If a Minecraft Bedrock Dedicated Server works on your home network but Internet friends see “Unable to connect to world,” the usual problem is not Minecraft itself. The host must be listening on the configured UDP port, the operating-system firewall must permit it, and the router must forward that same port to the server computer’s current private IP address. Bedrock Dedicated Server defaults to UDP 19132 for IPv4 and 19133 for IPv6, but the values in server.properties always take precedence.
Godlike.Host offers hosted Minecraft Bedrock servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
Work from the inside out: verify the server locally, allow the host firewall, build an exact UDP forward, then test from a genuinely separate Internet connection. A successful LAN connection proves only the local path; it does not prove public addressing, NAT, double NAT, provider NAT, or compatibility with the remote client.
As an Amazon Associate I earn from qualifying purchases.
Free tools Windows power users keep installed
One-click scans. No signup required.
What “port forwarding not working” actually tells you
Bedrock multiplayer has several independent paths. A player on the same network reaches the server through its private address. An Internet player reaches your public address, crosses the router’s NAT rule, and is delivered to the server computer. The Minecraft process, host firewall, router, and outside network can each fail separately.
That is why changing router settings first is inefficient. If the process is stopped, listening on another port, blocked by Windows Defender Firewall or Ubuntu UFW, or running an incompatible version, no router rule can repair the connection. Conversely, a perfect LAN test can coexist with a broken public route.
#1 Best Overall
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
The most useful interpretation of the symptoms is:
- Host and LAN connections fail: investigate the server process, its configuration, the host firewall, or version compatibility before touching NAT.
- LAN works but Internet connections fail: investigate the UDP forward, stale private IP, WAN/public address, double NAT, provider NAT, and any client-side network restrictions.
- Players receive “Outdated Client” or “Outdated Server”: treat it as a protocol-version mismatch, not a port problem.
Which Bedrock ports and addresses are involved?
| Path or setting | Value | What it means |
|---|---|---|
| Default IPv4 Bedrock Dedicated Server port | UDP 19132 | The documented default. Microsoft says to leave the port at 19132 for a standard dedicated-server setup. |
| Default IPv6 Bedrock Dedicated Server port | UDP 19133 | The documented IPv6 default. It is useful only when the client and network path support IPv6. |
| Server address on the host | 127.0.0.1 |
Loopback testing from the same computer. |
| Server address on the LAN | Current private IPv4 address | Used by another device in the same home network. |
| Address for an Internet player | Public IPv4 address plus the forwarded UDP port | Used only from outside the home network; a private address is not reachable from the public Internet. |
Do not assume that 19132 is still active. Open server.properties and read server-port. When IPv6 is configured, also read server-portv6. Forward the values that are actually configured. A custom port is valid, but every dependent setting must use that same number.
Port numbers alone do not identify a complete route. You must also know which address family is being tested. A friend connecting to your public IPv4 address is testing the IPv4 listener and an IPv4 NAT rule. A device using IPv6 follows a different path and may not use the IPv4 rule at all.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Follow this diagnostic sequence
1. Confirm the configured port before changing anything
- Stop or pause the server safely.
- Open
server.propertiesin the Bedrock Dedicated Server directory. - Record
server-portand, where applicable,server-portv6. - Use those values for the host firewall and router rule. If the file says 19132, the normal IPv4 forward is UDP 19132. If it says another value, do not forward the default by habit.
- Start the server again and keep the console visible while testing. The process must remain running; a router cannot forward traffic to a stopped service.
Microsoft’s documented baseline is to leave the IPv4 port at 19132. Returning temporarily to that baseline can remove uncertainty caused by an earlier custom configuration.
Check the spelling and formatting of the property names as well as their values. A port changed in one place but not another creates a deceptively convincing failure: the server may be healthy, while the client and router are simply targeting a number that no process uses.
2. Prove the server locally or on the LAN
On Windows, start the server with bedrock_server. On Ubuntu, Microsoft’s example is:
LD_LIBRARY_PATH=. ./bedrock_serverFrom the same host, connect to 127.0.0.1 on the configured port when the client supports that form of local testing. From another device on the home network, connect to the server computer’s private IP and configured port. Use the LAN device’s address, not the public address.
