October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

Starbound Server Port Forwarding: Ports and Router Setup

Forward Starbound’s default port, 21025, to a stable private IP, match the protocol your server uses, allow it through the host firewall and test from outside your home network.
Length11 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a standard Starbound dedicated server, forward TCP port 21025 from your router to the computer running the server. Some Linux server setups listen on both TCP and UDP, so confirm the protocol in your server configuration and startup log before creating the rule. Give remote players your public IP address (or hostname) and the forwarded port; players on your home network may need the host computer’s private IP instead.

What Starbound port forwarding does

A router normally accepts connections initiated from inside your home network and rejects unsolicited traffic from the internet. Port forwarding creates one deliberate exception: traffic arriving at a selected WAN port is sent to one device’s private LAN address. Your Starbound server must be running on that destination device, and both the router and the computer’s firewall must permit the same port and protocol.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Forwarding does not make the server public by itself. The server process has to be listening, the destination address must remain unchanged, and your internet connection must allow inbound connections. A successful connection from another computer in the same house proves only that the local server works; it does not prove that WAN forwarding is correct.

Port and protocol at a glance

Item Default or required value How to handle it
Game/query port 21025 Use this unless the server configuration or log shows a different listening port.
Protocol TCP in the commonly used dedicated-server instructions Some Linux instructions report TCP and UDP. Forward only the protocol(s) your installation actually uses.
Router destination The server computer’s private IPv4 address Reserve that address with DHCP or assign a stable address before testing.
Remote player address Your public/WAN IP or hostname plus the external port Do not give internet players the 192.168.x.x, 10.x.x.x or 172.16–31.x.x address used inside your home.

The default port is identified as TCP 21025 in Starbound multiplayer and dedicated-server guides. A Linux server tutorial describes Starbound as using TCP and UDP on that port by default. Because those instructions differ by platform and setup, the server’s own configuration and startup output are the authority for your machine.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

What you need before changing the router

  • Administrative access to the router that is directly connected to the internet.
  • A dedicated server installation that starts without errors.
  • The host computer’s private IPv4 address.
  • A DHCP reservation or another method that keeps that address from changing.
  • Permission to create an inbound rule in the host operating system’s firewall.
  • A test device or friend on a different network, such as a phone using cellular data.

If your home uses a separate modem and router, identify which box performs routing. Creating a rule on an access point that is not the internet gateway will not expose the server. When two devices both perform NAT, you may need a forwarding rule on each, or you may need to put the second device in bridge/access-point mode.

Step 1: Confirm the server’s listening port and protocol

Start the dedicated server once

Launch the server and leave it running while you inspect its configuration and console output. Record the port that it reports as listening. If no custom value has been set, the usual value is 21025. Do not assume that a launcher, mod pack or platform-specific wrapper kept the default.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check the configuration file and log

Open the Starbound server configuration file (commonly named starbound_server.config) and look for the listening-port setting. Then check the startup log for a line showing the bound address, port or protocol. If the configuration and log disagree, use the value the running process actually reports and correct the configuration before forwarding anything.

Determine whether the process accepts TCP, UDP or both. The Windows dedicated-server guidance generally calls for TCP, while a Linux guide documents both protocols. Selecting “both” in a router is appropriate only when your server build requires both; opening an unused protocol increases exposure without helping players connect.

Step 2: Give the host a stable private address

A forwarding rule points to an internal address, not to a computer name. If the router later gives the server a different address, the rule still exists but sends traffic to the wrong device.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Find the current private IPv4 address

  • Windows: Open Command Prompt, run ipconfig, and note the IPv4 Address on the adapter connected to your LAN.
  • Linux: Run ip addr and identify the IPv4 address on the active Ethernet or Wi-Fi interface.

Use the address assigned by your router, usually in a private range such as 192.168.x.x, 10.x.x.x or 172.16–31.x.x. Do not use the router’s gateway address or an address belonging to a virtual adapter.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Create a DHCP reservation

In the router’s LAN, DHCP or connected-devices section, select the server computer and reserve its current address against its network adapter. Save the reservation and restart the server computer or renew its lease if the router requests it. A reservation is usually safer than typing a manual address into the operating system because it keeps the router’s address-management table consistent.

Steam’s support guidance summarizes the requirement as: “Your server should use a static IP address.” A DHCP reservation satisfies the practical purpose of that advice while allowing the router to manage the address.

