diff --git a/backport-update-highest-port-number-for-ceph.patch b/backport-update-highest-port-number-for-ceph.patch
new file mode 100644
index 0000000000000000000000000000000000000000..098a7e32c817bcd80bcb5653b53d2c0f72e61053
--- /dev/null
+++ b/backport-update-highest-port-number-for-ceph.patch
@@ -0,0 +1,23 @@
+From fea78fc8f4ff373bcc9eb85c7f99d1a9b45f44af Mon Sep 17 00:00:00 2001
+From: Pierre pierre@stackhpc.com
+Date: Mon, 29 Apr 2024 20:11:55 +0800
+Subject: [PATCH] update highest port number for ceph
+
+---
+ config/services/ceph.xml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/config/services/ceph.xml b/config/services/ceph.xml
+index efed536..eb6a3f2 100644
+--- a/config/services/ceph.xml
++++ b/config/services/ceph.xml
+@@ -2,5 +2,5 @@
+ <service>
+   <short>ceph</short>
+   <description>Ceph is a distributed object store and file system. Enable this option to support Ceph's Object Storage Daemons (OSD), Metadata Server Daemons (MDS), or Manager Daemons (MGR).</description>
+-  <port protocol="tcp" port="6800-7300"/>
++  <port protocol="tcp" port="6800-7568"/>
+ </service>
+-- 
+2.27.0
+
diff --git a/firewalld.spec b/firewalld.spec
index d8376a16775f525aa64743e6eb8e7d3e7c41e461..b0bc3e6956acc87a503f9ee011810a9fcbf49f5e 100644
--- a/firewalld.spec
+++ b/firewalld.spec
@@ -1,6 +1,6 @@
 Name:      firewalld
 Version:   1.0.2
-Release:   7
+Release:   8
 Summary:   A firewall daemon with D-Bus interface providing a dynamic firewall
 License:   GPLv2+
 URL:       http://www.firewalld.org
@@ -19,6 +19,7 @@ Patch8:    0001-fix-config-Specify-the-translation-encoding-format-a.patch
 
 Patch9:    backport-chore-nftables-add-delete-table-helper.patch
 Patch10:   backport-fix-nftables-always-flush-main-table-on-start.patch
+Patch11:   backport-update-highest-port-number-for-ceph.patch 
 
 BuildArch:     noarch
 BuildRequires: autoconf automake desktop-file-utils gettext intltool glib2 glib2-devel systemd-units docbook-style-xsl
@@ -241,6 +242,12 @@ sed -i "s/CleanupModulesOnExit=no/CleanupModulesOnExit=yes/g" %{_sysconfdir}/fir
 %{_datadir}/firewalld/testsuite/python/firewalld_test.py
 
 %changelog
+* Thu May 09 2024 baiguo <baiguo@kylinos.cn> - 1.0.2-8
+- Type:requirement
+- ID:NA
+- SUG:NA
+- DESC:update highest port number for ceph
+
 * Tue Nov 28 2023 zhanghao <zhanghao383@huawei.com> - 1.0.2-7
 - Type:requirement
 - ID:NA