Network Tunnels
PocketMC routes player and dashboard traffic over outbound encrypted tunnels, bypassing carrier-grade NAT (CGNAT) and local firewall restrictions without router port forwarding.
Playit.gg Integration
PocketMC embeds the official Playit.gg agent into its application directory. When started, the agent maintains an encrypted outbound connection to Playit's anycast routing edge.
- No router configuration: Connections tunnel outbound over UDP/TCP, avoiding manual router port forwarding.
- Protocol support: Automatically maps Minecraft Java (25565 TCP), Bedrock (19132 UDP), Geyser crossplay, and Simple Voice Chat (24454 UDP).
- Process supervisor: Monitors agent output with automated secret redaction, tracks connection state, and retries with exponential backoff if the tunnel drops.
- Network change awareness: Reconnects the tunnel when network interfaces change or when Windows resumes from sleep.
Linking an Account
- Open SettingsTunnels and click Setup Playit.gg.
- PocketMC initiates the partner provisioning flow and generates a 6-character setup code or claim URL.
- Approve the agent in your Playit account to link your account.
- PocketMC receives the persistent agent secret key, encrypts it via Windows DPAPI, and immediately launches the background tunnel daemon.
- Your assigned join address (such as
mc.playit.gg:12345) displays on your server cards with a copy button.
Simple Voice Chat UDP Tunneling
Proximity voice chat mods like Simple Voice Chat stream voice packets over UDP (24454 by default). Because Minecraft clients connect to voice chat on a secondary port, home hosting behind CGNAT typically blocks audio packets.
PocketMC automates voice tunnel allocation through SimpleVoiceChatDetector:
- Detection: Inspects addon manifests (Modrinth project ID
9eGKb6K1) and scansmods/orplugins/for voice chat JARs. - Port discovery: Reads the active voice port from
voicechat-server.propertiesor parses the startup log regex (Voice chat server started at port ...). - Dual tunnel mapping: Creates a dedicated UDP tunnel alongside your primary game tunnel, routing audio traffic cleanly.
- Address display: Surfaces the voice address on your instance cards, in the web dashboard, and in Discord Rich Presence.
Cloudflare Quick Tunnels
For remote access to the web dashboard, PocketMC supports Cloudflare Quick Tunnels:
- Provisions an app-local
cloudflaredbinary. - Launches an ad-hoc reverse tunnel pointing to Kestrel on
127.0.0.1:25580. - Generates a temporary HTTPS endpoint (
https://*.trycloudflare.com) with TLS termination at Cloudflare's edge. - Protected by the same authentication and rate-limiting rules as local LAN access.