ZeroTier Minecraft: Play Together Without Port Forwarding (2026)

Published on

How to use ZeroTier to host a Minecraft server without port forwarding. Step by step setup for Windows and Linux, latency considerations, and when to use a real server instead.

ZeroTier Minecraft setup

Port forwarding is the biggest barrier to hosting a Minecraft server at home. Your router blocks incoming connections by default, and configuring it requires accessing the router admin panel, knowing your internal IP, and hoping your ISP does not use CGNAT (which makes port forwarding impossible entirely). ZeroTier sidesteps all of that.

ZeroTier creates a virtual private network between your machines. Once everyone is on the same ZeroTier network, they can connect to your Minecraft server as if they were on the same local network. No port forwarding, no exposing your public IP, and it works through CGNAT.

How ZeroTier Works

ZeroTier is a peer-to-peer VPN. Unlike traditional VPNs that route all traffic through a central server, ZeroTier establishes direct connections between devices. Your friends connect directly to your machine over an encrypted tunnel, with ZeroTier's coordination servers only handling the initial handshake.

Each device on a ZeroTier network gets a virtual IP address (like 10.x.x.x). Your Minecraft server listens on this virtual IP, and your friends connect to it using that address instead of your public IP.

Setup

Step 1: Create a ZeroTier Network

  1. Go to my.zerotier.com and create a free account
  2. Click "Create a Network"
  3. Note the Network ID (a 16-character hex string like a84ac5c10a7aaab1)
  4. Under "Access Control," choose either:
    • Private (recommended): you must manually approve each device
    • Public: anyone with the Network ID can join

Private is recommended. You do not want random people discovering your network ID and joining.

Step 2: Install ZeroTier on the Host (Your Machine)

Windows: download the installer from zerotier.com. After installation, right-click the ZeroTier icon in the system tray, click "Join New Network," and paste your Network ID.

Linux:

curl -s https://install.zerotier.com | sudo bash
sudo zerotier-cli join YOUR_NETWORK_ID

macOS: download from zerotier.com or install via Homebrew:

brew install --cask zerotier-one
sudo zerotier-cli join YOUR_NETWORK_ID

Step 3: Authorize the Device

Go back to my.zerotier.com, open your network, and scroll to "Members." You will see your device listed. Check the "Authorized" box. Note the assigned IP address (e.g., 10.147.20.1). This is the address friends will use to connect.

Step 4: Install ZeroTier on Friends' Machines

Each friend repeats Step 2: install ZeroTier and join the same Network ID. You authorize each of their devices in the web panel.

Step 5: Configure Minecraft

Start your Minecraft server normally. By default, it listens on all network interfaces, including the ZeroTier virtual interface.

In server.properties, make sure:

server-ip=
server-port=25565

Leaving server-ip blank means the server listens on all interfaces, including ZeroTier. If you want it to only listen on ZeroTier (hiding it from your local network), set server-ip to your ZeroTier IP.

Step 6: Connect

Friends open Minecraft, go to Multiplayer, click "Direct Connection," and enter your ZeroTier IP:

10.147.20.1:25565

That is it. No port forwarding, no router configuration, no public IP exposure.

Latency Considerations

ZeroTier adds some latency compared to a direct connection because the initial path discovery involves coordination servers. Once the direct peer-to-peer tunnel is established, the overhead is minimal (typically 1 to 5ms).

However, the total latency still depends on the physical distance between you and your friends. ZeroTier does not make the internet faster. If your friend is in Europe and you are in North America, the ping will be 80 to 150ms regardless of whether you use ZeroTier or port forwarding. ZeroTier does not add meaningful latency on top of that.

Where ZeroTier can add latency is when a direct connection cannot be established. If both players are behind strict NATs or firewalls, ZeroTier falls back to relaying traffic through their servers. Relay mode adds 20 to 50ms because traffic goes client -> ZeroTier relay -> host instead of client -> host. You can check connection quality with:

sudo zerotier-cli peers

Look for the DIRECT or RELAY status next to each peer.

