Encrypted Java Protocol


(davrob) #1

Hi,

My company compliance unit is asking whether ElasticSearch's java
communication protocol is secure, by which they mean encrypted.

I'm assuming that it isn't. Is there any way I can plugin some kind
of encryption into the protocol on clients and servers?

Best Regards,

David.


(Shay Banon) #2

You mean SSL? Its not there, though should not be too difficult to add if
really needed, though it does slow things down...

On Fri, Oct 21, 2011 at 2:40 PM, davrob2 daviroberts@gmail.com wrote:

Hi,

My company compliance unit is asking whether ElasticSearch's java
communication protocol is secure, by which they mean encrypted.

I'm assuming that it isn't. Is there any way I can plugin some kind
of encryption into the protocol on clients and servers?

Best Regards,

David.


(Bowen Masco) #3

An approach I have used is to communicate over an ssh tunnel, a vpn
setup could work as well.

If you are looking to encrypt a search from say a website, you can
setup an ssl proxy, to protect the channel from the client to the ES
cluster.


(system) #4