add firewall proto

Author: wojcik91

enterprise/firewall.proto

@@ -0,0 +1,68 @@
+syntax = "proto3";
+package firewall;
+
+// Describes target configuration of the firewall
+message FirewallConfig {
+  FirewallPolicy default_policy = 1;
+  repeated FirewallRule rules = 2;
+}
+
+enum FirewallPolicy {
+  ALLOW = 0;
+  DENY = 1;
+}
+
+message FirewallRule {
+  IpVersion ip_version = 1;
+  optional uint32 index = 2;
+  repeated IpAddress source_addr = 3;
+  repeated IpAddress destination_addr = 4;
+  repeated Port destination_port = 5;
+  repeated Protocol protocol = 6;
+  FirewallPolicy verdict = 7;
+  optional string comment = 8;
+}
+
+enum IpVersion {
+  IPV4 = 0;
+  IPV6 = 1;
+}
+
+// IPv4 or IPv6 address
+// expected type is determined by a given FirewallRule
+message IpAddress {
+  oneof address {
+    // single IP address
+    string ip = 1;
+    // range of IPs, e.g. 10.0.10.1-10.0.20.3
+    IpRange ip_range = 2;
+    // IP subnet using CIDR notation, e.g. 10.0.10.0/24
+    string ip_subnet = 3;
+  }
+}
+
+// inclusive IP range
+message IpRange {
+  string start = 1;
+  string end = 2;
+}
+
+// wrapper message since `oneof` itself cannot be repeated
+message Port {
+  oneof port {
+    uint32 single_port = 1;
+    PortRange port_range = 2;
+  }
+}
+
+// inclusive port range
+message PortRange {
+  uint32 start = 1;
+  uint32 end = 2;
+}
+
+enum Protocol {
+  TCP = 0;
+  UDP = 1;
+  ICMP = 2;
+}