# I can't curl my elasticsearch 8 on AWS ec2(ubuntu 20.04)

**URL:** <https://discuss.elastic.co/t/i-cant-curl-my-elasticsearch-8-on-aws-ec2-ubuntu-20-04/309682>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security, docker\
**Created:** [July 14, 2022, 7:09pm UTC](https://discuss.elastic.co/t/i-cant-curl-my-elasticsearch-8-on-aws-ec2-ubuntu-20-04/309682 "2022-07-14T19:09:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![paris1](https://avatars.discourse-cdn.com/v4/letter/p/9f8e36/32.png) [@paris1](https://discuss.elastic.co/u/paris1)\
**Post date:** [July 14, 2022, 7:09pm UTC](https://discuss.elastic.co/t/i-cant-curl-my-elasticsearch-8-on-aws-ec2-ubuntu-20-04/309682/1 "2022-07-14T19:09:15Z")

</div>

installed elasticsearch(docker compose) 8.2 on aws ec2(ubuntu 20.04.)

Everything is working.My only problem is that I can't reach(curl) it from other instances and my backend server(it is on same vpc).

I added my node to its discovery node, and also set network.host: 0.0.0.0 but I still can't reach it (I tried with both private and public ip) Is it necessary to install SSL/TSL on it with elastic 8? Does anyone has any suggestion how to access it?

Here is my yml file  
if [! -f config/certs/certs.zip]; then  
echo "Creating certs";  
echo -ne   
"instances:\n"  
" - name: es01\n"  
" dns:\n"  
" - es01\n"  
" - localhost\n"  
" ip:\n"  
" - 127.0.0.1\n"  
" - name: es02\n"  
" dns:\n"  
" - es02\n"  
" - localhost\n"  
" ip:\n"  
" - 127.0.0.1\n"  
" - name: es03\n"  
" dns:\n"  
" - es03\n"  
" - localhost\n"  
" ip:\n"  
" - 127.0.0.1\n"  
\> config/certs/instances.yml;  
bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca\>  
unzip config/certs/certs.zip -d config/certs;  
fi;  
echo "Setting file permissions"  
chown -R root:root config/certs;  
find . -type d -exec chmod 750 {} ;;  
find . -type f -exec chmod 640 {} ;;  
echo "Waiting for Elasticsearch availability";  
until curl -s --cacert config/certs/ca/ca.crt [https://es01:9200](https://es01:9200) | grep -q "missing authentication credentials"; do sleep 30; done;  
echo "Setting kibana\_system password";  
until curl -s -X POST --cacert config/certs/ca/ca.crt -u elastic:${ELASTIC\_PASSWORD} -H "Content-Type: application/json" [https://es01:9200/\_security/user/kibana\_system/\_](https://es01:9200/_security/user/kibana_system/_)\>  
echo "All done!";  
healthcheck:  
test: ["CMD-SHELL", "[-f config/certs/es01/es01.crt]"]  
interval: 1s  
timeout: 5s  
retries: 120

es01:  
depends\_on:  
setup:  
condition: service\_healthy  
image: [docker.elastic.co/elasticsearch/elasticsearch:${STACK\_VERSION}](http://docker.elastic.co/elasticsearch/elasticsearch:$%7BSTACK_VERSION%7D)  
volumes:  
- certs:/usr/share/elasticsearch/config/certs  
- esdata01:/usr/share/elasticsearch/data  
ports:  
- ${ES\_PORT}:9200  
environment:  
- node.name=es01

# - ES\_JAVA\_OPTS="-Xms256m -Xmx256m"

```
  - network.bind_host=0.0.0.0
  - network.host=0.0.0.0
  - cluster.name=${CLUSTER_NAME}
  - cluster.initial_master_nodes=es01,es02,es03
  - discovery.seed_hosts=es02,es03,"172.31.61.162"
  - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
  - bootstrap.memory_lock=true
  - xpack.security.enabled=true
  - xpack.security.http.ssl.enabled=true
  - xpack.security.http.ssl.key=certs/es01/es01.key
  - xpack.security.http.ssl.certificate=certs/es01/es01.crt
  - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
  - xpack.security.http.ssl.verification_mode=certificate
  - xpack.security.transport.ssl.enabled=true
  - xpack.security.transport.ssl.key=certs/es01/es01.key
  - xpack.security.transport.ssl.certificate=certs/es01/es01.crt
  - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
  - xpack.security.transport.ssl.verification_mode=certificate
  - xpack.license.self_generated.type=${LICENSE}
mem_limit: ${MEM_LIMIT}
ulimits:

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 11, 2022, 7:09pm UTC](https://discuss.elastic.co/t/i-cant-curl-my-elasticsearch-8-on-aws-ec2-ubuntu-20-04/309682/2 "2022-08-11T19:09:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.