How secure filebeat communication with logstash without SSL

Elastic Stack Beats
1

Hello All,

i would like to know in case not using SSL between Filebeat and Logstash how secure is the communication?. Is log/file data travelling encrypted by default?

Best regards

2

Hi!

No, by default data will be travelling unencrypted over the wire. You will need ssl in order to have them encrypted -> https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html#configuring-ssl-logstash

C.

3

Thank you ChrsMark,

i was just playing around with packet sniffer between filebeat and logstash and data seems not to be in plain text, maybe be lumberjack protocal uses some kind of encryption or data is compressed, isn't it?

4

Hi,

you are right. Lumberjack protocol is based on TCP (when TLS is not set up) so what you will see is most probably compressed data, but for sure these data are not encrypted and nobody can guarantee you that you can rely on this for securing your connections.

C.

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.