Elasticsearch Proxy Security Policy With Nginx

Hello everyone,
Now, I want to set a proxy before ES by openresty + lua to provide users with a query entry,like Playing HTTP Tricks with Nginx.
I have limited some restful API,like

  • /_search API need limit the size of from,size,date range,index pattern(how much indices it matches) and the nesting depth of aggs

Are there any good restriction strategies to share?

thanks :slight_smile:

Please don't post the same topic more than once :slight_smile:

https://discuss.elastic.co/t/elasticsearch-proxy-security-policy/162617