Block put/delete-http-requests


(hpeterling) #1

Hi,

as I have read, there is no authentification in ES. I'm not happy with this, but as I will use it only to search a couchdb databse I need also only the http GET Feature. For seraching the DB, in my usecase the user don't need to authentificate himself, so is there possibility to block in ES all other requests than the PUT one, to protect against attacs? I know about a proxy but for an easy setup it is too complicate for me. Also as I am wiriting an desktop-Application I would like to bind ES on the public IP-Adresse ...

Thank you ...


(system) #2