You can host a public FiveM server without changing your router. Run FXServer and txAdmin normally, then give the game endpoint a public route through a FiveM-compatible outbound tunnel, a managed FiveM host, or a public VPS. The critical detail is that players need the game’s TCP and UDP traffic—commonly port 30120—not merely a reachable web panel.
What “without port forwarding” actually means
Traditional home hosting asks your router to forward an Internet-facing port to the computer running FXServer. That approach fails when your internet provider uses carrier-grade NAT (CGNAT), when the router is locked by an ISP, or when you simply do not want an inbound rule on your home network.
As an Amazon Associate I earn from qualifying purchases.
A no-port-forwarding design reverses the direction of the first connection. An agent on your server opens an outbound connection to a relay or hosted machine, and that public service accepts players’ connections before carrying the traffic back to FXServer. Because the connection starts inside your network, the router does not need an inbound forwarding rule.
The server software itself does not change. You still install FXServer, complete txAdmin’s setup, register the server with a Cfx.re account and server registration key, deploy a recipe or existing data, and maintain your resources and server.cfg. Only the public entry point changes.
#1 Best Overall
- Blazing-fast WiFi 7 boosts tri-band throughput up to 12000 Mbps with 320 MHz channels of 6 GHz band, Multi-Link Operation (MLO) and 4K-QAM
- Powerful wired network capacity of up to 20G with one 2.5G WAN port and seven 2.5G LAN ports.
- High-performance quad-core 2.0GHz CPU with robust cooling, 2GB RAM and eight internal antennas providing up to 3000 sq. ft. of range.
- Smart Home Master makes it easy to set up functional subnetwork (up to 3 SSIDs) for IoT devices and VPNs
- ROG-exclusive Gaming Network streamlines Triple-Level Game Acceleration setup and connections through convenient SSIDs
The three practical architectures
| Option | Best for | Main trade-off | Verify before committing |
|---|---|---|---|
| FiveM-compatible outbound tunnel | A home server behind CGNAT or a router you cannot configure | Adds a relay path, with plan, region and latency dependencies | TCP and UDP support for the game endpoint, assigned address, latency and current price |
| Managed FiveM hosting | Uptime with minimal network administration | Recurring hosting cost and less control over the underlying machine | Port allocation, player slots, backups, artifact policy and txAdmin access |
| Public VPS or dedicated host | Administrators who want a public IP and full control | You handle operating-system security, updates, performance and networking | UDP support, CPU and RAM, bandwidth limits, DDoS policy and game-server terms |
Do not select a service solely because it can publish an HTTP page. FiveM needs the game transport, normally both TCP and UDP, and a web-only tunnel will not let players join.
Prerequisites before exposing the server
- A Windows or Linux machine capable of running the recommended FXServer artifact and your chosen resources.
- A Cfx.re account and a server registration key. Treat the key as a secret; anyone who obtains it may be able to impersonate or operate your server.
- Local administrator or shell access to install FXServer, the tunnel agent or the operating-system packages required by a VPS.
- A way to test from a different network, such as a phone hotspot or a friend’s connection. Testing only from the host’s LAN cannot prove that an outside player can connect.
- A backup of your server data, resource configuration and database credentials before changing the network path.
Install FXServer and complete txAdmin setup
Use the official Cfx.re setup path for your operating system. txAdmin is included with FXServer, so a separate panel download is not required.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- Download the recommended FXServer artifact. Choose the Windows or Linux build appropriate for the machine. Keep the artifact and server-data directories separate so updates do not overwrite your configuration.
- Launch FXServer. Start the executable or launch script once so txAdmin can initialize. The first run prints the local management address and a setup PIN.
- Open txAdmin locally. Browse to the address shown by FXServer on the host machine. Link the panel to your Cfx.re account and enter the setup PIN when requested.
- Create the server registration key. Generate the key in the Cfx.re server-registration flow, then enter it in txAdmin or the configuration method recommended for your artifact. Do not paste the key into a public forum, screenshot or shared repository.
- Deploy a recipe or existing server data. A recipe can install the base resources and configuration. If you are migrating an existing server, copy the data into the server-data directory and check every path.
- Review
server.cfg. Confirm the hostname, resources, database connection, license key reference and endpoint lines. Remove test passwords and example credentials before the server becomes public. - Start the server from txAdmin. Watch the console for resource errors, missing dependencies, database failures and endpoint-binding errors. Resolve those locally before adding a tunnel.
Set the game and panel endpoints
Typical FXServer configuration uses port 30120 for the game endpoint on both protocols:
endpoint_add_tcp "0.0.0.0:30120"
endpoint_add_udp "0.0.0.0:30120"The two lines are not interchangeable. A service that forwards only TCP, only UDP or only web traffic is incomplete for a normal FiveM server. A provider may give you a different public port, but the local FXServer port can remain 30120 if the tunnel or host maps it correctly.
