For a current Satisfactory dedicated server, forward TCP 7777, UDP 7777, and TCP 8888 from your router to the computer running the server. Allow the same three inbound paths in that computer’s firewall. Keep external and internal port 7777 identical. Port 8888 carries reliable messaging in the 1.1 line and is the port most often missed when players can see a server but remain stuck while loading.
Playing with friends? Godlike.Host runs hosted Satisfactory servers from 10 data-center locations, with free DDoS protection.
Give the server host a fixed LAN address before creating rules, test from outside your home network while the server process is running, and check for carrier-grade NAT (CGNAT) if local connections work but internet connections do not. Ports 15000 and 15777 belong to older guidance and are not the current defaults for 1.0/1.1 servers.
As an Amazon Associate I earn from qualifying purchases.
Current Satisfactory server port map
The default layout has one standard port and one reliable-messaging port. The standard port uses both transport protocols, while reliable messaging uses TCP.
| Port | Protocol | Role | Default setting |
|---|---|---|---|
| 7777 | TCP | Standard server traffic and the HTTPS API | -Port=7777 |
| 7777 | UDP | Game traffic and the lightweight query API | -Port=7777 |
| 8888 | TCP | Reliable messaging; the default reliable port introduced in the 1.1 line | -ReliablePort=8888 |
| 15000 and 15777 | Legacy values | Not the current default ports | Do not use for a new 1.0/1.1 setup |
The standard port must be available when the dedicated server starts. If you explicitly choose a reliable port and that port is unavailable, startup fails. In 1.1, the server can try a configurable reliable-port range when the default is occupied, but your router and firewall still need to permit the port that is actually allocated.
#1 Best Overall
- [Ultimate 98000+ Game Archive: 9800+ 3D & 1000+ Premium Titles]Unleash the definitive retro collection: 98000+ preloaded classics now enhanced with 9,800+ immersive 3D games and 1,000+ curated high-end PC masterpieces. From pixel-era arcades to cinematic epics, all optimized for instant launch.
- [Games need exclusions and runtimes, not malware]Some customers ask why our retro game drives can trigger Windows Security warnings. Many game files are older DLLs that Windows Defender sometimes flags as threats. They are not viruses or malware—just old or uncommon code causing false positives. We temporarily add them to the exclusion list so they aren't blocked, then re-enable Security to keep your PC protected. Many classic games also need legacy VC++ and DirectX runtimes, which modern Windows doesn't include by default. Installing them ensures compatibility and smooth play. Your safety matters to us—these are safe, standard steps for retro games.
- [Important:Before you buy]your OS will show ~12.7TB due to decimal/binary measurement difference – this is a common practice among international manufacturers, not a capacity labeling error. Also, actual working game count may vary by system and emulator; please verify compatibility upon receipt. Every unit is fully tested for storage and game functionality before shipment. Includes an updated manual with setup and troubleshooting tips. Contact us for any missing or non-working titles – we’ll help promptly.
- [Unified 7-System Gaming Hub & Seamless Compatibility]Revolutionize your setup with all-in-one access to 7 gaming generations via integrated frontend. Play seamlessly across vintage consoles to modern PC rigs – 260+ platforms supported without complex configurations.Tip: For 4K-ready AAA gameplay, pair with GTX 1060 Ti GPU or higher
- [ Massive 14TB Retro Gaming Storage & USB 3.1 Speed]Upgrade to expansive capacity with this 14TB retro game hard drive, featuring next-gen USB 3.1 interface (10Gb/s transfer speed). Experience plug-and-play simplicity on Windows PC 7/8/10/11 – 50% faster data access than standard USB 3.0 drives.
Why both TCP and UDP are required on 7777
TCP and UDP are separate firewall and forwarding rules even though they share the number 7777. UDP carries the latency-sensitive game traffic and lightweight query requests. TCP handles standard server traffic and the HTTPS API. Opening only one protocol creates a partial connection: a server may appear in a query, or a local player may connect, while another part of the session fails.
