Add all & deny all only for a particular device

Author: The-Debarghya

firewall-app/src/main/java/org/cdcju/app/AppWebResource.java

@@ -24,6 +24,7 @@
 import org.cdcju.component.*;
 
 import org.onosproject.net.Device;
+import org.onosproject.net.DeviceId;
 import org.onosproject.net.Host;
 import org.onosproject.net.HostId;
 import org.onosproject.net.device.DeviceService;
@@ -110,10 +111,14 @@ public Response addRulesByPort(
     @Path("add/all")
     @Produces(MediaType.APPLICATION_JSON)
     @Consumes(MediaType.APPLICATION_JSON)
-    public Response addUniversalRules(@QueryParam("action") String action, @QueryParam("protocol") String protocol) {
-        Iterable<Device> devices = get(DeviceService.class).getDevices();
+    public Response addUniversalRules(
+            @QueryParam("action") String action, 
+            @QueryParam("protocol") String protocol, 
+            @QueryParam("deviceId") String deviceId) {
+        // Iterable<Device> devices = get(DeviceService.class).getDevices();
+        Device device = get(DeviceService.class).getDevice(DeviceId.deviceId(deviceId));
         Action ac = action.equals("ALLOW") ? Action.ALLOW : Action.DENY;
-        boolean response = rulesList.universalRule(ac, Integer.valueOf(protocol), devices);
+        boolean response = rulesList.universalRule(ac, Integer.valueOf(protocol), device);
         if (response == true) {
             ObjectNode node = mapper().createObjectNode().put("status", "success");
             return ok(node).build(); 

firewall-comp/src/main/java/org/cdcju/component/AppComponent.java

@@ -281,6 +281,37 @@ private String buildPayload(Iterable<Device> devices, String protocol) {
         return payload;
     }
 
+    private String buildPayload(Device device, String protocol) {
+        return String.format("{\n" + //
+                "  \"flows\": [\n" + //
+                "    {\n" + //
+                "      \"priority\": 127,\n" + //
+                "      \"timeout\": 0,\n" + //
+                "      \"isPermanent\": true,\n" + //
+                "      \"deviceId\": \"%s\",\n" + //
+                "      \"treatment\": {\n" + //
+                "        \"instructions\": [\n" + //
+                "          \n" + //
+                "        ]\n" + //
+                "      },\n" + //
+                "      \"selector\": {\n" + //
+                "        \"criteria\": [\n" + //
+                "          {\n" + //
+                "            \"type\": \"ETH_TYPE\",\n" + //
+                "            \"ethType\": \"0x0800\"\n" + //
+                "          },\n" + //
+                "          {\n" + //
+                "            \"type\": \"IP_PROTO\",\n" + //
+                "            \"protocol\": %s\n" + //
+                "          }\n" + //
+                "        ]\n" + //
+                "      }\n" + //
+                "    }\n" + //
+                "  ]\n" + //
+                "}\n" + //
+                "", device.id().toString(), protocol);
+    }
+    
     public static List<FirewallRule> getAllRules() {
         log.info(rulesList.toString());
         return rulesList;
@@ -405,6 +436,73 @@ public ObjectNode addRule(String deviceId, Integer port, Integer protocol, Actio
         }
     }
 
+
+    public boolean universalRule(Action action, Integer protocol, Device device) {
+        if (action == Action.ALLOW) {
+            int i = 0;
+            for (FirewallRule firewallRule : rulesList) {
+                if (firewallRule.getProtocol() == protocol && firewallRule.getAction() == Action.DENY && firewallRule.getDeviceId() == device.id().toString()) {
+                    Client client = ClientBuilder.newClient();
+                    WebTarget target = client.target("http://localhost:8181/onos/v1");
+                    String did = firewallRule.getDeviceId();
+                    String fid = firewallRule.getRuleId().toString();
+                    String endpoint = String.format("/flows/%s/%s", did, fid);
+                    Response response = target.path(endpoint)
+                            .request(MediaType.APPLICATION_JSON)
+                            .header(HttpHeaders.AUTHORIZATION, getBasicAuthHeader())
+                            .delete();
+                    rulesList.remove(i);
+
+                    log.info(response.getStatusInfo().toString() + " " + response.getStatus());
+                }
+                i++;
+            }
+            return true;
+        } else if(action == Action.DENY){
+            int i = 0;
+            for (FirewallRule firewallRule : rulesList) {
+                if (firewallRule.getAction() == Action.ALLOW && firewallRule.getProtocol() == protocol && firewallRule.getDeviceId() == device.id().toString()) {
+                    Client client = ClientBuilder.newClient();
+                    WebTarget target = client.target("http://localhost:8181/onos/v1");
+                    String did = firewallRule.getDeviceId();
+                    String fid = firewallRule.getRuleId().toString();
+                    String endpoint = String.format("/flows/%s/%s", did, fid);
+                    Response response = target.path(endpoint)
+                            .request(MediaType.APPLICATION_JSON)
+                            .header(HttpHeaders.AUTHORIZATION, getBasicAuthHeader())
+                            .delete();
+                    response.close();
+                    rulesList.remove(i);
+                }
+                i++;
+            }
+            Client client = ClientBuilder.newClient();
+            WebTarget target = client.target("http://localhost:8181/onos/v1");
+            String payload = buildPayload(device, protocol.toString());
+            String endpoint = String.format("/flows");
+            Response response = target.path(endpoint)
+                    .queryParam("appId", "org.onosproject.core")
+                    .request(MediaType.APPLICATION_JSON)
+                    .header(HttpHeaders.AUTHORIZATION, getBasicAuthHeader())
+                    .post(Entity.json(payload), Response.class);
+            ObjectMapper objMapper = new ObjectMapper();
+            try {
+                JsonNode nodeArr = objMapper.readTree(response.readEntity(String.class)).get("flows");
+                for (final JsonNode nodeObj : nodeArr) {
+                    String flowId = nodeObj.get("flowId").asText();
+                    String deviceId = nodeObj.get("deviceId").asText();
+                    FirewallRule rule = new FirewallRule(flowId, deviceId, -1, protocol, "", "", Action.DENY);
+                    rulesList.add(rule);
+                }
+                return true;
+            } catch (Exception e) {
+                log.error(e.toString());
+                return false;
+            }
+        }
+        return false;
+    }
+
     public boolean universalRule(Action action, Integer protocol, Iterable<Device> devices) {
         if (action == Action.ALLOW) {
             int i = 0;