How to host a Minecraft server without port forwarding

Every method for letting friends join your server without opening a port, and the trade-off each one asks for.

Port forwarding is the default advice because it needs nothing except your own router. It is also the method most likely to be impossible, because a growing share of home connections never give you a public address to forward to.

This covers every method that works without touching your router, what each asks of you in return, and how to choose.

#The options at a glance

The first and last columns decide it for most people. If you cannot ask players to install software, you are choosing between a tunnel and hosting. If you cannot leave a machine running, hosting is the only option on the list.

#1. Tunnel services

A tunnel client runs alongside your server and makes an outbound connection to a relay. Players connect to the relay, which forwards traffic down that existing connection.

This needs no router changes because the connection is established from the inside out, the same direction as loading a web page. Nothing has to accept an incoming connection at your address.

What varies is whether the address is stable. Some services allocate a fresh host and port every time the client restarts, so you re-send the address to everyone each session. Others give you a fixed name. If you intend to play more than once, a fixed address is worth more than it sounds.

Good when: players should not have to install anything, and your machine can be on when people play. Bad when: the world needs to be up while that machine is off.

#2. Mesh VPNs

Tailscale, ZeroTier and similar build a private network between machines. Once players join it, your server appears at an address they can connect to as though everyone shared a LAN.

The catch is in that sentence. Players have to join the network, which means installing a client, making an account, and being added by you. For five regulars that is a one-off annoyance. For a public server it is a non-starter.

Free tiers also cap the group. Tailscale's Personal plan covers up to six users, and ZeroTier's free Personal plan covers ten devices on one network with your server occupying one of them. Radmin VPN does not cap players but is Windows-only.

Mesh VPNs are the strongest option for privacy, because nothing is exposed publicly at all and traffic is encrypted between members.

Good when: a small fixed group who will tolerate a one-time setup. Bad when: anyone should be able to join, or your players are not technical.

#3. LAN emulators

Hamachi popularised making remote machines look like they share a LAN, and Radmin VPN occupies that space now. Functionally these sit close to mesh VPNs, with the same requirement that everyone installs a client.

They carry more friction than the modern alternatives: free-tier network size limits, virtual adapters that confuse other software, and intermittent trouble with Minecraft's LAN discovery. If you are choosing fresh today, a mesh VPN does the same job more cleanly.

Good when: you already have it working. Bad when: starting from scratch.

#4. Free hosts

Aternos, Minehut and similar run the server on their hardware, so port forwarding never enters the picture and your PC does not need to be on.

The cost is paid in other currencies: queues at busy times, servers that sleep when empty and must be woken, limits on players or uptime, and removal after long inactivity. What each free option actually costs you goes through them individually.

Good when: occasional play and you do not mind waiting. Bad when: you want the server reliably there on a schedule.

#5. Paid hosting

The server runs on someone else's machine, permanently, at a fixed address. No router involvement, no dependency on your hardware.

This is right when the server must be up whether or not you are, or when the modpack is heavier than the machine you own. It is wrong when you already own hardware that would do the job and only need the connectivity problem solved.

#6. Cloudflare Tunnel, and why it usually disappoints

This comes up often enough to address directly. Cloudflare Tunnel is excellent for websites, and people reasonably assume it will carry a Minecraft server too.

Minecraft Java does not speak HTTP. It is a custom protocol over raw TCP, normally on port 25565, and Cloudflare's free plan will not proxy raw TCP. The product that does is Spectrum, which is sold to enterprise customers. The free workarounds are having every player install Cloudflare's WARP client, or running a WebSocket proxy in front of the server so the traffic looks like something the free proxy will carry. Both put you exactly where a mesh VPN does: everyone installs or runs something.

Good when: you were going to ask everyone to install a client anyway. Bad when: you expected it to behave like a plain tunnel.

#How to choose

Answer these in order and you will land on one option.

1. Must the server be up when your PC is off? If yes, you need hosting, free or paid. Stop here.
2. Can you ask every player to install something? If no, you need a tunnel service or hosting.
3. Does the address need to stay the same? If yes, rule out tunnels that allocate a random port on each start.
4. Is privacy the priority? A mesh VPN exposes nothing publicly, which is stronger than a tunnel.

#Is port forwarding actually dangerous?

Not inherently, but it carries two real costs.

It publishes your home IP to everyone who joins, which is enough to aim a denial-of-service attack at your house. That takes the whole household offline rather than just the game. And it means deliberately exposing a service to the open internet, which is worth doing knowingly rather than by following a video.

If your router supports it and you understand the trade, it remains the method with the fewest moving parts. More on what your address reveals.

#Where Self Hostd fits

We build one of the options above, so weigh this accordingly. Self Hostd is a tunnel: a launcher runs beside your server, dials out to our relay, and players connect to a fixed address. Nothing installs on their side and nothing changes on your router.

It is the wrong tool if you need the world up while your PC is off. If the machine cannot carry the modpack, no tunnel fixes that either.

Written and maintained by the Hostd engineering team. Last updated 2026-08-11. Notice a mistake? Tell us.