Cluster interface

Elastic Stack Elasticsearch
1

I've setup three kvm guests with elasticsearch in a cluster. Since iptables
kills the cluster but I'd like to maintain some security I've setup the
main host with eth0 bridged so I can get to it, and eth1 on the default nat
interface. The other two hosts use eth1 on the same nat interface. The idea
is That I can (hopefully) use iptables on eth0 for the main host, and let
elasticsearch cluster on eth1 (from main) and the other two on eth0 without
iptables. Not working as I'd expect it too. Is there a for clustering on
specific interfaces?

Thanks,
Avery

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

ES needs direct access to the interface for the instance, so NAT won't work.

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: markw@campaignmonitor.com
web: www.campaignmonitor.com

On 18 July 2014 03:39, avery.rozar@insecure-it.com wrote:

I've setup three kvm guests with elasticsearch in a cluster. Since
iptables kills the cluster but I'd like to maintain some security I've
setup the main host with eth0 bridged so I can get to it, and eth1 on the
default nat interface. The other two hosts use eth1 on the same nat
interface. The idea is That I can (hopefully) use iptables on eth0 for the
main host, and let elasticsearch cluster on eth1 (from main) and the other
two on eth0 without iptables. Not working as I'd expect it too. Is there a
for clustering on specific interfaces?

Thanks,
Avery

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624bYesEhd6jyfFZYSp1vAOx1S1tG_hbg29vAQJBBJOfSyg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

3

But all three hosts have an interface on the NAT network (same layer 2).
Only one host has 2 NICs, one on the NATed network and one accessible by me.

Is there a way to force clustering on a specific interface? In my case, the
NATed network?

On Thursday, July 17, 2014 7:38:21 PM UTC-4, Mark Walkom wrote:

ES needs direct access to the interface for the instance, so NAT won't
work.

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: ma...@campaignmonitor.com <javascript:>
web: www.campaignmonitor.com

On 18 July 2014 03:39, <avery...@insecure-it.com <javascript:>> wrote:

I've setup three kvm guests with elasticsearch in a cluster. Since
iptables kills the cluster but I'd like to maintain some security I've
setup the main host with eth0 bridged so I can get to it, and eth1 on the
default nat interface. The other two hosts use eth1 on the same nat
interface. The idea is That I can (hopefully) use iptables on eth0 for the
main host, and let elasticsearch cluster on eth1 (from main) and the other
two on eth0 without iptables. Not working as I'd expect it too. Is there a
for clustering on specific interfaces?

Thanks,
Avery

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/3684c95b-23b0-4524-8716-db99e44d81b6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

Yep -

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: markw@campaignmonitor.com
web: www.campaignmonitor.com

On 18 July 2014 22:05, avery.rozar@insecure-it.com wrote:

But all three hosts have an interface on the NAT network (same layer 2).
Only one host has 2 NICs, one on the NATed network and one accessible by me.

Is there a way to force clustering on a specific interface? In my case,
the NATed network?

On Thursday, July 17, 2014 7:38:21 PM UTC-4, Mark Walkom wrote:

ES needs direct access to the interface for the instance, so NAT won't
work.

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: ma...@campaignmonitor.com
web: www.campaignmonitor.com

On 18 July 2014 03:39, avery...@insecure-it.com wrote:

I've setup three kvm guests with elasticsearch in a cluster. Since
iptables kills the cluster but I'd like to maintain some security I've
setup the main host with eth0 bridged so I can get to it, and eth1 on the
default nat interface. The other two hosts use eth1 on the same nat
interface. The idea is That I can (hopefully) use iptables on eth0 for the
main host, and let elasticsearch cluster on eth1 (from main) and the other
two on eth0 without iptables. Not working as I'd expect it too. Is there a
for clustering on specific interfaces?

Thanks,
Avery

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/3684c95b-23b0-4524-8716-db99e44d81b6%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/3684c95b-23b0-4524-8716-db99e44d81b6%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624aSTjaL_hf0QRYzsBVUjuC8FESJ%3DZjHGfYZqcWe5aOwBg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

5

Thanks!

On Friday, July 18, 2014 8:17:32 AM UTC-4, Mark Walkom wrote:

Yep -
Elasticsearch Platform — Find real-time answers at scale | Elastic

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: ma...@campaignmonitor.com <javascript:>
web: www.campaignmonitor.com

On 18 July 2014 22:05, <avery...@insecure-it.com <javascript:>> wrote:

But all three hosts have an interface on the NAT network (same layer 2).
Only one host has 2 NICs, one on the NATed network and one accessible by me.

Is there a way to force clustering on a specific interface? In my case,
the NATed network?

On Thursday, July 17, 2014 7:38:21 PM UTC-4, Mark Walkom wrote:

ES needs direct access to the interface for the instance, so NAT won't
work.

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: ma...@campaignmonitor.com
web: www.campaignmonitor.com

On 18 July 2014 03:39, avery...@insecure-it.com wrote:

I've setup three kvm guests with elasticsearch in a cluster. Since
iptables kills the cluster but I'd like to maintain some security I've
setup the main host with eth0 bridged so I can get to it, and eth1 on the
default nat interface. The other two hosts use eth1 on the same nat
interface. The idea is That I can (hopefully) use iptables on eth0 for the
main host, and let elasticsearch cluster on eth1 (from main) and the other
two on eth0 without iptables. Not working as I'd expect it too. Is there a
for clustering on specific interfaces?

Thanks,
Avery

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/b8cd8755-ff2c-4925-8af9-b3061e05365e%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/3684c95b-23b0-4524-8716-db99e44d81b6%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/3684c95b-23b0-4524-8716-db99e44d81b6%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/45c94fd8-ff2e-46a0-8eed-ef4631e6f4c6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.