Perform both tests when possible. Loopback proves that the game process can accept a local connection. A second LAN device adds the local network interface, switch or wireless path, and host-firewall profile to the test. If loopback works but another home device fails, the process is probably running, and attention should move to the private address, firewall, or local network profile.
If neither local nor LAN access works, stop troubleshooting the router. Check that the process starts without errors, that the port in the client entry matches server.properties, and that the host firewall permits the process or UDP port. Version mismatches can also prevent a connection even when networking is correct.
3. Open the host firewall for the correct network profile
A router rule delivers a packet to the computer; the operating system can still discard it. On Windows, accept the Windows Defender Firewall prompt for the network profile used by your players, or create an inbound rule for the Bedrock server program or its configured UDP port. Make sure the rule applies to the profile actually active on that connection.
Rank #2
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
On Ubuntu, Microsoft’s default example for the standard ports is:
sudo ufw allow 19132
sudo ufw allow 19133
sudo ufw reloadIf you changed the server to a different port, substitute that configured value instead of opening only 19132. Opening 19133 is relevant to an IPv6 listener; it does not make an IPv4 service reachable.
For a controlled test, temporarily distinguish a firewall failure from a routing failure by permitting the exact UDP port or server program, then retest from the LAN and from outside. Keep the narrow rule you need rather than leaving unrelated ports open.
Be consistent about protocol. A TCP-only rule does not satisfy a Bedrock UDP connection, and a rule for the wrong port can look enabled while having no effect. If the firewall interface separates inbound program rules from port rules, use the one that clearly covers the running Bedrock executable or the configured UDP port and verify that the rule is enabled.
4. Build the router forward precisely
Router interfaces use different labels—Port Forwarding, Virtual Server, NAT Rule, or similar—but the fields have the same meaning. Create one rule with:
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems- Protocol: UDP, not TCP-only.
- External or public port: the configured Bedrock port.
- Internal or private port: the same configured port.
- Destination or server IP: the server computer’s current private IPv4 address.
- Enabled: on, followed by Save or Apply.
For the default IPv4 setup, that means UDP 19132 forwarded to the server’s private IPv4 address on UDP 19132. If you deliberately configure IPv6, handle UDP 19133 according to the router and client’s IPv6 support; IPv6 forwarding is not a substitute for a working IPv4 NAT rule.
Reserve the server’s private address in the router’s DHCP settings, or configure an appropriate static address. A reboot can otherwise give the computer a new DHCP address while the rule continues pointing at the old device. The result is a silent failure: the rule appears correct, but packets are delivered nowhere useful.
Write down the private address shown on the server computer and compare it with the address in the router rule. Do not rely on a computer name alone if the router displays several similarly named devices. After saving the rule, restart neither the server nor the router unnecessarily until you have tested it; extra reboots can change a DHCP assignment and obscure which configuration was actually tested.
Do not add several overlapping rules while diagnosing. Duplicate entries, a mixture of TCP and UDP, or a rule pointing to a different computer makes the result harder to interpret. Remove obsolete entries and leave one clearly named rule for the active server.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallRank #3
- NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
- WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
- SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
- READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
- COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.
5. Test from a genuinely external connection
Ask a friend to connect, or use a phone hotspot with the game client disconnected from the home Wi-Fi. Enter your public IPv4 address and the forwarded port. Testing that public address from a device still on the same LAN can fail because many routers do not support NAT loopback (also called hairpin NAT); that result does not prove the Internet forward is broken.
Use the external test only after local or LAN access succeeds. Otherwise, a failed friend connection cannot tell you whether the server is down or the public route is wrong. During the test, keep the Bedrock console running and have the remote player report the exact error rather than repeatedly changing settings between attempts.
If the LAN test succeeds but the external test fails, compare the router’s displayed WAN address with the public IPv4 address shown by an independent public-IP service. A mismatch can indicate:
- Double NAT: another router or gateway sits in front of the router where you created the rule.
- ISP gateway: the provider’s equipment is performing another translation layer.
- Carrier-grade NAT (CGNAT): the provider shares a public address, so unsolicited inbound forwarding may not be available on your connection.
Microsoft guidance identifies these causes but does not provide a complete CGNAT test procedure. Record the two addresses and the network topology rather than assuming that a second local rule will solve provider-side NAT. If the WAN address is private or otherwise differs from the independently observed public address, the forward may need to exist on an upstream gateway, or inbound connections may be unavailable under the provider’s service.
