  
 It's still limited to a title, content and buttons, but these buttons can also have images and do not have a minimum and maximum of two.
 
-![Example of a SimpleForm](https://i.imgur.com/3rj2OQ2.png)
+![Example of a SimpleForm](/img/wiki/cumulus/simpleform-example.png)
 
 Code used in the image:
 ```java
@@ -58,7 +58,7 @@ While the CustomForm is the last one on our list (and thus the least easy one),
 This form exists of a title, content and a list of different components e.g. label, slider and input.  
 See [Components](https://github.com/GeyserMC/Cumulus/tree/master/src/main/java/org/geysermc/cumulus/component) for more information about every component you can use and in which form type.
 
-![Example of a CustomForm](https://i.imgur.com/zHgxELm.png)
+![Example of a CustomForm](/img/wiki/cumulus/customform-example.png)
 
 Code used in the image:
 

wiki/geyser/getting-started-with-the-api.md

@@ -32,7 +32,7 @@ Add Geyser's API codebase as a dependency:
 <dependency>
     <groupId>org.geysermc.geyser</groupId>
     <artifactId>api</artifactId>
-    <version>2.4.2-SNAPSHOT</version>
+    <version>2.10.0-SNAPSHOT</version>
     <scope>provided</scope>
 </dependency>
 ```
@@ -40,7 +40,7 @@ Add Geyser's API codebase as a dependency:
 **Gradle**
 ```groovy
 dependencies {
-    compileOnly('org.geysermc.geyser:api:2.4.2-SNAPSHOT')
+    compileOnly('org.geysermc.geyser:api:2.10.0-SNAPSHOT')
 }
 ```
 
@@ -66,7 +66,7 @@ Add Floodgate's API as a dependency:
 <dependency>
     <groupId>org.geysermc.floodgate</groupId>
     <artifactId>api</artifactId>
-    <version>2.2.3-SNAPSHOT</version>
+    <version>2.2.5-SNAPSHOT</version>
     <scope>provided</scope>
 </dependency>
 ```
@@ -74,7 +74,7 @@ Add Floodgate's API as a dependency:
 **Gradle**
 ```groovy
 dependencies {
-    compileOnly('org.geysermc.floodgate:api:2.2.3-SNAPSHOT')
+    compileOnly('org.geysermc.floodgate:api:2.2.5-SNAPSHOT')
 }
 ```
 

wiki/geyser/geyser-command-line-arguments-and-system-properties.md

@@ -28,6 +28,10 @@ The Geyser specific properties are prioritized over the plugin properties!
   - ```server``` means to match the bind address of the TCP server
   - any other string will be used as-is for the bind address.
 
+- ```-DgeyserBroadcastPort=19132```
+    - This can be used in cases where the port Geyser runs on does not match the port players use to connect to (e.g. due to port forwarding routings).
+    - When not set or set to 0, it defaults to the same port that Geyser runs on
+
 ## Disabling warnings and advanced configuration {#disabling-warnings-and-advanced-configuration}
 You may disable some warnings that may be printed to the console by using the following command line arguments. The values shown are the defaults used by Geyser, unless otherwise noted.
 
@@ -55,6 +59,9 @@ Disabling Geyser warnings from being logged will not fix the real issue! Only di
 - `-DGeyser.AddTeamSuggestions=true`
   - Allows you to turn off suggestions for teams in the scoreboard command. This is enabled by default, disabling this can help with performance if there are a lot of teams defined. 
   Setting "command-suggestions" to false in the config will also disable this.
+- `-DGeyser.NoPlayerListPS=true`
+  - Enables a less-than-ideal workaround to resolve client crashing when chatting / typing commands on PlayStation consoles with lots of player online.
+  Disabled by default, as it is not needed for most setups.
 - `-DGeyser.RakPacketLimit=120`
   - Sets RakNet's per-ip per-tick (10ms) post-connection packet limit.
 - `-DGeyser.RakGlobalPacketLimit=100000`

wiki/geyser/index.mdx

@@ -8,7 +8,7 @@ import { Versions } from '@site/src/components/Versions'
 import { useDocById } from '@docusaurus/plugin-content-docs/client'
 import DocCardList from '@theme/DocCardList'
 
-# Overview
+# Overview \{#overview}
 
 [//]: # ([![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg?label=License)](LICENSE))
 [![Build Status](https://github.com/GeyserMC/Geyser/actions/workflows/build.yml/badge.svg)](https://github.com/GeyserMC/Geyser/actions/workflows/build.yml)
@@ -23,7 +23,7 @@ Here are a few selected guides that will help you get started with Geyser!
 <DocCardList items={[
     'setup',
     'supported-versions',
-    'understanding-the-config',
+    'commands',
     'faq',
     'common-issues',
     'extensions'

wiki/geyser/packs.md

@@ -0,0 +1,102 @@
+---
+title: Using Resource Packs with Geyser
+description: This page explains how to use resource packs with Geyser.
+---
+
+# Introduction
+
+Geyser supports sending Bedrock edition resource packs to connecting Bedrock clients. 
+However, Geyser does not convert resource packs from the Java Edition format into the Bedrock edition format.
+
+Resource packs offer a range of customization options. Just like on Java, they can be used for a wide variety of things:
+- Texture Modifications: Resource packs can change the look of blocks, items, and entities, providing a unique visual experience.
+- Sound Changes: Custom sound effects or music tracks can be added to create a more immersive atmosphere.
+- UI Enhancements: Resource packs can modify the user interface - a popular example would be providing a dark mode UI option.
+... and much more!
+
+# Using resource packs
+
+### Sending local packs
+The easiest way to send resource packs to Bedrock players is by putting the Bedrock edition resource pack, either as a `.zip` or `.mcpack` file, into Geyser's `packs` folder.
+
+Location of the 'packs' folder:
+
+- Fabric/NeoForge: `/config/Geyser-<platform>/packs/`
+- Geyser Standalone: `/packs/` at the root directory
+- Other platforms: `/plugins/Geyser-<platform>/packs/`
+
+After restarting the server (or reloading Geyser), players that connect will receive all packs that are in that folder.
+
+
+### Remote pack urls (accessible using the Geyser API)
+As an alternative to sending local packs, you can also send resource packs by sending Bedrock players a link to download the packs from.
+This works similarly to Java edition's pack downloading. However, there are a few key limitations:
+
+- The link must be a direct link to the resource pack download (it will follow redirects, but those must result in a file download)
+- The Content-Length header must specify the exact file size.
+- The Content-Type application header must be set to `application/zip`.
+
+Geyser will download your configured remote resource packs once on boot, and warn you if any of these conditions are not met.
+It is unfortunately not possible to bypass these, as these are restrictions imposed by the Bedrock client. 
+
+To verify headers manually, curl the website and check the values.
+For example:
+`curl -I -L https://download.geysermc.org/v2/projects/geyseroptionalpack/versions/1.0.10/builds/11/downloads/geyseroptionalpack` returns the following:
+- `-I`: This option tells curl to fetch the HTTP response headers in the output.
+- `-L`: Ensures that curl follows redirects
+
+The output for this shows the following:
+```shell
+HTTP/1.1 200 OK
+Date: Wed, 03 Jul 2024 23:03:06 GMT
+Content-Type: application/zip
+Content-Length: 95400
+Connection: keep-alive
+access-control-allow-methods: GET
+access-control-allow-origin: *
+Cache-Control: public, s-maxage=1209600
+content-disposition: attachment; filename="=?UTF-8?Q?GeyserOptionalPack.mcpack?="; filename*=UTF-8''GeyserOptionalPack.mcpack
+etag: "0258409cde3a2906e1085490fa5b10b77"
+last-modified: Wed, 03 Jul 2024 08:42:41 GMT
+CF-Cache-Status: HIT
+Age: 21500
+Accept-Ranges: bytes
+Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DUpNVi9R96y13%2BlJm%2BNTpDLvSt9bw9CFDUh8Qwhpb9SsqjJbuInBGtSM5hiM2dGbSGkUccP4KvSqqD%2FCKrrcQ9ur5at5G0u8FrfooVTKLP%2B4MwGoUl29DwlxeMVg6tX36RjjICmV97M4FlErCZEe%2F3gM%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
+NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
+Server: cloudflare
+CF-RAY: 89da81ca69c63735-FRA
+alt-svc: h3=":443"; ma=86400
+```
+This shows that the content-length is indeed set correctly, and that the content type indeed is `application/zip`.
+Further, Geyser will attempt to read the `ETag` to see if the content has changed. To query that, you can use the following:
+
+`curl -I -L -v https://download.geysermc.org/v2/projects/geyseroptionalpack/versions/1.0.10/builds/11/downloads/geyseroptionalpack 2>&1 | grep ETag`
+Alternatively, just using the `-v` header will turn on verbose mode that would also display the etag.
+
+# Common questions
+ 
+- **Does Geyser support behavior packs/add-ons?** <br />
+No. These would require modifications on the Java server side, which isn't possible when Geyser is used on a proxy. 
+However, many things that are possible with add-ons or behavior packs can be done with Geyser's API - such as [custom items](/wiki/geyser/custom-items)
+or [custom blocks](/wiki/geyser/custom-blocks).
+
+- **Does Geyser convert Java edition resource packs?** <br />
+Not currently. For now, you need to manually create a Bedrock edition resource pack equivalent. You can however
+use automatic tools such as [Rainbow](/wiki/other/rainbow/) or [Thunder](/wiki/other/thunder) to make converting content simpler.
+
+- **Can I allow players to choose resource packs themselves?** <br />
+On most Bedrock platforms (except consoles), players are able to download and install resource packs on the client. 
+There is also a Geyser extension, [PickPack](https://github.com/onebeastchris/PickPack) that uses the Geyser API to allow all Bedrock players to choose from a set of resource packs.
+
+- **On proxy setups: Are per-backend-server resource packs possible?** <br />
+This unfortunately is not possible natively, as Bedrock edition only allows removing and adding packs when connecting initially to the server.
+However, with the usage of the transfer packet, it is possible to instruct the Bedrock client to re-connect to the server, and to apply changes then.
+For per-server-packs, you can use the unofficial [GeyserPackSync](https://github.com/onebeastchris/GeyserPackSync) plugin.
+
+- **Does Geyser have an API to send resource packs?** <br />
+Yes! See the [Geyser API docs](/wiki/geyser/api/) for more info on that. There is a `SessionLoadResourcePacksEvent` to determine which 
+packs are sent to each connecting player, or the more general `GeyserDefineResourcePacksEvent` that defines the packs all users receive.
+
+- **Can I use subpacks or specify the load order of resource packs**? <br />
+You can! However, this feature requires you to use the Geyser API. 
+