Advantages of ZeroTier

No port forwarding required. Works through CGNAT, double NAT, restrictive ISPs. If the device can reach the internet, ZeroTier works.

Your public IP stays private. Friends connect to your ZeroTier IP, not your home IP. This is a meaningful security improvement over traditional port forwarding.

Encrypted traffic. All ZeroTier connections are encrypted end-to-end. Traffic between players and your server is not visible to your ISP or anyone on the network path.

Easy to manage. Add and remove players from the ZeroTier web panel. No need to change router settings when someone joins or leaves.

Free for up to 25 devices. More than enough for a friend group.

Limitations

Everyone needs ZeroTier installed. Each player has to download and run ZeroTier. For a group of friends this is fine. For a public server where random players join, it is a dealbreaker.

The host machine must stay on. ZeroTier does not change the fact that someone's computer is running the server. If you turn off your PC, the server goes down.

Performance scales with your hardware. Your home machine is still running the Minecraft server. A modded server that needs 12 GB of RAM and a fast CPU needs that regardless of how players connect.

Not suitable for public servers. If you want your server listed in the Minecraft server browser, ZeroTier does not help. You need a publicly accessible address for that.

When to Use ZeroTier vs. a Hosted Server

Use ZeroTier when:

  • You are playing with 2 to 5 friends
  • You cannot port forward (CGNAT, apartment network, school/university)
  • You want to keep costs at zero
  • Privacy matters (you do not want your public IP shared)
  • The server only needs to be up when you are playing

Use a hosted server when:

  • You want 24/7 uptime
  • You need more than 5 concurrent players
  • You run heavy modpacks that need dedicated hardware
  • You want a public server that anyone can join
  • Consistent, low latency for all players matters

Space-Node Minecraft hosting is the natural next step when you outgrow ZeroTier. Plans start at EUR 2.90/mo for 2 GB, which is less than most people spend on coffee. You get a static IP, DDoS protection, and server hardware (Ryzen 9, NVMe) that your home machine probably cannot match.

The typical progression: start with ZeroTier for free, decide you want 24/7 uptime and better performance, move to hosted. Your world save transfers directly.

Alternatives to ZeroTier

Playit.gg

A reverse proxy service that gives your server a public address without port forwarding. Unlike ZeroTier, players do not need to install anything. The tradeoff is that traffic routes through Playit's servers (adding latency) and you depend on their service being available.

Tailscale

Similar to ZeroTier but with a different authentication model (uses your Google/Microsoft/GitHub account). Works equally well for Minecraft. Choose whichever you prefer. The setup process is nearly identical.

Ngrok

More complex to set up for game servers and not designed for sustained connections. Works in a pinch but ZeroTier or Tailscale are better choices for gaming.

FAQ

Does ZeroTier work with modded Minecraft? Yes. ZeroTier operates at the network level. It does not care what application is running. Forge, Fabric, NeoForge, Paper, any server software works.

Can I use ZeroTier with Bedrock Edition? Yes. The same process applies. Bedrock uses UDP on port 19132 by default. ZeroTier handles UDP traffic the same as TCP.

Will ZeroTier affect my internet speed? Only the traffic going to/from your Minecraft server travels through ZeroTier. Your regular internet usage (browsing, streaming, other games) is unaffected.

Is ZeroTier safe? ZeroTier is widely used in business and personal settings. Traffic is encrypted. The biggest risk is someone getting your Network ID and joining if you have set your network to public. Always use private networks with manual approval.

Related guides: when you outgrow ZeroTier, see our Minecraft hosting comparison and game server security guide for protecting a public server. For performance tuning, read ZGC vs G1GC and best Minecraft mods 2026.

Can I run multiple Minecraft servers over ZeroTier? Yes. Run them on different ports (25565, 25566, etc.) and give friends the appropriate IP:port combination.

Start Your MC Server Now Today

Join content creators worldwide who trust our Minecraft infrastructure. Setup is instant and support is always available. Start from €0.90/mo (Dirt) or €2.70/mo (Coal) and go live in minutes.