Recommended Free Tools
6. Check the Minecraft and account-side conditions
The host must be online and the server process must remain running while the remote player connects. Minecraft’s support guidance also recommends checking service status and disabling custom DNS or problematic open-port configurations when connection attempts behave unexpectedly.
Confirm that the client and server are compatible. Microsoft notes that minor-version changes can alter the protocol and that even some patch versions may differ. “Outdated Client” and “Outdated Server” are explicit signs that the two installations do not speak a compatible protocol; update or otherwise align them before changing port rules.
Do not interpret an authentication or service-status problem as proof that the NAT rule is wrong. First record whether the remote player reaches the server and what message appears. A clean network path cannot make incompatible protocol versions communicate, and changing ports cannot correct a version mismatch.
7. Treat alternate ports as a controlled experiment
A June 18, 2026 Minecraft Feedback report described UDP 19132 and 19133 failing externally while UDP 8420 and 8096 worked in that reporter’s environment, even after forwarding and DMZ tests. That is a community observation, not a Microsoft fix or a guarantee that those numbers will work for you.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →If you need to test an alternate port, change the value in server.properties, restart the server, update the host firewall, update the router’s external and internal UDP fields, and give outside players the new public port. Change one variable at a time and restore the documented 19132 baseline if the experiment does not clarify the failure. Never leave a DMZ host enabled as a substitute for a precise rule.
Rank #4
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
An alternate-port result is useful only when all other conditions remain the same: the same server, private address, client version, external tester, and address family. If 8420 or 8096 works once, document the exact configuration and network used, but do not present those values as universal Bedrock ports.
Use the symptom to choose the next check
| Observed result | Most likely boundary | Next action |
|---|---|---|
| The server will not start or no local connection works | Process, configuration, firewall, or incompatible version | Read server.properties, start the correct executable, allow the configured UDP port, and align versions. |
| Local works; another home device cannot connect | Private-IP path or host firewall | Use the server’s current private IP, confirm the port, and check the firewall profile. |
| LAN works; a friend cannot connect | Router, public address, double NAT, provider NAT, or external path | Test from a hotspot or friend’s connection, compare WAN and public addresses, and verify the UDP forward target. |
| Only testing from inside the home fails with the public address | Missing NAT loopback support | Use a separate Internet connection; do not infer failure from an internal hairpin test. |
| “Outdated Client” or “Outdated Server” appears | Protocol compatibility | Install compatible client and server versions before further network changes. |
| An alternate port works only in one setup | Environment-specific filtering or routing behavior | Document the working configuration, but do not treat the community report as a universal remedy. |
IPv4 and IPv6: do not mix the two paths
The documented defaults represent separate transports: UDP 19132 for IPv4 and UDP 19133 for IPv6. An IPv4 player using your public IPv4 address needs the IPv4 listener, firewall allowance, and IPv4 NAT rule. An IPv6-capable path may use the IPv6 listener, but client support, router behavior, and provider connectivity all have to line up.
Opening 19133 will not repair an IPv4 rule that points to the wrong private address. Likewise, forwarding 19132 does not prove that an IPv6 client can reach the host. Diagnose one address family at a time and write down which address the outside tester used.
When comparing results, ask the tester whether the game selected an IPv4 or IPv6 route. A successful IPv6 attempt does not validate an IPv4 forward, and an IPv4 failure does not necessarily mean the IPv6 listener is unavailable. Keep the port, address family, and tester’s network together in your notes.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why a stale private IP is so common
Home routers usually assign private addresses through DHCP. If the server computer receives a different address after a reboot, the forwarding rule can remain pointed at the old address without displaying an obvious error. Other devices may then receive the traffic, or no device may answer.
A DHCP reservation ties the server computer to a consistent private address from the router. An appropriate static configuration can serve the same purpose, but it must fit the home network’s addressing scheme. After making the reservation, confirm the address on both the computer and the router, then update the forward once and retest. This simple check explains many cases in which a rule worked yesterday and silently stopped after a restart.
What not to change while diagnosing
- Do not switch between TCP, UDP, and “both” without recording the result; Bedrock’s documented listener is UDP.
