# Basic Authentication of ES without X-Pack

**URL:** <https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840>\
**Category:** Elasticsearch\
**Created:** [July 27, 2017, 4:34pm UTC](https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840 "2017-07-27T16:34:00Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Dan\_Markhasin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dan_markhasin/32/14187_2.png) [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Post date:** [July 28, 2017, 3:20pm UTC](https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840/5 "2017-07-28T15:20:54Z")

</div>

Using NGINX as a reverse proxy is a common practice for securing ElasticSearch with basic authentication, though it is difficult to achieve higher granularity than that (while you can construct a configuration that would limit access to specific URL patterns with specific HTTP methods to specific groups, it's not scalable and hard to maintain).

---

_[View the full topic](https://discuss.elastic.co/t/basic-authentication-of-es-without-x-pack/94840)._