What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Forward UDP port 15637 to the Enshrouded server computer’s stable local IPv4 address. That is the default queryPort in the current dedicated-server configuration. Allow the same UDP port, or the server executable, through the computer’s firewall. If you changed queryPort in enshrouded_server.json, use the replacement value in both the router and firewall.
Godlike.Host offers hosted Enshrouded servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
Enshrouded currently uses IPv4 for multiplayer. A rule that exposes only IPv6 will not make a home server reachable. The procedure below covers installation, address reservation, firewall and router settings, external testing, and the common reasons friends still cannot connect.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →What you need before creating the rule
Port forwarding only works when the dedicated server is running on a reachable computer and the router knows exactly where to send incoming traffic. Gather these details first:
- A Windows PC running the Enshrouded dedicated server from Steam’s Tools section.
- The server PC’s local IPv4 address, such as
192.168.1.42. - Administrator access to the server PC so you can approve a firewall rule.
- Administrator access to the home router, including its NAT or Port Forwarding page.
- An internet connection with a public IPv4 address. Carrier-grade NAT (CGNAT) can block unsolicited inbound connections even when your local rule is correct.
- A wired connection for the host PC where practical. The official setup guidance recommends Ethernet; a Cat6 Ethernet cable is a suitable choice for a fixed host.
Router menus vary. You may see Port Forwarding, Virtual Server, NAT, or Inbound Rules. The names differ, but the fields are normally the same: external port, internal port, protocol, and destination IPv4 address.
#1 Best Overall
- Blazing-fast WiFi 7 boosts tri-band throughput up to 12000 Mbps with 320 MHz channels of 6 GHz band, Multi-Link Operation (MLO) and 4K-QAM
- Powerful wired network capacity of up to 20G with one 2.5G WAN port and seven 2.5G LAN ports.
- High-performance quad-core 2.0GHz CPU with robust cooling, 2GB RAM and eight internal antennas providing up to 3000 sq. ft. of range.
- Smart Home Master makes it easy to set up functional subnetwork (up to 3 SSIDs) for IoT devices and VPNs
- ROG-exclusive Gaming Network streamlines Triple-Level Game Acceleration setup and connections through convenient SSIDs
Which Enshrouded port should you forward?
The official default is the value of queryPort in enshrouded_server.json: UDP 15637. Forward external UDP 15637 to internal UDP 15637 on the server computer. The official FAQ also states that Enshrouded’s multiplayer networking uses IPv4.
| Setting | Default value | What to enter |
|---|---|---|
| Protocol | UDP | UDP only, unless your configured server documentation explicitly requires another rule |
| External/WAN port | 15637 | 15637 |
| Internal/LAN port | 15637 | 15637 |
| Destination | Server PC’s local IPv4 | For example, 192.168.1.42; use your actual address |
| Configuration source | queryPort in enshrouded_server.json |
Use the value shown in the file if you changed it |
Some older community guides mention a second game port, including 15636, and TCP rules. Current Keen Games support pages prominently document UDP queryPort 15637. Treat 15636 or TCP instructions as version-sensitive legacy advice rather than adding ports automatically. First verify the configuration and running server version. Opening extra ports does not repair a wrong destination address, a blocked firewall rule, or CGNAT.
Free tools Windows power users keep installed
One-click scans. No signup required.
Install the dedicated server and find queryPort
Install from Steam Tools
- Open Steam and select Library.
- Enable the Tools filter. Search for the Enshrouded dedicated server and install it.
- Launch the dedicated-server executable once. The first run creates
enshrouded_server.json. - Stop the process before editing the file or changing network settings.
The official installation guidance identifies Steam’s Tools section as the distribution method and says that the first execution creates the JSON configuration file. If the file is missing, run the executable once rather than creating a differently named file by hand.
Check the configured port
- Open the installation folder and locate
enshrouded_server.json. - Open it in a text editor that preserves JSON formatting.
- Find the
queryPortentry. The official default is15637. - If the value is different, record that number. The router’s external and internal port and the host firewall rule must use the same configured value.
- Save the file and restart the dedicated server after any change.
Do not assume that a guide’s number is still correct after you edit the configuration. The running JSON file is the authoritative value for your installation.
Rank #2
- Beyond-fast WiFi 7 (802.11be) with new 320MHz channels in the 6 GHz band and 4096-QAM significantly increases network capacity and throughput, with speeds of up to 30 Gbps
- Multi-link Operation links to multiple bands at the same time to ensure stable internet connections and efficient data transfers
- Cutting-edge external dual-feeding antennas boost coverage by providing high efficiency and significantly enhanced signal strength
- Maximized wired connectivity and flexibility with dual 10G ports and quad 2.5G ports
- Triple-Level Game Acceleration - The GT-BE98 Pro boosts your PC gaming traffic every step of the way, from your PC gaming port all the way to the game server.
