🛡️ Port & Firewall Helper

Open Your Hytale Server Port

Configure the Hytale UDP port in your firewall and router with instructions adapted to where the server runs. Generate the exact commands, values and verification checklist without changing anything automatically.

Open your Hytale server portChoose where the server runs and receive a firewall, router and verification plan adapted to that environment.
✓ Runs locally in your browser

Where is the server running?

Select the closest scenario. HyTools will hide steps that are not needed.

Port and network details

Keep the server bind, firewall and router values synchronized.

Protocol
UDP · QUICHytale game traffic uses UDP. A TCP rule is not required for this server port.
Find your local IP and gateway

Run the command for your system, paste the output below and let HyTools extract the likely values locally.

Command to runipconfig

Generated configuration

Apply only the sections shown for your selected environment.

Operating system firewall

Run this command with administrator privileges on the server machine.

Router forwarding rule

Create one rule in your router using these exact values. The section may be named Port Forwarding, NAT, Virtual Server or Applications and Gaming.

Service name
Protocol
External port
Internal port
Destination IP
Status

Review and external test

The browser cannot prove that a UDP port is open. Use this checklist before testing from another network.

Still cannot connect?

Choose the closest symptom to see the most relevant checks.

Which port does a Hytale server use?

The dedicated server uses UDP port 5520 by default. A custom port can be selected with the server bind option, but the server, firewall and router must use matching values.

When is port forwarding required?

A server behind a home router normally needs UDP forwarding. A VPS usually needs only operating-system and provider firewall rules, while a local-network server does not need internet forwarding.

How to verify an UDP connection

Keep the server running and ask someone on another network to connect. Browser tools and many public port checkers cannot reliably prove that a QUIC service over UDP is reachable.

What this browser tool can and cannot confirm

The assistant can generate firewall commands, router notes, and diagnostic steps, but a web page cannot reliably test whether a UDP game port is reachable from the public internet. A successful local command only proves that the rule exists or that a process is listening on that machine.

Public reachability also depends on router forwarding, the correct private IP, hosting-panel rules, upstream firewalls, CGNAT, double NAT, and whether the server process is actually running.

Use the smallest network exposure

Open only the protocol and port your server needs. Avoid broad rules that expose every port or trust every service when a specific UDP rule is enough. Keep remote administration ports separate from the game port.

After changing network rules, document what changed and how to remove it. If you use a VPS or managed host, check both the operating-system firewall and the provider firewall because either layer can block traffic.

How to use it

  • Choose whether the Hytale server runs at home, on a VPS, with a game host or only on the local network.
  • Confirm the server UDP port, operating system, firewall and local IP when a router rule is required.
  • Apply the generated firewall command and copy the exact router values shown for your environment.
  • Keep the server running and use the interactive checklist before testing the connection from another network.

Frequently asked questions

Which port does the Hytale dedicated server use?

The default dedicated server port is UDP 5520. If the server uses a custom bind port, use that same internal port in the operating-system firewall and router rule.

Does Hytale use TCP or UDP?

Hytale game traffic uses QUIC over UDP. The official server manual states that TCP forwarding is not required for the dedicated server port.

Do I need port forwarding on a VPS?

Usually no home-router forwarding is needed. You may still need an operating-system firewall rule and a second UDP rule in the VPS provider firewall or security group.

How do I find the local IP of the Hytale server?

Run ipconfig on Windows or ip route on Linux. You can paste the output into the helper and HyTools will try to extract the likely private IPv4 and gateway locally in your browser.

Why does the server work locally but not through the internet?

Common causes include a router rule pointing to an old local IP, UDP being configured as TCP, another firewall at the provider, NAT loopback during testing, double NAT or CGNAT from the internet provider.

Can the browser test whether UDP port 5520 is open?

Not reliably. Browsers cannot make an arbitrary QUIC or UDP connection to your server, and many public port checkers test TCP only. Keep the server running and test from another network.

Does HyTools change my firewall or router automatically?

No. HyTools only generates commands, router values and a checklist. You decide what to apply, and all network data entered in the assistant stays in the browser.

What can I do if my connection uses CGNAT?

Ask the internet provider for a public IPv4 address, resolve double NAT, use a supported virtual network for a private group, or move a persistent public server to a VPS or managed host.