ARK Ports: ASA and ASE Port Forwarding Guide
Choose the correct ARK version, forward only the required UDP ports, configure Windows Firewall, and diagnose servers that do not appear or accept connections.
The short answer
First identify the server version. ARK: Survival Ascended normally needs its UDP game port, default 7777. ARK: Survival Evolved normally needs UDP 7777 for the game, UDP 7778 for the peer port, and UDP 27015 for the Steam query; TCP 27020 is optional RCON and should stay closed unless you use it. Point every required rule at the server computer's reserved local IPv4. If CGNAT or router restrictions block you, use a VPN only when it can forward the complete set your version needs—one random port is not enough for a default ASE server.
Choose your ARK version first
Many ARK port lists copy the older Survival Evolved requirements into Survival Ascended. Select the server you actually run; the page will show only its normal public rules.
| Purpose | Default | Protocol | What to do |
|---|---|---|---|
| Game/player traffic | 7777 | UDP | Forward to the server |
| RCON remote administration | 27020 | TCP | Optional; keep closed if unused |
Why ASA does not show 7778 or 27015 here
Current server configuration marks QueryPort as ASE-only, and the ASA server list reports the actual game port. For a standard self-hosted ASA server, start with its configured UDP game port. A hosting panel can assign extra service ports, so follow that panel when it explicitly documents one.
Build the ASA rules
ArkAscendedServer.exe TheIsland_WP?SessionName=MyServer -port=7777ARK game | UDP | 7777 → 192.168.1.50:7777New-NetFirewallRule -DisplayName "ARK ASA UDP" -Direction Inbound -Protocol UDP -LocalPort 7777 -Action Allow -Profile PrivateThe ASE peer port is always one number above the game port. RCON is deliberately excluded from the generator; add TCP 27020 only if you enable and secure remote administration.
How to open ports for an ARK server
- 1
Identify ASA or ASE
Use the version selector above. Old ASE launch parameters and port lists are a common reason ASA setups become needlessly complicated.
- 2
Make the server work on the LAN
Start the dedicated server and connect locally. A router cannot publish a process that failed to start or listen.
- 3
Reserve the host address
Create a DHCP reservation for the server computer so every mapping survives restarts.
- 4
Create the version-specific router rules
Map every required external UDP port to the same internal port on the reserved host. Do not target an Xbox, PlayStation, or a separate gaming PC.
- 5
Match the Windows or Linux firewall
Allow the same UDP set for the dedicated server. Add the optional TCP RCON rule only when you use it.
- 6
Test from outside the LAN
Keep the server online and ask an external player to join or find it. A TCP-only port-checking website is not a reliable UDP test.
Verify the server before blaming the router
1. Confirm the UDP listener
On Windows PowerShell, run Get-NetUDPEndpoint -LocalPort 7777 after the server starts. No result means ARK is not listening on the port you forwarded.
2. Test a LAN join
Connect to the private server address first. Failure here points to ARK startup, version, mods, or the host firewall—not the internet router.
3. Compare WAN and public IPv4
A private or 100.64.0.0/10 WAN address, or a WAN address that differs from the public IPv4, suggests Double NAT or CGNAT.
4. Use a real outside client
UDP has no TCP-style handshake for a simple web test. The useful proof is an ARK join or server-list result from another internet connection while the server is running.
Can a port-forwarding VPN host ARK?
Yes, but only when its inbound mappings fit the selected version. For ASA, one forwarded UDP port can work when you launch the server with -port=ASSIGNED_PORT. A default ASE server needs three UDP mappings, including a consecutive game/peer pair; a one-port VPN is not enough. The VPN must run on the host or route its inbound tunnel traffic to that host.
Verify the complete port set before buying
Check UDP support, selectable versus random ports, whether you can obtain consecutive ports for ASE, supported locations, port persistence, server-hosting terms, and whether RCON needs a separate TCP mapping.
