Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsFor the current default Enshrouded dedicated-server configuration, forward UDP port 15637 from your router to the server computer’s stable local IPv4 address. Allow that same UDP port, or the Enshrouded server executable, through the computer’s firewall. Do not forward 15636 or add TCP rules automatically: current Keen Games support documentation prominently identifies the queryPort value 15637, while older community guides may describe additional, version-sensitive ports.
Godlike.Host offers hosted Enshrouded servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
The complete setup is: install the dedicated server from Steam’s Tools section, run it once so it creates enshrouded_server.json, confirm the configured queryPort, reserve a local IPv4 address for the host, create the firewall exception, add a UDP port-forwarding rule, and test from outside your home network.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Which Enshrouded port should you forward?
Keen Games’ Dedicated Server FAQ lists the default as queryPort: 15637. Enshrouded multiplayer currently uses IPv4, so the practical home-hosting rule is:
| Router field | Value for the default configuration |
|---|---|
| External/WAN port | 15637 |
| Internal/LAN port | 15637 |
| Protocol | UDP |
| Destination | The server PC’s stable local IPv4 address |
| Firewall | Allow UDP 15637 or the dedicated-server executable |
If you changed queryPort in enshrouded_server.json, use that changed number in both the router and host firewall. A port-forwarding rule that still points to 15637 will not expose a server configured to listen elsewhere.
#1 Best Overall
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
What you need before changing the router
- A Windows PC that will run the Enshrouded dedicated server continuously enough for your group.
- The dedicated-server package installed through Steam’s Tools filter.
- Permission to edit the router’s Port Forwarding, Virtual Server, or NAT settings.
- Permission to create an inbound rule in the computer’s host firewall.
- A stable local IPv4 address for the server PC, preferably supplied by a DHCP reservation in the router.
- A public IPv4 address from your internet connection. Carrier-grade NAT (CGNAT) can prevent unsolicited inbound connections even when every local setting is correct.
- A wired connection where practical. The official setup guidance recommends connecting the host by Ethernet; a Cat6 cable is a suitable choice for that link.
Router menus vary by firmware. The labels may be different, but the four values you must map are external port, internal port, protocol, and destination IPv4 address.
Install the dedicated server and create its configuration
1. Install from Steam’s Tools list
- Open Steam and select the Tools filter in your library.
- Find the Enshrouded dedicated-server tool and install it on the computer that will host the world.
- Launch the dedicated-server executable once. The first run creates
enshrouded_server.json, which contains the server settings.
The installation article published by Keen Games on February 23, 2024 documents this Tools installation path and the first-run file creation. If the file is missing, the process usually has not completed an initial launch, or the executable was run under a different Windows account or installation directory.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →2. Confirm the configured query port
- Stop the server if it is running.
- Open
enshrouded_server.jsonin a text editor. - Locate the
queryPortentry. - Write down its number before creating network rules. The official default is 15637.
- Save the file without changing unrelated JSON syntax.
Use the exact number shown in the file. If you deliberately change it later, update the router and firewall together, then restart the server so the new listener is active.
Give the host a stable local IPv4 address
A port-forwarding rule targets an address on your home network, not a computer name. If the router gives the server PC a different address after a reboot, the rule can silently point at another device.
Rank #2
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
Preferred method: DHCP reservation
- Open the router’s connected-device or LAN clients page.
- Identify the server PC by its hostname or network adapter address.
- Choose the option named Reserve, Always assign, Static lease, or similar.
- Choose an address in the router’s local IPv4 range and save the reservation.
- Disconnect and reconnect the PC, or renew its network lease, then verify the assigned address in Windows network settings.
A DHCP reservation keeps centralized control in the router while ensuring the same address is assigned to the host. A manually configured static address can also work, but it must match the router’s subnet, gateway, and DNS design; an incorrect manual address can remove the PC from the network.
Allow Enshrouded through the host firewall
Port forwarding only gets traffic to the home network. Windows can still discard it before the server process receives it.
Executable-based rule
- Open the host firewall’s advanced inbound-rule interface.
- Create a new rule for the Enshrouded dedicated-server executable.
- Allow the connection for the network profiles you actually use.
- Apply the rule and give it a clear name, such as Enshrouded Dedicated Server.
Port-based rule
- Create an inbound rule for a specific port.
- Select UDP, not only TCP.
- Enter the configured
queryPort(15637 unless your JSON says otherwise). - Allow the connection and save the rule.
The official network setup guidance supports allowing the server executable or the configured UDP port. If you use a third-party security suite, check its separate network controls as well; a Windows rule does not necessarily override another firewall.
Create the router port-forwarding rule
- Sign in to the router’s administration interface.
- Open Port Forwarding, Virtual Server, or NAT. Some routers place these settings under Advanced networking or Internet sharing.
- Add a new rule and select the reserved IPv4 address of the server PC as the destination.
- Set the external or public port to 15637.
- Set the internal or private port to 15637.
- Choose UDP as the protocol. If the interface offers “Both,” do not select it merely for convenience; a UDP-only rule is the documented requirement.
- Enable the rule, save the configuration, and apply or reboot the router if its firmware requests that.
Some interfaces ask for a start and end port. Enter 15637 in both fields for a single-port rule. Do not create a broad range when one port is sufficient.
Rank #3
- NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
- WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
- SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
- READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
- COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.
Start the server and test from outside your LAN
- Start the dedicated server and leave it running.
- Confirm that
enshrouded_server.jsonstill contains the port used in the router rule. - Give friends the server’s public IPv4 address and the connection details required by the game’s server browser or direct-connect workflow.
- Test from a different network, such as a phone hotspot or a friend’s connection. A test from another device on the same home network may use local NAT behavior and does not prove that internet traffic can enter your router.
- If the external test fails, work through the checks below in order rather than opening additional random ports.
A successful outside test demonstrates the entire path: the process is listening, the host firewall permits it, the router sends the datagram to the correct machine, and the ISP permits inbound IPv4 traffic.
Troubleshoot a server friends cannot reach
The server process is not listening
- Make sure the dedicated-server executable is running and has not stopped with an error.
- Reopen
enshrouded_server.jsonand verify that the value has not changed or been overwritten. - Restart the server after editing the JSON; a running process will not necessarily adopt a new port automatically.
- Check that another application is not already using the same UDP port.
The router points to the wrong computer
- Compare the destination address in the forwarding rule with the server PC’s current local IPv4 address.
- Confirm that the DHCP reservation is attached to the correct network adapter.
- If the PC has both wired and wireless adapters, ensure the rule targets the interface that is actually connected.
The rule uses TCP instead of UDP
Replace a TCP-only rule with UDP 15637. Enshrouded’s documented default is a UDP query port; a TCP rule alone does not satisfy that requirement.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →The host firewall blocks the packet
- Check for an enabled inbound rule covering the executable or configured UDP port.
- Verify the rule applies to the active Windows network profile.
- Temporarily use the firewall’s logging or allowed-app diagnostics to confirm whether packets are being dropped, then restore a least-privilege rule rather than leaving the firewall disabled.
CGNAT prevents inbound access
Some ISPs place several customers behind one public IPv4 address. In that arrangement, your router may show a WAN address that is private or different from the public address seen by outside services. Port forwarding on your own router cannot create an inbound path through the ISP’s upstream NAT.
Ask the ISP whether the connection uses carrier-grade NAT and whether a public IPv4 address is available. The current Keen Games setup guidance identifies CGNAT as a reason public reachability can fail. If the ISP cannot provide a usable public address, use a managed Enshrouded server host or another network arrangement that supplies public ingress.
Rank #4
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
- 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
- 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
- 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.
IPv6-only service does not solve this setup
Enshrouded multiplayer currently uses IPv4 according to the official FAQ and network-troubleshooting guidance. Opening an IPv6 firewall rule, or having an IPv6-only inbound connection, does not replace the required public IPv4 path.
The outside test was not actually outside
Many routers support or restrict NAT loopback. A connection made from the same LAN can therefore fail even when remote players can connect, or appear to work through a local shortcut. Always confirm with a genuinely separate network before changing the configuration.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Do you need port 15636 or TCP?
Older community documentation sometimes lists a second game port, including 15636, and may recommend TCP rules. Current official support directly establishes the default UDP queryPort 15637, and the network-troubleshooting article repeats that value. The conflicting 15636/TCP instructions should therefore be treated as version-sensitive legacy guidance, not as a universal requirement.
Do not open extra ports simply because a forum post lists them. First verify the running dedicated-server version and the values in its current configuration. If a future official release documents another required listener, add only the protocol and port that release specifies, and update both firewall and router rules together.
Best Value
- Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
- Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
- Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
- MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
Home hosting versus managed hosting
Home hosting is practical when you control the router, have a public IPv4 address, and can leave the host maintained. Managed hosting is a fallback when CGNAT blocks inbound traffic or you do not want to maintain a PC, firewall, router rule, and server updates.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match| Decision factor | Host at home | Use managed hosting |
|---|---|---|
| Public IPv4 | Required from your ISP; CGNAT can block access. | Usually supplied as part of the service, subject to the provider’s network design. |
| Router and firewall control | You configure and troubleshoot both. | The provider handles the network edge; you use its control panel or support process. |
| Maintenance | You maintain Windows, Steam files, configuration, backups, and uptime. | The provider handles infrastructure, while you still need to manage game settings and world data according to its tools. |
| Recurring cost | No hosting fee is established here; you still consume electricity and your existing internet service. | Recurring pricing depends on the provider and plan and is not stated in the official setup guidance. |
| Uptime | Limited by your PC, power, router, and home connection. | Depends on the provider’s infrastructure and service terms. |
| Build support | You can install the Steam build yourself. | Confirm that the provider supports the current Enshrouded dedicated-server build before paying. |
Choose the option that matches the constraint causing the problem. If the only obstacle is a changing local address, a DHCP reservation fixes it; if the ISP does not provide public IPv4, changing local settings will not.
Security and maintenance after forwarding
- Forward only the required UDP port to the dedicated-server PC; avoid exposing unrelated services.
- Keep the server software, Steam client, operating system, and router firmware updated.
- Back up
enshrouded_server.jsonand world data before making configuration changes. - Record the reserved local address and the configured
queryPortso a future router replacement can be configured consistently. - Review the rule after changing internet providers, replacing the router, switching network adapters, or moving the server to another PC.
- Use a wired host connection where possible for a more predictable local link, as recommended in the official setup guidance.
The official Enshrouded network-troubleshooting article is dated February 21, 2025, while the dedicated-server FAQ lists the default port information accessed October 15, 2026. Because server builds and router firmware can change, treat the value in your current enshrouded_server.json and the latest official support instructions as the authority when they differ from an older guide.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
