Cloudflare Developers•2y ago

Server started out working with the subdomain, but then stopped.

Sorry, i'm learning as i go with server hosting, but i have a home server and a domain. I host a minecraft server for my friends, and i want them to be able to use like a word adress (minecraft.mydomain.uk) and not just my ip adress (static). It starts out working, however soon after stops, and i can only connect via the ip adress plus the port, or the domain plus the port. I have an A record set up in the cloudflare thing, and an SRV record which i think is correct as it worked fine before (_minecraft._tcp.minecraft). any help is appreciated,
thanks

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

pilesuris

Ppilesuris Sorry, i'm learning as i go with server hosting, but i have a home server and a ...

Chaika

C

Chaika•6/12/24, 3:53 PM

what's the srv record look like?

pilesuris

P

pilesurisOP•6/12/24, 3:53 PM

Screenshot_2024-06-12_at_4.53.27_PM.png

pilesuris

P

pilesurisOP•6/12/24, 3:53 PM

like this

pilesuris

Ppilesuris Click to see attachment

Chaika

C

Chaika•6/12/24, 3:55 PM

unproxy

minecraft.dtms.uk

minecraft.dtms.uk

pilesuris

P

pilesurisOP•6/12/24, 3:55 PM

so its dns only?

Chaika

C

Chaika•6/12/24, 3:55 PM

Should be "DNS-only", not "Proxied"

pilesuris

P

pilesurisOP•6/12/24, 3:55 PM

ah aight

Chaika

C

Chaika•6/12/24, 3:55 PM

Yep

Chaika

C

Chaika•6/12/24, 3:56 PM

Can't proxy minecraft, http only

pilesuris

P

pilesurisOP•6/12/24, 3:56 PM

and it worked

pilesuris

P

pilesurisOP•6/12/24, 3:56 PM

can you explain why rq

pilesuris

P

pilesurisOP•6/12/24, 3:56 PM

im sorry

pilesuris

P

pilesurisOP•6/12/24, 3:56 PM

ty also

pilesuris

Ppilesuris can you explain why rq

Chaika

C

Chaika•6/12/24, 4:00 PM

Sure. Cloudflare's Normal Proxy uses a pool of IP Addresses, shared among a ton of sites. How do you know which connection each one is for?
A Basic connection is a tuple like this
(src ip, src port, dst ip, dst port)
src side is all up to the user, dst side is the only identifying side.
The reason how Cloudflare's Proxy works with HTTP is because the HTTP Protocol exposes mechanisms (ServerName Identifider in the TLS side, and HTTP Host on the HTTP side, which are just your site hostname like dtms.uk or minecraft.dtms.uk) for identifying what website each request is for. So it can just handle the http connection because it understands the protocol and resolves who it goes to after.

For Minecraft, Cloudflare doesn't understand the minecraft protocol and there's no nice identifier like ServerName/Host header either the protocol has.
They'd have to assign each user a unique IP to understand which site it was for, which they do have a service for called Cloudflare Spectrum, it's just crazy expensive at $1/gb used

pilesuris

P

pilesurisOP•6/12/24, 4:01 PM

ah right, a little more understood

pilesuris

P

pilesurisOP•6/12/24, 4:01 PM

thanks sm!

pilesuris

P

pilesurisOP•6/12/24, 4:01 PM

mans better than any tech support centre

Chaika

CChaika Sure. Cloudflare's Normal Proxy uses a pool of IP Addresses, shared among a ton ...

Upioti

U

Upioti•6/25/24, 9:55 PM

Actually there is an identifier

Upioti

U

Upioti•6/25/24, 9:56 PM

on the connection handshake the "hostname" field is sent

Upioti

U

Upioti•6/25/24, 9:56 PM

Thats how basically every minecraft DDoS protection provider functions

Upioti

U

Upioti•6/25/24, 9:56 PM

You can have a single ip and 25565 port but forward to different backends by the hostname

Upioti

UUpioti on the connection handshake the "hostname" field is sent

Chaika

C

Chaika•6/25/24, 9:57 PM

oh is there? That's cool, still unlikely CF would ever support that and support proxying Minecraft that way, maybe one day though

Chaika

C

Chaika•6/25/24, 9:57 PM

I thought they'd just use a ton of IPs

Chaika

CChaika I thought they'd just use a ton of IPs

Upioti

U

Upioti•6/25/24, 9:58 PM

Nono

Upioti

U

Upioti•6/25/24, 9:59 PM

Chaika

CChaika I thought they'd just use a ton of IPs

Upioti

U

Upioti•6/25/24, 9:59 PM

They do have to for bedrock tho

Upioti

U

Upioti•6/25/24, 10:00 PM

since raknet only sends hostname on connection and not ping

Upioti

U

Upioti•6/25/24, 10:00 PM

so server status would get messed up

Upioti

U

Upioti•6/25/24, 10:01 PM

And i really doubt cloudflare would support minecraft

Upioti

U

Upioti•6/25/24, 10:01 PM

at least for free

Upioti

UUpioti And i really doubt cloudflare would support minecraft

Chaika

C

Chaika•6/25/24, 10:01 PM

I mean they do via Spectrum it's just $1/gb lol

Upioti

U

Upioti•6/25/24, 10:01 PM

spectrum kinda does with the "minecraft" protocol but it doesnt really work cuz no Proxyprotocol

Chaika

CChaika I mean they do via Spectrum it's just $1/gb lol

Upioti

U

Upioti•6/25/24, 10:01 PM

Yeah but thats universal tcp

Upioti

U

Upioti•6/25/24, 10:01 PM

not minecraft-specific

Upioti

U

Upioti•6/25/24, 10:02 PM

most minecraft services also include L7 for minecraft attacks (Status floods, Handshake floods, Bots, etc)

Upioti

UUpioti not minecraft-specific

Chaika

C

Chaika•6/25/24, 10:02 PM

I thought it's meant to be a proper path.net like packet filter, not handling those type of attacks though yea

Chaika

CChaika I thought it's meant to be a proper path.net like packet filter, not handling th...

Upioti

U

Upioti•6/25/24, 10:03 PM

Idk, i havent tried much the minecraft field on protocol

Upioti

U

Upioti•6/25/24, 10:04 PM

they should add proxyprotocol to it so it could be useful

Upioti

U

Upioti•6/25/24, 10:04 PM

im not sure if its actually handshake validation and not just pre-configured variables

Chaika

C

Chaika•6/25/24, 10:04 PM

even on Enterprise if you pick Minecraft you don't have the proxy protocol options

Upioti

U

Upioti•6/25/24, 10:04 PM

Yes i know

Upioti

U

Upioti•6/25/24, 10:04 PM

Also path's filter is kind of a joke

Upioti

U

Upioti•6/25/24, 10:04 PM

they dont do full handshake verification

Upioti

U

Upioti•6/25/24, 10:04 PM

its only "oh this first packet looks like a minecraft packet... lets whitelist the entire connection"

Chaika

C

Chaika•6/25/24, 10:04 PM

it might just be a preset to allow non-ent people to use it and not a proper filter, there's not much info on it out there

Chaika

CChaika it might just be a preset to allow non-ent people to use it and not a proper fil...

Upioti

U

Upioti•6/25/24, 10:05 PM

yeah i think its this

Upioti

U

Upioti•6/25/24, 10:05 PM

Wait actually lemme try it

Chaika

CChaika it might just be a preset to allow non-ent people to use it and not a proper fil...

Upioti

U

Upioti•6/25/24, 10:19 PM

Just a preset

Chaika

C

Chaika•6/25/24, 10:21 PM

rip, well thanks for testing, now we know

Upioti

UUpioti Just a preset

Upioti

U

Upioti•6/25/24, 10:22 PM

Why do they make it use ipv6 tho