# Apm server configuration

**URL:** <https://discuss.elastic.co/t/apm-server-configuration/373925>\
**Category:** Elasticsearch\
**Created:** [January 31, 2025, 9:14am UTC](https://discuss.elastic.co/t/apm-server-configuration/373925 "2025-01-31T09:14:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![searchwithme](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/searchwithme/32/137075_2.png) [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Post date:** [January 31, 2025, 9:14am UTC](https://discuss.elastic.co/t/apm-server-configuration/373925/1 "2025-01-31T09:14:18Z")

</div>

Hi Team!

I understand apm server has to be private. I can place it behind a nginx load balancer. How do I ensure my apm server is secure. If I go to dev tools on my webpage, I can see the request to apm endpoint.

what is the right way to call apm endpoint and how to ensure its private?