Give the server PC a stable local IPv4 address
A port-forward rule points to an IP address, not to a computer’s name. If the router assigns a different address after a reboot, the rule can silently point to another device or to nothing. The official setup guide calls for a stable local IPv4 target.
Recommended method: DHCP reservation
- On the server PC, note its current local IPv4 address. In Windows, open the network settings or run
ipconfigin Command Prompt and record the active adapter’s IPv4 address. - Sign in to the router and open LAN, DHCP, or Address Reservation.
- Select the server PC by its device name or MAC address.
- Reserve the current IPv4 address, or assign another address inside the router’s LAN range that it permits.
- Apply the change and reconnect or restart the PC if the router requests it.
- Confirm with
ipconfigthat the computer still has the reserved address.
Alternative method: a static address on the PC
You can configure a static IPv4 address in Windows instead, but it must match the router’s subnet, gateway, and DNS settings. A conflicting static address can break local networking. DHCP reservation is usually safer because the router remains responsible for handing out addresses and avoiding duplicates.
Recommended Free Tools
Allow Enshrouded through the host firewall
The router can deliver a packet to the PC, but the operating system can still discard it. Create an inbound rule for the dedicated-server executable or for the configured UDP port.
Port-based rule
- Open the host firewall’s advanced inbound-rules console with administrator privileges.
- Create a new inbound rule for a Port.
- Select UDP and enter the configured local port, normally
15637. - Choose Allow the connection for the network profiles you actually use.
- Name the rule clearly, such as
Enshrouded Dedicated Server UDP 15637. - Apply the rule and confirm that no higher-priority security product is blocking the executable.
Program-based rule
Instead of a port rule, create an inbound rule for the Enshrouded dedicated-server executable. This can be easier when the server changes ports in a controlled configuration, but verify that the rule points to the executable you actually launch. A program rule does not remove the need for the router’s NAT entry.
Rank #3
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
Create the router port-forward rule
- Sign in to the router’s administration page from the home network.
- Open Port Forwarding, Virtual Server, or the equivalent NAT page.
- Add a new entry and give it a descriptive name, such as
Enshrouded-15637. - Set Protocol to UDP. If the firmware offers TCP/UDP as a combined option but not separate rules, use the narrowest option available and avoid adding an unnecessary TCP-only entry.
- Set External/WAN start and end to
15637. - Set Internal/LAN start and end to
15637. - Enter the reserved IPv4 address of the server PC as the destination or server IP.
- Save or apply the rule. Some routers restart networking briefly.
- Check that the rule is enabled and that another rule is not already using the same external port.
If you changed queryPort, substitute that value in every port field and in the firewall rule. Port translation is possible, but using the same external and internal number makes diagnosis straightforward and matches the default guidance.
Start the server and test from outside your LAN
- Start the dedicated server and leave it running while testing.
- Confirm that
enshrouded_server.jsonstill contains the port you forwarded. - Test from a different network, such as a friend’s connection or a phone hotspot. A test from another device on the same home LAN may use local NAT behavior and does not prove that the public internet path works.
- Have the remote player add or search for the server using the method supported by the current Enshrouded client and server build.
- If the remote connection fails, check the server process, firewall, router destination, and public-address situation in that order.
Do not treat a successful connection from the host PC itself as an external test. Hairpin or loopback NAT varies by router, so an internal success can coexist with an unreachable public port.
Troubleshoot a server friends cannot see
The server process is not listening
- Verify that the dedicated-server process is running and has not closed after an error.
- Read the server console or log for startup errors.
- Reopen
enshrouded_server.jsonand confirm that the configuredqueryPortmatches the rule. - Restart the server after editing the JSON; a running process may continue using the old value until restarted.
The router points to the wrong computer
- Check the server PC’s current IPv4 address with
ipconfig. - Compare it with the destination address in the NAT rule.
- Confirm the DHCP reservation is active. A reboot, adapter change, or router reset can expose an unexpected address.
- Ensure the router’s WAN address is on the internet-facing interface, not merely another private address supplied by an upstream router.
UDP was omitted or TCP was used alone
The current official default is UDP 15637. A TCP-only rule does not satisfy that requirement. Inspect both the router protocol field and the host firewall rule. If the router has separate entries, create the UDP entry rather than relying on a TCP rule copied from an older guide.
The host firewall still blocks traffic
Temporarily disabling a firewall is not a good permanent fix. Instead, verify that the inbound rule allows the configured UDP port or the correct dedicated-server executable, that it applies to the active network profile, and that a third-party security suite has not added a separate block.