wiki/geyser/playit-gg.md

@@ -13,25 +13,42 @@ You must be able to connect to your Geyser instance locally!
 The playit.gg Minecraft server plugin does not support UDP tunnels. You will need to use the program agent instead!
 :::
 
-- If you already have playit.gg running & set up (for e.g. Minecraft Java edition), skip steps 1 and 2 and proceed with step 3.
-
 ## Setup {#setup}
-1. Head over to [playit.gg's website](https://playit.gg/) - download the program & run it. It will open the login site in the browser - create an account & sign in. Or, use a guest account.
-2. Once logged in, make sure to connect the program + site, until step 4 is reached. This should happen automatically, if it does not, follow the instructions on the website and the playit.gg program console.
-   ![img](/img/wiki/playit-gg/running.png)
-3. Click "Create Tunnel" if you see the screen above, or, select the "Tunnels" tab when logged in to your account. There, select "Minecraft Bedrock", leave "Enable Tunnel" ticked, and click "Add tunnel".
-   ![img](/img/wiki/playit-gg/add_tunnel.png)
-4. Once "Add tunnel" is clicked, it should create a new tunnel, and you are set! Scroll down until you see this:
-   ![img](/img/wiki/playit-gg/added_tunnel.png)
-   If you have Geyser running on a port that is not 19132, update the port there. The "Local Address" does not need to be changed unless you are not running playit.gg and Geyser on the same device.
-5. Connect to your server - use the IP and Port from the "Allocation" tab. In our example - "180.ip.ply.gg" as the IP, and "17019" as the port. Alternatively, use the Domain it gives you instead of the IP.
-6. If you join successfully, then you are done! Make sure to leave the playit.gg program running as closing it will close the tunnel. You also may want to ratelimit individual connections - use the "Per Connection Rate Limit" option to do so.
+1. Head over to [playit.gg's website](https://playit.gg/) - download the program & run it.
+2. The program will provide a claiming link. Visit that link, log in.
+   ![img](/img/wiki/playit-gg/playit_claim.png)
+3. Confirm your agent.
+   ![img](/img/wiki/playit-gg/playit_claim_confirm.png)
+4. Add the agent.
+   ![img](/img/wiki/playit-gg/playit_add_agent.png)
+5. After the agent is created, create a tunnel.
+   ![img](/img/wiki/playit-gg/playit_add_tunnel.png)
+6. Name your tunnel and click Next.
+   ![img](/img/wiki/playit-gg/playit_name_tunnel.png)
+7. Select "Minecraft Bedrock" as the tunnel type and click Next.
+   ![img](/img/wiki/playit-gg/playit_tunnel_type.png)
+8. Select the Free Network and click Next.
+   ![img](/img/wiki/playit-gg/playit_select_network.png)
+   **Do not change your Geyser port in `config.yml` unless you have a reason (for example, hosting another Geyser server on the same machine).** The Bedrock (Geyser) port in `config.yml` and the playit.gg ports are separate. playit.gg will forward its port to the default Geyser port and should work as-is. Changing it can cause errors. If you have changed your config port, set the Bedrock port back to the default `19132` and ensure `clone-remote-port` is `false`.
+9. If the playit.gg agent and GeyserMC are running on the same device, leave the IP as `127.0.0.1` and set the port to whatever you configured in GeyserMC's config.  
+   ![img](/img/wiki/playit-gg/playit_set_ipandport.png)
+10. Select `proxy-protocol-v2` for the Proxy Protocol section and click Next.
+11. In the GeyserMC config, under `advanced:` `bedrock:`, set `use-haproxy-protocol` to `true`.
+12. Click Create Tunnel and wait for the tunnel to be created.
+   ![img](/img/wiki/playit-gg/playit_create_tunnel.png)
+13. Copy your tunnel's port. For example, if your tunnel address is `visiting-phone.gl.at.ply.gg:6695`, then `6695` is the tunnel port.
+14. In the GeyserMC config under `advanced:` `bedrock:`, set `broadcast-port` to your tunnel port (`6695` in the example).
+15. Save your config. Start your Minecraft server and connect using your tunnel's IP and port.
+16. If you join successfully, then you are done! Make sure to leave the playit.gg program running as closing it will close the tunnel. You also may want to ratelimit individual connections - use the "Per Connection Rate Limit" option to do so.
    (If you failed to join, check out the [troubleshooting](#troubleshooting) section of the page.) 
 
 ## Troubleshooting {#troubleshooting}
 
 ### I can't connect to my server! {#i-cant-connect-to-my-server}
+* *Try going to the Agents page, set your agent to IPv4 only, and change the region. You may need to switch regions a few times before you can connect.*
 * *Are there errors in your minecraft server console?*
-* *Make sure to check [here](/wiki/geyser/fixing-unable-to-connect-to-world/) beforehand.*
-* *If you changed the port that Geyser would bind to, you'll have to tell playit.gg to use that port instead! See step 5 here.*
-* *(Alternatively: You can try setting the* `bedrock` `port` *in the Geyser configuration to* `19132`.)
+* *Unless you manually changed the "Local Port" on the playit.gg website, in Geyser config, ensure that the bedrock port is the default of `19132` and that `clone-remote-port` is `false`.*
+* *If you changed the `bedrock-port` or set `clone-remote-port` to `true` and have a reason for doing so (e.g. hosting another Geyser server on the same machine), you'll have to tell playit.gg to use that port instead! See the last paragraph in step 8.*
+* *Check that you're joining with playit.gg's IP and port from the "Allocation" tab.*
+* *Make sure that you have the program agent open while trying to join.*
+* *See [here](/wiki/geyser/fixing-unable-to-connect-to-world/) for general troubleshooting steps.*

wiki/geyser/port-forwarding.md

@@ -183,8 +183,9 @@ sudo firewall-cmd --reload
 
 #### Ubuntu {#ubuntu}
 
-1. Remove/comment out `-A INPUT -j REJECT --reject-with icmp-host-prohibited` in the `/etc/iptables/rules.v4` file.
-2. Run the following command to fix `ufw`:
-```bash 
-sudo iptables-restore < /etc/iptables/rules.v4
+Run the following commands to allow Minecraft and Geyser through the OS firewall:
+
+```bash
+sudo ufw allow 25565/tcp
+sudo ufw allow 19132/udp
 ```

wiki/geyser/setup/provider/modded-servers.mdx

@@ -21,17 +21,17 @@ Geyser only works with **server-side** mods. Mods that require a client-side ins
 
     ```yaml
     bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0 
+      # The IP address that will listen for connections.
+      # Generally, you should only change this if you want to limit what IPs can connect to your server.
+      address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132 
+      # The port that will Geyser will listen on for incoming Bedrock connections.
+      # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+      port: 19132
 
-        # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock. 
-        # This option makes the Bedrock port the same as the Java port every time you start the server. 
-        # This option is for the plugin version only. 
-        clone-remote-port: false 
+      # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+      # This option makes the Bedrock port the same as the Java port every time you start the server.
+      clone-remote-port: false
     ``` 
     The vital part is the port. This is the port that Bedrock players will use to connect to your server. 
     Follow the instructions in the provider selector - change the port, and if necessary, `clone-remote-port` & `address`.

wiki/geyser/setup/provider/paper-spigot.mdx

@@ -7,7 +7,7 @@ hide_title: true
 import { Versions } from '@site/src/components/Versions'
 
 :::info
-If your server is not running <Versions platform="java"/>, you will need to install <a href="https://viaversion.com/">ViaVersion</a>.
+If your server is running a version older than <Versions platform="java"/>, you will need to install <a href="https://viaversion.com/">ViaVersion</a>.
 See also [this page](/wiki/geyser/supported-versions/) on supported versions.
 :::
 
@@ -16,20 +16,20 @@ See also [this page](/wiki/geyser/supported-versions/) on supported versions.
 3. Place the Geyser-Spigot.jar in the `plugins` folder, and restart the server.
 4. Open your Geyser config, located in `/plugins/Geyser-Spigot/config.yml`, and find the following:
 
