It looks like the tunneler still adds by default udp and tcp rules for the same port even though the service is configured as TCP. According to the source code, this is no longer hardcoded as it was v0.5 and it is passed as a variable. Am I reading this correctly?
...
interceptAddr, err := intercept.NewInterceptAddress(service, port.GetProtocol(), resolver)
...
"-p", interceptAddr.Proto(),
...