Rank #4
- Tri-band 2.4GHz + 5GHz + 6GHz; latest WiFi 6E supports 8-streams on tri-band simultaneously, up to 6.6Gbps speed
- AI QoS; satisfies all users' needs by automatically prioritizing data packets
- Powerful processor; 1.8 GHz quad core processor delivers ultra fast and reliable connections
- Mystic light; sync RGB light effects with mystic light compatible products
- Game accelerator; provides an uninterrupted WiFi connection for immersive gaming experiences
CGNAT prevents inbound reachability
Carrier-grade NAT places the home router behind another provider-controlled NAT layer. In that situation, the router may accept your forwarding rule but unsolicited traffic never reaches it. The official setup guidance identifies CGNAT as a reason public inbound connections can fail.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- Compare the router’s reported WAN IPv4 address with the public IPv4 address shown by a trusted internet service.
- If the router shows a private or shared-provider range, contact the ISP and ask whether a public IPv4 address is available.
- If the ISP cannot provide one, use managed Enshrouded server hosting or another arrangement that supplies an internet-reachable endpoint.
IPv6-only inbound configuration does not solve this particular case because the official Enshrouded support information describes current multiplayer networking as IPv4-based.
Two routers are both performing NAT
An ISP gateway plus a separate personal router can create double NAT. Forwarding only on the inner router may leave the outer device blocking the connection. Put the gateway in bridge or passthrough mode when appropriate, or forward the configured UDP port through each NAT layer. Your ISP’s equipment and account settings determine which option is available.
The public address changed
Many residential connections use a changing public IPv4 address. A previously working server can appear offline after the ISP changes it. Confirm the current public address before asking friends to connect, and consider a provider-supported dynamic-DNS arrangement if your network permits one. Dynamic DNS does not bypass CGNAT; it only gives a stable name to an address that is already reachable.
Best Value
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
Should you open port 15636 or TCP?
Not by default. Community documentation has historically listed a second 15636 game port and TCP rules, while current official support prominently identifies UDP queryPort 15637. Those statements can reflect different server versions or older implementation details. Start with the value in your installed JSON and the current official support instructions.
Add another port only when a current, version-specific official requirement or an error message for your build calls for it. Record why the extra rule exists, use the smallest protocol and range possible, and remove obsolete entries after an update. More open ports increase exposure and make troubleshooting less clear.
Home hosting versus managed hosting
Running the server at home gives you direct control over the files, updates, firewall, and router. It is practical when your ISP supplies a public IPv4 address and you are comfortable maintaining the machine. Managed hosting is a fallback when CGNAT or router restrictions prevent inbound access, or when you do not want to keep a home PC online and maintained.
| Decision factor | Home-hosted server | Managed hosting |
|---|---|---|
| Public IPv4 requirement | Usually required for direct inbound access; CGNAT can block it | Provider supplies the public endpoint, subject to its network design |
| Router and firewall control | You configure and maintain both | Provider handles infrastructure; you use its control panel or support process |
| Maintenance effort | You handle server updates, reboots, backups, and troubleshooting | Some infrastructure work is delegated, but game-server administration still depends on the provider’s tools |
| Recurring cost | No hosting fee is established here; you bear electricity and internet costs | Pricing varies by provider and plan and is not specified by the official setup guidance |
| Uptime | Depends on your PC, power, router, and residential connection | Depends on the provider’s service-level design and maintenance |
| Enshrouded build support | You control when the installed dedicated server updates | Confirm that the provider supports the current Enshrouded dedicated-server build before paying |
For a home server, a wired host, a stable local address, and a documented firewall rule reduce avoidable outages. For managed hosting, verify current build support, update timing, access to configuration files, backups, and how the provider handles port changes.
Quick Recap
Security and maintenance checklist
- Forward only the configured UDP port; do not expose broad ranges “just in case.”
- Use a DHCP reservation so the rule cannot drift to another device.
- Keep the dedicated server, operating system, router firmware, and security software updated.
- Use a strong router administrator password and do not publish it.
- Limit administrative interfaces to your LAN or a secure management method; never expose the router login through the game port.
- Review the rule after every server update, especially if the JSON configuration changes.
- Remove test or obsolete TCP and 15636 entries when no current requirement uses them.
- Back up
enshrouded_server.jsonbefore changing port or server settings.
Quick reference: the complete default setup
| Component | Required default |
|---|---|
| Dedicated-server install | Steam Library with the Tools filter enabled |
| Configuration file | enshrouded_server.json, created after the first launch |
| Configured value | queryPort = 15637 |
| Router protocol | UDP |
| External port | 15637 |
| Internal port | 15637 |
| Destination | Server PC’s reserved local IPv4 address |
| Host firewall | Allow the server executable or UDP 15637 |
| Validation | Test from a different network while the server is running |
| Known blocker | CGNAT or another upstream NAT layer |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →
