HTTPS macro includes UDP?

[jsabater]

Hey everyone!

Quick question: Does the HTTPS macro of the PVE Firewall include UDP traffic (to port 443) or is it still just TCP? I am on PVE 7.4-17, but if it is available in PVE 8.x I would also be interested in the answer, since I plan on migrate to it soon.

Thanks in advance.

 

[spirit]

currently, no.
you can see content of macros in /usr/share/perl5/PVE/Firewall.pm

 

[jsabater]

No worries. I'll keep the extra rule in the security group for the time being. Thanks for the reply!

P.S. I guess I am better off not hacking those rules in /usr/share/perl5/PVE/Firewall.pm, or is it just that they will be overwritten with each update?

 

[spirit]

No worries. I'll keep the extra rule in the security group for the time being. Thanks for the reply!

P.S. I guess I am better off not hacking those rules in /usr/share/perl5/PVE/Firewall.pm, or is it just that they will be overwritten with each update?

yes, don't hack them, it'll be rewrite at each pve-firewall package update.

 

[jsabater]

I agree. I opened a feature request bug report instead. Not that I could not open dozens of them, come to that, but I think this one is a must these days.