# Java proxy to secure Kibana

**URL:** <https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750>\
**Category:** Kibana\
**Created:** [April 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750 "2018-04-04T13:56:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paddy\_Mahadeva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paddy_mahadeva/32/44225_2.png) [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Post date:** [April 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750/1 "2018-04-04T13:56:12Z")

</div>

Hi,

I have written a proxy server code in my existing application to proxy kibana deployed on AWS. The logic is simple I put in few headers and rewrite all urls starting with \_plugin/kibana to myApp/\_plugin/kibana to go through my application.

so basically i call [http://myserver/mpApp/\_plugin/kibana](http://myserver/mpApp/_plugin/kibana). I could get kibana to load the GUI.

I have an existing index datacuts and have 2 dashboards created for it already.

When I access dev tools and say

`GET datacuts`

I can see the mappings of my index.

But when I run a query like

`GET datacuts/datacut/_search`

I get a index not found exception. [404] I am not sure why this is happening to me. In my code I am setting the following headers

Access-Control-Allow-Origin, content-type, kbn-version[5.5.2].

and of course I am copying the body and the query string in url as it is.

One more thing that I noticed is that when I load my kibana through the proxy the first \_msearch call fails with a 400 with below error.

> {"error":{"root\_cause":[{"type":"action\_request\_validation\_exception","reason":"Validation Failed: 1: no requests added;"}],"type":"action\_request\_validation\_exception","reason":"Validation Failed: 1: no requests added;"},"status":400} header{access-control-allow-origin=[\*], Cache-Control=[no-cache], Content-Type=[application/json; charset=UTF-8], Date=[Wed, 04 Apr 2018 13:54:41 GMT], kbn-name=[kibana], kbn-version=[5.5.2], server=[Jetty(8.1.12.v20130726)], x-amzn-RequestId=[b91dc342323-380f-11e8-aa97-5906cd206e04], Content-Length=[235], Connection=[keep-alive]}

Any help would be much appreciated!

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [April 4, 2018, 7:54pm UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750/2 "2018-04-04T19:54:49Z")

</div>

It's not obvious from the description that you've given how your proxy is misconfigured. It's rather common to put Kibana behind a reverse-proxy with Nginx/Apache, and it's definitely a supported configuration.

Would you mind elaborating on what you're doing with your reverse proxy and why you're setting the additional headers? Are you adding the headers for the requests to Kibana itself, or are you adding them on the response to the client.

---

<div class="post-metadata">

**Author:** ![Paddy\_Mahadeva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paddy_mahadeva/32/44225_2.png) [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Post date:** [April 6, 2018, 5:26am UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750/3 "2018-04-06T05:26:59Z")

</div>

Hi,

Sorry that I did not clearly mention this part.

I have a existing spring application, and I have built the proxying logic in it.

```
HttpHeaders headers = new HttpHeaders();
            headers.add("Access-Control-Allow-Origin", "https://my-es-server"+restOfTheUrl);
            headers.add("content-type", request.getContentType());
            headers.add("kbn-version", "5.5.2");
            HttpEntity<String> httpEntity = (body==null)?new HttpEntity<>(headers):
                new HttpEntity<String>(body,headers);
            RestTemplate restTemplate = new RestTemplate();
            restTemplate.getMessageConverters().add(new ByteArrayHttpMessageConverter());
            ResponseEntity<String> resp = restTemplate.exchange(uri.toString(), HttpMethod.valueOf(request.getMethod()), httpEntity, String.class);
switch(resp.getHeaders().getContentType().getType()) {
            case "text" :
                String responseBody = resp.getBody().toString();
                logger.debug("index count" + responseBody.indexOf("/_plugin/kibana"));
                responseBody = responseBody.replaceAll("_plugin/kibana","myApp/_plugin/kibana");
                return new ResponseEntity<String>(responseBody.toString(), resp.getHeaders(), HttpStatus.OK);
            }
            return resp;

```

So if you look at this code. I have passed some headers that I identified as required for kibana to respond. Also since I have a web context, I am scanning the response and I am appending myApp context to the response if its of type text.

But I don't think this this has anything to do with my problem.

---

<div class="post-metadata">

**Author:** ![Paddy\_Mahadeva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paddy_mahadeva/32/44225_2.png) [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Post date:** [April 10, 2018, 9:31am UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750/4 "2018-04-10T09:31:28Z")

</div>

Still looking for a solution. If anyone can help, would be great!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 8, 2018, 9:31am UTC](https://discuss.elastic.co/t/java-proxy-to-secure-kibana/126750/5 "2018-05-08T09:31:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.