How to put Kibana 5.4.1 behind Apache proxy

[ppseal]

Hi There,

I have made the following changes but Apache is not redirecting to Kibana and Kibana is also still directly accessible via 5601 port.
My change details below:

Added following line in kibana.yml:
erver.basePath: "/kibana"

Added following in apache config:
<Location /kibana/>
ProxyPass http://localhost:5601/
ProxyPassReverse http://localhost:5601/

[LeeDr (Lee Drengenberg)]

Can you check if this post helps you?

Kibana 5 behind reverse proxy

Is there a documentation out there describing the configuration of kibana 5 behind reverse proxy. -- Niraj

Thanks,
Lee

[yodog]

[ 4.3.0 ] how to configure your nginx balancer and apache reverse proxy

ok. got it. this is what you need for a fully functional proxy / load balancer answering on http://my-balancer/kibana/ #Balancer nginx /etc/nginx/conf.d/elastic-80.server.conf upstream web { server elk-node-01; server elk-node-02; server elk-node-03; keepalive 5; } server { listen 80; location / { proxy_pass http://web; proxy_http_version 1.1; proxy_set_header Connection "Keep-Alive"; proxy_set_header Proxy-Connection "Keep-Alive…

[ppseal]

Thanks LeeDr!

That worked. However, Kibana is still accessible via the original Kibana URL i.e. ip:5601.

How do I stop that? The purpose to put behind a proxy is security , if Kibana stays directly accessible that'll be of no use. Appreciate any help.

Tx

[LeeDr (Lee Drengenberg)]

In your kibana.yml do you have this?

#server.host: "localhost"

That's the default value. That means Kibana will only listen on localhost. That also means you can reach it using http://localhost:5601 but only on that machine. And the proxy has to be able to reach Kibana so it has to listen on some IP. But only the proxy should be reachable from a connection on another machine.

If you've set server.host to some other value, like the IP address of the machine, or 0.0.0.0, then it will be reachable from another machine.

[ppseal]

Great! Thanks LeeDr.