# Encrypted Java Protocol

**URL:** <https://discuss.elastic.co/t/encrypted-java-protocol/5657>\
**Category:** Elasticsearch\
**Created:** [October 21, 2011, 12:40pm UTC](https://discuss.elastic.co/t/encrypted-java-protocol/5657 "2011-10-21T12:40:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![davrob](https://avatars.discourse-cdn.com/v4/letter/d/d78d45/32.png) [@davrob](https://discuss.elastic.co/u/davrob)\
**Post date:** [October 21, 2011, 12:40pm UTC](https://discuss.elastic.co/t/encrypted-java-protocol/5657/1 "2011-10-21T12:40:41Z")

</div>

Hi,

My company compliance unit is asking whether ElasticSearch's java  
communication protocol is secure, by which they mean encrypted.

I'm assuming that it isn't. Is there any way I can plugin some kind  
of encryption into the protocol on clients and servers?

Best Regards,

David.

---

<div class="post-metadata">

**Author:** ![kimchy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kimchy/32/44952_2.png) [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Post date:** [October 21, 2011, 7:38pm UTC](https://discuss.elastic.co/t/encrypted-java-protocol/5657/2 "2011-10-21T19:38:21Z")

</div>

You mean SSL? Its not there, though should not be too difficult to add if  
really needed, though it does slow things down...

On Fri, Oct 21, 2011 at 2:40 PM, davrob2 [daviroberts@gmail.com](mailto:daviroberts@gmail.com) wrote:

> Hi,
> 
> My company compliance unit is asking whether Elasticsearch's java  
> communication protocol is secure, by which they mean encrypted.
> 
> I'm assuming that it isn't. Is there any way I can plugin some kind  
> of encryption into the protocol on clients and servers?
> 
> Best Regards,
> 
> David.

---

<div class="post-metadata">

**Author:** ![Bowen\_Masco](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bowen_masco/32/3096_2.png) [@Bowen\_Masco](https://discuss.elastic.co/u/Bowen_Masco)\
**Post date:** [October 21, 2011, 9:44pm UTC](https://discuss.elastic.co/t/encrypted-java-protocol/5657/3 "2011-10-21T21:44:05Z")

</div>

An approach I have used is to communicate over an ssh tunnel, a vpn  
setup could work as well.

If you are looking to encrypt a search from say a website, you can  
setup an ssl proxy, to protect the channel from the client to the ES  
cluster.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 3:51am UTC](https://discuss.elastic.co/t/encrypted-java-protocol/5657/4 "2017-07-06T03:51:10Z")

</div>