Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallFind the layer that fails before changing settings: test localhost on the server, its private IPv4 from another device on the same network, and its public IPv4 from an external network. A local failure points to the Minecraft process or host; a LAN failure points to the firewall or local network; a failure only from the internet points to forwarding, double NAT, carrier-grade NAT, ISP filtering, or a changed public address.
Playing with friends? Godlike.Host runs hosted Minecraft Java servers from 10 data-center locations, with free DDoS protection.
Use a three-layer test instead of guessing
An IPv4 connection has to pass through several independent points: the Java server must be listening, the host must accept local traffic, the local network must reach the host, the router must translate and forward the port, and the ISP must permit inbound traffic. Testing those layers in order prevents you from trying to repair a router when the server process is stopped, or changing server performance settings when packets never reach the machine.
As an Amazon Associate I earn from qualifying purchases.
| Test | What it proves | If it fails |
|---|---|---|
localhost:port on the server |
The Minecraft process accepts a local TCP connection. | Inspect the server log, Java process, version or mod compatibility, bind address, and configured port. |
private-ipv4:port from another device on the same LAN |
The host firewall and local network can deliver traffic to the server. | Check the host firewall, VPN or security software, Wi-Fi isolation, and the host’s current private address. |
public-ipv4:port from a phone hotspot or another network |
The router and ISP expose the service to the internet. | Check NAT forwarding, double NAT, carrier-grade NAT, inbound filtering, and whether the public address changed. |
Do not treat a same-LAN test using the public address as an external test. Many routers do not support hairpin NAT, so that test can fail even when friends on the internet can connect.
1. Confirm the Minecraft listener and its address
Check the relevant properties
Stop the server cleanly, open server.properties, and verify the values that determine where it listens:
#1 Best Overall
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
server-port: This is the Java server’s listening port. The usual default is25565, but use the value in your file if you changed it.server-ip: Leave this blank unless you deliberately need to bind to one specific local interface. A stale or incorrect hard-coded address can make the server unreachable after a network change.query.port: If your setup or server implementation uses this property, make sure any router rule and client instructions match the actual game listener rather than an unrelated query port.network-compression-thresholdandplayer-idle-timeout: These affect traffic handling and idle players, not whether a router forwards a TCP connection. Leave them alone until basic reachability is proven.
Save the file and restart the server. Property changes are not reliably applied to a running process. Tell players to use the same port you have verified, written as address:port when it is not the default.
Verify that something is listening
On Windows, open PowerShell and run:
Get-NetTCPConnection -LocalPort 25565 -State ListenReplace 25565 with your configured server-port. You can also use:
netstat -ano | findstr :25565A listening entry confirms that a process has opened the port; it does not prove that the router or firewall permits remote traffic. If no entry appears, check the server console for startup errors, confirm that Java is running, and verify that another application has not taken the port.
On Linux or another Unix-like host, use:
ss -lntp | grep 25565Some systems require elevated privileges to show the owning process. If the listener appears only on an unexpected address, revisit server-ip and restart.
Read the server log before changing network tuning
A local failure is usually a server-side problem: an incomplete startup, an incompatible Minecraft version or mod set, a Java error, or a bind conflict. Look for the line indicating that the server has finished starting and for exceptions immediately before a disconnect. A timeout or reset that occurs before a connection is logged points outward toward the host firewall or network; a player entry followed by a kick requires checking the server’s own messages as well as the path.
2. Test from the server itself
Use localhost first
Launch the game client on the server computer, choose Multiplayer, then Direct Connection, and enter localhost:25565 or your actual port. This test avoids the router and most LAN variables.
Recommended Free Tools
Rank #2
- Please update the firmware upon initial setup of the router, as it greatly enhances the device's performance and ensures a superior user experience.*** 【WiFi 6 Standard with ultra-low latency】Wi-Fi 6 speeds up to 6 Gbps to let you enjoy smoother 4K streaming, gaming, video calls and more, DDR4 1GB / eMMC 8GB
- 【High Speed Gaming Router】Dominate with uninterrupted performance with the ultimate MT6000 gaming internet router, equipped with 8-stream Wi-Fi 6 technology, the Flint 2 delivers blazing speeds, ensuring a stable and high-speed connection during intense multiplayer battles.
