joyent-portal/packages/my-joy-instances/src/graphql/list-instance-fw-rules.gql

query instance($id: ID!) {
  machine(id: $id) {
    id
    name
    firewall_enabled
    firewall_rules {
      id
      enabled
      rule_str
      rule_obj
      global
      description
    }
  }
}