ДокументацияСтатьиHome Server Protection

Home Server Protection

Home-hosted Minecraft issues and how to protect your home server

Many people start their Minecraft server on a home computer — it's free and convenient for getting started. But home hosting has serious limitations, especially when it comes to attack protection. This article covers what you'll run into and how to work around it.

MineGuard supports protection for home-hosted servers, but we strongly recommend moving to a hosting provider if you plan to grow your project. The reasons are explained below.

Problems with home hosting

IP address exposure

The biggest problem is your home IP. This is your router's address, tied to your physical location. If an attacker finds it, they can:

  • Hit it directly, bypassing any protection
  • Take down your entire home internet connection (not just the server)
  • Your home ISP won't filter DDoS — they simply don't have the capacity

With hosting, you get a server IP from a data center. Even if it gets attacked, your home internet keeps working — and your host can issue you a new IP.

Dynamic IP

Most home ISPs change your IP when the router reboots or on a schedule. This means:

  • Your backend in MineGuard will point to the old address — the server becomes unreachable
  • You'll need to log in to the panel and update the IP manually each time

This can be partially addressed with DDNS services (No-IP, DuckDNS), but they add latency and unreliability.

Port forwarding

Your home computer sits behind a router (NAT). For players to connect, you need to forward port 25565 on the router. This is standard, but there are caveats:

  • Not all ISPs allow port forwarding (especially with CGNAT — double NAT)
  • Forwarding a port exposes your computer to external connections
  • Some routers reset settings after firmware updates
You can verify that port forwarding is working via online port-check tools. Make sure the server is running and the port is open both on the router and in your Windows/Linux firewall.

Performance and bandwidth

Home internet isn't designed for server workloads:

  • Upload — home plans typically have 10–50 Mbps upload. A server with 50+ players can saturate this completely
  • Ping — data centers have 1–5 ms latency to backbone networks; a home connection is 15–50 ms or more
  • Stability — Wi-Fi, router reboots, Windows updates — all of these can bring the server down

If you're still hosting at home

If moving to a host isn't an option right now, here's how to make home hosting as safe as possible with MineGuard:

1

Connect your domain through MineGuard

Add your domain in the panel and set up the CNAME record. Players will connect via domain, not directly by IP. This hides your real address behind the MineGuard filter.
2

Never share your real IP

This is the most important step. If the IP leaks, an attacker can hit it directly and no protection will help. Don't post your IP to Minecraft tracking sites, chats, or forums.
3

Configure your firewall

On the computer running the server, allow connections to port 25565 only from MineGuard's filter IPs. The current list is available at https://mineguard.pro/api/filter-ips. Block everything else on that port.
4

Use a static IP or DDNS

If your ISP gives you a dynamic IP, set up a free DDNS service (No-IP, DuckDNS). Keep in mind: when the IP changes, the server will be unreachable until the DNS record updates (usually 1–5 minutes).
5

Set up port forwarding correctly

In your router settings, forward only the required port (25565 TCP) to the internal IP of the computer running the server. Don't forward port ranges and don't use DMZ — that opens every port.
Even with MineGuard, a home server is vulnerable to direct IP attacks. If your IP has already leaked, changing it with your ISP can help — but not all providers do this for free.

Recommendation: move to hosting

For a serious project, home hosting is a temporary solution. Minecraft hosting solves all of the problems listed above:

  • A dedicated IP that isn't tied to your home
  • A stable connection with low latency (100–1,000 Mbps)
  • 24/7 uptime without depending on your personal computer
  • The ability to quickly get a new IP if yours leaks
  • Support, backups, and a management panel

Some well-regarded Minecraft hosting providers:

Minecraft-Hosting.net, MineRent, Gamely

After moving to hosting, connect MineGuard using the standard guide. Set the hosting IP as your backend, configure the CNAME, restrict access via firewall — and your server is protected.

Minecraft hosting starts at just a few dollars a month — often less than the electricity a home computer consumes running 24/7.
ПредыдущаяMy Server is Under AttackСледующаяHow to Hide Server Port