-    ```yaml
-    bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0 
+     ```yaml
+     bedrock:
+       # The IP address that will listen for connections.
+       # Generally, you should only change this if you want to limit what IPs can connect to your server.
+       address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132 
+       # The port that will Geyser will listen on for incoming Bedrock connections.
+       # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+       port: 19132
 
-        # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock. 
-        # This option makes the Bedrock port the same as the Java port every time you start the server. 
-        # This option is for the plugin version only. 
-        clone-remote-port: false 
-    ``` 
+       # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+       # This option makes the Bedrock port the same as the Java port every time you start the server.
+       clone-remote-port: false
+    ```
     The vital part is the port. This is the port that Bedrock players will use to connect to your server. 
     Follow the instructions in the provider selector - change the port, and if necessary, `clone-remote-port` & `address`.
     If `clone-remote-port` is enabled, the bedrock port will be overwritten with the Java port!   

wiki/geyser/setup/provider/proxy-servers.mdx

@@ -17,23 +17,23 @@ import { Versions } from '@site/src/components/Versions'
 3. Place the Geyser jar in the `plugins` folder, and restart the server.
 4. Open your Geyser config, located in `/plugins/Geyser-xyz/config.yml`, and find the following:
 
-    ```yaml
-    bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0
+     ```yaml
+     bedrock:
+       # The IP address that will listen for connections.
+       # Generally, you should only change this if you want to limit what IPs can connect to your server.
+       address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132
+       # The port that will Geyser will listen on for incoming Bedrock connections.
+       # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+       port: 19132
 
-        # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock. 
-        # This option makes the Bedrock port the same as the Java port every time you start the server. 
-        # This option is for the plugin version only. 
-        clone-remote-port: false
-    ``` 
-    The vital part is the port. This is the port that Bedrock players will use to connect to your server. 
+       # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+       # This option makes the Bedrock port the same as the Java port every time you start the server.
+       clone-remote-port: false
+    ```
+    The vital part is the port. This is the port that Bedrock players will use to connect to your server.
     Follow the instructions in the provider selector - change the port, and if necessary, `clone-remote-port` & `address`.
-    If `clone-remote-port` is enabled, the bedrock port will be overwritten with the Java port!   
+    If `clone-remote-port` is enabled, the bedrock port will be overwritten with the Java port!
     **Important**: Other services/plugins that rely on ports with UDP, such as Voice Chats or Query, cannot share the port with Geyser.
 
 5. Verify whether connections are possible by running `geyser connectiontest <ip> <port>` in the console.

wiki/geyser/setup/self/modded-servers.mdx

@@ -20,13 +20,18 @@ Geyser only works with **server-side** mods. Mods that require a client-side ins
 3. Open your Geyser config, located in `/config/Geyser-Fabric/config.yml` (or `/config/Geyser-NeoForge/config.yml`), and find the following: 
 
     ```yaml
-    bedrock: 
-      # The IP address that will listen for connections. 
-      # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-      #address: 0.0.0.0 
+    bedrock:
+      # The IP address that will listen for connections.
+      # Generally, you should only change this if you want to limit what IPs can connect to your server.
+      address: 0.0.0.0
 
-      # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-      port: 19132 
+      # The port that will Geyser will listen on for incoming Bedrock connections.
+      # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+      port: 19132
+
+      # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+      # This option makes the Bedrock port the same as the Java port every time you start the server.
+      clone-remote-port: false
     ```
    The vital part is the port. This is the port that Bedrock players will use to connect to your server!
    If you enable `clone-remote-port`, the port will be overridden and the Java port is used.

wiki/geyser/setup/self/paper-spigot.mdx

@@ -6,7 +6,7 @@ description: Learn how to set up Geyser on your self-hosted Paper or Spigot serv
 import { Versions } from '@site/src/components/Versions'
 
 :::info
-If your server is not running <Versions platform="java"/>, you will need to install <a href="https://viaversion.com/">ViaVersion</a>.
+If your server is running a version older than <Versions platform="java"/>, you will need to install <a href="https://viaversion.com/">ViaVersion</a>.
 See also [this page](/wiki/geyser/supported-versions/) on supported versions.
 :::
 
@@ -15,13 +15,18 @@ See also [this page](/wiki/geyser/supported-versions/) on supported versions.
 3. Open your Geyser config, located in `/plugins/Geyser-Spigot/config.yml`, and find the following:
 
     ```yaml
-    bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0 
+    bedrock:
+      # The IP address that will listen for connections.
+      # Generally, you should only change this if you want to limit what IPs can connect to your server.
+      address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132 
+      # The port that will Geyser will listen on for incoming Bedrock connections.
+      # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+      port: 19132
+
+      # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+      # This option makes the Bedrock port the same as the Java port every time you start the server.
+      clone-remote-port: false
     ```
     The vital part is the port. This is the port that Bedrock players will use to connect to your server!
     If you enable `clone-remote-port`, the port will be overridden and the Java port is used.

wiki/geyser/setup/self/proxy-servers.mdx

@@ -16,14 +16,19 @@ import { Versions } from '@site/src/components/Versions'
 2. Place the Geyser jar in the `plugins` folder, and restart the server.
 3. Open your Geyser config, located in `/plugins/Geyser-xyz/config.yml`, and find the following:
 