Step 3: Create the router forwarding rule

Enter the rule fields

Router interfaces use different labels, but the information is the same. Look for Port Forwarding, Virtual Server, NAT Forwarding or a similar menu.

Router field Value to enter Important detail
Name or service A recognizable label such as Starbound Server The label is for your administration; it does not affect the game.
External/WAN port The port remote players will use Use the configured listening port, or choose a different external port and document it for players.
Internal/LAN port The port shown by the running server If external and internal values differ, players must use the external value.
Destination IP The reserved private IPv4 address of the server computer Do not select “all devices” or leave the destination blank.
Protocol TCP, UDP or both, according to the server log Match the protocol exactly; a TCP rule does not accept UDP traffic.
Enabled On Save or apply the configuration after editing.

Keep the mapping understandable

Using the same external and internal port is simplest. A different external port can be useful when another service already occupies the default, but it creates an extra value that every remote player must enter. Never forward a range when one port is sufficient.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

After saving, revisit the rule and verify that the router did not silently change the protocol, destination address or port range. Some firmware separates IPv4 and IPv6 forwarding; the rule described here is the conventional IPv4 NAT rule.

Step 4: Allow the server through the host firewall

A router rule can deliver the packet to the computer, but the operating-system firewall can still discard it. Permit the executable or the exact inbound port using the same protocol selected on the router.

Windows

  1. Open Windows Security and select Firewall & network protection.
  2. Choose Advanced settings, then Inbound Rules.
  3. Select New Rule.
  4. Choose Program and browse to starbound_server.exe, or choose Port and enter the listening port.
  5. Select the required protocol, allow the connection on the profiles you actually use, and give the rule a clear name.
  6. Save the rule and ensure it is enabled.

The dedicated-server instructions specifically call for allowing starbound_server.exe through active firewalls. If you create a port rule instead, restrict it to the server’s port rather than opening all inbound traffic.

Linux

Use the firewall manager enabled on your distribution. For a system using UFW, a TCP rule would be expressed as sudo ufw allow 21025/tcp; substitute your configured port and add a UDP rule only when the server requires UDP. With another firewall, create the equivalent inbound rule and reload it according to that firewall’s documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Step 5: Test from outside your home network

  1. Start the dedicated server and leave it listening.
  2. Confirm that the reserved private address in the router still matches the host computer.
  3. From a different network, enter your public IP or hostname and the external port. A friend can test from their home, or you can use a phone on cellular data rather than your Wi-Fi.
  4. Watch the server console or log while the attempt is made. An incoming connection entry proves that traffic reached the process; a timeout with no log entry points to the router, NAT or ISP path.

A test from another device on the same Wi-Fi may fail even when internet access works because some routers lack NAT loopback (also called hairpin NAT). For that local test, players should use the host’s private address. Do not treat a successful LAN connection as proof of WAN reachability, and do not treat a failed LAN loopback attempt as proof that forwarding is broken.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Which address should each player use?

Friends outside your home

Give remote players the public IPv4 address shown by the internet gateway, or a hostname that resolves to it, followed by the external port. The public address belongs to the router’s internet connection; it is not the same as the server’s private LAN address.

Players on the same LAN

Give them the server computer’s private IPv4 address and the listening port. If the router supports NAT loopback, the public address may also work from inside, but relying on that behavior makes troubleshooting harder.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When your public address changes

Many residential connections use a dynamic public address. A modem or router restart can assign a different address, making an old invitation unusable. Check the current WAN address before sharing it again. A separately configured dynamic-DNS service can provide a hostname that follows address changes, but it must be evaluated and maintained independently of Starbound.

Changing Starbound’s port later

If you edit the listening-port value in starbound_server.config or another server configuration, treat the change as a coordinated update:

  1. Stop the server cleanly.
  2. Change the listening-port setting.
  3. Start the server and confirm the new value in its log.
  4. Edit the router rule’s external and internal values as needed.
  5. Update the Windows or Linux firewall exception.
  6. Tell players the new external port and test from a different network.

A forwarding rule for the old port cannot reach a process that is listening elsewhere. The Steam Community dedicated-server instructions explicitly warn that forwarding must be changed when the server port changes.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting: find the failing layer

The server does not start or shows no listening port

  • Resolve configuration, permission or mod errors first; port forwarding cannot repair a server that is not running.
  • Check that another application is not already using the selected port.
  • Read the startup log for the actual bind address and port instead of relying on a remembered default.

