Develop snort IDS and content inspect service

- Initial commit to show potential structure of a sample service
- This wil be part of a larger sample application currently dubbed
Service Delivery Controller
- Docker container needs to be built and employs open-source Linux packages
- Service is deployable in Istio service mesh using provided yaml
- Control snort daemon and add custom rules with GRPC messaging
- Process snort alerts actively and send to redis and upstream service
mesh components
- Integrates a web server for better HTTP signature detection

- Improved build script for CI with variables
- Render k8s yaml snort manifest dynamically with command
line options
- Improve snort_client sample script for runtime modifications
including passing args on CLI, error checking
- Update nginx proxy interface
- Added logging to snort server and alert process

Change-Id: Ic56f9fcd9ed21f64b84b85ac8ee280d69af7b7c9
Signed-off-by: Eddie Arrage <eddie.arrage@huawei.com>

1 files changed, 36 insertions, 0 deletions

diff --git a/samples/services/snort_ids/docker/grpc/snort.proto b/samples/services/snort_ids/docker/grpc/snort.proto
new file mode 100644
index 0000000..8d69baa
--- /dev/null
+++ b/samples/services/snort_ids/docker/grpc/snort.proto
@@ -0,0 +1,36 @@
+// Copyright (c) Authors of Clover
+//
+// All rights reserved. This program and the accompanying materials
+// are made available under the terms of the Apache License, Version 2.0
+// which accompanies this distribution, and is available at
+// http://www.apache.org/licenses/LICENSE-2.0
+
+
+syntax = "proto3";
+package snort;
+
+service Controller {
+
+  rpc AddRules (AddRule) returns (SnortReply) {}
+  rpc StartSnort (ControlSnort) returns (SnortReply) {}
+  rpc StopSnort (ControlSnort) returns (SnortReply) {}
+}
+
+message ControlSnort {
+  string pid = 1;
+}
+
+message AddRule {
+  string protocol = 1;
+  string dest_port = 2;
+  string dest_ip = 3;
+  string src_port = 4;
+  string src_ip = 5;
+  string msg = 6;
+  string sid = 7;
+  string rev = 8;
+}
+
+message SnortReply {
+  string message = 1;
+}