- 【Rapid OpenVPN & Wireguard speed】Wireguard VPN and OpenVPN speeds up to 900Mbps and 880Mbps respectively, giving you complete control over your gaming, streaming and working bandwidth. Actual speed may differ depending on internet service provider, network environment, VPN server location, VPN service provider, etc.
- 【AdGuard Home Supported】Enabling the use of a DNS server for blocking unwanted tracking and offers a convenient web interface for filtering selected digital advertisements. Users can take full control of their online experience and enjoy a clutter-free browsing environment with ease.
- 【Mass device connectivity】Experience enhanced online connectivity with our higher storage capacity, catering to over a hundred devices and fulfilling the requirements of DIY users seeking to install additional plugins. Enjoy stable and reliable connections, ensuring seamless performance and accommodating a wide range of digital needs.
- Local connection works: The process and basic bind are functional. Continue with a private-IP test.
- Local connection is refused: No process is accepting that port, the port is wrong, or a local security rule is rejecting it. Recheck the listener command and server log.
- Local connection times out: A local firewall or an incorrect bind is possible; verify that the server is listening on the expected interface and that security software is not filtering Java.
Do not use a public address for this first test. A public-address failure can be caused by the router even when the server is healthy.
3. Test the private IPv4 address on your LAN
Find the address that belongs to the server
On Windows, run ipconfig and note the active adapter’s IPv4 address. On Linux, ip address shows addresses on each interface. Use the address on the same home or office network as the client, not a VPN adapter and not an old DHCP address.
From a second device connected to that LAN, use Direct Connection with the private address and port, for example 192.168.x.x:25565. The exact private address is the one you recorded; do not copy an example literally.
Interpret the LAN result
- LAN succeeds: The server, host firewall, and local path are working well enough for remote testing. Move to the router and ISP checks.
- LAN fails while localhost succeeds: The host firewall, antivirus network protection, VPN, wireless client isolation, or a wrong private address is the likely boundary.
- Only some LAN devices fail: Check whether those devices are on a guest network or a different VLAN. Guest Wi-Fi commonly blocks access to local clients.
Permit the Java process deliberately
Create an inbound rule for the Java server on the configured TCP port, limited to the networks you intend to use where your firewall supports that scope. Approve the correct Java executable when security software asks, rather than allowing an unrelated application. Temporarily disabling a firewall can be a short diagnostic, but restore it immediately and create a specific rule after the test.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
VPN and proxy software can install filters, change routes, or bind the server to a virtual interface. Disable it briefly on the host and client, or configure it so the server uses the normal LAN adapter. If the LAN test begins working, the VPN route or its firewall policy is the cause.
4. Eliminate Wi-Fi loss and local congestion
A server can accept a connection and still drop players when the wireless link loses packets or the uplink is saturated. Pause large downloads, cloud synchronization, video streams, and other traffic while testing. Watch whether disconnects stop when the load is removed.
Rank #3
- Beyond-fast WiFi 7 (802.11be) with new 320MHz channels in the 6 GHz band and 4096-QAM significantly increases network capacity and throughput, with speeds of up to 30 Gbps
- Multi-link Operation links to multiple bands at the same time to ensure stable internet connections and efficient data transfers
- Cutting-edge external dual-feeding antennas boost coverage by providing high efficiency and significantly enhanced signal strength
- Maximized wired connectivity and flexibility with dual 10G ports and quad 2.5G ports
- Triple-Level Game Acceleration - The GT-BE98 Pro boosts your PC gaming traffic every step of the way, from your PC gaming port all the way to the game server.
Use Ethernet as a reversible diagnostic
For a fixed desktop or server, connect temporarily with a Cat6 Ethernet cable. Official Minecraft troubleshooting guidance specifically recommends Ethernet for a fixed device instead of Wi-Fi. If the drops disappear on the cable, investigate wireless signal strength, interference, access-point placement, channel congestion, or router load rather than changing Minecraft’s compression setting.
Also prevent the host from sleeping or powering down its network adapter. A sleeping computer cannot maintain a listener, and some power-management profiles briefly reset the adapter when the system is idle.
5. Configure the router’s IPv4 forwarding correctly
Create one precise port-forward rule
Open the router’s administration page and locate NAT, Port Forwarding, or Virtual Server. Create a rule with these values:
- Protocol: TCP, unless your server documentation explicitly requires another protocol.
- External port: The port friends will enter.
