diff --git a/CHANGELOG.md b/CHANGELOG.md
index 33090a1..947ebfd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## [10.3.1](https://github.com/terraform-aws-modules/terraform-aws-alb/compare/v10.3.0...v10.3.1) (2025-11-26)
+
+### Bug Fixes
+
+* Update port and protocol handling for GENEVE in aws_lb_listener ([#427](https://github.com/terraform-aws-modules/terraform-aws-alb/issues/427)) ([0689d64](https://github.com/terraform-aws-modules/terraform-aws-alb/commit/0689d640f7b884d8f85eb590e094af652ec8d3b2))
+
 ## [10.3.0](https://github.com/terraform-aws-modules/terraform-aws-alb/compare/v10.2.0...v10.3.0) (2025-11-21)
 
 ### Features
diff --git a/main.tf b/main.tf
index 7538187..fb7d1eb 100644
--- a/main.tf
+++ b/main.tf
@@ -273,8 +273,8 @@ resource "aws_lb_listener" "this" {
     }
   }
 
-  port                                                                  = coalesce(each.value.port, var.default_port)
-  protocol                                                              = coalesce(each.value.protocol, var.default_protocol)
+  port                                                                  = coalesce(each.value.protocol, var.default_protocol) != "GENEVE" ? coalesce(each.value.port, var.default_port) : null
+  protocol                                                              = coalesce(each.value.protocol, var.default_protocol) != "GENEVE" ? coalesce(each.value.protocol, var.default_protocol) : null
   routing_http_request_x_amzn_mtls_clientcert_header_name               = coalesce(each.value.protocol, var.default_protocol) == "HTTPS" ? each.value.routing_http_request_x_amzn_mtls_clientcert_header_name : null
   routing_http_request_x_amzn_mtls_clientcert_issuer_header_name        = coalesce(each.value.protocol, var.default_protocol) == "HTTPS" ? each.value.routing_http_request_x_amzn_mtls_clientcert_issuer_header_name : null
   routing_http_request_x_amzn_mtls_clientcert_leaf_header_name          = coalesce(each.value.protocol, var.default_protocol) == "HTTPS" ? each.value.routing_http_request_x_amzn_mtls_clientcert_leaf_header_name : null