Server IP
Understanding your Cafora server IP, the protected entry IP, and how the origin IP is shielded.
Your server's IP address is the destination players connect to. Cafora assigns a unique address to each server.
Finding Your Server IP
Your server address is displayed at the top of the server panel in the Pterodactyl Panel.
IP Address Types
Cafora uses DNS-based addressing. Your server is accessible through a hostname like:
<server-type>.play.caforahost.com<server-type> is the hostname prefix assigned to your server — always use the exact address shown in the Pterodactyl Panel.
Players do not need to know or use raw IP addresses.
Protected Entry IP vs. Origin IP
You may encounter two kinds of IP, and they behave very differently:
| Type | Connectable | Description |
|---|---|---|
| Protected entry IP (TCPShield) | ✅ | The public entry point DNS resolves to; DDoS scrubbing happens here |
| Origin IP (node public IP) | ❌ | The node's own address; Minecraft ports do not respond on it |
Cafora deliberately makes the origin IP refuse direct Minecraft connections. The firewall drops all traffic entering 25565–25577 on the public NIC; only connections arriving over the dedicated TCPShield link reach the Minecraft container.
As a result, even if someone learns the node's public IP, they cannot bypass DDoS protection by attacking it directly. Please do not attempt to connect to the origin IP.