With your model U1 will have a can_access relation...
# spicedb
j
> With your model U1 will have a can_access relation to Port30, thus allowing it to access Port30 on any host