Fix: Solve issue on an incorrect nftable rule for a different protocol from TCP.

nesitor · nesitor · commit 0931b32545fd · 2025-11-17T11:04:39.000+01:00
diff --git a/src/aleph/vm/network/firewall.py b/src/aleph/vm/network/firewall.py
@@ -647,7 +647,7 @@ def add_port_redirect_rule(
                         {
                             "match": {
                                 "op": "==",
-                                "left": {"payload": {"protocol": "tcp", "field": "dport"}},
+                                "left": {"payload": {"protocol": protocol, "field": "dport"}},
                                 "right": vm_port,
                             }
                         },

Original file line number	Diff line number	Diff line change
`@@ -647,7 +647,7 @@ def add_port_redirect_rule(`
`647`	`647`	`{`
`648`	`648`	`"match": {`
`649`	`649`	`"op": "==",`
`650`		`- "left": {"payload": {"protocol": "tcp", "field": "dport"}},`
	`650`	`+ "left": {"payload": {"protocol": protocol, "field": "dport"}},`
`651`	`651`	`"right": vm_port,`
`652`	`652`	`}`
`653`	`653`	`},`