# Is elasticsearch support subscription required to enable SSL **URL:** \ **Category:** Elasticsearch\ **Created:** [June 7, 2017, 9:49pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630 "2017-06-07T21:49:00Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 7, 2017, 9:49pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/1 "2017-06-07T21:49:00Z")
I would like to secure communication between my client app and elasticsearch. I would also like to do the same for elasticsearch's inter-node communication. Question: Do I need to purchase elasticsearch's support subscription? The communication between my client app and elasticsearch is done using elasticsearch REST client. Thanks, Abhijat ---
**Author:** ![ugosan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ugosan/32/18916_2.png) [@ugosan](https://discuss.elastic.co/u/ugosan)\ **Post date:** [June 8, 2017, 6:53pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/2 "2017-06-08T18:53:37Z")
You don't necessarily need to buy a subscription to enable SSL/TLS between nodes, but is much easier to set it up with x-pack, see: [https://www.elastic.co/guide/en/x-pack/current/ssl-tls.html](https://www.elastic.co/guide/en/x-pack/current/ssl-tls.html) Without a subscription you have to manage it all by yourself, using NGINX as a reverse proxy on every node, and serving the certificates through it. ---
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 8, 2017, 7:06pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/3 "2017-06-08T19:06:38Z")
Thanks @ugosan. Does the same apply for communication between my client application and elasticsearch? Referring to the link [https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions), I see that x-pack basic license does not seem to support encryption. ---
**Author:** ![ugosan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ugosan/32/18916_2.png) [@ugosan](https://discuss.elastic.co/u/ugosan)\ **Post date:** [June 8, 2017, 7:25pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/4 "2017-06-08T19:25:05Z")
It would be the same between client application and elasticsearch, yes. The basic subscription doesn't support a lot of features, but you might want to take a look at [https://cloud.elastic.co](https://cloud.elastic.co) which is great - you have access to a Platinum license (with graph, alerts, etc.) for clusters under 64GB RAM. ---
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 8, 2017, 7:31pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/5 "2017-06-08T19:31:32Z")
Right... we will be evaluating elastic cloud but at present I am not there yet. Thus for my self-hosted elasticsearch cluster, do I need the platinum support subscription to enable encryption everywhere? (between nodes and between client and the cluster itself) ---
**Author:** ![ugosan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ugosan/32/18916_2.png) [@ugosan](https://discuss.elastic.co/u/ugosan)\ **Post date:** [June 8, 2017, 7:33pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/6 "2017-06-08T19:33:25Z")
Well if you dont need document-level authentication, you might just go with a GOLD subscription and it would be enough. ---
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 8, 2017, 9:33pm UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/7 "2017-06-08T21:33:30Z")
So, I take two things out of this discussion 1. I need a support subscription. 2. I am using ES REST client for communication between my client app and ES cluster, I believe, I will need the platinum subscription because it is the one that provides that support (as far as I understand). Let me know if I have missed anything. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 9, 2017, 6:26am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/8 "2017-06-09T06:26:28Z")
Both Gold and Platinum offers encryption between Elasticsearch nodes as well as between clients and the cluster. This is covered under `Native authentication, encrypted communications` in the feature matrix on the subscriptions page. ---
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 9, 2017, 7:42am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/9 "2017-06-09T07:42:38Z")
Thanks @Christian_Dahlqvist What is "Encryption at rest support" under X-pack for Platinum package then? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 9, 2017, 7:43am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/10 "2017-06-09T07:43:36Z")
That is related to encrypting data when it is stored ('resting') on disk. ---
**Author:** ![abhijat](https://avatars.discourse-cdn.com/v4/letter/a/9de0a6/32.png) [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Post date:** [June 9, 2017, 7:56am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/11 "2017-06-09T07:56:00Z")
Thank you. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 7, 2017, 7:56am UTC](https://discuss.elastic.co/t/is-elasticsearch-support-subscription-required-to-enable-ssl/88630/12 "2017-07-07T07:56:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.