For a self-hosted Palworld dedicated server, forward UDP port 8211 from your Internet-facing router to the computer running the server, then allow UDP 8211 through that computer’s firewall. That is Pocketpair’s default, changeable game/listen port. If you start the server with -port=xxxx, replace 8211 with that value in both places.
Godlike.Host offers hosted Palworld servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
UDP 27015 is different: secondary networking guidance identifies it as a Steam query or server-browser port that may be needed for listing and query visibility. It is conditional, not a replacement for 8211. RCON and REST API ports should remain closed unless you deliberately enable those interfaces and secure them.
As an Amazon Associate I earn from qualifying purchases.
Port checklist at a glance
| Purpose | Protocol and port | When to open it |
|---|---|---|
| Game connections and server listening | UDP 8211 by default | Required for the normal self-hosted Internet setup, unless you changed -port. |
| Custom game/listen port | UDP value specified by -port=xxxx |
Use this value instead of 8211 in the router and host-firewall rules. |
| Steam query or browser visibility | UDP 27015 | Only when your deployment uses the commonly documented query port and you need query or browser visibility. |
| RCON or REST administration | Deployment-specific | Open only when that interface is enabled, with access controls and limited exposure. |
Port forwarding and firewall rules are separate. A router can deliver a packet to the right machine while the operating system still drops it; both layers must permit the traffic.
What UDP 8211 does
Pocketpair’s requirements describe the network setting as: “Network | UDP Port 8211 (Default, Changeable) Be able to port forwarding by router configuration.” In practical terms, the dedicated server listens for game traffic on UDP 8211 unless you set another value. Players connecting from outside your home network reach your public address, and the router translates and forwards that traffic to the server’s private LAN address.
#1 Best Overall
![Bushiroad Palworld Trading Card Game Dawn of Palpagos Red & Blue Trial Deck POCGe-TD01 [50 Cards]](https://m.media-amazon.com/images/I/51qbpctfE0L._SL160_.jpg)
- Official Palworld Trading Card Game: Strategic gameplay designed for two players featuring mysterious creatures known as Pals
- Complete Trial Deck Set: Includes 50 cards in the Dawn of Palpagos Red & Blue Trial Deck, designed for immediate play right out of the box
- Flexible Deck Construction: Build decks using up to 2 colors from Red, Blue, Green, and Purple, plus versatile Colorless cards that work with any deck combination
- Customizable Strategy Options: Cards are customizable with a maximum of four copies per card, encouraging personalized strategies and unique gameplay experiences
- Comprehensive Game Components: Includes 60-card set with 50 main deck pieces and 10 soul cards, plus play guide, paper playmat, life counter, and bonus booster pack
UDP is a connectionless transport. It does not perform the same handshake as TCP, so a generic TCP port check can report “closed” even when the Palworld service is correctly listening on UDP. Always select UDP when creating rules and when interpreting test results.
The official configuration guide gives the default argument as -port=8211 and says it changes the port number used to listen to the server. The argument changes the actual game socket; it is not merely an advertisement setting.
-port and -publicport are not interchangeable
-port=xxxx: changes the listening socket
If the server starts with -port=9000, it listens on UDP 9000 instead of UDP 8211. Your router rule must forward UDP 9000 to the server host, and the host firewall must allow inbound UDP 9000. Leaving rules for 8211 while changing only the startup argument sends players to a port where no Palworld listener exists.
-publicport=xxxx: advertises a public endpoint
Pocketpair documents -publicport=xxxx for manually specifying the public port for community servers and explicitly distinguishes it from the listening port. Setting it does not move the server’s listen socket. Keep forwarding the port selected by -port; use the public-port setting only when your deployment’s advertised endpoint requires it.
When diagnosing a mismatch, inspect the complete launch command or service configuration rather than relying on a server name or a value shown in a browser listing. The effective listen argument determines the forwarding rule.
Rank #2
- 7 per pack
- Each box contains 12 cards
- (C) PALWORLD
Self-hosted setup: forward the correct port
- Confirm the listen argument. Find the command, shortcut, service file or control-panel field that starts the server. With defaults, it should use
-port=8211. Record any custom value exactly. - Give the server a stable LAN address. Reserve an address for the host in the router’s DHCP or network settings, or configure a suitable static address. A forwarding rule aimed at a changing DHCP address will eventually point at the wrong device.
- Create the router rule. In the router’s port-forwarding or virtual-server page, add an inbound rule for UDP, using the external port that players will use and the internal destination port selected by
-port. For the default setup, that is UDP 8211 to the server’s stable LAN address. - Allow the same UDP port on the host. In Windows, open Windows Defender Firewall with Advanced Security, choose Inbound Rules, create a new rule for a port, select UDP, enter the server port, and allow the connection for the network profiles you actually use. On a Linux host managed with UFW, an equivalent rule is
sudo ufw allow 8211/udp; substitute your custom port and confirm that the distribution’s firewall is the one in use. - Substitute custom values consistently. If the command uses
-port=9000, use UDP 9000 in both the router and firewall rules. Do not open 8211 as a guess or leave two ports exposed without a reason. - Add query access only if needed. If your server configuration and chosen deployment use Steam query or browser visibility on UDP 27015, create a separate UDP 27015 forwarding and firewall rule. This is an optional visibility function, not a universal Palworld game-port requirement.