Reliable messaging is separate because it needs TCP 8888 by default. The Satisfactory team’s 1 April 2025 announcement states: “If hosting a single server, port 8888 TCP must be open by default.” Clients learn the allocated reliable port during the handshake, but that does not make an unforwarded port reachable through your router.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallPrepare the network before forwarding
Assign a stable LAN address
Port forwarding targets an internal address such as 192.168.1.50. If the router later gives the server computer a different address, the rule continues pointing at the old machine and outside players cannot connect. Either configure a static address on the host or, preferably for many home networks, create a DHCP reservation in the router tied to the host’s network adapter.
- Record the reserved address and verify that the server computer receives it after reconnecting.
- Do not forward to the router’s own address or to a temporary address shown by a different network adapter.
- If the host has both Ethernet and Wi-Fi, reserve and forward the adapter you will actually use.
Check whether inbound internet traffic is possible
Your router must have a publicly reachable address. CGNAT places multiple customers behind an ISP-controlled address and prevents unsolicited inbound connections even when your local forwarding rule is correct. If the router’s internet/WAN address differs from the public address reported by an external service, or if the WAN address is in a private or carrier-grade range, ask the ISP whether the connection uses CGNAT and whether a public address option is available.
Forward the ports in your router
Router labels vary, but the required values do not. Look for Port Forwarding, Virtual Server, or NAT Rules under the advanced network settings.
- Open the router administration page and navigate to its port-forwarding section.
- Create a rule targeting the server computer’s fixed LAN address. Set the external port to
7777, the internal port to7777, and enable both TCP and UDP. If the interface requires one protocol per rule, create one TCP rule and one UDP rule. - Create a second rule targeting the same LAN address. Set external port
8888to internal port8888and select TCP only. - Save or apply the configuration, then confirm that the rules are enabled. Some routers require a reboot; others apply changes immediately.
- Leave the standard port’s external and internal numbers identical. Current documentation does not support redirecting the standard port to a different internal number.
Port forwarding is directional: it sends new connections arriving at your public address to one LAN host. It does not open every port on the computer, and it does not replace the operating-system firewall rule.
Configure the dedicated server’s port settings
Use the standard defaults
Unless you have a reason to change them, run the server with -Port=7777 and -ReliablePort=8888. The first flag controls the standard TCP and UDP port. The second selects the reliable-messaging listener.
Only one process can bind a given address and port combination. A second server cannot use 7777 and 8888 on the same host at the same time. If the server reports that a port is already in use, identify the process holding it or assign a different pair to the additional instance.
Rank #2
- Create, build and run the most realistic city you can imagine
- Connect your metropolis with other cities you've created to form a massive region of SimCities
- Sculpt mountains, gouge valleys, and seed forests
- Deploy police cruisers and fire trucks to the scene
- For 1 player
Understand automatic reliable-port selection
The 1.1 reliable-messaging implementation starts with 8888 by default and can try a configurable range when that port is unavailable. A single-server installation should therefore forward TCP 8888. If you deliberately configure a different reliable port or range, open the selected value instead and keep the router, firewall, and launch parameters consistent.
Declare external remapping
Reliable traffic can use a different public number from the server’s local listening number only when the server is told about that translation. Set -ExternalReliablePort= (or the corresponding external-range configuration) to the public port you actually forward. The 1 April 2025 update warns that clients may fail to connect when NAT remapping is used without being announced by the server.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →For a normal single-server home setup, avoid remapping: forward 8888 externally to 8888 internally and leave the external reliable-port setting consistent with that arrangement.
Allow the same traffic through the host firewall
Router forwarding reaches the host only if the operating-system firewall accepts the packets. Create inbound allow rules for TCP 7777, UDP 7777, and TCP 8888, restricted to the server application or the appropriate network profiles when your operating system supports that choice.
Windows
In Windows Defender Firewall with Advanced Security, create three inbound rules: a TCP rule for local port 7777, a UDP rule for local port 7777, and a TCP rule for local port 8888. Enable the profiles used by the host’s network connection and allow the dedicated-server executable.
PowerShell can create equivalent rules. Run an elevated PowerShell window and adapt the display names to your environment:
Free tools Windows power users keep installed
One-click scans. No signup required.