- Internal port: The Minecraft
server-port. - Destination address: The server’s current private IPv4.
- Enabled: On, with no schedule that closes it later.
For a standard installation, both ports are often 25565. If you chose a different server port, forward that actual value and give players the matching public-address:port.
Keep the destination address stable
Forwarding silently breaks when the router’s DHCP service assigns the server a new private address. Reserve the current address for the server in the router’s DHCP or address-reservation section, or configure a carefully chosen static address that fits the LAN’s addressing scheme. After any router restart or network change, verify that the forwarding rule still points to the machine’s current IPv4.
Check the router’s NAT behavior
Some routers expose a NAT-type setting described as moderate, open, or strict. Use the least restrictive setting that is appropriate for your network, but do not disable the firewall globally. If the gateway has no usable forwarding controls, a configurable router can help; replacing hardware is justified only after the server and ISP path have been ruled out.
Rank #4
- Tri-Band WiFi 6E Router - Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time(6 GHz: 2402 Mbps;5 GHz: 2402 Mbps;2.4 GHz: 574 Mbps)
- WiFi 6E Unleashed – The 6 GHz band brings more bandwidth, faster speeds, and near-zero latency; Enables more responsive gaming and video chatting
- Connect More Devices—True Tri-Band and OFDMA technology increase capacity by 4 times to enable simultaneous transmission to more devices
- Unique Design, More RAM, Better Processing - A unique housing design provides optimal heat dissipation, combined with a 1.0 GHz dual-core CPU and 512 MB High-Speed Memory, the AXE75 is designed for long-term reliability and performance.
- EasyMesh-compatible - Extend network range even more by adding EasyMesh-compatible routers, extenders, or wireless powerline adapters for a seamless, whole-home connection. Eliminate dead zones, drops, and lag as you move across your home.
Do not assume that a port-checking result from inside the same LAN is authoritative. Test from a genuinely separate network, such as a friend’s connection or a phone hotspot with Wi-Fi disabled on the phone.
6. Test the public IPv4 from outside your home network
Use the address players actually need
Friends on the internet must use your current public IPv4, followed by the port when it is not the default. Minecraft’s Java multiplayer flow accepts an IP address or URL through Direct Connection or Add Server. A private address such as 192.168.x.x is never the address to give an internet player.
Confirm the public address in the router’s internet or WAN status page immediately before testing. Residential addresses can change after a reconnect or lease renewal, so update player instructions when it changes.
Free tools Windows power users keep installed
One-click scans. No signup required.
Recognize double NAT and carrier-grade NAT
If the router’s WAN address is different from the public address visible from the internet, another NAT device is between your router and the ISP. This is double NAT. Forward the port on both devices, put the upstream gateway into bridge or passthrough mode where appropriate, or ask the person managing the upstream network to provide the required mapping.
Some ISPs place several customers behind carrier-grade NAT (CGNAT). In that arrangement, your router does not receive a directly reachable public IPv4, so ordinary port forwarding cannot create an inbound path. Ask the ISP whether a public IPv4 option is available. If it is not, use a reputable tunnel or hosted relay designed for inbound game traffic; that is a provider or service decision, not a Minecraft property fix.
Consider ISP filtering
When localhost and LAN tests work, the forwarding destination is correct, and the WAN address is genuinely public, an ISP-level inbound filter remains possible. Ask the ISP whether the chosen port is blocked and whether inbound connections require a particular plan. Changing network-compression-threshold or player-idle-timeout cannot bypass upstream filtering.
Best Value
- WiFi 7 Gaming Router - WiFi 7 (802.11be) dual-band gaming router boosts speeds up to 6500 Mbps, with 4096-QAM increasing a single frequency band's transmission speed by 1.2 times.
- Game Tough with Stability & Low Latency - Multi-link operation (MLO) link up to multi-band at the same time to ensure the stable internet connection and increase the efficiency.
- Quad 2.5G Port - Traffic via 2.5G ports has top priority, supported by 1* WAN and 3* LAN port configurations to maximize wired internet connectivity.
- One Router. All Game Types - TUF Gaming BE6500 provides gamers with different features for different game types, including a one-tap mobile game packet prioritization, a dedicated Gaming Port that ensures your device remains at the front of the queue for optimal performance, and Open NAT that simplifies multiplayer setups with easy port forwarding in just 3 steps.