-    ```yaml
-    bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0 
+     ```yaml
+     bedrock:
+       # The IP address that will listen for connections.
+       # Generally, you should only change this if you want to limit what IPs can connect to your server.
+       address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132 
+       # The port that will Geyser will listen on for incoming Bedrock connections.
+       # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+       port: 19132
+
+       # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+       # This option makes the Bedrock port the same as the Java port every time you start the server.
+       clone-remote-port: false
     ```
     The vital part is the port. This is the port that Bedrock players will use to connect to your server!
     If you enable `clone-remote-port`, the port will be overridden and the Java port is used.

wiki/geyser/setup/self/standalone.mdx

@@ -5,14 +5,14 @@ hide_title: true
 ---
 
 :::info
-You need to have Java 17 or higher installed to run Geyser. To run Geyser Standalone on Android, see the bottom of this page.
+You need to have Java 21 or higher installed to run Geyser. To run Geyser Standalone on Android, see the bottom of this page.
 :::
 
 :::caution
 Geyser-Standalone is NOT a plugin or mod! It is a standalone Java program that you would run separately to your Java Edition server.
 :::
 
-### General Setup & Configuration {#general-setup--configuration}
+#### General Setup & Configuration \{#general-setup--configuration}
 
 1. Download Geyser Standalone from [here](/download).
 2. Create a new folder for Geyser, and drop the jar in there.
@@ -26,13 +26,15 @@ Geyser-Standalone is NOT a plugin or mod! It is a standalone Java program that y
 4. Open your Geyser config (`config.yml`), and find the following:
 
    ```yaml
-   bedrock: 
-      # The IP address that will listen for connections. 
-      # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-      #address: 0.0.0.0 
+   bedrock:
+     # The IP address that Geyser will bind on to listen for incoming Bedrock connections.
+     # Generally, you should only change this if you want to limit what IPs can connect to your server.
+     address: 0.0.0.0
+
+     # The port that will Geyser will listen on for incoming Bedrock connections.
+     # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+     port: 19132
 
-      # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-      port: 19132 
    ```
    The `port` is the port Bedrock players will enter to connect to the server.   
    Uncommenting and changing `address` here is only needed if you need to limit connections to a specific IP address.
@@ -40,18 +42,18 @@ Geyser-Standalone is NOT a plugin or mod! It is a standalone Java program that y
 
    To configure which Java Edition server Geyser Standalone will send players to, find the remote section:
    ```yaml
-   remote:
-      # The IP address of the remote (Java Edition) server
-      # If it is "auto", for standalone version the remote address will be set to 127.0.0.1.
-      address: auto
+   java:
+     # The IP address of the Java Edition server.
+     address: 127.0.0.1
 
-      # The port of the remote (Java Edition) server
-      port: 25565
-      
-      # Authentication type. Can be offline, online, or floodgate (see https://github.com/GeyserMC/Geyser/wiki/Floodgate).
-      auth-type: online
+     # The port of the Java Edition server.
+     port: 25565
+
+     # What type of authentication Bedrock players will be checked against when logging into the Java server.
+     # Can be "floodgate" (see https://wiki.geysermc.org/floodgate/), "online", or "offline".
+     auth-type: online
    ```
-   Here, change `address` to the Java server's address, or to `auto` if the server is on the same machine as Geyser-Standalone. 
+   Here, change `address` to the Java server's address, or leave it as-is if the server is on the same machine as Geyser-Standalone.
 Then, change `port` to the Java server's port. If you have set up Floodgate on the remote Java server, you can set auth-type to "floodgate" - otherwise, 
 set it to either `online` for an online mode server, or `offline` for an offline mode server. To install and set up Floodgate with a Standalone server, see [here](/wiki/floodgate/setup).   
    
@@ -77,15 +79,15 @@ set it to either `online` for an online mode server, or `offline` for an offline
 
 6. Verify whether connections from other networks are possible by running `geyser connectiontest <ip> <port>` in the console.
 
-### Running Geyser-Standalone on Android {#running-geyser-standalone-on-android}
+#### Running Geyser-Standalone on Android \{#running-geyser-standalone-on-android}
 
 :::caution
 Applications such as Termux on Android are capable of running Geyser, but this largely depends on how powerful your Android device is. Please do so at your own risk.
 :::
 
-#### Termux (Android) {#termux-android}
+##### Termux (Android) \{#termux-android}
 1. Download and install [Termux](https://termux.com/)
-2. Run `pkg install openjdk-17`
+2. Run `pkg install openjdk-21`
 3. Run `wget https://download.geysermc.org/v2/projects/geyser/versions/latest/builds/latest/downloads/standalone`
 4. Run `java -jar Geyser-Standalone.jar`
 

wiki/geyser/setup/self/viaproxy.mdx

@@ -9,13 +9,18 @@ description: Learn how to set up Geyser with ViaProxy.
 4. Open your Geyser config, located in `/plugins/Geyser/config.yml`, and find the following:
 
     ```yaml
-    bedrock: 
-        # The IP address that will listen for connections. 
-        # Generally, you should only uncomment and change this if you want to limit what IPs can connect to your server. 
-        #address: 0.0.0.0 
+    bedrock:
+      # The IP address that will listen for connections.
+      # Generally, you should only change this if you want to limit what IPs can connect to your server.
+      address: 0.0.0.0
 
-        # The port that will listen for connections. This is the port that Bedrock players will use to connect to your server.
-        port: 19132 
+      # The port that will Geyser will listen on for incoming Bedrock connections.
+      # Since Minecraft: Bedrock Edition uses UDP, this port must allow UDP traffic.
+      port: 19132
+
+      # Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock.
+      # This option makes the Bedrock port the same as the Java port every time you start the server.
+      clone-remote-port: false
     ```
     The vital part is the port. This is the port that Bedrock players will use to connect to your server!
     If you enable `clone-remote-port`, the port will be overridden and the ViaProxy port is used.

wiki/geyser/supported-hosting-providers.mdx

@@ -7,12 +7,6 @@ import { Provider } from "@site/src/components/Provider";
 
 :::caution
 
-This list is incomplete. Please open a [PR](https://github.com/GeyserMC/GeyserWebsite/pulls) or contact us on [Discord](https://discord.gg/geysermc) if the information is incorrect, or you want to add a new hosting provider!
-
-:::
-
-:::caution
-
 These providers are not verified by the Geyser team, and the server providers below are reported as working by members of the community.
 
 :::
@@ -29,14 +23,22 @@ The below information is for the plugin versions of Geyser unless otherwise spec
 
 :::
 
-## Built-in Geyser {#built-in-geyser}
+<br/>
+
+:::info PLEASE NOTE
+
+This list is incomplete. Please open a [PR](https://github.com/GeyserMC/GeyserWebsite/pulls) or contact us on [Discord](https://discord.gg/geysermc) if the information is incorrect, or you want to add a new hosting provider!
+
+::: 
+
+## Built-in Geyser \{#built-in-geyser}
 
 <Provider type="built_in" />
 
-## Support for Geyser {#support-for-geyser}
+## Support for Geyser \{#support-for-geyser}
 
 <Provider type="support" />
 
-## Does not support Geyser {#does-not-support-geyser}
+## Does not support Geyser \{#does-not-support-geyser}
 
 <Provider type="no_support" />

wiki/geyser/supported-versions.md

@@ -21,12 +21,12 @@ Geyser emulates a <Versions platform="java"/> client, so a Java server must acce
 This is possible thanks to [ViaVersion](https://viaversion.com/), which allows Java edition players with newer versions to join servers 
 that run older versions of the game.
 
-### Using Geyser-Spigot on a Spigot/Paper server running on 1.16.5 or above
-You can use Geyser-Spigot on servers that run on 1.16.5 or above. Do note that Geyser requires Java 17 to run! You will also need to run at least Java 17 or later to use Geyser. See [here](https://docs.papermc.io/misc/java-install) for more info on updating Java. Paper versions not supporting Java 17 can add `-DPaper.IgnoreJavaVersion=true` flag to the Java startup arguments to allow Paper to run on Java 17.
+### Using Geyser-Spigot on a Spigot/Paper server running on 1.20.5 or above
+You can use Geyser-Spigot on servers that run on 1.20.5 or above. You will also need to run at least Java 21 or later to use Geyser. See [here](https://docs.papermc.io/misc/java-install) for more info on updating Java. Paper versions not supporting Java 21 can add `-DPaper.IgnoreJavaVersion=true` flag to the Java startup arguments to allow Paper to run on Java 21.
 
 In order for Bedrock players to chat (1.19.3+) or join (1.19.1/1.19.2), you need to disable chat signing. More information about that can be read on the [chat signing page](/wiki/geyser/secure-chat).
 
-### Using Geyser-Spigot on a Spigot/Paper server running on a version below 1.16.5
+### Using Geyser-Spigot on a Spigot/Paper server running on a version below 1.20.5
 This is unfortunately not possible. You'll need to use a proxy such as Velocity or BungeeCord, or set up Geyser-Standalone separately with the [ViaVersion](https://github.com/ViaVersion/ViaVersion) plugin. Another alternative would be to install [ViaProxy](https://github.com/ViaVersion/ViaProxy), which is a standalone ViaVersion proxy that 
 translates between different Minecraft: Java edition versions, and to install Geyser-ViaProxy on it.
 
@@ -36,4 +36,4 @@ Geyser with older versions would be to install [ViaProxy](https://github.com/Via
 translates between different Minecraft: Java edition versions, and to install Geyser-ViaProxy on it. This will also work with Floodgate auth.
 
 ### Using Geyser-Velocity or Geyser-BungeeCord on a proxy
-Make sure you update your proxy software to the latest available version, and, if the backend servers are not on <Versions platform="java"/>, also install the [ViaVersion](https://github.com/ViaVersion/ViaVersion) plugin on the backend servers. Velocity/BungeeCord support most Minecraft versions, so you can update them regardless of the backend server versions.
