Appearance

DNS Setup ​

Your DNS records tell players where to connect. To protect your server, they need to point at NeoProtect instead of your backend. This guide walks you through it using either a CNAME or an SRV record.

We use Cloudflare in the examples, but the steps are the same with any DNS provider.

1. Log in to your DNS console ​

Sign in to your DNS provider and select the domain you want to protect.

2. Remove existing DNS records ​

Delete any DNS records that point to your backend server's IP. If players (or attackers) can still resolve that IP, they can bypass your protection and hit your server directly.

WARNING

If your backend IP was ever public, ask your provider for a new one. Otherwise an attacker who already knows the old IP can keep bypassing protection.

3. Create a protected DNS record ​

CNAME setup ​

  • Record type: CNAME
  • Name: the subdomain you want players to use, such as mc for mc.server.com. For the root domain (server.com), leave the name blank or use @.
  • Target: the protected CNAME from your NeoProtect panel.
  • TTL: 1–2 minutes (set to auto on Cloudflare).
  • Proxy: turn the Cloudflare proxy off (grey cloud, not orange).

SRV setup (optional, Java servers only) ​

An SRV record lets players connect without typing a port. Add it alongside your CNAME:

  • Record type: SRV
  • Service: _minecraft
  • Protocol: TCP
  • Priority: 10
  • Weight: 0
  • Port: 25565
  • Target: your protected CNAME
  • TTL: 1–2 minutes

Once you save, the change can take a few minutes to spread across the internet.

NOTE

Stuck on any step? Contact support and we will help.