Rank #2
- Beyond-fast WiFi 7 (802.11be) with new 320MHz channels in the 6 GHz band and 4096-QAM significantly increases network capacity and throughput, with speeds of up to 30 Gbps
- Multi-link Operation links to multiple bands at the same time to ensure stable internet connections and efficient data transfers
- Cutting-edge external dual-feeding antennas boost coverage by providing high efficiency and significantly enhanced signal strength
- Maximized wired connectivity and flexibility with dual 10G ports and quad 2.5G ports
- Triple-Level Game Acceleration - The GT-BE98 Pro boosts your PC gaming traffic every step of the way, from your PC gaming port all the way to the game server.
txAdmin commonly listens on TCP 40120. That is the management panel, not the player endpoint. Keep the panel private or tightly restricted even when the game port is public.
Option 1: publish a home server through an outbound FiveM tunnel
An outbound tunnel is the most direct answer for a home host behind CGNAT. The tunnel agent connects outward, receives a public address from the service and forwards player traffic to the local FXServer port.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesConfigure a FiveM tunnel
- Create an account with a tunnel service that explicitly supports FiveM. Confirm that the current plan can carry both TCP and UDP. Generic HTTP tunnels are not sufficient.
- Install the service’s agent on the same machine as FXServer, or on another local machine that can reach the server’s LAN address. Run the agent with the least privilege that still allows it to maintain the tunnel.
- Create a tunnel using the FiveM profile. The documented Playit setup uses
Tunnel Type: FiveM,Port Count: 1andLocal Port: 30120. Select the equivalent settings in the current dashboard if labels have changed. - Start FXServer before testing the tunnel. The agent can show as connected even when nothing is listening on the local port. Check the FXServer console for successful TCP and UDP bindings.
- Copy the assigned public address and port. Use exactly the address supplied by the tunnel service in the FiveM client or server listing. Do not substitute the local IP address or the txAdmin port.
- Test from outside your home network. Use a real FiveM client on a phone hotspot or another connection. A successful local txAdmin page does not establish that the game route works.
Playit describes its service as a global proxy for hosting a server without port forwarding. Its current homepage also advertises marketing figures of more than 1 million users, 19 datacenters across five continents and a premium tier advertised at $3 per month. Those are vendor claims and can change; verify the current price, region and endpoint behavior before relying on them.
The Playit FiveM instructions warn that free users may not be able to create the required TCP/UDP tunnel. Check the account’s current eligibility before designing around a free tier. If the service assigns only an HTTP endpoint, or if UDP is unavailable in your region or plan, choose another architecture.
Rank #3
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
What the tunnel changes—and what it does not
- Changes: the public address players use, the path traffic takes and possibly the public port.
- Does not change: your FXServer resources, local port 30120, txAdmin configuration or Cfx.re registration requirements.
- Can affect: latency, packet loss, maximum players, regional availability and behavior during a relay outage.
Option 2: use managed FiveM hosting
A managed host runs FXServer on an Internet-reachable machine and supplies the public port allocation. This removes the home router and CGNAT from the design and is usually the simplest route when uptime matters more than keeping the hardware at home.
Questions to ask a managed host
- Which TCP and UDP ports are allocated to the game, and can you keep the usual 30120 mapping?
- Is txAdmin included, and do you receive its panel address and administrative access?
- How many player slots, CPU resources, memory and storage are included?
- Are automated backups included, how long are they retained and can you download them?
- Which FXServer artifact versions are supported, and how are updates or rollbacks handled?
- Are custom resources, databases and scheduled restarts allowed?
- What bandwidth limits, DDoS protections, maintenance windows and cancellation terms apply?
Managed hosting has a recurring cost, but no reliable price is established here because it depends on provider, region, resources and player capacity. Compare the actual allocation and support policy rather than choosing on headline storage alone.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchOption 3: run FXServer on a public VPS or dedicated machine
A VPS or dedicated host gives you a public IP without any home-network forwarding. Install the Windows or Linux FXServer build, open the required game ports in the host firewall and provider security group, and keep the machine patched.
VPS checklist
- UDP: confirm that the provider permits sustained UDP traffic. Some inexpensive plans filter or rate-limit it.
- Compute: verify CPU performance and RAM for your resource pack and expected player count, not just disk size.
- Bandwidth: check monthly transfer limits and overage rules.
- Policy: read the provider’s game-server and abuse terms before deploying.
- Security: restrict SSH or remote-desktop access, enable updates and use host-firewall rules that expose only the game endpoint and an administration path you actually need.
- Recovery: maintain off-machine backups of server-data and databases so a destroyed instance is not a permanent loss.
An advanced reverse-tunnel design can keep FXServer at home while using a VPS as the public front end, but it requires a VPS with UDP support, additional routing and monitoring. For most readers, a native FiveM tunnel or managed host is easier to diagnose.
