How to secure elasticsearch for adding new node


(learner) #1

I know Elasticsearch can scale upto may nodes and connect to cluster based on clustername and master node info.
if someone start a new node with by using same information cluster name and masternodes info the node will automatically get add in the cluster.
So here my question is how to secure elasticsearch by adding new node in cluster.


(Magnus Kessler) #2

XPack security allows you to restrict which nodes can connect with IP filtering. You can also enforce the use of TLS client authentication via XPack TLS/SSL settings.

Without XPack security (or equivalent 3rd party solutions), an Elasticsearch cluster is not secured against access of any kind. You could, however, restrict network access via firewall rules.


(learner) #3

is free version of xpack provied this feature ?


(David Pilato) #4

No but there is a trial.


(learner) #5

Thanks, so in that case for each node we have to purchase licence or one licence will work on cluster ?


(David Pilato) #6

This is a license for the cluster but the price depends on the number of nodes and the features you want. See ‪https://www.elastic.co/subscriptions


(system) #7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.