New-NetFirewallRule -DisplayName 'Satisfactory TCP 7777' -Direction Inbound -Protocol TCP -LocalPort 7777 -Action Allow
New-NetFirewallRule -DisplayName 'Satisfactory UDP 7777' -Direction Inbound -Protocol UDP -LocalPort 7777 -Action Allow
New-NetFirewallRule -DisplayName 'Satisfactory TCP 8888' -Direction Inbound -Protocol TCP -LocalPort 8888 -Action AllowIf rules already exist, inspect them rather than creating duplicates. A rule that allows only TCP 7777 does not permit UDP 7777, and a rule for 7777 does not permit 8888.
Linux
With UFW, allow each protocol explicitly:
sudo ufw allow 7777/tcp
sudo ufw allow 7777/udp
sudo ufw allow 8888/tcpWith firewalld, add the same ports permanently and reload the firewall:
Rank #3
- 285G LIGHTWEIGHT BUILD — Experience superior audio and game for hours without being weighed down by the headset
- TRIFORCE 40MM DRIVERS — Cutting-edge proprietary design divides the driver into 3 parts for the individual tuning of highs, mids, and lows —producing brighter, clearer audio with richer highs and more powerful lows
- HYPERCLEAR CARDIOID MIC — An improved pickup pattern ensures more voice and less noise with the sweet spot easily placed at the mouth because of the mic’s bendable design
- HYBRID FABRIC AND MEMORY FOAM EAR CUSHIONS — Wrapped in a combination of breathable fabric and plush leatherette to provide a snug fit to ensure constant comfort for prolonged gaming
- 7.1 SURROUND SOUND — Provides accurate positional audio that lets you pinpoint intuitively where every sound is coming from. *Only available on Windows 10 64-bit
sudo firewall-cmd --permanent --add-port=7777/tcp
sudo firewall-cmd --permanent --add-port=7777/udp
sudo firewall-cmd --permanent --add-port=8888/tcp
sudo firewall-cmd --reloadThese host rules do not bypass a separate cloud-security group, hypervisor firewall, VPN policy, or ISP-level filter. If the server runs inside one of those environments, permit the same three paths there as well.
Verify that the server is listening
Start the dedicated-server process before testing. A port checker can correctly report a port as closed when no process is listening, even if the router and firewall rules are perfect.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Check locally on Windows
Use an elevated PowerShell prompt:
Get-NetUDPEndpoint -LocalPort 7777
Get-NetTCPConnection -LocalPort 7777
Get-NetTCPConnection -LocalPort 8888Confirm that the results belong to the dedicated-server process and that the local address is the expected interface. A listener bound only to an unintended adapter can make a rule appear ineffective.
Check locally on Linux
Run:
ss -lntup | grep -E ':(7777|8888)b'The output should show TCP listeners for 7777 and 8888 and a UDP endpoint for 7777. If a port is absent, resolve the server configuration or an address-in-use error before changing router rules.
Test from outside the home LAN
Use a device on cellular data, a friend’s connection, or another genuinely external network. Test TCP 7777 with a port-checking service and, where possible, scan TCP and UDP 7777 plus TCP 8888 with nmap. A representative scan is:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesnmap -sT -sU -p 7777,8888 your.public.ip.addressUDP scans can require elevated privileges and may be slower or less definitive than TCP scans. Replace the example address with your public address; never test only the private LAN address when diagnosing an internet-access problem.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshoot by symptom
It works on the LAN but not from the internet
- Verify that the router rule targets the server’s current reserved address.
- Confirm inbound host-firewall rules for all three protocol/port combinations.
- Check that the server is running during the external test.
- Compare the router WAN address with your public address to identify CGNAT or another upstream NAT layer.
- Check for a second router in the path. If two routers perform NAT, forward the traffic through both or place one in a suitable bridge/access-point mode.
If the ISP uses CGNAT, changing the local rule cannot create an inbound path. You need an ISP-provided public address, a network arrangement that accepts inbound traffic, or a managed server outside the restricted connection.