- Start the server and test externally. Test from a friend’s network or a mobile connection with Wi-Fi disabled. A successful connection from another device on the same LAN proves only local routing; it does not prove that Internet traffic reaches your router.
Some routers require separate fields for external and internal ports. If you intentionally map different numbers, the outside number is what players use, while the inside number must match the service’s listening port. Keep the mapping simple—8211 to 8211, or your custom value to itself—unless you have a specific reason to translate it.
Recommended Free Tools
Do you need TCP, UDP, or both?
Pocketpair’s stated requirement for the dedicated server is UDP 8211. For the game listener, create a UDP rule; opening TCP 8211 does not substitute for UDP. The commonly documented query port is also UDP 27015. There is no universal TCP rule in the official requirements cited here.
Do not add broad “both protocols” rules merely to make troubleshooting easier. Extra exposure increases the attack surface and can hide a typo in the real UDP rule. Add another protocol only when a specific enabled component documents that requirement.
When UDP 27015 matters
Steam query ports answer discovery and status requests used by browser or query tools. A server can be reachable for direct gameplay while remaining absent from a browser if its query port is not forwarded, misconfigured, or filtered. Conversely, forwarding 27015 does not make a server playable when UDP 8211—or the custom -port value—is blocked.
Treat 27015 as configuration-dependent. Verify that your server build, hosting arrangement and query settings actually use it before opening the port. If a provider or server configuration specifies another query port, follow that value rather than assuming 27015.
RCON and REST API ports: management surfaces, not game ports
RCON and REST interfaces are administrative channels. The available evidence does not establish one universal port for every Palworld deployment; the enabled server configuration determines the value. Do not forward an RCON or REST port just because a guide lists it for a different build or control panel.
If you enable one, restrict its source addresses where the router or firewall permits, use strong unique credentials, encrypt the connection when the interface supports it, and keep the software updated. A VPN or private management network is preferable to exposing an administration API to the entire Internet. Test game connectivity with 8211 (or the custom listen port) before adding management access, so an administrative rule is not mistaken for a gameplay requirement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why friends can connect on LAN but not from the Internet
The router forwards to the wrong machine
Check the server computer’s current LAN address and compare it with the rule’s destination. DHCP changes are a frequent cause; reserve the address and update the rule if the host moved.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →The protocol or port is wrong
Confirm that the rule is UDP, not TCP, and that it matches the effective -port argument. A rule for 8211 will fail when the process is listening on a custom value such as 9000.
The host firewall still blocks the packet
Temporarily inspect the firewall’s inbound-log or rule counters rather than permanently disabling protection. Ensure the allow rule applies to the active network profile and the correct executable or port.
Rank #4
- Build your PALWORLD collection instantly with the Collectors Set by The Loyal Subjects.
- PALWORLD: The global phenomenon, multiplayer open world survival and crafting video game where players collect mysterious creatures called ‘Pals,’ is taking the action off screen with these all new and first ever Figures!
- SET INCLUDES: Chillet, Grizzbolt, and Relaxasaurus — for an all-in-one collectible showcase.
- FIGURES: Three 3-inch scale figures designed for posing and display.
- PACKAGED: In a premium display-ready window box.
You are testing from inside the same network
Many routers do not support, or do not consistently implement, hairpin NAT. Use an external connection for the decisive test. Local clients may need the server’s private LAN address, while remote clients use the public address and forwarded port.
There is another NAT layer or no usable public IPv4 address
A second router, mesh gateway or ISP carrier-grade NAT can prevent unsolicited inbound traffic from reaching your forwarding rule. Put the upstream device in an appropriate bridge or passthrough arrangement when you control it, or ask the ISP whether inbound forwarding and a public address are available. If the ISP does not provide a reachable address, changing the Palworld port alone will not solve the problem.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The server is not listening
Start the dedicated server, check its startup log for the selected port, and verify that the process remains running. A forwarding rule cannot create a listener that has stopped or failed to bind because another service already uses the port.
Self-hosting versus managed hosting
| Setup | Who controls forwarding | What you should verify |
|---|---|---|
| Home self-hosting | You control the Internet router and host firewall. | Stable LAN address, UDP listen rule, host allow rule, external test and any custom -port value. |
| Managed game-server host | The provider controls the edge router; you usually control a panel-level allocation. | The assigned public address and port, whether query visibility is included, and which management interfaces are enabled. Do not add home-router rules for a server that is not inside your home LAN. |
Managed hosting may present a port other than 8211 at the public edge while mapping internally to the service. Use the provider’s assigned endpoint and panel documentation; the local default does not override that allocation.
Verification checklist
- The server launch configuration shows
-port=8211or the intended custom value. - The host has a stable LAN address.
- The router forwards UDP to that address and the matching internal port.
- The operating-system firewall allows inbound UDP on the same port.
- You are testing from outside the server’s LAN.
- UDP 27015 is opened only when query or browser visibility is required and configured.
- RCON and REST ports remain closed unless deliberately enabled and protected.
- Any public-port advertisement is understood as separate from the actual listen port.
Once these checks pass, players should connect using the server’s public address and the externally advertised port. If gameplay works but browser discovery does not, investigate the optional query path rather than replacing the game-port rule.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute
