DNS Setup

CNAME, SRV and TXT records for connecting protection

Correct DNS configuration is the key step. If DNS is set up incorrectly, players won't be able to connect through the protection.

CNAME record

After adding a domain in the MineGuard panel you'll receive a unique protected address like xxxxx.ipv4.mineguard.pro. Copy it and use it as the value of your CNAME record.

CNAME for a subdomain (play.myserver.com)

Type:  CNAME
Name:  play
Value: <your address from the panel>.ipv4.mineguard.pro
TTL:   300

CNAME for the root domain (myserver.com)

Type:  CNAME (or ALIAS / ANAME, depending on your provider)
Name:  @
Value: <your address from the panel>.ipv4.mineguard.pro
TTL:   300

The address is unique per domain. Don't copy it from the docs — get it from the panel on your domain's page.

Not all DNS providers support CNAME on the root domain (@). If yours doesn't, use a subdomain (e.g. play.myserver.com) or switch to Cloudflare DNS (free).

Player enters

play.server.com

DNS query

DNS

CNAME →

mineguard.pro

Filter IP

MineGuard

Filtering

clean

Your Server

IP hidden

SRV record

An SRV record lets Minecraft clients connect without specifying a port. Without it, players need to type play.myserver.com:25565; with it they can just use play.myserver.com.

SRV record

Type:     SRV
Service:  _minecraft
Protocol: _tcp
Name:     play.myserver.com
Priority: 0
Weight:   5
Port:     25565
Target:   play.myserver.com
TTL:      300

TXT record for verification

The TXT record is required to confirm domain ownership. The value comes from the control panel.

TXT record

Type:  TXT
Name:  _mineguard.play  (or _mineguard for the root domain)
Value: mineguard-verify=your_token
TTL:   300

Examples for popular providers

Cloudflare

In the Cloudflare panel: DNS → Add Record. Important: disable the orange cloud (Proxy) for the CNAME record — if you leave it enabled, Cloudflare will proxy traffic on top of MineGuard and nothing will work.

Cloudflare: 1 — subdomain name (or @ for root), 2 — protected address from MineGuard panel. Proxy must be DNS only.

Namecheap

Advanced DNS → Add New Record → CNAME. In the Host field enter your subdomain (e.g. play), and in the Value field enter your protected address from the MineGuard panel.

REG.RU

Domains → your domain → DNS servers and zone management → Add record → CNAME.

Checking DNS

After changing DNS, confirm that the records have updated. You can check from the terminal:

Check via nslookup

nslookup play.myserver.com
# Should show CNAME → your_address.ipv4.mineguard.pro

nslookup -type=TXT _mineguard.myserver.com
# Should show your verification TXT record

If records aren't updating after an hour, check the TTL of the old records. If it was large (3600+), you'll need to wait for it to expire.

ПредыдущаяDomains СледующаяBackends