Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

How to Create a Custom Minecraft Server IP With Cloudflare

Set up a memorable Minecraft hostname with Cloudflare DNS, route non-default Java ports with SRV, and learn when Spectrum—not a standard Tunnel—is required for TCP proxying or origin protection.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A “custom Minecraft IP” is usually a domain hostname, not a replacement numeric IP address. Create a DNS record such as mc.example.com that points to your server, then give that hostname to players. Use an A record for IPv4, an AAAA record for IPv6, or a CNAME when another hostname already points to the server.

Keep the record DNS-only for a normal direct Java connection. If the server uses a non-default port, publish a Minecraft SRV record so clients can discover that port. Cloudflare Tunnel is not a general-purpose TCP path for Minecraft; protecting or proxying Minecraft traffic requires checking Cloudflare Spectrum and its current plan and protocol limits.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a custom Minecraft server address actually is

Players normally enter a hostname such as play.example.com. DNS translates that name into the public address where your Minecraft server is listening. Cloudflare supplies the DNS zone and authoritative nameservers; it does not change the server’s underlying numeric IP.

There are two separate decisions:

  • Naming: an A, AAAA, or CNAME record gives the server a memorable hostname.
  • Traffic handling: DNS-only sends players directly to the resolved address. A proxied record asks Cloudflare to handle traffic, but ordinary proxied DNS is not a general Minecraft TCP proxy.

This distinction matters because a branded hostname and origin-IP protection are different goals. DNS can solve the first. It does not, by itself, conceal the address in the second.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Choose the right Cloudflare design

Design What players use Port handling Origin visibility When it fits
DNS-only A or AAAA A hostname such as mc.example.com Default port works directly; a non-default Java port needs SRV or an explicit port The server address is publicly discoverable Most privately hosted or rented servers that only need a clean name
DNS-only CNAME Your hostname points to another hostname Same as the target; add SRV when the Java port is not default The final address remains reachable and may be discoverable through DNS When your provider already gives you a stable hostname
Cloudflare Tunnel public hostname A Cloudflare hostname Not a direct Minecraft Java TCP route Useful for supported web services, not a substitute for Minecraft TCP proxying Web dashboards or HTTP/HTTPS services associated with the server
Cloudflare Spectrum Your public domain and configured edge port Maps the edge port to the origin port Designed for proxying supported non-HTTP protocols and investigating origin masking Players need TCP proxying or you need stronger origin protection; paid plan and protocol availability must be checked

Cloudflare’s Full Setup, in which Cloudflare becomes authoritative for the domain’s DNS, provides the best Tunnel experience and allows Tunnel to configure DNS records automatically for newly started tunnels. For a straightforward Minecraft DNS record, authoritative DNS is still useful because all records can be managed in one zone.

Before you begin

  • A registered domain that you control, for example example.com.
  • A Cloudflare account and a domain added to its DNS zone.
  • The server’s reachable public IPv4 address, IPv6 address, or an existing hostname supplied by your hosting provider.
  • The Java server’s listening port and the firewall or router that forwards it.
  • Access to the machine’s Minecraft configuration so you can confirm the bind address and port.

If your domain is not using Cloudflare nameservers, records created in the Cloudflare dashboard will not answer publicly. Follow the nameserver instructions shown when you add the domain, or use Cloudflare DNS as the authoritative service where possible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Set up a custom hostname for a default-port server

1. Add the domain to Cloudflare

  1. Sign in to Cloudflare and choose Add a site.
  2. Enter the domain you own and select the plan appropriate to your account.
  3. At your registrar, replace the domain’s nameservers with the two Cloudflare nameservers displayed for the zone, if Cloudflare is not already authoritative.
  4. Wait until Cloudflare reports the zone as active. Do not test the new hostname until the authoritative nameserver change is complete.

2. Create the address record

Open the domain’s DNS records and add the record that matches your server:

Record Name example Value Use it when
A mc Your public IPv4 address The server is reachable over IPv4
AAAA mc Your public IPv6 address The server is reachable over IPv6 and the network is configured for it
CNAME mc An existing hostname that resolves to the server Your provider gives you a stable DNS name instead of a fixed address

Cloudflare combines the name with your zone. A record named mc in example.com becomes mc.example.com. You can use play, survival, or another label that players will remember.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

3. Set the record to DNS-only

For direct Minecraft access, leave the cloud icon gray, meaning DNS only. This publishes the DNS answer without attempting to proxy the Minecraft connection. The orange-cloud Proxied setting is intended for supported HTTP and other Cloudflare products; it is not a generic way to proxy arbitrary Minecraft TCP traffic.

4. Save the record and verify it externally

From a device that is not on the server’s local network, query the hostname:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
dig +short mc.example.com A
dig +short mc.example.com AAAA
nslookup mc.example.com

The returned address should match the public address that your router or host exposes. Testing from a separate network avoids false results caused by local DNS overrides or hairpin NAT behavior.

5. Give players the hostname

For a server on the default Java port, players can enter mc.example.com in the multiplayer server-address field without appending a port. If they receive a timeout, troubleshoot reachability before changing DNS settings: the hostname can resolve correctly while the server port remains blocked.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Use an SRV record when Java runs on a non-default port

DNS A, AAAA, and CNAME records resolve names to addresses; they do not tell a Minecraft client which alternate TCP port to use. Java clients can obtain that information from a Minecraft SRV record.

Example record layout

Suppose players should enter play.example.com, while the server listens on an alternate port. In Cloudflare DNS, create an SRV record with these values:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Field Value
Service _minecraft
Protocol _tcp
Name play (the hostname label players use)
Port The Java server’s chosen listening port
Target A hostname such as mc-origin.example.com that has an A or AAAA record

The resulting DNS owner is equivalent to _minecraft._tcp.play.example.com. The target must itself resolve to the server; an SRV record that points to a name with no address record cannot work. Priority and weight are relevant when publishing multiple destinations; for one server, use the single-destination values offered by the Cloudflare form.

Make the port reachable

  1. Configure the Minecraft server to listen on the selected port.
  2. Allow that TCP port through the host firewall.
  3. If the server is behind a router, forward the same external port to the machine’s internal address.
  4. Confirm that the server binds to the intended interface. Binding only to a loopback address makes it unavailable from the Internet.
  5. Query the SRV record from outside your network:
dig +short _minecraft._tcp.play.example.com SRV

Players should then enter only play.example.com. If a client does not honor the SRV record, provide the explicit form with the port, such as play.example.com:alternate-port.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Cloudflare Tunnel: what works and what does not

Tunnel creates outbound connections from a server to Cloudflare and is well suited to supported web applications, administration panels, and dashboards. A standard Tunnel public-hostname route is not a direct TCP path for a Minecraft Java server.

Cloudflare’s current Spectrum limitations state: “Integrating Spectrum with Cloudflare Tunnel is only supported for HTTP/HTTPS applications.” The same limitation means a Spectrum application of another type, such as TCP, cannot use a Tunnel origin directly. A direct <UUID>.cfargotunnel.com origin is not a valid workaround for a TCP Spectrum application.

Why a Tunnel attempt commonly fails

  • The Minecraft client speaks the Java protocol, not HTTP or HTTPS.
  • A public-hostname Tunnel route may show a healthy connector while still lacking a protocol path the game client understands.
  • Pointing a TCP Spectrum application at a Tunnel hostname does not convert the Tunnel into a Minecraft TCP origin.

Use Tunnel for a web map, control panel, or other supported HTTP/HTTPS service. Keep Minecraft on a direct DNS record or use Spectrum for a supported TCP design.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Use Spectrum when you need TCP proxying or origin protection

Spectrum is Cloudflare’s product to investigate when the requirement is more than a memorable name: proxying a supported TCP protocol, presenting a Cloudflare edge address, or reducing direct exposure of the origin. Cloudflare’s Minecraft guidance describes Spectrum as the protection path for Minecraft.

How the Spectrum mapping is organized

  1. Choose the public domain name players will use.
  2. Define the public edge port that Cloudflare accepts.
  3. Map that edge port to the Minecraft server’s origin address and listening port.
  4. Confirm that your Cloudflare plan supports the required protocol and configuration.
  5. Test the public endpoint from an external network before moving players over.

Spectrum is a paid service, and protocol support depends on the plan. Cloudflare’s plan and protocol matrix can change, so check the current documentation and dashboard for availability before committing to this architecture. No universal price or latency figure should be assumed from the DNS setup alone.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Protect the origin as well as the name

A proxy is useful only if players cannot simply bypass it. If the server’s address has already been shared or exposed in old DNS records, changing the hostname does not erase that knowledge. Review old records, server listings, logs, and screenshots, and restrict direct access at the origin according to the controls available from your host. Do not describe a DNS-only record as IP masking: anyone who can query it can see the published address.

DNS-only versus Spectrum: a practical decision guide

Your requirement Recommended path Reason
Players need a short, memorable address DNS-only A, AAAA, or CNAME Simple naming with the fewest moving parts
The Java server uses an alternate port DNS-only address record plus Minecraft SRV SRV advertises the port while players keep using one hostname
You want to hide the origin from ordinary DNS lookups Investigate Spectrum DNS-only publishes the origin; Spectrum is the Cloudflare product aimed at proxying supported TCP traffic
You want to expose a web dashboard privately Cloudflare Tunnel Tunnel is designed for supported HTTP/HTTPS services
You want one Tunnel to carry Minecraft TCP Do not use standard public-hostname Tunnel routing Cloudflare documents the Tunnel/Spectrum integration as HTTP/HTTPS-only

Troubleshoot the common failure modes

The hostname returns NXDOMAIN

  • Confirm the domain is active in Cloudflare.
  • Check that the registrar uses the Cloudflare nameservers assigned to your zone.
  • Make sure the record name is in the correct zone and spelled exactly as players enter it.

The hostname resolves, but Minecraft times out

  • Compare the A or AAAA answer with the address currently assigned to the server.
  • Check the host firewall and any router port-forwarding rule.
  • Verify the Minecraft process is running and listening on the intended interface and port.
  • Test from an external network; a local test can fail even when Internet clients can connect, or succeed through a local override that outsiders cannot use.

Players see an old address

Query the record from several independent resolvers and check the authoritative answer. Do not promise a fixed propagation time; Cloudflare’s official documentation provides configuration requirements rather than a universal propagation figure. Ensure there is no second A, AAAA, or CNAME record returning the wrong destination.

The connection fails only with the orange cloud enabled

Switch the Minecraft record to DNS-only and test again. A normal proxied DNS record is not a general Minecraft TCP proxy. If proxying is a requirement, design the endpoint with Spectrum instead of treating the orange cloud as a replacement for it.

The SRV record is ignored

  • Confirm the service is _minecraft and the protocol is _tcp.
  • Check that the record name corresponds to the hostname players enter; for play.example.com, the owner is _minecraft._tcp.play.example.com.
  • Verify the port matches the Java server and the target hostname has an A or AAAA record.
  • Query the SRV record with dig and try an explicit hostname-and-port connection to separate DNS problems from server reachability problems.

The origin IP is still visible

That is expected with DNS-only A, AAAA, CNAME, and SRV records. A CNAME or SRV target can still lead to a publicly resolvable origin. Use a supported Spectrum design if masking and TCP proxying are essential, and review any historical disclosures of the address.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A Tunnel connector is healthy but Minecraft cannot connect

Connector health confirms the outbound Tunnel connection, not Minecraft protocol compatibility. Remove the Tunnel route from the Minecraft path and use direct DNS or a properly configured Spectrum application. A TCP Spectrum application cannot use a Tunnel origin directly under Cloudflare’s documented limitation.

Ongoing maintenance checklist

  • Keep the hostname’s A, AAAA, CNAME, and SRV values aligned with the server’s current address and port.
  • When changing providers, update the address record and test from outside the hosting network before announcing the change.
  • When changing the Java port, update the server configuration, firewall or router rule, and SRV record together.
  • Review IPv6 separately. A reachable AAAA record can cause some clients to choose IPv6 even when the IPv4 path works.
  • Leave Minecraft records DNS-only unless you have selected a product that explicitly supports the required TCP protocol.
  • For Spectrum, re-check plan eligibility and protocol support whenever Cloudflare changes its product matrix.

Bottom line

Create a DNS-only A, AAAA, or CNAME record for the memorable hostname, make the server port reachable, and add a Minecraft SRV record when Java is not using its default port. That is the reliable Cloudflare setup for a custom Minecraft address. Standard Cloudflare Tunnel public-hostname routing is for supported HTTP/HTTPS services, not direct Minecraft TCP. If you need Cloudflare to proxy the game protocol or help shield the origin address, evaluate Spectrum, confirm its current paid-plan and protocol requirements, and configure the public domain, edge port, and origin mapping accordingly.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.