Rank #4
- Tri-band 2.4GHz + 5GHz + 6GHz; latest WiFi 6E supports 8-streams on tri-band simultaneously, up to 6.6Gbps speed
- AI QoS; satisfies all users' needs by automatically prioritizing data packets
- Powerful processor; 1.8 GHz quad core processor delivers ultra fast and reliable connections
- Mystic light; sync RGB light effects with mystic light compatible products
- Game accelerator; provides an uninterrupted WiFi connection for immersive gaming experiences
Keep txAdmin separate from the public game endpoint
The default txAdmin panel port is TCP 40120. Publishing that port does not publish FiveM, and publishing FiveM does not require making txAdmin public. Treat them as separate planes:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Expose or map the game endpoint (normally TCP and UDP 30120) through the tunnel or host.
- Keep txAdmin bound to the local machine or accessible only through a restricted administration path.
- Use a strong txAdmin password and protect the setup PIN and Cfx.re credentials.
- Do not place database passwords, registration keys or panel credentials in screenshots, public repositories or shared configuration files.
txAdmin documentation specifically warns that a working panel does not prove that the game’s TCP and UDP ports are reachable. If you can open the panel from another device but players still time out, inspect the game route rather than repeatedly changing panel settings.
Test the connection from a different network
- Confirm the local listener. On the FXServer host, verify that the server is running and that both endpoint lines bind without errors.
- Confirm the tunnel or host status. Look for an assigned public address, an active agent and any warning about unsupported protocols or exhausted limits.
- Leave the host network. Disable Wi-Fi on a phone and use cellular data, or ask a player on another connection to test. Testing from the same LAN can succeed through local routing even when the public path is broken.
- Connect with a real FiveM client. Use the supplied public address and port. Do not enter
localhost, a private address such as192.168.x.x, or TCP 40120. - Check the server console while connecting. An arriving connection, resource handshake error or complete absence of traffic tells you which side of the path is failing.
- Test more than once. A single successful join does not reveal intermittent relay, bandwidth or regional problems. Test at the times and from the regions where your players are located.
Troubleshooting by symptom
The tunnel is online, but nobody can join
- Confirm the tunnel profile is FiveM or another profile that forwards both TCP and UDP, not HTTP.
- Check that the local destination is 30120 and that FXServer is listening on the same machine and port.
- Use the tunnel’s assigned public port, which may differ from 30120.
- Check whether the current plan permits TCP/UDP tunnels. A free tier can show an agent as connected while refusing the required endpoint.
- Test from a truly external network and inspect both the tunnel log and FXServer console.
Players connect, then time out or are dropped
- Look for UDP restrictions, relay congestion or a regional route with high packet loss.
- Compare behavior from two outside networks to distinguish a player-specific issue from a server path problem.
- Check CPU, memory and bandwidth saturation on the home host, VPS or managed plan.
- Review resource errors and database delays; a network path can be healthy while the server fails during the connection handshake.
txAdmin works, but FiveM does not
This is expected when only TCP 40120 is reachable. Keep the panel test separate and verify the game’s TCP and UDP 30120 mapping, the public address and the tunnel’s protocol support.
The public address changes
Some tunnel plans assign a different endpoint after a restart or account change. Update your server listing and player instructions with the currently assigned address, or select a plan that provides a stable endpoint if your community needs a permanent address. Confirm the current terms rather than assuming stability.
Best Value
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
FXServer reports that the port is already in use
Stop duplicate FXServer processes and other services using 30120. Make sure the tunnel agent points at the intended instance, then restart FXServer and verify the endpoint-binding messages before bringing the tunnel online again.
Free tools Windows power users keep installed
One-click scans. No signup required.
Security and maintenance checklist
- Store the Cfx.re registration key outside public repositories and rotate it if exposed.
- Protect the txAdmin setup PIN, panel password, Cfx.re account and database credentials.
- Expose only the game endpoint publicly; restrict txAdmin and operating-system administration.
- Apply FXServer artifact, operating-system and resource updates on a schedule, with a rollback copy.
- Back up server-data, configuration and databases separately from the machine that runs FXServer.
- Monitor relay status, player connection failures, CPU, memory, bandwidth and disk space.
- Document the current public address, local port, tunnel plan, restart procedure and recovery contacts.
- Re-test after every artifact update, resource change, tunnel-plan change or provider migration.
Choosing the right route
Choose an outbound tunnel when
You already own a capable home machine, cannot change the router because of CGNAT or ISP restrictions, and can accept a relay dependency. Verify TCP/UDP support and the current plan before inviting players.
Choose managed hosting when
You want the least network administration, predictable uptime and a provider-managed public endpoint. Confirm backups, player capacity, artifact policy and txAdmin access in writing.
Choose a VPS or dedicated host when
You need operating-system control, a public IP and the ability to tune the machine yourself. Be prepared to administer firewall rules, updates, monitoring, backups and incident recovery.
Whichever architecture you use, the success criterion is the same: an external FiveM client must reach the game’s TCP and UDP endpoint. A local launch or a reachable txAdmin page is only an administrative check, not proof that the server is publicly playable.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
