After use Shield, the ES cluster do not work

Elastic Stack Elasticsearch
1

I am using the ES 2.1.1 with Shield 2.1.1. My cluster included two node "wisesearch-node1" and "wisesearch-node2", it had worked fine until I installed Shield plugin.

After installed Shield plugin, both node1 and node2 are not success launch. the node1 will get "[wisesearch-node1] failed to send join request to master" error. And the other hand, the node2 will get "java.net.NoRouteToHostException: No route to host" error. Please look at log:

Node1's log:
[2016-04-11 17:35:05,870][INFO ][discovery.zen ] [wisesearch-node1] failed to send join request to master [{wisesearch-node2}{WSGMaGHSQEyrHZmONb8J6w}{10.47.211.106}{10.47.211.106:9300}], reason [RemoteTransportException[[wisesearch-node2][10.47.211.106:9300][internal:discovery/zen/join]]; nested: ConnectTransportException[[wisesearch-node1][10.47.211.95:9300] connect_timeout[30s]]; nested: NotSerializableExceptionWrapper[No route to host]; ]

Node2's log:
[2016-04-11 17:35:37,562][WARN ][shield.transport.netty ] [wisesearch-node2] exception caught on transport layer [[id: 0x14feb6ff]], closing connection
java.net.NoRouteToHostException: No route to host
at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
at sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:717)
at org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152)

The Node1's config:
cluster.name: wisesearch
node.name: wisesearch-node1
network.host: 0.0.0.0
discovery.zen.ping.unicast.hosts: ["10.47.211.106"]
discovery.zen.minimum_master_nodes: 2
shield.audit.enabled: true

The Node2's config:
cluster.name: wisesearch
node.name: wisesearch-node2
network.host: 0.0.0.0
discovery.zen.ping.unicast.hosts: ["10.47.211.95"]
discovery.zen.minimum_master_nodes: 2
shield.audit.enabled: true

Please help to look at this issue, thanks!

2

This is a networking issue, not an ES one.
You should check you can ping the nodes and that nodes can ping each other.

3

Hi warkolm, I confirm that the nodes can ping each other, the cluster works fine before I install Shield plugin.

4

Yes, you are right. After I disabled firewall from node1, the cluster could works right again.

Thanks for your advice!