{"id":158488,"date":"2024-09-26T17:05:55","date_gmt":"2024-09-26T15:05:55","guid":{"rendered":"https:\/\/hifivem.com\/?p=158488"},"modified":"2026-08-16T13:41:27","modified_gmt":"2026-08-16T11:41:27","slug":"fivem-icin-cloudflare","status":"publish","type":"post","link":"https:\/\/fivemx.com\/tr\/fivem-icin-cloudflare\/","title":{"rendered":"Cloudflare for FiveM: Website, DNS and Game Traffic"},"content":{"rendered":"

<\/p>\n

Cloudflare’s normal DNS and orange-cloud HTTP proxy can protect a FiveM community website, API or store, but it does not proxy the actual FXServer TCP\/UDP game endpoint.<\/strong> Proxying arbitrary TCP or UDP services requires Cloudflare Spectrum and an eligible paid plan. For most FiveM servers, game-traffic DDoS protection must therefore come from the game host or network provider.<\/p>\n

\n

Do not orange-cloud a game hostname and assume the FiveM port is protected.<\/strong> Standard Cloudflare proxying covers supported HTTP\/HTTPS ports. Spectrum is a separate Layer 4 product with plan and protocol limits.<\/p>\n<\/div>\n

Separate the three traffic paths<\/h2>\n
\n\n\n\n\n\n\n\n
Surface<\/th>\nNormal Cloudflare proxy?<\/th>\nMal sahibi<\/th>\n<\/tr>\n<\/thead>\n
Website, documentation, status page or web API over supported HTTP\/HTTPS<\/td>\nYes, when configured as a proxied DNS record<\/td>\nCloudflare HTTP proxy plus the origin configuration<\/td>\n<\/tr>\n
DNS lookup for the FXServer hostname<\/td>\nDNS can be hosted by Cloudflare; a DNS-only record reveals the target IP<\/td>\nCloudflare authoritative DNS<\/td>\n<\/tr>\n
FXServer TCP\/UDP connection<\/td>\nNot through the standard HTTP proxy<\/td>\nHosting\/network protection, or Spectrum when the plan and configuration support it<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

What Spectrum changes<\/h2>\n

Cloudflare Spektrumu<\/a> is the product that proxies TCP and UDP applications. Cloudflare’s current protocols-per-plan documentation<\/a> says arbitrary TCP\/UDP applications require Enterprise with the appropriate paid add-on; plan support can change, so verify the matrix and contract rather than relying on a tutorial screenshot.<\/p>\n

Spectrum is not enabled by toggling the orange cloud on a DNS record. It requires a Spectrum application with the intended protocol, edge port and origin. Confirm with Cloudflare and the FiveM host that the required ports and connection behaviour are supported before changing a production endpoint.<\/p>\n

A safe setup for the web surface<\/h2>\n
    \n
  1. Put the website on a separate hostname from the game endpoint where practical.<\/li>\n
  2. Add the web origin to Cloudflare DNS and enable the proxy only for supported web traffic.<\/li>\n
  3. Use a valid origin certificate and an end-to-end TLS mode; do not use a mode that leaves the Cloudflare-to-origin connection unencrypted.<\/li>\n
  4. Exclude login, account, cart, checkout, personalized sessions and authenticated APIs from public caching.<\/li>\n
  5. Rate-limit only routes whose legitimate behaviour you understand. Test launchers, webhooks and API clients before enforcing a challenge.<\/li>\n
  6. Keep the origin firewall and application updated; a CDN does not repair a vulnerable WordPress plugin or exposed admin account.<\/li>\n<\/ol>\n

    DNS-only game endpoint<\/h2>\n

    If Spectrum is not configured, use a DNS-only record for the game endpoint and rely on the hosting provider’s network-level mitigation. Ask the provider what TCP\/UDP protection is included, which ports are filtered, how attacks are handled and whether the advertised protection applies to the actual FiveM service rather than only to a control panel.<\/p>\n

    Yayg\u0131n hatalar<\/h2>\n