+Make sure you update your proxy software to the latest available version, and, if the backend servers are not on <Versions platform="java"/>, also install the [ViaVersion](https://github.com/ViaVersion/ViaVersion) plugin on the backend servers. Velocity/BungeeCord support most Minecraft versions, so you can update them regardless of the backend server versions.

wiki/geyser/translations.md

@@ -52,7 +52,7 @@ These languages are also supported, and are available in the Bedrock client usin
 | Hindi               | hi_in |
 
 ## How can I help translate Geyser? {#how-can-i-help-translate-geyser}
-We use [Crowdin](https://crowdin.com/project/geyser) to manage our translations.
+We use [Crowdin](https://translate.geysermc.org/) to manage our translations.
 We also can add support for more languages, and please request them in the Discord server if you are willing to translate them.
 (Those can be enabled clientside via [https://www.curseforge.com/minecraft-bedrock/addons/translations-for-minecraft](https://www.curseforge.com/minecraft-bedrock/addons/translations-for-minecraft))
 

wiki/geyser/understanding-the-config.md

@@ -1,142 +0,0 @@
----
-title: Understanding the Config
-description: This page covers basic information about the Geyser config and the function of each option.
----
-
-This page covers basic information about the Geyser config and what each option does. Though they are explained in the configuration itself, this explains what each option does in more detail.
-
-## Bedrock Section {#bedrock-section}
-The options for Geyser on the Bedrock-facing end. Mostly contains options for how Bedrock edition will see the server.
-
-**`address`**: The address of Geyser on the Bedrock end. In most all scenarios, this should not need to be changed, unless you want to limit what IPs can connect to your server. Leave it at 0.0.0.0 (default), unless otherwise instructed in the setup guide.
-
-**`port`**: The port Geyser will run on. By default, it is 19132 in Bedrock. If you are using a server hosting provider, you may not have this port available to you - in which case, read the setup guide to proceed.
-
-**`clone-remote-port`**: Some hosting services change your Java port everytime you start the server and require the same port to be used for Bedrock/UDP connections. This option makes the Bedrock port the same as the Java port every time you start the server. This option does not do anything on the Standalone version of Geyser.
-
-**`motd1`**: The first line of the MOTD for Geyser.
-
-**`motd2`**: The second line of the MOTD for Geyser. **Please keep in mind, this option will only work if Geyser is shown in the Friends tab!**
-
-**`server-name`**: The world name that is shown in the top-right area of the pause menu and the settings menu.
-
-**`compression-level`**: An number value that represents how much to compress outgoing traffic. Can be any number from -1 to 9; any other value will be replaced with the nearest acceptable value. The higher the number, the more CPU processing that is used but with less bandwidth used. Default is 6.
-
-**`broadcast-port`**:  The port to broadcast to Bedrock clients with the MOTD that they should use to connect to the server. DO NOT uncomment and change this unless Geyser runs on a different internal port than the one that is used to connect.
-
-**`enable-proxy-protocol`**:  Whether to enable PROXY protocol or not for clients. You DO NOT WANT this feature unless you run UDP reverse proxy in front of your Geyser instance. You do NOT need this for BungeeCord (and forks), Velocity, or Waterfall.
-
-**`proxy-protocol-whitelisted-ips`**: Disabled by default, and only enable this if you use "enable-proxy-protocol". A list of allowed PROXY protocol speaking proxy IP addresses/subnets. Should really only be used when you are not able to use a proper firewall (usually true with shared hosting providers etc.). Keeping this list empty means there is no IP address whitelist. IP addresses, subnets, and links to plain text files containing either are supported.
-
-## Remote Section {#remote-section}
-Options for the remote (Java) server.
-
-**`address`**: The address of the Minecraft: Java Edition server you want to join. By default, this value is `auto`. By keeping it as `auto`, the address, port, and Floodgate support will be automatically configured. In standalone, keeping this as `auto` sets the remote address to 127.0.0.1.
-
-**`port`**: The port of the Minecraft: Java Edition server you specified in the `address` section. For plugin versions, if address has been set to "auto", the port will also follow the server's listening port.
-
-**`auth-type`**: The authentication type of the Minecraft: Java Edition server. Valid options are `online`, `offline`, and `floodgate`. 
-
-**Please keep in mind, what you specify in the Geyser `auth-type` option MUST be the same as what the remote server has (with the exception of Geyser being in online mode and remote being in offline mode). You simply cannot join an online mode server without a genuine account. If you want to allow Minecraft: Bedrock Edition accounts to join without a Minecraft: Java Edition account, see the [Floodgate](/wiki/floodgate/) wiki page.**
-
-**`use-proxy-protocol`**: Whether to enable PROXY/HAProxy protocol or not while connecting to the server. This is useful only when:
-- Your server supports PROXY protocol (it probably doesn't)
-- You run Velocity or BungeeCord with its respective option enabled.
-- IF YOU DON'T KNOW WHAT THIS IS, DON'T TOUCH IT!
-
-**`forward-hostname`**: Forwards the hostname/IP address that the Bedrock client used to connect over to the Java server. This is designed to be used for forced hosts on proxies.
-
-## General Options {#general-options}
-General Geyser options that are mostly specific to Geyser itself.
-
-**`floodgate-key-file`**:  Floodgate uses encryption to ensure use from authorised sources. This should point to the public key generated by Floodgate (BungeeCord, Spigot or Velocity). You can ignore this when not using Floodgate. If you're using a plugin version of Floodgate on the same server, the key will automatically be picked up from Floodgate.The key file path for Floodgate. Requires that you have [Floodgate](/wiki/floodgate/) installed and the `auth-type` set to `floodgate`. 
-
-**`saved-user-logins`**: For online mode authentication type only. 
-Stores a list of Bedrock player usernames that should have their Java Edition account saved after login.
-This saves an auth chain token that can be reused to authenticate the player later. This does not save emails or passwords,
-but you should still be cautious when adding to this list and giving others access to this Geyser instance's files.
-Removing a name from this list will delete its cached login information on the next Geyser startup.
-The file that tokens will be saved in is in the same folder as this config, named `saved-auth-chains.json`.
-
-Format:
-
-```yml
-saved-user-logins:
-  - jeb_
-  - Dinnerbone
-```
-
-**`command-suggestions`**: Bedrock clients freeze or crash when opening up the command prompt for the first time with a large amount of command suggestions. This config option disables command suggestions being sent to prevent any freezing. **Since 1.16.100:** command freezing and crashing has been largely reduced; you may no longer need this option disabled.
-
-**`passthrough-motd`**: If the MOTD should be relayed from the remote server. Causes the `motd1` and `motd2` options in the bedrock section to no longer have a use.
-
-**`passthrough-player-count`**: If the current and max player counts should be relayed from the remote server.
-
-**`legacy-ping-passthrough`**: If enabled, manually pings the server by impersonating a Minecraft client instead of using the server's API. **This option should *only* be enabled if your MOTD or player count is not accurate,** as it can cause errors especially on BungeeCord. This option does nothing on Geyser Standalone.
-
-**`ping-passthrough-interval`**: How often the fake Minecraft client should attempt to ping the remote server to update information, in seconds (a setting of 1 will ping the server every second; a setting of 3 will ping the server every three seconds). Only relevant for standalone and legacy ping passthrough. Increase the number if you're getting timeout or BrokenPipe exceptions.
-
-**`forward-player-ping`**: Whether to forward player ping to the server. While enabling this will allow Bedrock players to have more accurate ping, it may also cause players to time out more easily.
-
-**`max-players`**: The maximum amount of players shown when pinging the server. This does not actually cap how many players can join the Geyser instance at this time. The number will visually increase when pinging if the amount of players is greater, as Bedrock clients will not even attempt to join a full server.
-
-**`debug-mode`**: If debug messages should be printed in console. Useful if you run into an error and need more context. Yes, this will cause more messages, warnings or even errors in console - some packets aren't translated.
-
-**`allow-third-party-capes`**: If third party (Optifine, 5zig, LabyMod, etc.) capes should be displayed to the bedrock player.
-
-**`allow-third-party-ears`**: If third party Deadmau5-style ears should be enabled. Currently only supports MinecraftCapes.
-
-**`show-cooldown`**: Bedrock Edition currently does not have Java Edition 1.9+ combat mechanics. In order to get around this, Geyser sends a fake cooldown by sending a title message. This cooldown should not show if 1.8 combat mechanics are in use. The options available for this setting are `false` (no cooldown is sent), `title`/`true` (a cooldown indication is shown in the title), or `actionbar` (a cooldown indication is shown in the action bar). All other options default to `false`.
-
-**`show-coordinates`**: Bedrock Edition has an option to show coordinates in the top-left part of your screen. This setting enables or disables this.
-
-**`disable-bedrock-scaffolding`**: Whether Bedrock players are blocked from performing their scaffolding-style bridging.
-
-**`emote-offhand-workaround`**: Since Java Edition 1.9, clients have had the ability to switch the item in their mainhand and offhand with a keybind. Bedrock Edition does not have this ability, so this config option makes up for it, If set, when a Bedrock player performs any emote, it will swap the offhand and mainhand items, just like the Java Edition keybind. There are three options this can be set to:
-- `disabled` - the default/fallback, which doesn't apply this workaround