PureVPNFits ASA and ASE
Its paid add-on currently supports selected, multiple ports—up to 15 specific ports on supported locations. That makes it the clearest match for ASA and for ASE's three-UDP-port requirement.
Check PureVPN port forwardingProton VPNASA only
Paid P2P servers assign one random forwarded port for TCP and UDP. It can fit a basic ASA server if you use that number with -port, but it is not a complete default ASE solution.
Check Proton VPN port forwardingRunning more than one ARK server
Every instance must have unique, non-overlapping ports. For ASE, keep each peer port directly above its game port.
| ASE instance | Game UDP | Peer UDP | Query UDP | RCON TCP, optional |
|---|---|---|---|---|
| 1 | 7777 | 7778 | 27015 | 27020 |
| 2 | 7779 | 7780 | 27016 | 27021 |
| 3 | 7781 | 7782 | 27017 | 27022 |
For multiple ASA instances, assign each server a unique UDP -port and forward that exact port. A hosting panel may allocate a different scheme; its assigned values take precedence.
Xbox, PlayStation, and Epic Games searches
The ports above belong to the dedicated server process. Do not forward them to an Xbox or PlayStation merely to join someone else's server. Console NAT and party-chat ports are separate. Epic Games clients joining an ASE dedicated server do not create a different home-router port table for the server; use the server's configured ASE ports and crossplay settings.
Why ARK ports are not opening
The server is not listening
Start the server and inspect the configured UDP port before testing from the internet.
The rule uses TCP for game traffic
Game, peer, and query rules are UDP. TCP 27020 is only optional RCON.
An ASE guide was copied into ASA
Use -port for ASA and do not assume the older QueryPort or peer-port requirements apply.
The target address changed
Reserve the server computer in DHCP and point every rule at that address.
A second router sits upstream
Forward through both routing layers or place one device in bridge/access-point mode.
The ISP uses CGNAT
A home router cannot create a mapping on the ISP gateway. Request public IPv4 or use a suitable inbound-forwarding VPN.
A port website says closed
Most simple checkers test TCP. Use an outside ARK client while the UDP server is online.
Keep the server exposure narrow
- Do not put the server computer in DMZ to avoid creating the specific rules.
- Leave RCON closed when unused; otherwise set a strong password and restrict access where possible.
- Keep the ARK server, mods, and operating system updated.
- Remove old rules when ports change or a server instance is retired.
Related diagnostics
ARK ports FAQ
What ports does an ARK server use?
ASA normally uses UDP 7777. ASE normally uses UDP 7777, UDP 7778, and UDP 27015. TCP 27020 is optional RCON, not a requirement for players.
Is ARK TCP or UDP?
Player and discovery traffic uses UDP in the default setup. TCP is used by the optional RCON management service.
Do ARK Survival Ascended and Evolved use the same ports?
No. ASA uses -port and does not use the ASE Steam query-port setting. ASE uses the game port, the next UDP peer port, and a separate Steam query port.
Do I need to open query port 27015 for ASA?
No for the current ASA server configuration. QueryPort is an ASE setting. Open 27015 only when hosting ASE or when current official documentation for your setup specifically requires it.
Should I forward ARK server ports to an Xbox or PlayStation?
Not for joining someone else's server. Forward dedicated-server ports only to a computer you actually use as the host. Console NAT issues are a separate problem.
Why are my ARK ports not opening?
Check that the selected ARK server is running, the rules use UDP, the target local IP has not changed, Windows Firewall matches, and no upstream router or CGNAT blocks inbound traffic.
Can a port-forwarding VPN host an ARK server?
ASA can fit a VPN that supplies one usable UDP port if you set -port to that number. A default ASE server needs three UDP mappings, including a consecutive pair, so choose a provider that lets you open the complete set.
Official and primary references
The ARK Official Community Wiki is the current official community reference. Where its combined setup page mixes versions, this guide follows the version support shown in server configuration and the current ASA server-list format.