How to Secure ElasticSearch

Elastic Stack Elasticsearch
1

Hi,

We are using Google Compute Engine to deploy our applications (running on
top of CentOS Linux).

Is there any written reference on the best practices to secure our
ElasticSearch instance running on the cloud?

Best regards

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/cf257f42-f5ed-4a64-8976-04330155ce31%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Unfortunately not, this is left as an exercise to the administrator.
People have used reverse proxies (nginx/apache) and iptables though, if
that helps.

On 6 January 2015 at 22:21, Junie Bonifacio junie.bonifacio@gmail.com
wrote:

Hi,

We are using Google Compute Engine to deploy our applications (running on
top of CentOS Linux).

Is there any written reference on the best practices to secure our
Elasticsearch instance running on the cloud?

Best regards

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/cf257f42-f5ed-4a64-8976-04330155ce31%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/cf257f42-f5ed-4a64-8976-04330155ce31%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9U7wfreXBcP18s54SEMjPsETbMLpQdqPxDK-SdNoyNuA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

3

There are a few transport plugins that do that as well, see
GitHub - Asquera/elasticsearch-http-basic: HTTP Basic Authentication for Elasticsearch (Discontinued) for example

--

Itamar Syn-Hershko
http://code972.com | @synhershko https://twitter.com/synhershko
Freelance Developer & Consultant
Author of RavenDB in Action http://manning.com/synhershko/

On Tue, Jan 6, 2015 at 1:21 PM, Junie Bonifacio junie.bonifacio@gmail.com
wrote:

Hi,

We are using Google Compute Engine to deploy our applications (running on
top of CentOS Linux).

Is there any written reference on the best practices to secure our
Elasticsearch instance running on the cloud?

Best regards

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/cf257f42-f5ed-4a64-8976-04330155ce31%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/cf257f42-f5ed-4a64-8976-04330155ce31%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAHTr4Zu%3D1GT5jM3r3uCEgj%2B%3D1cY0-xFdj1TPeiAfto-QdEezyg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.