-- `no-emotes` - emotes will NOT be sent to other Bedrock clients and offhand will be swapped. This effectively disables all emotes from being seen.
-- `emotes-and-offhand` - emotes will be sent to Bedrock clients and offhand will be swapped
-
-**`default-locale`**: The default locale to send to players if their locale could not be found. This option is disabled by default - to enable it, remove the "#" in front of the option.
-
-**`cache-images`**: Specify how many days images will be cached to disk to save downloading them from the internet. A value of 0 is disabled. (Default: 0)
-
-**`allow-custom-skulls`**: Allows custom skulls to be displayed when placed. Keeping them enabled may cause a performance decrease on older/weaker devices.
-
-**`max-visible-custom-skulls`**: The maximum number of custom skulls to be displayed per player. Increasing this may decrease performance on weaker devices. Setting this to -1 will cause all custom skulls to be displayed regardless of distance or number.
-
-**`custom-skull-render-distance`**: A number value specifying the radius in blocks around the player in which custom skulls are displayed. 32 by default.
-
-**`add-non-bedrock-items`**: Whether to add (at this time, only) the furnace minecart as a separate item in the game, which normally does not exist in Bedrock Edition. This should only need to be disabled if using a proxy that does not use the "transfer packet" style of server switching. If this is disabled, furnace minecart items will be mapped to hopper minecart items. This option requires a restart of Geyser in order to change its setting.
-
-**`above-bedrock-nether-building`**: Bedrock prevents building and displaying blocks above Y127 in the Nether - enabling this config option works around that by changing the Nether dimension ID to the End ID. The main downside to this is that the sky will resemble that of the End sky in the Nether, but ultimately it's the only way for this feature to work.
-
-**`force-resource-packs`**: Force clients to load all resource packs if there are any. If set to false, it allows the user to disconnect from the server if they don't want to download the resource packs.
-
-**`xbox-achievements-enabled`**: Allows Xbox achievements to be unlocked.
-
-**`log-player-ip-addresses`**: Whether player IP addresses will be logged by the server.
-
-**`notify-on-new-bedrock-update`**: Whether to alert the console and operators that a new Geyser version is available that supports a Bedrock version that this Geyser version does not support. It's recommended to keep this option enabled, as many Bedrock platforms auto-update.
-
-**`unusable-space-block`**: Which item to use to mark unavailable slots in a Bedrock player inventory. Examples of this are the 2x2 crafting grid while in creative, or custom inventory menus with sizes different from the usual 3x9. A barrier block is the default item (minecraft:barrier is therefore the default value). Takes any Minecraft Bedrock item identifier, e.g. `minecraft:apple`. To set this to a custom item, you will need to add the `geyser_custom:` namespace.
-
-## Metrics {#metrics}
-
-bStats is a stat tracker that is entirely anonymous and tracks only basic information about Geyser, such as how many people are online, how many servers are using Geyser, what OS is being used, etc. You can learn more about bStats [here](https://bstats.org/). To see Geyser Stats, see [here](https://bstats.org/plugin/server-implementation/GeyserMC/).
-
-**`enabled`**: If metrics are enabled
-
-**`uuid`**: UUID of the server, don't change this!
-
-## Advanced Options {#advanced-options}
-
-**`scoreboard-packet-threshold`**: Geyser updates the Scoreboard after every Scoreboard packet, but when Geyser tries to handle a lot of scoreboard packets per second can cause serious lag. This option allows you to specify after how many Scoreboard packets per seconds the Scoreboard updates will be then limited to four updates per second.
-
-**`enable-proxy-connections`**: Allow connections from ProxyPass and Waterdog. See https://www.spigotmc.org/wiki/firewall-guide/ for assistance - use UDP instead of TCP. **This option does not need to be enabled in instances like BungeeCord or Velocity**.
-
-**`mtu`**: https://en.wikipedia.org/wiki/Maximum_transmission_unit - The internet supports a maximum MTU of 1492 but could cause issues with packet fragmentation. 1400 is the default.
-
-**`use-direct-connection`**: Whether to connect directly into the Java server without creating a TCP connection. This should only be disabled if a plugin that interfaces with packets or the network does not work correctly with Geyser. If enabled on plugin versions, the remote address and port sections are ignored. If disabled on plugin versions, expect performance decrease and latency increase.
-
-Default Geyser Config: [config.yml](https://github.com/GeyserMC/Geyser/blob/master/core/src/main/resources/config.yml)

wiki/geyser/using-geyser-with-consoles.md

@@ -58,19 +58,26 @@ Text directions:
 
 If you'd rather try emulating a LAN game on your network on another device, here's how you'd do that.
 
-*Note that this method will not work with the Nintendo Switch.*
+### MultiPlatform {#multiplatform}
+
+#### MCCompanion — free and ad-free.
+
+- iOS (iOS 12.0 or later): [Download on the App Store](https://apps.apple.com/be/app/netherlink/id6747323142?l=en)  
+- Android: [Download on the Play Store](https://play.google.com/store/apps/details?id=net.netherdev.netherLink)  
+- macOS: [Download on the App Store](https://apps.apple.com/us/app/mccompanion/id6747323142?platform=mac)  
+- Windows: [Download on the Microsoft Store](https://apps.microsoft.com/detail/9NSFPT6D8PTR)
+
 
 ### Using a PC {#using-a-pc}
-If you have a PC, you can use [Phantom](https://github.com/jhead/phantom).
+*Note that this method will not work with the Nintendo Switch.*
+- [Phantom](https://github.com/jhead/phantom).
 
 ### Using an Android Device {#using-an-android-device}
 If you have an Android device, you have several options:
-- ~~[Geyser Android app](https://github.com/GeyserMC/GeyserAndroid)~~ (Discontinued)
 - [BedrockTogether](https://play.google.com/store/apps/details?id=pl.extollite.bedrocktogetherapp)
 - [MC Lan Proxy (Trial)](https://play.google.com/store/apps/details?id=com.luzenna.mineproxydroidtrial)
 - [MC Lan Proxy (Paid)](https://play.google.com/store/apps/details?id=com.luzenna.mineproxydroid)
 - [MC Server Connector](https://play.google.com/store/apps/details?id=com.smokiem.mcserverconnector)
-- [Tempest](https://play.google.com/store/apps/details?id=net.ahmed.tempest)
 
 ### Using an iOS device {#using-an-ios-device}
 If you have an iOS 14+ device, you can use [BedrockTogether](https://apps.apple.com/app/bedrocktogether/id1534593376).

wiki/index.mdx

@@ -6,7 +6,7 @@ description: 'This page provides an overview over all sections of the GeyserMC w
 
 import DocCardList from '@theme/DocCardList'
 
-# Overview
+# Overview \{#overview}
 
 The GeyserMC wiki offers guides on different projects. Select the one you are interested in below!
 

wiki/other/community-geyser-projects.md

@@ -38,7 +38,7 @@ Creator: [Camotoy](https://github.com/Camotoy)
 
 ## CreeperNation Skin API {#creepernation-skin-api}
 
-An SkinAPI that displays Java or Bedrock skins based on the UUID or username.
+A SkinAPI that displays Java or Bedrock skins based on the UUID or username.
 
 * [Website](https://docs.creepernation.net)
 
@@ -59,6 +59,25 @@ A Spigot plugin that allows users to enter commands starting with `.`, to work a
 
 Creator: [Chew](https://github.com/Chew)
 
+## Emotecraft {#emotecraft}
+A mod (NeoForge, Fabric), plugin (Paper), and Geyser extension that allows Java players to view Bedrock emotes, and for both Java and Bedrock players to be able to play custom emotes.
+
+:::note
+
+Java clients obviously need the mod to be installed.  
+You need both the extension, and the mod or plugin for your server.
+
+:::
+
+* [Wiki](https://docs.zigythebird.com/emotecraft/geyserext)
+* [Modrinth (all downloads)](https://modrinth.com/plugin/emotecraft)
+* [CurseForge (Fabric)](https://www.curseforge.com/minecraft/mc-mods/emotecraft)
+* [CurseForge (NeoForge)](https://www.curseforge.com/minecraft/mc-mods/emotecraft-forge)
+* [Hangar](https://hangar.papermc.io/dima_dencep/emotecraft)
+* [GitHub](https://github.com/KosmX/emotes)
+
+Creators: [dima_dencep](https://github.com/dima-dencep), [Zigy](https://github.com/ZigyTheBird), [KosmX](https://github.com/KosmX)
+
 ## FloodgatePlaceholders {#floodgateplaceholders}
 Placeholders support for Floodgate.
 
@@ -82,7 +101,7 @@ Plugin that blocks Java players from joining your Geyser server, so you can have
 Creator: [Camotoy](https://github.com/Camotoy)
 
 ## GeyserExtras {#geyserextras}
-A Spigot plugin which attempts to unify features for Bedrock Edition players, including features like a cleaner looking combat cooldown, combat sounds and other helpful features and workarounds.
+A Geyser extension / plugin which attempts to unify features for Bedrock Edition players, including features like a cleaner looking combat cooldown, combat sounds and other helpful features and workarounds.
 
 * [Modrinth](https://modrinth.com/plugin/geyserextras)
 * [Hangar](https://hangar.papermc.io/GeyserExtras/GeyserExtras)
@@ -117,8 +136,8 @@ Small application that waits for a player to connect before launching actual min
 
 Creator: [Vincss](https://github.com/vincss)
 
-## TydiumCraft Skin API {#tydiumcraft-skin-api}
-An API makes it easier for your Bedrock skin to be rendered and outputted!
-* [Website](https://tydiumcraft.net/api)
+## Starlight Skin API {#starlight-skin-api}
+An API that makes it easier for Bedrock Skins to be outputted. 
+* [Website](https://lunareclipse.studio/creations/starlight-skinapi)
 
-Creators: [Tydium](https://github.com/Tydium)
+Creators: [Bret06](https://www.bret06.net/)

wiki/other/geyserintegratedpack.md

@@ -0,0 +1,66 @@
+---
+title: GeyserIntegratedPack
+description: GeyserIntegratedPack is a Bedrock resource pack that fixes parity issues with Geyser to bring Bedrock Edition in line with Java Edition.
+---
+
+:::info
+Geyser includes the GeyserIntegratedPack (previously called "GeyserOptionalPack"), you do not need to add it manually!
+See the "[Migration](#migration)" section for further details.
+:::
+
+GeyserIntegratedPack is a Bedrock resource pack that adds more features to Geyser to bring Bedrock Edition in line with Java Edition. 
+A resource pack allows various features and bug fixes to be implemented in Bedrock, including:
+
+- Armor base arms/baseplate visibility
+- Armor stand poses
+- Illusioners
+- Missing particles
+- Offhand animations
+- Shulker invisibility parity