Players connect but remain on the loading screen
This symptom commonly indicates that standard traffic on 7777 is reachable while reliable messaging is not. Confirm TCP 8888 in the router and host firewall, make sure the server is actually listening on the configured reliable port, and verify that no external remapping exists without a matching -ExternalReliablePort= declaration.
Rank #4
- 【For PC & Steam Game Conosle 】Wireless gaming controller supports PC (Windows XP/7/8/8.1/10 /11), Steam PC gaming consoles.
- 【2.4G Wireless Transmission】2.4G Wireless Transmission Technology (with USB receiver) ensures a stable connection without any delay.
- 【Improved design】The classic new left and right shoulder button design is easy to use, has 12 function keys, Supports 2 controllers at the same time (requires game support)
- 【Vibration feedback 】PC wireless controller provides automatic vibration feedback to ensure riveting gameplay every time to enhance the game experience.
- 【High-performance chip 】The PC controller uses a high-performance chip, which has good stability and zero game delay.
A port checker says closed
Repeat the test with the server process running and use an external network. Then verify local listeners. A stopped process, a scan from inside the same LAN, or a checker that tests only TCP can produce a misleading result for UDP 7777.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
An old guide tells you to open 15000 or 15777
Those values are legacy instructions from before the current 1.0/1.1 defaults. Replace them with TCP and UDP 7777 plus TCP 8888 unless you are maintaining a deliberately customized configuration whose launch parameters specify something else.
The server will not start after changing ports
Check for another process using the selected standard or reliable port. The standard port must be available, and an explicitly selected reliable port that cannot be bound causes startup failure. Choose unused ports, update the launch arguments, then update router and firewall rules to match.
Running more than one server on one public connection
Each instance needs a unique standard port and a unique reliable port. For example, a second instance could use a different standard port and a different reliable port, but the exact values are a configuration decision rather than a universal requirement. Forward every external port to the correct host and instance, and permit each corresponding TCP or UDP protocol in the host firewall.
If public and internal numbers differ, configure the server’s external-port settings so clients receive the reachable public values. Keep a written map of instance, LAN address, standard port, reliable port, and external remapping; most multi-server failures are a mismatch between one of those four layers.
Recommended Free Tools
Self-hosting versus managed hosting
Self-hosting gives you direct control over launch arguments, port ranges, mods or configuration, and the machine’s resources. It also makes you responsible for router administration, firewall policy, operating-system updates, backups, uptime, and diagnosing CGNAT or ISP filtering.
A managed service moves the public network edge outside your home. That usually removes home-router forwarding and CGNAT concerns, but it reduces low-level network control and adds a recurring service cost. Compare the options on the same practical axes:
| Consideration | Self-hosted server | Managed server |
|---|---|---|
| Port and configuration control | Full control of -Port, -ReliablePort, ranges, and external remapping |
Depends on the service’s control panel and supported ranges |
| Router and firewall work | You create and maintain forwarding and host rules | The provider normally operates the public edge; you still configure in-service access controls |
| CGNAT or ISP limitations | Can block inbound play unless the ISP supplies a reachable address | Usually avoids your home connection’s inbound restrictions |
| Number of instances | Limited by your hardware, bandwidth, and available ports | Limited by the plan or platform allocation |
| Ongoing cost | No hosted-server fee, but you pay the electricity, connection, and maintenance costs of your own equipment | Recurring fee; the amount depends on the service and resources selected |
Final pre-share checklist
- The server computer has a static LAN address or DHCP reservation.
- Router forwarding sends TCP 7777 and UDP 7777 to that address.
- Router forwarding sends TCP 8888 to that address.
- External and internal port 7777 are identical.
- The host firewall allows TCP 7777, UDP 7777, and TCP 8888.
- The launch settings use the same ports you forwarded.
- Any reliable-port remapping is declared with the external reliable-port setting.
- The server process is running while you test.
- Testing occurs from outside the home LAN.
- CGNAT or an additional upstream NAT device has been ruled out.
With those conditions met, the current default is straightforward: 7777 for both TCP and UDP, 8888 for TCP reliable messaging, all directed to the server’s fixed LAN address.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
