# Elasticsearch Proxy Security Policy With Nginx **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [January 2, 2019, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-proxy-security-policy-with-nginx/162623 "2019-01-02T09:43:33Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Todd](https://avatars.discourse-cdn.com/v4/letter/t/fbc32d/32.png) [@Todd](https://discuss.elastic.co/u/Todd)\ **Post date:** [January 2, 2019, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-proxy-security-policy-with-nginx/162623/1 "2019-01-02T09:43:33Z")
Hello everyone， Now, I want to set a proxy before ES by `openresty + lua` to provide users with a query entry,like [Playing HTTP Tricks with Nginx](https://www.elastic.co/blog/playing-http-tricks-nginx). I have limited some restful API,like - `/_search` API need limit the size of `from,size,date range,index pattern(how much indices it matches)` and the nesting depth of `aggs` Are there any good restriction strategies to share? thanks 🙂 ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 2, 2019, 8:00pm UTC](https://discuss.elastic.co/t/elasticsearch-proxy-security-policy-with-nginx/162623/2 "2019-01-02T20:00:14Z")
Please don't post the same topic more than once 🙂 [https://discuss.elastic.co/t/elasticsearch-proxy-security-policy/162617](https://discuss.elastic.co/t/elasticsearch-proxy-security-policy/162617) ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 2, 2019, 8:00pm UTC](https://discuss.elastic.co/t/elasticsearch-proxy-security-policy-with-nginx/162623/3 "2019-01-02T20:00:18Z")