# After use Shield, the ES cluster do not work **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [April 12, 2016, 2:03am UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061 "2016-04-12T02:03:19Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![chtj2k001](https://avatars.discourse-cdn.com/v4/letter/c/bc79bd/32.png) [@chtj2k001](https://discuss.elastic.co/u/chtj2k001)\ **Post date:** [April 12, 2016, 2:03am UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061/1 "2016-04-12T02:03:19Z")
I am using the ES 2.1.1 with Shield 2.1.1. My cluster included two node "wisesearch-node1" and "wisesearch-node2", it had worked fine until I installed Shield plugin. After installed Shield plugin, both node1 and node2 are not success launch. the node1 will get "[wisesearch-node1] failed to send join request to master" error. And the other hand, the node2 will get "java.net.NoRouteToHostException: No route to host" error. Please look at log: Node1's log: [2016-04-11 17:35:05,870][INFO][discovery.zen] [wisesearch-node1] failed to send join request to master [{wisesearch-node2}{WSGMaGHSQEyrHZmONb8J6w}{10.47.211.106}{10.47.211.106:9300}], reason [RemoteTransportException[[wisesearch-node2][10.47.211.106:9300][internal:discovery/zen/join]]; nested: ConnectTransportException[[wisesearch-node1][10.47.211.95:9300] connect\_timeout[30s]]; nested: NotSerializableExceptionWrapper[No route to host]; ] Node2's log: [2016-04-11 17:35:37,562][WARN][shield.transport.netty] [wisesearch-node2] exception caught on transport layer [[id: 0x14feb6ff]], closing connection java.net.NoRouteToHostException: No route to host at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) at sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:717) at org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152) The Node1's config: [cluster.name](http://cluster.name): wisesearch [node.name](http://node.name): wisesearch-node1 network.host: 0.0.0.0 discovery.zen.ping.unicast.hosts: ["10.47.211.106"] discovery.zen.minimum\_master\_nodes: 2 shield.audit.enabled: true The Node2's config: [cluster.name](http://cluster.name): wisesearch [node.name](http://node.name): wisesearch-node2 network.host: 0.0.0.0 discovery.zen.ping.unicast.hosts: ["10.47.211.95"] discovery.zen.minimum\_master\_nodes: 2 shield.audit.enabled: true Please help to look at this issue, thanks! ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 12, 2016, 2:05am UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061/2 "2016-04-12T02:05:14Z")
> [@chtj2k001](#): > > No route to host This is a networking issue, not an ES one. You should check you can ping the nodes and that nodes can ping each other. ---
**Author:** ![chtj2k001](https://avatars.discourse-cdn.com/v4/letter/c/bc79bd/32.png) [@chtj2k001](https://discuss.elastic.co/u/chtj2k001)\ **Post date:** [April 12, 2016, 2:09am UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061/3 "2016-04-12T02:09:33Z")
Hi warkolm, I confirm that the nodes can ping each other, the cluster works fine before I install Shield plugin. ---
**Author:** ![chtj2k001](https://avatars.discourse-cdn.com/v4/letter/c/bc79bd/32.png) [@chtj2k001](https://discuss.elastic.co/u/chtj2k001)\ **Post date:** [April 12, 2016, 2:36am UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061/4 "2016-04-12T02:36:41Z")
Yes, you are right. After I disabled firewall from node1, the cluster could works right again. Thanks for your advice! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/after-use-shield-the-es-cluster-do-not-work/47061/5 "2017-07-06T13:45:27Z")