Separating the game connection available to players from management ports reduces unnecessary access. You can use a direct server, proxy or provider service as the connection path.
Step by step
-
List game ports that require public access. Determine who will use SSH, RCON, database and panel ports separately.
-
Restrict management ports to private network or restricted resource addresses. Adding management ports to the modem rule for the game port.
-
If there is a proxy, only allow traffic from the proxy to the back server. Verify which endpoint the domain used by players is resolved to.
-
Test that the game login from another network is working and that the management ports are not accessible. Make the change while preserving your existing access so that the management path is not blocked.
Keep in mind
Publishing the DNS record under a different name does not alone create a proxy that hides the target IP.