The router rule points to the wrong computer

  • Compare the rule’s destination with the host’s current IPv4 address.
  • Confirm that the DHCP reservation is tied to the active network adapter, especially after replacing a Wi-Fi card or moving from Wi-Fi to Ethernet.
  • Do not forward to the router’s own gateway address.

The protocol does not match

A TCP-only rule will not carry UDP, and a UDP-only rule will not carry TCP. Recheck the server log and the platform-specific instructions, then create the smallest matching rule. If the setup documents both protocols and the log confirms both listeners, configure both separately or use the router’s TCP/UDP option.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The host firewall blocks the connection

Temporarily inspect the firewall’s blocked-connection log rather than disabling the firewall as a permanent fix. Verify that the allow rule targets starbound_server.exe or the selected port, uses the correct protocol and applies to the active network profile.

LAN works but WAN does not

  • Test from cellular data or another household; a same-LAN test may only exercise local routing.
  • Check that the router rule is enabled and that the server was running during the test.
  • Verify the public address currently shown by the internet gateway.
  • Check whether a second router, mesh unit or modem is performing NAT. Forward through both layers or place the downstream unit in bridge/access-point mode.

The router has no usable public address

Some providers place customers behind carrier-grade NAT (CGNAT). In that arrangement, the address shown on your router is shared or belongs to an upstream carrier device, so an inbound rule on your home router cannot receive unsolicited internet traffic. Compare the router’s WAN address with the public address reported by an external service; a mismatch is a warning sign. Ask the provider whether a public IPv4 address is available, or use a hosting arrangement that does not depend on inbound connections to your home. IPv6 may be an option only if the game, router and players’ networks all support a correctly secured IPv6 setup.

The address worked yesterday but not today

Check for a changed public IP after a reboot or lease renewal. Then verify that the private address reservation still points to the server. Update the address shared with friends or the hostname used for connection.

Direct home hosting versus a hosted server

Decision axis Home hosting Hosted server
Mods and configuration Full control over files, launch options and maintenance. Control depends on the host’s software access and policies.
Recurring cost Uses your existing connection and hardware, though electricity and upgrades remain your responsibility. Normally involves a recurring hosting charge.
Setup complexity Requires router forwarding, firewall rules and network troubleshooting. The provider generally supplies a public endpoint, but you still configure the game.
Public-IP and NAT dependence Requires an inbound-reachable connection and a stable way to share the address. Usually avoids your home router’s NAT and dynamic-IP problems.
Uptime Depends on your computer, power, connection and household maintenance. Depends on the provider’s infrastructure and plan.
Security administration You manage exposed ports, operating-system updates, access and logs. The provider manages the network perimeter; you remain responsible for the server software and account security.

Home hosting is practical when you control the gateway and want direct access to files and mods. A hosted machine is more suitable when CGNAT, double NAT, household uptime or network administration makes inbound access unreliable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Router capabilities that matter

You do not need a particular router brand. Before replacing equipment, check whether the firmware provides:

  • DHCP reservations tied to individual devices.
  • Separate custom rules for TCP and UDP, including non-default external ports.
  • Clear IPv4 NAT and IPv6 firewall controls.
  • A way to identify the actual WAN address and whether the device is behind another NAT layer.
  • Documentation that explains where forwarding, firewall and DHCP settings are located.

Consumer “gaming” labels do not substitute for these capabilities. A basic router with accurate documentation and working reservations is enough for a single Starbound server.

Security and maintenance after the server is reachable

  • Forward only the required port and protocol; remove experimental rules when they are no longer needed.
  • Keep the server, operating system and mods updated from trustworthy sources.
  • Use a separate administrative account and protect any remote-management interface; never expose the router’s administration page through the game rule.
  • Review server logs for unexpected connection attempts and stop the server when nobody needs it online.
  • Document the reserved private address, external port and protocol so a future router replacement can be configured consistently.

Port forwarding changes the router’s internet-facing behavior, so treat it as a small network service rather than a one-time checkbox. When a connection fails, check the layers in order: running server, listening port, stable private address, router rule, protocol, host firewall, additional NAT and ISP restrictions.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.