# Docker network encryption vs security encryption?

**URL:** <https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [May 22, 2019, 8:58am UTC](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179 "2019-05-22T08:58:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![asp](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@asp](https://discuss.elastic.co/u/asp)\
**Post date:** [May 22, 2019, 8:58am UTC](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179/1 "2019-05-22T08:58:32Z")

</div>

Hi,

We will run elasticsearch, logstash, redis and kibana in a docker environment. I have been asked about encryption between all components because the log data is sensitive.

For external filebeat communication I placed stunnel in front of redis, so filebeat is able to ship TLS encrypted. In front of kibana I placed an httpd reverse proxy which adds the TLS layer.

What is best practice in docker environment? Encrypt the whole docker network (components mentioned above are in the same docker network) or to use encryption of security module which became free with 7.1.0?

- What gives more security? IPCSEC or TLS of security module?
- What should perform faster / needs less resources?

Thanks, Andreas

---

<div class="post-metadata">

**Author:** ![joshbressers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshbressers/32/42332_2.png) [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Post date:** [May 23, 2019, 12:49pm UTC](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179/2 "2019-05-23T12:49:53Z")

</div>

I would strongly suggest you use the TLS included with 7.1.

If you try to stand up your own security using proxies there are a number of things that can go wrong and getting help can be extremely difficult as your setup will be one of a kind.

Using the TLS included in the stack you can come back here for help.

Good luck!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 20, 2019, 12:50pm UTC](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179/3 "2019-06-20T12:50:00Z")

</div>

Closed on June 20, 2019, 12:50pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.