Hytale Server Ports and Firewall Configuration (QUIC/UDP Guide)

Proper port and firewall configuration is essential for running a Hytale dedicated server. Unlike many games that use TCP, Hytale uses the QUIC protocol over UDP, which requires specific configuration.

Required Port

Changing the Default Port

You can change the port using the --bind argument:

java -jar HytaleServer.jar --assets PathToAssets.zip --bind 0.0.0.0:25565

Windows Firewall Configuration

Using PowerShell (Recommended)

New-NetFirewallRule -DisplayName "Hytale Server" -Direction Inbound -Protocol UDP -LocalPort 5520 -Action Allow

Using Windows Defender Firewall GUI

1. Open Windows Defender Firewall with Advanced Security
2. Click “Inbound Rules” in the left panel
3. Click “New Rule” in the right panel
4. Select “Port” and click Next
5. Select UDP (not TCP) and enter port 5520
6. Select “Allow the connection”
7. Check all profiles (Domain, Private, Public)
8. Name the rule “Hytale Server” and save

Linux Firewall Configuration

UFW (Ubuntu/Debian)

sudo ufw allow 5520/udp
sudo ufw reload

firewalld (CentOS/RHEL/Rocky)

sudo firewall-cmd --permanent --add-port=5520/udp
sudo firewall-cmd --reload

iptables

sudo iptables -A INPUT -p udp --dport 5520 -j ACCEPT
sudo iptables-save

Router Port Forwarding

If hosting at home behind a router, you need to forward the port:

1. Access your router’s admin panel (usually 192.168.1.1 or 192.168.0.1)
2. Find Port Forwarding or Virtual Server settings
3. Create a new rule:
   • External Port: 5520
   • Internal Port: 5520
   • Protocol: UDP (not TCP)
   • Internal IP: Your server’s local IP address
4. Save and apply changes

Understanding QUIC Protocol

Hytale uses QUIC (Quick UDP Internet Connections) instead of traditional TCP. Key benefits:

• Lower latency: Faster connection establishment
• Better NAT traversal: Works well through most NAT configurations
• Built-in encryption: All traffic is encrypted by default
• Multiplexing: Multiple streams over a single connection

NAT Considerations

QUIC handles NAT traversal well in most cases. If players have trouble connecting:

• Ensure port forwarding is specifically for UDP, not TCP
• Symmetric NAT configurations may cause issues – consider using a VPS or dedicated server
• Players behind carrier-grade NAT (CGNAT) should connect fine as clients

Testing Your Configuration

Check if Port is Open

Use an online UDP port checker or have a friend try to connect.

Verify Server is Listening

Windows:

netstat -an | findstr "5520"

Linux:

ss -ulnp | grep 5520

Common Issues

Players Can’t Connect

• Verify port forwarding is set to UDP
• Check Windows/Linux firewall allows UDP 5520
• Ensure no VPN is interfering
• Verify your public IP hasn’t changed

Connection Timeout

• ISP may be blocking game ports – try a different port
• Double-NAT situation – configure port forwarding on all routers
• Consider using a VPN solution like Tailscale