# How to secure elasticsearch for adding new node

**URL:** https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799
**Category:** Elasticsearch
**Created:** [June 6, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799 "2018-06-06T12:28:37Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![learnhub17](https://avatars.discourse-cdn.com/v4/letter/l/91b2a8/32.png) [@learnhub17](https://discuss.elastic.co/u/learnhub17)
#### Post date: [June 6, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/1 "2018-06-06T12:28:37Z")

</div>

I know Elasticsearch can scale upto may nodes and connect to cluster based on clustername and master node info.  
if someone start a new node with by using same information cluster name and masternodes info the node will automatically get add in the cluster.  
So here my question is how to secure elasticsearch by adding new node in cluster.

---

<div class="post-metadata">

### Author: ![Magnus\_Kessler](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnus_kessler/32/42001_2.png) [@Magnus\_Kessler](https://discuss.elastic.co/u/Magnus_Kessler)
#### Post date: [June 6, 2018, 12:38pm UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/2 "2018-06-06T12:38:55Z")

</div>

XPack security allows you to restrict which nodes can connect with [IP filtering](https://www.elastic.co/guide/en/x-pack/current/ip-filtering.html). You can also enforce the use of TLS client authentication via XPack [TLS/SSL settings](https://www.elastic.co/guide/en/elasticsearch/reference/6.2/security-settings.html#ssl-tls-settings).

Without XPack security (or equivalent 3rd party solutions), an Elasticsearch cluster is not secured against access of any kind. You could, however, restrict network access via firewall rules.

---

<div class="post-metadata">

### Author: ![learnhub17](https://avatars.discourse-cdn.com/v4/letter/l/91b2a8/32.png) [@learnhub17](https://discuss.elastic.co/u/learnhub17)
#### Post date: [June 6, 2018, 2:51pm UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/3 "2018-06-06T14:51:41Z")

</div>

is free version of xpack provied this feature ?

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 6, 2018, 3:22pm UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/4 "2018-06-06T15:22:02Z")

</div>

No but there is a trial.

---

<div class="post-metadata">

### Author: ![learnhub17](https://avatars.discourse-cdn.com/v4/letter/l/91b2a8/32.png) [@learnhub17](https://discuss.elastic.co/u/learnhub17)
#### Post date: [June 7, 2018, 10:15am UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/5 "2018-06-07T10:15:35Z")

</div>

Thanks, so in that case for each node we have to purchase licence or one licence will work on cluster ?

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 7, 2018, 10:30am UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/6 "2018-06-07T10:30:34Z")

</div>

This is a license for the cluster but the price depends on the number of nodes and the features you want. See ‪https://www.elastic.co/subscriptions

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2018, 10:30am UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799/7 "2018-07-05T10:30:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