- Do not test a public address from the same LAN and treat a hairpin failure as proof of an Internet outage.
- Do not add DMZ exposure or many overlapping forwards as a first response. A precise UDP rule is easier to verify and safer to leave enabled.
- Do not change the server port, firewall, router, and client version simultaneously. A one-variable-at-a-time test tells you which boundary changed.
- Do not keep troubleshooting NAT when the local server cannot accept a connection or reports an incompatible version.
Checklist before you ask friends to retry
- The server is running continuously and the executable matches the host operating system.
server-portand, if used,server-portv6are recorded.- A local or LAN connection succeeds using the appropriate loopback or private address.
- The Windows Defender Firewall or Ubuntu UFW rule permits the configured UDP port.
- The router rule uses UDP and the same external and internal port.
- The destination is the server computer’s current private IPv4 address.
- The private address is reserved so a reboot cannot silently invalidate the forward.
- The external test comes from a friend’s connection or a phone hotspot, not the same LAN.
- The router WAN address is compared with an independently observed public address.
- No “Outdated Client” or “Outdated Server” message remains.
- The tester’s address family—IPv4 or IPv6—and the port used are written down.
- Any alternate-port experiment has been reverted or documented clearly.
Bottom line
Fix Bedrock forwarding in layers: verify the configured port and a working local server, allow that UDP port through the host firewall, forward it to the server’s current private IP, and test from outside the home network. For a default installation, the baseline is UDP 19132 for IPv4 and UDP 19133 for IPv6. If LAN works but outside access does not, concentrate on the public address, NAT layers, stale DHCP mapping, and provider path rather than repeatedly reinstalling the server. Alternate ports can be a diagnostic experiment, but they are not a documented universal fix.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Frequently Asked Questions
What port should I forward for a Minecraft Bedrock Dedicated Server?
The documented default is UDP 19132 for IPv4. IPv6 uses UDP 19133 when that listener and the client path are configured. Always check server.properties; a custom server-port value overrides the default.
Why does my Bedrock server work on LAN but not for friends?
LAN access proves the local process and private path work, but not the public route. Check the UDP forward, the server’s current private IP, the router WAN address, double NAT, ISP gateway or CGNAT, and test from a phone hotspot or a friend’s connection.
Best Value
- Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
- Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
- Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
- MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
Can I forward TCP instead of UDP?
No. Bedrock Dedicated Server’s documented ports are UDP. A TCP-only rule does not provide the required connection path.
Can I test my public IP from another device in my house?
Only if your router supports NAT loopback, also called hairpin NAT. Many routers do not, so use a genuinely separate Internet connection for a reliable external test.
How do I stop a DHCP change from breaking the rule?
Reserve the server computer’s private address in the router’s DHCP settings, or use an appropriate static address. Then verify that the address on the computer matches the destination in the forwarding rule.
What does it mean if the router WAN address differs from my public IP?
It can indicate double NAT, an ISP gateway, or carrier-grade NAT. Another device may be performing translation, or unsolicited inbound forwarding may not be available on the provider connection. Record the topology instead of adding random local rules.
Does opening UDP 19133 fix an IPv4 connection failure?
No. UDP 19133 is the documented IPv6 default. An IPv4 player using a public IPv4 address needs the IPv4 listener and UDP 19132, or whatever IPv4 port is configured.
Are UDP 8420 and 8096 official replacement ports?
No. A June 18, 2026 Minecraft Feedback report said those ports worked in one environment where 19132 and 19133 did not. Treat that as a controlled, environment-specific experiment, not a universal fix.
Free tools Windows power users keep installed
One-click scans. No signup required.
What do “Outdated Client” and “Outdated Server” mean?
They indicate that the client and server are not using compatible protocols. Align their Minecraft versions before continuing to change firewall or router settings.
Should I use a DMZ host when port forwarding fails?
No. A community report mentioned DMZ testing, but it does not establish DMZ as a fix. Use one precise UDP forward and keep the exposed surface as narrow as possible.
The Bottom Line
Start with the configured Bedrock port, prove local and LAN access, allow the exact UDP port through the host firewall, and forward it to a reserved private IP. Then test from outside the home network and compare the router WAN address with the public address. The normal baseline is UDP 19132 for IPv4 and UDP 19133 for IPv6; alternate ports are only controlled diagnostics.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
