Refuse to discovery a new node

Elastic Stack Elasticsearch
#1

Hi

Using discovery.zen.ping.unicast.hosts: ["host1", "host2"], I connect two nodes of Elasticsearch, but I want that the nodes ("host1" and "host2") refuse a new node ("host3") if the node doesn't exist in their list (i.e. "host3" could not join to "host1" and "host2")
I don't want to use firewall. Is there any config that could help me?

Thank you.

#2

I think that you need security feature for that (commercial license or trial license needed).

See https://www.elastic.co/guide/en/elastic-stack-overview/current/ip-filtering.html

1 Like
#3

One way to prevent other nodes from joining could be to set a random/non-default cluster id. Only nodes with the same cluster id can form a cluster.

1 Like
#4

It would still easy without any auth available to call http://host1:9200 and look what the cluster name is though. :slight_smile:

1 Like
#5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.