HTTP Basic Auth + SSL: communication between nodes?

Elastic Stack Elasticsearch
1

Hello,

We're evaluating ElasticSearch and for this we're trying to deploy a
cluster against our production data.
For now, the goal is to index and see the performance on some obvious
queries.

We have deployed 2 nodes and "secured" them using an NGINX proxy which
"hides" them behind HTTPS with Basic Auth.
Each node work well individually, but they fail to communicate with each
other.

I understand that multicast will not work since we use nginx, so we
configured the nodes using this:
discovery.zen.minimum_master_nodes: 2
discovery.zen.ping.multicast.enabled: false
discovery.zen.ping.unicast.hosts: ,

How can we specify which ports to use (8080), the fact that it needs to use
SSL and credentials for HTTP basic Auth?

Is that even doable? If not how can we get both nodes to communicate
securely given that we Linode servers (XEN instances in a network that we
do not control).

Thanks,

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/49e3c1f7-aab1-45ae-9229-f2aa4c37bbc6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Please disregard, I read more of these docs

and found that changing the HTTP interface does not affect at all the
inter-node communciation!

On Wednesday, September 10, 2014 4:56:05 PM UTC+2, Julien Genestoux wrote:

Hello,

We're evaluating Elasticsearch and for this we're trying to deploy a
cluster against our production data.
For now, the goal is to index and see the performance on some obvious
queries.

We have deployed 2 nodes and "secured" them using an NGINX proxy which
"hides" them behind HTTPS with Basic Auth.
Each node work well individually, but they fail to communicate with each
other.

I understand that multicast will not work since we use nginx, so we
configured the nodes using this:
discovery.zen.minimum_master_nodes: 2
discovery.zen.ping.multicast.enabled: false
discovery.zen.ping.unicast.hosts: ,

How can we specify which ports to use (8080), the fact that it needs to
use SSL and credentials for HTTP basic Auth?

Is that even doable? If not how can we get both nodes to communicate
securely given that we Linode servers (XEN instances in a network that we
do not control).

Thanks,

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/8819458b-ad5f-48e3-8733-1090f4051778%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.