FiveM TCP proxy server under cloudflare (server list problem)

[Klay4]

1. The client tries to connect to the fivem server by uring the domain join.exemple.com
2. Cloudflare has a proxied CNAME record that point to an A record containing the ip of the VPS proxy
3. The proxy VPS (proxy.exemple.com) runs on it a connect (Proxy Setup - Cfx.re Docs) NGINX proxy (so only TCP traffic)
4. The proxy VPS redirects the traffic to the FiveM game dedicated server
5. The player joins the server
   Those are all the steps

In step 1, if a player tries to connect to the server by running in the F8 console https://join.exemple.com it works, the player can connect to the fivem server

But, the problem is when a player tries to connect the fivem server by using the fivem server list. It says that the server is private.

That’s my server.cfg setup:

set sv_forceIndirectListing true
set sv_listingHostOverride "join.exemple.com"
# set sv_listingIpOverride "vpsProxyIp"
set sv_proxyIPRanges "vpsProxyIp/32, 173.245.48.0/20, 103.21.244.0/22, 103.22.200.0/22, 103.31.4.0/22, 141.101.64.0/18, 108.162.192.0/18, 190.93.240.0/20, 188.114.96.0/20, 197.234.240.0/22, 198.41.128.0/17, 162.158.0.0/15, 104.16.0.0/13, 104.24.0.0/14, 172.64.0.0/13, 131.0.72.0/22"
set sv_endpoints "dedicatedGameServerIp:40103"

(All the other ips inside sv_proxyIPRanges are the cloudflare ips-v4 https://www.cloudflare.com/ips-v4)

I get this error in the fivem server console:

[nta]

@Klay4

I get this error in the fivem server console:

That’s where you need to start looking. Since you censored the address, we can’t really look for you, but some endpoint there is returning a 403.

[Klay4]

the fivem proxied address is https://fivemtest.protonhost.cloud (join.exemple.com)

[nta]

… you seem to have a WAF rule blocking requests set up on that domain, requests via cURL get ‘error code 1020’.

Since this sounds like you’re going to use this to provide hosting to others I’m going to close this topic, however.