gRPC: firewall

The distributed firewall (docs/network/DFW-HOSTBRIDGE.md §6.1), one to one with the REST API below /v1/firewall and /v1/vms/{id}/firewall: the same checks and privileges, bodies as JSON in the schemas of the REST API (docs/api/openapi.yaml, tag firewall).

`FirewallService`

The distributed firewall: groups, services, policies and rules, profiles, settings, realization, logs and the firewall of virtual machines. Bodies are JSON in the schemas of the REST API.

Method	Request	Response	Description
`ListGroups`	`FirewallRequest`	`JsonBody`	GroupView[] of `tenant`.
`CreateGroup`	`FirewallRequest`	`JsonBody`	GroupBody -> GroupView.
`GetGroup`	`FirewallRequest`	`JsonBody`	GroupView of group `id`.
`UpdateGroup`	`FirewallRequest`	`JsonBody`	GroupBody for group `id` -> GroupView.
`DeleteGroup`	`FirewallRequest`	`JsonBody`	JSON {"fwVersion": n}.
`GroupMembers`	`FirewallRequest`	`JsonBody`	GroupMembersView.
`ListServices`	`FirewallRequest`	`JsonBody`	ServiceView[] of `tenant`.
`CreateService`	`FirewallRequest`	`JsonBody`	ServiceBody -> ServiceView.
`GetService`	`FirewallRequest`	`JsonBody`	ServiceView of service `id`.
`UpdateService`	`FirewallRequest`	`JsonBody`	ServiceBody for service `id` -> ServiceView.
`DeleteService`	`FirewallRequest`	`JsonBody`	Deletes service `id` -> JSON {"fwVersion": n}.
`ListPolicies`	`FirewallRequest`	`JsonBody`	PolicyView[] of `tenant`.
`CreatePolicy`	`FirewallRequest`	`JsonBody`	PolicyBody -> PolicyView.
`GetPolicy`	`FirewallRequest`	`JsonBody`	PolicyView of policy `id`.
`UpdatePolicy`	`FirewallRequest`	`JsonBody`	PolicyBody for policy `id` -> PolicyView.
`DeletePolicy`	`FirewallRequest`	`JsonBody`	Deletes policy `id` -> JSON {"fwVersion": n}.
`ListRules`	`FirewallRequest`	`JsonBody`	Rules of policy `id`; `sub_id` is the rule id or number.
`AddRule`	`FirewallRequest`	`JsonBody`	RuleBody for policy `id` -> RuleView (at `position`, else last).
`GetRule`	`FirewallRequest`	`JsonBody`	RuleView of rule `sub_id` of policy `id`.
`UpdateRule`	`FirewallRequest`	`JsonBody`	RuleBody for rule `sub_id` of policy `id` -> RuleView.
`DeleteRule`	`FirewallRequest`	`JsonBody`	Deletes rule `sub_id` of policy `id` -> JSON {"fwVersion": n}.
`MoveRule`	`FirewallRequest`	`JsonBody`	MoveRuleBody -> RuleView.
`PolicyStats`	`FirewallRequest`	`JsonBody`	PolicyStatsView of policy `id`.
`RuleStats`	`FirewallRequest`	`JsonBody`	RuleStatsView of rule number `id`.
`ListProfiles`	`FirewallRequest`	`JsonBody`	ProfileView[]: the built-in and the provider profiles.
`GetProfile`	`FirewallRequest`	`JsonBody`	ProfileView of profile `id`.
`PutProfile`	`FirewallRequest`	`JsonBody`	ProfileBody; `id` empty creates a profile, a built-in name replaces the built-in.
`DeleteProfile`	`FirewallRequest`	`JsonBody`	Deletes profile `id` (not a built-in one).
`GetSettings`	`FirewallRequest`	`JsonBody`	SettingsView of the provider.
`PutSettings`	`FirewallRequest`	`JsonBody`	SettingsView -> SettingsView.
`ListTagCategories`	`FirewallRequest`	`JsonBody`	TagCategoryView[]: the tag categories groups can select on.
`SetTagCategory`	`FirewallRequest`	`JsonBody`	Tag category `id` as JSON -> TagCategoryView.
`Realization`	`FirewallRequest`	`JsonBody`	HostRealizationView[] (`id`: one host).
`Simulate`	`FirewallRequest`	`JsonBody`	SimulateBody -> SimulateView.
`Logs`	`FirewallRequest`	`JsonBody`	LogRecordView[] (`id`: host, `number`: rule, `limit`).
`VmFirewall`	`FirewallRequest`	`JsonBody`	VnicFirewallView[] of VM `id` (`sub_id`: one NIC key).
`VmLogs`	`FirewallRequest`	`JsonBody`	LogRecordView[] of VM `id`.
`SetNicProfile`	`FirewallRequest`	`JsonBody`	NicProfileBody for NIC `sub_id` of VM `id` -> VnicFirewallView.
`ListTemplates`	`FirewallRequest`	`JsonBody`	TemplateView[].
`GetTemplate`	`FirewallRequest`	`JsonBody`	TemplateView of template `id`.
`PutTemplate`	`FirewallRequest`	`JsonBody`	TemplateBody for provider template `id` (created or replaced) -> TemplateView.
`DeleteTemplate`	`FirewallRequest`	`JsonBody`	Deletes provider template `id` -> `{"version"}`.
`ApplyTemplate`	`FirewallRequest`	`JsonBody`	Template `id`, ApplyTemplateBody -> TaskRef JSON.
`OpenPort`	`FirewallRequest`	`JsonBody`	OpenPortBody for VM `id` -> RuleView.
`SetMode`	`FirewallRequest`	`JsonBody`	ModeBody for VM `id` -> TaskRef JSON.
`ConfirmMode`	`FirewallRequest`	`JsonBody`	VnicFirewallView[] of VM `id`.
`MonitorReport`	`FirewallRequest`	`JsonBody`	MonitorReportView of VM `id`.
`ListBypasses`	`FirewallRequest`	`JsonBody`	BypassView[].
`EnableBypass`	`FirewallRequest`	`JsonBody`	BypassBody -> TaskRef JSON.
`RemoveBypass`	`FirewallRequest`	`JsonBody`	Ends bypass `id` -> {}.

Messages

`FirewallRequest`

One request shape for every call.

Field	Number	Type	Description
`id`	1	`string`	Object id (group, service, policy, profile, tag category, VM, host or rule number).
`sub_id`	2	`string`	Second id (rule id or number, NIC key).
`tenant`	3	`string`	Tenant of a list or of a new object (empty: the provider; a tenant user: its own).
`json`	4	`string`	Body as JSON (REST schema).
`if_match`	5	`uint64`	Expected record version (If-Match); 0: none.
`wait_realized`	6	`bool`	Wait until the hosts concerned applied the change.
`timeout_seconds`	7	`uint32`	Longest wait in seconds (default 30, at most 300).
`position`	8	optional `uint32`	Position of a new rule (AddRule; absent: last).
`number`	9	optional `uint32`	Rule number filter (Logs).
`limit`	10	`uint32`	Most records (Logs, VmLogs).