+- Spectral arrow entity texture
+- Bypass for the scoreboard character limit
+- Hides UI elements that do not exist on Java edition, such as:
+  - Text input field in the cartography table
+  - 2x2 crafting grid while in creative mode
+  - Tick-delay and rename fields in the command block menu
+  - Structure block options that do not exist on Java
+- Hides the accessibility background on titles for the weapon cooldown
+  
+A more complete list can be found on the integrated pack's [README](https://github.com/GeyserMC/GeyserIntegratedPack/blob/master/README.md). 
+Implementation details for those interested in how features are added can be found [here](https://github.com/GeyserMC/GeyserIntegratedPack/blob/master/developer_documentation.md).
+
+## Migration from GeyserOptionalPack {#migration}
+
+Users previously using the GeyserOptionalPack should remove it to allow Geyser to serve the GeyserIntegratedPack instead.
+This change has one main benefit: automatic updates, and it is a preparation for advanced features that are tied-in to Geyser (such 
+as a proper Java-style attack indicator!). 
+
+You can also disable the GeyserIntegratedPack in Geyser's config if you do not wish to have these changes applied.
+
+### What changed?
+- The resource pack uuid and version have been changed
+- The GeyserIntegratedPack is being sent with a lower priority in the clients resource pack stack (the order in which 
+resource packs are applied), so manual overrides are possible
+- With Geyser including the pack, you no longer need to worry about updating the pack yourself!
+
+### How to migrate?
+
+If you previously downloaded the GeyserOptionalPack from Geyser's download page, you can simply remove it from Geyser's
+`packs` folder and let Geyser apply the GeyserIntegratedPack - and you're done!
+
+However, if you were applying modifications to the resource pack, there are more things to be done:
+- You should separate out your changes into a separate resource pack. The GeyserIntegratedPack has a low priority in the 
+resource pack stack, so your changes in your resource pack will take priority. 
+- If you modify entity definitions that the GeyserIntegratedPack changes, make sure to merge the definitions manually!
+
+Users utilizing the UrlPackCodec should also serve the GeyserIntegratedPack instead (available [here](https://github.com/GeyserMC/GeyserIntegratedPack)).
+Geyser will still perform checks to ensure the "manually" included version isn't outdated, so we recommend to regularly poll 
+Geyser's downloads API for pack updates.
+
+## Resource pack conflicts {#resource-pack-conflicts}
+
+If your current server resource pack contains any entity definitions that overlap with Geyser's changes (found [here](https://github.com/GeyserMC/GeyserIntegratedPack/tree/master/src/main/resources/integratedpack/entity) 
+and [here](https://github.com/GeyserMC/GeyserIntegratedPack/tree/master/src/main/resources/patches/entity)),
+you will need to merge the definitions for these entities for the optional pack and your own pack to work correctly. 
+The Bedrock client will prioritize the entity definition based on pack application order - highest wins! This process is best performed manually 
+due to the complexity of entity definition files, though it can also be [scripted](https://gist.github.com/Kas-tle/89c6adc3e7901fbabd1b9f71d902d0a6).

wiki/other/geyseroptionalpack.md

@@ -3,28 +3,10 @@ title: GeyserOptionalPack
 description: GeyserOptionalPack is a Bedrock resource pack that fixes parity issues with Geyser to bring Bedrock Edition in line with Java Edition.
 ---
 
-## [Download here](/download?project=other-projects&geyseroptionalpack=expanded) {#download-here}
+# GeyserOptionalPack
 
-GeyserOptionalPack is a Bedrock resource pack that adds more features to Geyser to bring Bedrock Edition in line with Java Edition. A resource pack allows various features and bug fixes to be implemented in Bedrock, including:
-
-- Armor base arms/baseplate visibility
-- Armor stand poses
-- Illusioners
-- Missing particles
-- Offhand animations
-- Shulker invisibility parity
-- Spectral arrow entity texture
-- Bypass for the scoreboard character limit
-- Hides UI elements that do not exist on Java edition, such as:
-  - Text input field in the cartography table
-  - 2x2 crafting grid while in creative mode
-  - Tick-delay and rename fields in the command block menu
-  - Structure block options that do not exist on Java
-  
-A more complete list can be found on the optional pack's [README](https://github.com/GeyserMC/GeyserOptionalPack/blob/master/README.md). Implementation details for those interested in how features are added can be found [here](https://github.com/GeyserMC/GeyserOptionalPack/blob/master/developer_documentation.md).
-
-While recommended, it is not required to install the resource pack on the server - clients can install it themselves. Additionally, if you use a proxy like WaterdogPE, you can install the pack on the server without impacting gameplay on other Bedrock servers.
-
-## Resource pack conflicts {#resource-pack-conflicts}
-
-If your current server resource pack contains any [entity definitions](https://github.com/GeyserMC/GeyserOptionalPack/tree/master/entity) that overlap with the optional pack, you will need to merge the definitions for these entities for the optional pack and your own pack to work correctly. Otherwise, the prevailing entity definition will be based on pack application order. This process is best performed manually due to the complexity of entity definition files, though it can also be [scripted](https://gist.github.com/Kas-tle/89c6adc3e7901fbabd1b9f71d902d0a6).
+:::info
+This page has been [moved](/wiki/other/geyserintegratedpack/).
+Geyser now includes the GeyserIntegratedPack, so users no longer need to manually add this resource pack as it is natively integrated
+into Geyser!
+:::

wiki/other/hurricane.md

@@ -13,8 +13,8 @@ Issues with each workaround are listed in the Hurricane config. **Please take yo
 - Bamboo and dripstone collision (by setting them to no server-side collision)
 
 Supported Versions:
-- Spigot/Paper: 1.14.x - 1.21.1
-- Fabric: 1.21/1.21.1
+- Spigot/Paper: 1.14 - 1.21.8
+- Fabric: 1.21 - 1.21.4
 
 ## Download {#download}
 - Spigot/Paper: [GeyserMC downloads page](/download/?project=other-projects&hurricane=expanded)

wiki/other/hydraulic.md

@@ -28,5 +28,6 @@ you're interested in helping out with Hydraulic.
 
 1. Clone the repo to your computer.
 2. Navigate to the Hydraulic root directory and run `git submodule update --init --recursive`. This command downloads all the needed submodules for Hydraulic and is a crucial step in this process.
-3. The project should import into your IDE after the loom setup is complete. For more detailed information, see the [Fabric setup](https://fabricmc.net/wiki/tutorial:setup)
-4. Use `./gradlew build` to compile a jar file, or use `./gradlew :fabric:runServer` or `./gradlew :neoforge:runServer` to run a server with Hydraulic installed. Make sure to install Geyser into your `mods` folder!
+3. If your default JVM/JDK is not Java 25, please set your IDE to use a valid Java 25 JVM. Otherwise, you will run into an error while building Hydraulic.
+4. The project should import into your IDE after the loom setup is complete. For detailed information, see the [Fabric setup](https://docs.fabricmc.net/develop/getting-started/setting-up).
+5. Use `./gradlew build` to compile a jar file, or use `./gradlew :fabric:runServer` to run a server with Hydraulic installed. Make sure you have Geyser in your `mods` folder along with Hydraulic!

wiki/other/index.mdx

@@ -7,7 +7,7 @@ description: 'Other projects or guides not directly referring to Geyser or Flood
 import DocCardList from '@theme/DocCardList'
 import { useDocById } from '@docusaurus/plugin-content-docs/client'
 
-# Overview of Other projects
+# Overview of Other projects \{#overview-of-other-projects}
 
 The "other" category provides you with information about different projects that are not Geyser or Floodgate.
 This includes community projects, but also other projects by the GeyserMC team, such as Hurricane or Hydraulic.
@@ -15,7 +15,8 @@ This includes community projects, but also other projects by the GeyserMC team,
 <DocCardList items={[
     'community-geyser-projects',
     'hurricane',
-    'geyseroptionalpack',
+    'thunder',
+    'rainbow',
     'thirdpartycosmetics',
     'hydraulic',
     'geyserconnect',

wiki/other/rainbow.md

@@ -0,0 +1,165 @@
+---
+title: Rainbow
+description: A tool to convert custom content to Bedrock.
+---
+
+Rainbow is a client-sided Minecraft mod to convert resource packs with custom content created for Java Edition to
+an equivalent resource pack for Bedrock Edition, together with custom mappings to be used in Geyser. Rainbow is available
+for the Fabric modloader.
+
+Rainbow can be downloaded at [our website](https://geysermc.org/download?project=other-projects&rainbow=expanded),
+or over at [Modrinth](https://modrinth.com/mod/rainbow-mod).
+
+:::info
+Rainbow is a mod installed on the Java client! As such, you need to be able to use a Java client to use Rainbow.
+Rainbow can be used with every resource pack, regardless of your server's software (it may be used with Spigot or
+Paper servers, for example).
+:::
+
+:::warning
+Rainbow is used to convert resource packs adding new, custom content. For resource packs modifying vanilla content,
+you should look into using [Thunder](/wiki/other/thunder).
+:::
+
+:::caution
+This project is in early development! Any bugs and issues should be reported at its [issue tracker](https://github.com/GeyserMC/Rainbow/issues).
+:::
+
+You can use Rainbow to convert custom content of datapacks (that require a resource pack), custom content plugins like Nexo or ItemsAdder, or even
+server-side only Fabric/NeoForge mods, such as Polymer mods. However, these custom content providers may use
+[item displays](https://minecraft.wiki/w/Display), which Geyser does not yet support. This may result in your custom blocks or items
+not rendering on Bedrock when placed in the world.
+
+You can use extensions created by the community, such as [GeyserDisplayEntity](https://github.com/GeyserExtensionists/GeyserDisplayEntity),
+to add support for item displays to Geyser. However, keep in mind that these are not created by or affiliated with Geyser,
+and as such any issues that may occur should not be reported to us.
+
+## Usage {#usage}
+
+Rainbow works by analysing the loaded resource packs on the client and extracting the custom content found. As such,
+you need to ensure all the necessary resource packs for your custom content are loaded on your client. If custom content
+appears correctly on your Java client, then Rainbow is able to analyse it.
+
+Generally, you use Rainbow as follows:
+
+1. Set up a Java Edition 26.1 client, with Fabric installed, and ensure that Rainbow is present on your client.
+2. Join a world or server of choice and make sure all the necessary resource packs are loaded. Then, run `/rainbow create <pack name>`, with `<pack name>` replaced with the name of your resource pack on Bedrock Edition.
+3. You can then start converting (or "mapping") custom content to be exported in your Bedrock resource pack. You can find a full list of ways to map custom content below.
+4. Run `/rainbow finish` to finish your conversion. Rainbow will then output the generated resource pack and additional files to `.minecraft/rainbow/<pack name>`. You can click the `Wrote pack to disk` message in chat to open that folder.
+5. In this folder, you'll find 5 important files/folders:
+    - `custom-skulls.yml`: put this in Geyser's config folder. These are the exported player skulls. The file may already exist in Geyser's config folder, be careful with overwriting it!
+    - `custom_mappings`: you need to put the files in here in the `custom_mappings` folder in Geyser's config folder. These are the generated Geyser mappings.
+    - `pack.zip`: this is the generated resource pack for Bedrock Edition. You need to put this file in the `packs` folder in Geyser's config folder.
+    - `lang`: you need to put all files in this folder in the `locales/overrides` folder in Geyser's config folder.
+      - The folder can be empty or non-existent if no language files were found. This is usually not an issue!
+    - `report.txt`: you don't need to do anything with this file, but it contains information about generated assets and possible problems that occurred. It can be useful to diagnose potential issues with Rainbow, and you should upload it when filing a bug report.
+6. Once you've taken all the necessary steps and uploaded the generated content to your Geyser server, restart your server. If everything went well, Bedrock users should now see your custom content!
+
+### Mapping custom blocks
+
+Rainbow is able to map custom blocks that are created by overriding unused vanilla block states. Most blocks can automatically
+be mapped by running `/rainbow auto blocks`, which will scan through all loaded resource packs for custom blocks created using block state overrides,
+and mapping all that are found.
+
+:::warning
+Running `/rainbow auto blocks` may shortly freeze your client.
+:::
+
+With some resource packs, Rainbow may not be able to automatically detect all custom blocks. In this case, you may have to
+map blocks manually, which you can do by using `/rainbow map block <target>`, where `<target>` is a position in the world,
+at which a custom block is placed.
+
+### Mapping custom items and skulls
+
+Rainbow supports mapping custom items, by detecting items with custom `minecraft:item_model` or `minecraft:custom_model_data` components.
+Rainbow is also able to map custom skulls. Each method of mapping custom items is described below.
+
+#### Mapping manually
+
+You can map custom items manually by running `/rainbow map item`. This will map the custom item or skull you're currently
+holding in your hand in-game, if any. You can also run `/rainbow mapinventory`, which will scan your entire inventory
+for any custom items or skulls, and maps all that are found.
+
+:::info
+Rainbow is automatically able to find most kinds of custom items when using `mapinventory`, however,
+items created by overriding a vanilla item model definition may not be automatically detected,
+so you'll have to map these explicitly.
+:::
+
+#### Mapping inventory menus automatically
+
+Custom item plugins, like Nexo or ItemsAdder, commonly include an inventory menu listing all custom items. Rainbow
+can make use of this and automatically map all items listed in such an inventory menu, by running `/rainbow auto inventory`.
+This will scan all inventory menus and containers you open for custom items or skulls, and maps all that are found.
+You can also use this with chests that are filled with custom items, for example.
+
+Run `/rainbow auto stop` to stop the mapping of custom items.
+
+:::info
+Like with `mapinventory`, items created by overriding a vanilla item model definition may not be automatically detected,
+so you'll have to map these explicitly.
+:::
+
+#### Mapping custom items from recipe outputs automatically
+
+Rainbow is able to search through all known recipes for outputs that are custom items or skulls, and map any that are found,
+by running `/rainbow auto recipes`. This can be useful when mapping datapacks that add large amounts of custom items with
+custom recipes, for example.
+
+:::info
+You can use the vanilla `/recipe give @s *` command to give yourself all recipes, which helps Rainbow recognise custom items when using this
+way of mapping items.
+:::
+
+:::info
+As with `mapinventory` and `auto inventory`, items created by overriding a vanilla item model definition may not be automatically detected,
+so you'll have to map these explicitly.
+:::
+
+### Mapping custom sounds
+
+Custom sounds may be mapped by using `/rainbow auto sounds`, which scans through all loaded resource packs for custom sounds,
+and maps all that are found. You may also use `/rainbow map sound <namespace>`, which maps all the custom sounds
+of the given namespace. This can be useful when you only want to export custom sounds of a single resource pack.
+
+## Capabilities and limitations
+
+Rainbow is currently capable of the following:
+
+- Generating Geyser block mappings for custom blocks made using block state overrides, both automatically and manually from loaded resource packs.
+- Generating Geyser item mappings complete with data components and proper bedrock options, by detecting items with custom `minecraft:item_model` or `minecraft:custom_model_data` components, and analysing their components.
+   - Also includes generating mappings with predicates for more complicated Java item model definitions, such as checks for if an item is broken. The following definition types are currently supported by Rainbow:
+      - Plain item model definitions.
+      - Conditional item models, supported properties are:
+         - `broken`,
+         - `damaged`,
+         - `custom_model_data`,
+         - `has_component`, and,
+         - `fishing_rod/cast`.
+      - Range dispatch item models, supported properties are:
+         - `bundle/fullness`,
+         - `count`,
+         - `custom_model_data`, and,
+         - `damage`.
+      - Select item models, supported properties are:
+         - `charge_type`,
+         - `trim_material`,
+         - `context_dimension`, and,
+         - `custom_model_data`.
+         - For the `display_context` property, the `gui` case is mapped, if present.
+   - Also includes detecting if an item should be displayed handheld by looking at the item's model.
+   - Also is able to detect and map items using the "legacy" `custom_model_data` range-dispatch style, and map them to Geyser's `legacy` item mappings.
+- Generating a simple Bedrock resource pack for blocks and simple 2D items, as well as:
+   - Simple custom armour items, by analysing an item's `minecraft:equippable` component and loaded equipment assets.
+      - Custom elytra items also work, but only visually, due to bedrock limitations.
+   - 3D items, by converting the Java model to a bedrock one, and generating an attachable and animations for it, as well as rendering a custom GUI icon.
+      - Is able to translate display transformations for the head, first-person and third-person item slots.
+   - Custom sounds.
+- Generating working animated (flipbook) textures for 2D items and 3D items that make use of a single texture only.
+- Exporting merged language files from loaded resource packs to a folder, for easy copying to Geyser's `locales/overrides` folder.
+   - Files from different resource packs for the same language are merged together.
+
+## Contributing {#contributing}
+
+Any contributions are appreciated. Please feel free to reach out to us on [Discord](https://discord.gg/geysermc) if
+you're interested in helping out with Rainbow.

wiki/other/test-server.md

@@ -6,6 +6,9 @@ description: Information about joining and using the Geyser test server.
 ### Details {#details}
 - IP: `test.geysermc.org` (default ports on both Bedrock and Java)
 - World size: 20k x 20k
+- Nether and End disabled
+- After 90 days, any untouched claimed land will be unclaimed
+- After 30 days, unclaimed land will be regenerated
 
 ### Infomation {#infomation}
 Geyser has a test server for those who want to test how Java \<-\> Bedrock crossplay works on their device, and to see the limitations and restrictions. You can join from either Bedrock or Java, and the server has [Floodgate](/wiki/floodgate/) installed so you don’t need a Java account to join from Bedrock.

wiki/other/thunder.md

@@ -0,0 +1,34 @@
+---
+title: Thunder
+description: 'A java application to convert simple Java Edition resource packs to Bedrock Edition ones.'
+---
+
+Thunder is a java application to convert simple Java Edition resource packs to Bedrock Edition ones.
+
+## What is Thunder? {#what-is-thunder}
+
+Thunder is a converter for simple Java Edition resource packs which can generate Bedrock Edition packs, it currently converts resource packs which modifies existing vanilla assets.
+
+:::caution
+
+Not only is this project in early beta, it does **not** convert custom items! Please look towards [Rainbow](/wiki/other/rainbow) for that.
+
+:::
+
+## Usage {#usage}
+
+1. Ensure you have Java 21 or higher installed, if you do you should be able to open the file like a normal program.
+2. Select the Java edition resource pack using the button on the left. Once you do, if it was successful you should see the icon of the pack.
+3. Change the output pack name. This is the name shown to the Bedrock client.
+4. Hit the convert button to start the conversion process. This step may take a while.
+5. Once completed, the converter Bedrock edition resource pack will be in the same place as where your Java pack was. 
+You can now either use the pack on the Bedrock client, or place it in the `packs` folder in your Geyser server.
+
+## Download {#download} 
+
+You can download Thunder [here](/download/?project=other-projects&thunder=expanded).
+
+## Contributing {#contributing}
+
+Any contributions are appreciated. Please feel free to reach out to us on [Discord](https://discord.gg/geysermc) if
+you're interested in helping out with Thunder.