Skip to content

Conversation

@mauriciodulce
Copy link

This update enhances the UFW configuration by allowing UDP traffic on port 443, enabling HTTP/3 (QUIC) support.
It complements existing HTTP (TCP/80) and HTTPS (TCP/443) rules, improving performance and compatibility with modern browsers and clients.

@jaydrogers
Copy link
Member

Thanks! I will definitely take a look into this.

I appreciate you contributing to this.

FWIW, I use ufw to open the ports for web traffic just to be safe, but Docker ignores ufw since Docker accesses iptables directly anyways.

This is still good to be added by default.

It looks like the linter is failing, but I will take a look into it if you don't fix it first. Thanks again for your help 👍

@mauriciodulce
Copy link
Author

Thanks for the feedback! Glad to hear this addition is useful.

I’ve added the corresponding firewall rules for the providers and updated the UFW task to cover TCP/UDP for HTTP/HTTPS.

Also, for Traefik, the ports need to be exposed like this to support HTTP/3:

services:
  traefik:
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: udp
        mode: host

Thanks again for reviewing!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants