Add L7 firewall and some tests