# Deploy securely on RackSpace

**URL:** <https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063>\
**Category:** Elasticsearch\
**Created:** [December 4, 2011, 8:29pm UTC](https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063 "2011-12-04T20:29:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![MarcusLongmuir](https://avatars.discourse-cdn.com/v4/letter/m/13edae/32.png) [@MarcusLongmuir](https://discuss.elastic.co/u/MarcusLongmuir)\
**Post date:** [December 4, 2011, 8:29pm UTC](https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063/1 "2011-12-04T20:29:06Z")

</div>

I'm looking into using RackSpace Cloud Servers for my application and  
I've set up a single node successfully, but without firewall rules and  
such the node is completely public and I assume that it won't be able  
to create a cluster because of discovery settings.

Has anyone setup an ElasticSearch cluster on RackSpace successfully?

---

<div class="post-metadata">

**Author:** ![Darron\_Froese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darron_froese/32/2984_2.png) [@Darron\_Froese](https://discuss.elastic.co/u/Darron_Froese)\
**Post date:** [December 7, 2011, 3:10am UTC](https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063/2 "2011-12-07T03:10:36Z")

</div>

I'm working on a setup right now that uses firewall rules to keep  
things pretty tight - once I get the last few kinks worked out I'll  
post it here.

On Sun, Dec 4, 2011 at 1:29 PM, marcuslongmuir [marcuslongmuir@me.com](mailto:marcuslongmuir@me.com) wrote:

> I'm looking into using RackSpace Cloud Servers for my application and  
> I've set up a single node successfully, but without firewall rules and  
> such the node is completely public and I assume that it won't be able  
> to create a cluster because of discovery settings.
> 
> Has anyone setup an Elasticsearch cluster on RackSpace successfully?

---

<div class="post-metadata">

**Author:** ![Darron\_Froese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darron_froese/32/2984_2.png) [@Darron\_Froese](https://discuss.elastic.co/u/Darron_Froese)\
**Post date:** [December 14, 2011, 1:06am UTC](https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063/3 "2011-12-14T01:06:11Z")

</div>

I got this running - it's been running now for a week now.

There's really 2 things you need to do to secure it:

1. Firewall the box - make sure you don't have access to 9200 or 9300  
from everywhere - just the IPs that need it.
2. If you have a Rackspace Cloud Load Balancer, you need to also limit  
access through that.

For #1 - I did this in my chef recipe:

[http://d.pr/8Fba](http://d.pr/8Fba)

That allows each IP address in my data bag to have access to each other.

For #2 - you need to use their interface that allows you to deny all,  
then add the IPs that are required to have access.

Hopefully that helps - but it works great for us.

If somebody would like the Chef recipe that builds my boxes - I'll  
sanitize and clean them up to post.

On Tue, Dec 6, 2011 at 8:10 PM, Darron Froese [darron@nonfiction.ca](mailto:darron@nonfiction.ca) wrote:

> I'm working on a setup right now that uses firewall rules to keep  
> things pretty tight - once I get the last few kinks worked out I'll  
> post it here.
> 
> On Sun, Dec 4, 2011 at 1:29 PM, marcuslongmuir [marcuslongmuir@me.com](mailto:marcuslongmuir@me.com) wrote:
> 
> > I'm looking into using RackSpace Cloud Servers for my application and  
> > I've set up a single node successfully, but without firewall rules and  
> > such the node is completely public and I assume that it won't be able  
> > to create a cluster because of discovery settings.
> > 
> > Has anyone setup an Elasticsearch cluster on RackSpace successfully?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 3:45am UTC](https://discuss.elastic.co/t/deploy-securely-on-rackspace/6063/4 "2017-07-06T03:45:26Z")

</div>


