# HA-Cluster: Simple design on prem, self managed
**URL:** https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177
**Category:** Elasticsearch
**Created:** [September 4, 2026, 10:41am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177 "2026-09-04T10:41:33Z")
**Posts on this page:** 13
**Page:** 1
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 4, 2026, 10:41am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/1 "2026-09-04T10:41:33Z")
Hi there,
I am looking for a simple HA-design for a logging use case, on prem & self managed.
Would this be a good design?
NODE-1 master, data, ingest, kibana, logstash, redis
NODE-2 master, data, ingest, kibana, logstash, redis
NODE-3 master for quorum
NODE-4 fleet server
Or something like that perhaps?
With each node in a different data center and 1 replica.
Any insights, thoughts?
Many thanks and kind regards!
Stefano
---
### Author:  [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [September 6, 2026, 4:08pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/2 "2026-09-06T16:08:33Z")
why not make node-3 same as node2 unless you have space issue. you will have three data node. incase you have one down replica will fail over.
also can use load balance for elastic:9200 and kibana:5600 hence even one down node will not cause user issue.
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 7, 2026, 8:57am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/3 "2026-09-07T08:57:07Z")
Indeed that would be beneficial. But the 3rd data center is just a very small one. So I cannot deploy a data node there.
kind regards
Stefano
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [September 7, 2026, 2:31pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/4 "2026-09-07T14:31:54Z")
> [@smm](#):
>
> With each node in a different data center and 1 replica.
> Any insights, thoughts?
Is this a hard requirement? Having a cluster with nodes in different datacenters would not be recommended as it may add a lot of issues, specially related to latency between nodes, I would not recommend doing this.
Also, where redis at? Are you using it with Logstash? Where would your Logstash and Kibana be located?
You described that you would want one elasicsearch node on each datacenter, but in this scenario where would Kibana and Logstash be?
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [September 7, 2026, 5:01pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/5 "2026-09-07T17:01:09Z")
> [@leandrojmp](#):
>
> Having a cluster with nodes in different datacenters would not be recommended as it may add a lot of issues, specially related to latency between nodes, I would not recommend doing this.
It Depends™ but do note that this is how most clusters in Elastic Cloud run - each AZ in AWS/GCP/Azure/... is a different datacenter, separated by a few (tens of) kilometers from the other AZs in the same region.
[There's some docs here](https://www.elastic.co/docs/deploy-manage/production-guidance/availability-and-resilience/resilience-in-larger-clusters) on this subject:
> You can also _stretch_ your cluster across nearby data centers as long as the network interconnection between each pair of data centers is good enough.
They also go into quite some depth about the requirements for a HA cluster, which basically align with the design in the OP.
My only concern would be the single-point-of-failure Fleet Server instance. I don't know much about Fleet Server tho, so maybe this is ok?
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [September 7, 2026, 6:07pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/6 "2026-09-07T18:07:09Z")
> [@DavidTurner](#):
>
> My only concern would be the single-point-of-failure Fleet Server instance. I don't know much about Fleet Server tho, so maybe this is ok?
With Fleet unavailable, the user will lost management over the agents enrolled on it, it will not impact data collection, but changes on policies will not be replicated until Fleet is back again.
But Fleet supports HA in a similar way as Kibana, so this is pretty easy to implement.
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 8, 2026, 10:35am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/7 "2026-09-08T10:35:05Z")
Hi Leandro, thanks for your reply!
You wrote: 'Is this a hard requirement? Having a cluster with nodes in different datacenters would not be recommended as it may add a lot of issues'
Actually I thought having a foot / server in 3 different data centers is a must have / best practice for real HA. I was thinking about: what happens if a data center goes down? Never mind, still have data in the other one.
Or am I wrong?
Kind regards,
Stefano
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 8, 2026, 10:39am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/8 "2026-09-08T10:39:12Z")
Hi David, thanks for you reply!
Actually these are private data centers beloging and managed by the entity who runs the elasicsearch cluster I am going to build. Meaning: no cloud, by on prem and self managed.
By the way: Do you think a 1 Gbit/s network is enough to connect one of the nodes to the other two? This with on 1Gbit/s is going to be the quorum master node.
Thanks and kind regards
Stefano
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [September 8, 2026, 11:40am UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/9 "2026-09-08T11:40:56Z")
> [@smm](#):
>
> Actually these are private data centers beloging and managed by the entity who runs the elasicsearch cluster I am going to build.
Indeed, as long as they behave like AZs in a single CSP region, you're not doing anything unusual.
> [@smm](#):
>
> Do you think a 1 Gbit/s network is enough to connect one of the nodes to the other two?
We cannot say, it depends entirely on your workload and performance goals. You'll need to perform some experiments.
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 8, 2026, 2:19pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/10 "2026-09-08T14:19:51Z")
Thank you David. By the way could send me an Elastic contact (Germany, NRW). We would like to discuss the possibility of a licence? I was trying this with no luck for the last few days.
Thanks & Cheers
Stefano
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [September 8, 2026, 2:45pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/11 "2026-09-08T14:45:46Z")
The best way is to fill out the form at [Have questions? Contact Elastic | Elastic](https://www.elastic.co/contact)
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [September 9, 2026, 4:29pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/12 "2026-09-09T16:29:19Z")
Let us presume I buy a licence then I have searcheable snapshots.
Starting from this design (3 nodes)
How would it change if I want to use ILM & hot data & frozen data?
I would like to spend less for ssds and have logging data to hold for 90 to 180 days.
What would be the next best / simple design to add the searcheable snapshot technology?
Thanks for any input!
Stefano
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [September 9, 2026, 5:33pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177/13 "2026-09-09T17:33:34Z")
> [@smm](#):
>
> I would like to spend less for ssds and have logging data to hold for 90 to 180 days.
> What would be the next best / simple design to add the searcheable snapshot technology?
You need disk space for the data you want to hold, since it would be frozen data, you do not need SSDs, normal HDDs would work.
There is also the option to use an object storage on cloud like S3 to store the frozen data, but for an on-premises deployment I'm not sure this is a good approach, I'm also not sure how the local s3 altenatives are working now since MinIO discontinued the community version.
If I'm not wrong, you also need to have the role `data_frozen` on the nodes so the cache for the snapshot data can be mounted.
In theory you could have the `data_frozen` on the hot nodes as well, but I'm not sure if this is recommended or if it will have any impact, I'm using Elastic Cloud and each data role is a different node.