Rust Server Admin Commands and RCON Guide

Prepare RCON without exposing it

Stop the server and back up the folder selected by server.identity, especially cfg/, player files and the .sav world. Essential RCON settings belong on the startup command:

+rcon.port 28016 +rcon.password "A_LONG_UNIQUE_PASSPHRASE" +rcon.web 1

Facepunch recommends rcon.web 1. RCON uses TCP, while the game and query ports use UDP. Do not reuse the player password, publish the endpoint in a public dashboard, or share one account when your tool can identify operators. A provider panel may already proxy its console through RCON, so check before opening another endpoint.

Assign owner and moderator roles

Use the player's SteamID64, not a display name. From the server console or RCON:

ownerid STEAMID64 "Name" "owner"
moderatorid STEAMID64 "Name" "moderator"
server.writecfg

ownerid grants the highest level and should be reserved for people who manage the service. moderatorid suits daily moderation. server.writecfg persists the lists. The player should reconnect before testing the new level.

To revoke a role, run removeowner STEAMID64 or removemoderator STEAMID64, followed by server.writecfg. Confirm with users and reconnect the test account.

Useful day-to-day Rust commands

Before maintenance, announce the time, stop making admin changes, run server.save, inspect the log and then stop the process cleanly. A forced shutdown immediately after the command may interrupt the write.

Validate and troubleshoot RCON

1. Start the server and wait for Server startup complete.
2. In a WebRCON-compatible client, enter the public address, TCP port and exact password.
3. Run a read-only command such as serverinfo, then a test announcement.
4. Read the server log. A refusal usually means the TCP port is closed, the bind address is wrong, or the active startup script has a different secret.
5. If the server browser works but RCON does not, leave the game port alone: these are separate services.

After repeated failure, inspect the startup line actually executed by the panel. A value saved in a form may be overridden by a startup variable. After rotating the password, restart and revoke the previous secret from every tool and automation.

Frequently asked questions