# Configure HTTP-server elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [December 28, 2020, 11:02am UTC](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723 "2020-12-28T11:02:24Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\ **Post date:** [December 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723/2 "2020-12-28T13:02:03Z")
> [@wmr84](#): > > Tell me if it is possible to configure the elasticsearch server so that the server responds only to http requests with the correct HOST header. No, it isn't, and please read this post before going any further in the direction you're heading: > [@Is it safe to expose Elasticsearch to the Internet?](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/247041): > > TLDR - Elasticsearch is not designed to be exposed to the internet. To dig into this with more detail, here's more information taken from [this topic](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/246862/5). [This page](https://www.elastic.co/guide/en/elasticsearch/reference/current/ip-filtering.html#ip-filtering) in the docs says: NOTE: Elasticsearch installations are not designed to be publicly accessible over the Internet. IP Filtering and the other capabilities of the Elasticsearch security features do not change this condition. There's also [this page](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-scripting-security.html#_do_not_expose_elasticsearch_directly_to_the_internet) which says: Do not expose Elasticsearch to the Internet, instead have an application m… --- _[View the full topic](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723)._