- Comprehensive Security System - Support the latest ASUS security system, give you a wonderful protection from any network threaten.
7. Make every client match the server
A network path can be healthy while a player is disconnected during login because the client does not match the server. Confirm that every player uses the Minecraft version, loader, and mod set expected by the server. A single player who drops while others remain connected should compare those details first, along with that player’s route and VPN state.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsHave players remove an old saved entry and create a fresh one with the verified public address and port. A typo, an obsolete DNS record, or a remembered private address can look like a server outage even when other players connect normally.
What each disconnect message usually indicates
| Symptom | Most likely boundary | Next check |
|---|---|---|
| Immediate “connection refused” | The destination is reachable, but no process is accepting the port, or a firewall is actively rejecting it. | Verify the listener, server-port, forwarding destination, and host firewall. |
| Long timeout with no new connection in the server log | Traffic is probably not reaching the host. | Check the public address, port forward, stale private IPv4, double NAT, CGNAT, and ISP filtering. |
| Join succeeds, then the player is kicked | The path or host becomes unstable after login. | Test over Ethernet, stop bandwidth-heavy activity, disable VPN routing, prevent host sleep, and watch server health. |
| Only one player drops | That player’s route, Wi-Fi, VPN, or client version differs. | Compare with a player who remains connected and test from another network. |
| Everyone disconnects together | The host, router, or upstream connection likely reset. | Check router event logs, WAN reconnects, host power state, and whether the Java process stayed alive. |
Do not use server tuning to mask a path failure
network-compression-threshold can change how packets are compressed, and player-idle-timeout controls how long an idle player may remain connected. Neither property repairs a missing NAT rule, a blocked port, packet loss, or CGNAT. Changing them before proving that a TCP session reaches the server can make troubleshooting harder by introducing a second variable.
Once a connection is established, then inspect server performance: CPU and memory pressure, repeated Java exceptions, garbage-collection pauses, disk stalls, and the server log at the exact disconnect time. A healthy listener that remains responsive during a drop points back to the network path; a process that freezes or exits requires a server or host-resource fix.
A remedy decision guide
| Remedy | Fault layer | Reversible? | Security or cost effect |
|---|---|---|---|
| Allow Java on the host firewall | Host | Yes | Creates a deliberate inbound exception; no new product required. |
| Use a Cat6 Ethernet cable for testing | LAN | Yes | Low-cost diagnostic; avoids changing the public attack surface. |
| Reserve the server’s private IPv4 | Router/LAN | Yes | Prevents stale forwarding targets; no ISP change. |
| Correct the NAT port forward | Router | Yes | Exposes one listening port to the internet; keep the server secured and the rule narrow. |
| Replace or reconfigure a gateway with unusable NAT controls | Router | Usually | Hardware cost and setup time; justified only when the gateway is the bottleneck. |
| Obtain a public IPv4 from the ISP | ISP | Depends on the plan | May require a recurring plan or business service; solves CGNAT only when the ISP delegates a reachable address. |
| Use an inbound tunnel or relay | ISP/service path | Usually | Requires a third-party service and may add latency or recurring cost; useful when CGNAT cannot be removed. |
Security checks after the server becomes reachable
- Forward only the game port you need; do not expose router administration, remote desktop, or unrelated services.
- Keep the server, Java runtime, mods, and operating system updated from trusted sources.
- Use the server whitelist and strong operator credentials when the server is private.
- Review router and server logs for repeated unknown connection attempts.
- Remove temporary diagnostic firewall exceptions and unused forwarding rules.
Reachability is not the same as safety. A successful external test confirms that the port is exposed; it does not validate the security of the server software or the rest of the network.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
Final recovery checklist
- Stop the server, verify
server-port, leaveserver-ipblank unless a specific bind is required, and restart. - Confirm a listening entry on the host and connect with
localhost:port. - Connect from another LAN device using the host’s current private IPv4.
- Permit the Java process through the host firewall and test with VPN or proxy software disabled.
- Reduce local congestion and repeat the test over Ethernet if possible.
- Reserve the host’s private IPv4 and forward the actual listener port to it.
- From a phone hotspot or another external network, connect to the current public IPv4 and port.
- If the external test alone fails, investigate double NAT, CGNAT, ISP filtering, and public-address changes.
- Only after transport works, compare client versions and mods and investigate server performance or idle-timeout behavior.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
