2025-08-08
DNS & Routing: From Traefik UDP to Cloudflare SRV
DNSCloudflareNetworking

We tested Traefik for TCP/UDP routing to map subdomain → container
. While TCP (Java) was fine, UDP (Bedrock) proved fragile and added operational complexity.
What we tried
- Traefik entrypoints for
:25565/tcp
and:19132/udp
- Docker labels for dynamic routers/services per container
- OVH firewall rules to allow UDP 19132+
What we shipped
- Per-server A record → node IP
- Per-server SRV record → service
_minecraft._tcp
(Java) or_minecraft._udp
(Bedrock) with the correct host port
Why SRV won
- Simpler mental model: domain points directly to the node + port
- Less moving parts; easier debugging; works great with multiple nodes
Gotchas
- Cloudflare: SRV targets must be hostname (we create matching A)
- Do not proxy Minecraft over Cloudflare; keep records unproxied