Cloudflare SRV Record Configuration

Custom Domains & Cloudflare

Professionalize your server address. Learn how to connect your own domain (e.g., play.yourname.com) using Cloudflare and SRV records.

1. Professional Branding: Beyond the IP

A custom domain (like play.coolerserver.com) is more than just a convenience; it is your community's identity. In 2026, relying on a numeric IP (e.g., 123.45.67.89:25565) is a major barrier to player retention. A domain allows you to change server nodes, migrate to higher-performance Deduck hardware, or even switch data centers without ever losing a player, because you simply update the DNS record, not the address players type into their clients.

2. DNS Record Types: The Technical Framework

Successfully connecting a domain to a Minecraft server requires mastery of three primary record types:

  • A Record (Address): Maps a hostname to a fixed IPv4. This is the bedrock of server routing.
  • CNAME Record (Canonical Name): Aliases one domain name to another. Use this if your Deduck node has a dedicated hostname (e.g., node4.deduck.io) and you want your domain to follow its IP automatically.
  • SRV Record (Service): The "magic" layer. It enables the client to discover the specific **port** and **protocol** (TCP) used by Minecraft without the user typing it.

3. The "Gray Cloud" Rule: Cloudflare Proxying

Why can't I hide my IP with Cloudflare?

Standard Cloudflare "Orange Cloud" (Proxy) works by intercepting **HTTP/HTTPS (Layer 7)** traffic. Minecraft uses a raw **TCP (Layer 4)** protocol. If you enable the orange cloud on your Minecraft A record, the client will fail to connect. You MUST use "Gray Cloud" (DNS Only). To hide your IP completely, you would need a "Spectrum" (Enterprise) license or a dedicated TCP proxy like BungeeGuard.

4. Step-by-Step setup with Cloudflare

Step 1: The A Record

Add an 'A' record for your backend node.
Name: backend
IPv4 Address: Your Deduck server IP.
Proxy status: DNS Only.

Step 2: The SRV Record

SRV Record Settings

This is where the magic happens. Configure as follows:
Service: _minecraft | Protocol: _tcp
Name: play (or @ for the root domain)
Target: backend.yourdomain.com
Priority/Weight: 0 / 5 | Port: Your Deduck Port.

5. Testing Propagation: Beyond the Browser

Don't assume your records are broken just because you can't join immediately. DNS propagation is a global cascading update.

  • • Use dig srv _minecraft._tcp.play.yourdomain.com in a terminal to see the raw SRV response.
  • • Check DNSChecker.org specifically for SRV types to see which parts of the world have updated.
  • • If you are on Windows, run ipconfig /flushdns to clear your local cache.

6. CAA Records and Website Synergy

While your Minecraft connection is Gray Cloud, your website SHOULD be Orange Cloud. This allows you to use **Cloudflare SSL** to protect your community's login data on your server's web forum or shop. We recommend adding a CAA Record to specify that only Let's Encrypt or Google Trust Services can issue certificates for your domain, adding a final layer of brand security.

Sources & Technical References