# Encrypting Elasticsearch Data in Transit and at Rest

**URL:** <https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039>\
**Category:** Elasticsearch\
**Created:** [March 13, 2019, 12:17am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039 "2019-03-13T00:17:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shatabdi](https://avatars.discourse-cdn.com/v4/letter/s/71c47a/32.png) [@shatabdi](https://discuss.elastic.co/u/shatabdi)\
**Post date:** [March 13, 2019, 12:17am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039/1 "2019-03-13T00:17:01Z")

</div>

Is there a node to node and client to ES in-transit data encryption available for elasticsearch . We are using AWS ec2 IaaS for our elasticsearch instance . The version that we are using is 5.6 but we plan to upgrade it to the latest version of elasticsearch. We are using transport protocol for connecting to Elasticsearch from a Java application

---

<div class="post-metadata">

**Author:** ![askids](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/askids/32/22252_2.png) [@askids](https://discuss.elastic.co/u/askids)\
**Post date:** [March 13, 2019, 1:41am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039/2 "2019-03-13T01:41:11Z")

</div>

If you are using x-pack security, answer is yes. If you are using FOSS version and dont want to pay for x-pack subscription, then you will need to explore the 3rd party security plugins like Searchguard or ReadOnlyRest to apply the security that you are looking for. Both have FOSS and commerical versions.

---

<div class="post-metadata">

**Author:** ![shatabdi](https://avatars.discourse-cdn.com/v4/letter/s/71c47a/32.png) [@shatabdi](https://discuss.elastic.co/u/shatabdi)\
**Post date:** [March 13, 2019, 3:54am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039/3 "2019-03-13T03:54:05Z")

</div>

Thank you. I will explore these options.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2019, 3:54am UTC](https://discuss.elastic.co/t/encrypting-elasticsearch-data-in-transit-and-at-rest/172039/4 "2019-04-10T03:54:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.