I'm part of a concern that runs licensed Elasticsearch instances within sensitive environments, and we have been noticing that our instance tries to call home to an unpredictable range of hostnames and IPs associated with
Do you have any guidance for the IP range Elastic co intends to use for these license server call homes? Our architectures tend to permit traffic based on IPv4 alone, so this unpredictability can be hazardous to our ops.
Welcome to our community!
I am checking internally on this for you.
Our infra team has advised;
It should only be resolving to a single static IP which is 22.214.171.124 for both of those domains.
Can you share the ranges you have been seeing these resolved to so I can pass it on?
We have indeed seen traffic to 126.96.36.199:443 and believed it to be the license server traffic.
Thanks for confirming this! We'll pass this on to our customers as we do other notable traffic for our deployments.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.