实现WAF部分功能

This commit is contained in:
GoEdgeLab
2020-10-07 11:18:24 +08:00
parent 608777480d
commit 0b50f7beec
7 changed files with 1218 additions and 165 deletions

View File

@@ -16,6 +16,9 @@ service HTTPFirewallPolicyService {
// 修改防火墙策略
rpc updateHTTPFirewallPolicy (UpdateHTTPFirewallPolicyRequest) returns (RPCUpdateSuccess);
// 修改分组信息
rpc updateHTTPFirewallPolicyGroups (UpdateHTTPFirewallPolicyGroupsRequest) returns (RPCUpdateSuccess);
// 计算可用的防火墙策略数量
rpc countAllEnabledFirewallPolicies (CountAllEnabledFirewallPoliciesRequest) returns (CountAllEnabledFirewallPoliciesResponse);
@@ -62,6 +65,13 @@ message UpdateHTTPFirewallPolicyRequest {
repeated string firewallGroupCodes = 5;
}
// 修改分组信息
message UpdateHTTPFirewallPolicyGroupsRequest {
int64 firewallPolicyId = 1;
bytes inboundJSON = 2;
bytes outboundJSON = 3;
}
// 计算可用的防火墙策略数量
message CountAllEnabledFirewallPoliciesRequest {
}

View File

@@ -0,0 +1,54 @@
syntax = "proto3";
option go_package = "./pb";
package pb;
import "rpc_messages.proto";
service HTTPFirewallRuleGroupService {
// 设置是否启用分组
rpc updateHTTPFirewallRuleGroupIsOn (UpdateHTTPFirewallRuleGroupIsOnRequest) returns (RPCUpdateSuccess);
// 创建分组
rpc createHTTPFirewallRuleGroup (CreateHTTPFirewallRuleGroupRequest) returns (CreateHTTPFirewallRuleGroupResponse);
// 修改分组
rpc updateHTTPFirewallRuleGroup (UpdateHTTPFirewallRuleGroupRequest) returns (RPCUpdateSuccess);
// 获取分组配置
rpc findHTTPFirewallRuleGroupConfig (FindHTTPFirewallRuleGroupConfigRequest) returns (FindHTTPFirewallRuleGroupConfigResponse);
}
// 设置是否启用分组
message UpdateHTTPFirewallRuleGroupIsOnRequest {
int64 firewallRuleGroupId = 1;
bool isOn = 2;
}
// 创建分组
message CreateHTTPFirewallRuleGroupRequest {
bool isOn = 1;
string name = 2;
string description = 3;
}
message CreateHTTPFirewallRuleGroupResponse {
int64 firewallRuleGroupId = 1;
}
// 修改分组
message UpdateHTTPFirewallRuleGroupRequest {
int64 firewallRuleGroupId = 1;
bool isOn = 2;
string name = 3;
string description = 4;
}
// 获取分组配置
message FindHTTPFirewallRuleGroupConfigRequest {
int64 firewallRuleGroupId = 1;
}
message FindHTTPFirewallRuleGroupConfigResponse {
bytes firewallRuleGroupJSON = 1;
}