The endpoint host is your server's public IPv4 address. ProofKit puts it into users' connection links.
Requirements
- A public IPv4 address: no domain names, no IPv6, no private ranges (10.x, 172.16–31.x, 192.168.x, 127.x).
- One node per address. An address another operator already uses is refused.
- It must not change. The address can't be edited after registration; a server with a new address is a new node.
- Reachable from the internet on the ports your node uses: TCP 443 always; on an origin, UDP 443 for Hysteria2 and TCP 8444 for XHTTP when they are on; on an edge, one UDP port in 30000–39999 (Hysteria2) and one TCP port in 40000–49999 (XHTTP) per link; and between linked nodes, UDP 51820 for WireGuard, or UDP 500 and 4500 plus the ESP and GRE protocols for GRE+IPsec. Open them in your hosting provider's firewall too.
Finding your IP
curl -4 ifconfig.me
Cloud providers
- Hetzner, DigitalOcean, Vultr: the IPv4 address in the control panel.
- AWS, GCP: the Elastic IP or static external IP, not the internal one.
- Behind NAT, or no public IPv4: not supported.
With Cloudflare WARP on, this is still the address users connect to; only outgoing TCP traffic leaves through Cloudflare.