# Security Suggestion In Elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [March 31, 2015, 6:45am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997 "2015-03-31T06:45:22Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Shohedul\_Hasan](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@Shohedul\_Hasan](https://discuss.elastic.co/u/Shohedul_Hasan)\ **Post date:** [March 31, 2015, 6:45am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/1 "2015-03-31T06:45:22Z")
Hi, I am trying to deploy my ES server in Digital ocean. But Digital ocean had some hacker attack as i didn't add any security to ES, So they blocked my droplet and gave me warning. So i tried to find out how can i secure my ES server. I have found out that Shield , using proxy or some other ways can be solution. But i am confused. What is the best option (to secure ES) i have right now. 1. I have one ES server (i may add more in future) 2. One server that run the java code. From this server i do all ES operation. 3. There are some more servers like postgresql, gearman but i think these are not relevant here. Thanks in advance. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![jprante](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jprante/32/44941_2.png) [@jprante](https://discuss.elastic.co/u/jprante)\ **Post date:** [March 31, 2015, 7:31am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/2 "2015-03-31T07:31:41Z")
The rule is not new. Do not expose Elasticsearch to the public internet, just like Postgresql and Gearman. Jörg On Tue, Mar 31, 2015 at 8:45 AM, Shohedul Hasan [shakil@qianalysis.com](mailto:shakil@qianalysis.com) wrote: > Hi, > I am trying to deploy my ES server in Digital ocean. But Digital ocean > had some hacker attack as i didn't add any security to ES, So they blocked > my droplet and gave me warning. So i tried to find out how can i secure my > ES server. I have found out that Shield , using proxy or some other ways > can be solution. But i am confused. What is the best option (to secure > ES) i have right now. > > 1. I have one ES server (i may add more in future) > 2. One server that run the java code. From this server i do all ES > operation. > 3. There are some more servers like postgresql, gearman but i think these > are not relevant here. > > Thanks in advance. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAKdsXoFZZbQ9x6MkdUC-TkCUHpfSh3Sieh1Rk\_PE9YuwwSQvuw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAKdsXoFZZbQ9x6MkdUC-TkCUHpfSh3Sieh1Rk_PE9YuwwSQvuw%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 31, 2015, 7:42am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/3 "2015-03-31T07:42:51Z")
Shield would be the best. But you can also use iptables and nginx to secure and proxy things. On 31 March 2015 at 17:45, Shohedul Hasan [shakil@qianalysis.com](mailto:shakil@qianalysis.com) wrote: > Hi, > I am trying to deploy my ES server in Digital ocean. But Digital ocean > had some hacker attack as i didn't add any security to ES, So they blocked > my droplet and gave me warning. So i tried to find out how can i secure my > ES server. I have found out that Shield , using proxy or some other ways > can be solution. But i am confused. What is the best option (to secure > ES) i have right now. > > 1. I have one ES server (i may add more in future) > 2. One server that run the java code. From this server i do all ES > operation. > 3. There are some more servers like postgresql, gearman but i think these > are not relevant here. > > Thanks in advance. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-Z6qH%2Bmh9Z7GB2UMChB6bwBrt-6tU\_uVJWRGCy9c\_gQg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-Z6qH%2Bmh9Z7GB2UMChB6bwBrt-6tU_uVJWRGCy9c_gQg%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Shohedul\_Hasan](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@Shohedul\_Hasan](https://discuss.elastic.co/u/Shohedul_Hasan)\ **Post date:** [April 2, 2015, 5:09am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/4 "2015-04-02T05:09:21Z")
Do i have to use both of iptable and nginx. Another thing what is about elasticsearch-jetty, will it be better than nginx? I didn't know that shield is not free. On Tuesday, March 31, 2015 at 1:43:25 PM UTC+6, Mark Walkom wrote: > Shield would be the best. > But you can also use iptables and nginx to secure and proxy things. > > On 31 March 2015 at 17:45, Shohedul Hasan \<[sha...@qianalysis.com](mailto:sha...@qianalysis.com) > \\> wrote: > > > Hi, > > I am trying to deploy my ES server in Digital ocean. But Digital ocean > > had some hacker attack as i didn't add any security to ES, So they blocked > > my droplet and gave me warning. So i tried to find out how can i secure my > > ES server. I have found out that Shield , using proxy or some other ways > > can be solution. But i am confused. What is the best option (to secure > > ES) i have right now. > > > > 1. I have one ES server (i may add more in future) > > 2. One server that run the java code. From this server i do all ES > > operation. > > 3. There are some more servers like postgresql, gearman but i think these > > are not relevant here. > > > > Thanks in advance. > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 2, 2015, 9:34pm UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/5 "2015-04-02T21:34:10Z")
You don't need to use both, no. I've heard of people using elasticsearch-jetty successfully, but it appears to have been unmaintained for a while now. And yes, Shield is a commercial plugin, you can try it free for 30 days though. On 2 April 2015 at 16:09, Shohedul Hasan [shakil@qianalysis.com](mailto:shakil@qianalysis.com) wrote: > Do i have to use both of iptable and nginx. Another thing what is about > elasticsearch-jetty, will it be better than nginx? I didn't know that > shield is not free. > > On Tuesday, March 31, 2015 at 1:43:25 PM UTC+6, Mark Walkom wrote: > > > Shield would be the best. > > But you can also use iptables and nginx to secure and proxy things. > > > > On 31 March 2015 at 17:45, Shohedul Hasan [sha...@qianalysis.com](mailto:sha...@qianalysis.com) wrote: > > > > > Hi, > > > I am trying to deploy my ES server in Digital ocean. But Digital ocean > > > had some hacker attack as i didn't add any security to ES, So they blocked > > > my droplet and gave me warning. So i tried to find out how can i secure my > > > ES server. I have found out that Shield , using proxy or some other ways > > > can be solution. But i am confused. What is the best option (to secure > > > ES) i have right now. > > > > > > 1. I have one ES server (i may add more in future) > > > 2. One server that run the java code. From this server i do all ES > > > operation. > > > 3. There are some more servers like postgresql, gearman but i think > > > these are not relevant here. > > > > > > Thanks in advance. > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5% > > > [40googlegroups.com](http://40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4aa2f9f8-b4b7-4ce3-8ff3-66c3304d64a5%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4f8191d4-750e-4574-b3fb-f6375b3f4b19%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-QmpZagpGE-jJuiwXJM0KWVY6vBBHuZe5rCvb5zMZsAQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-QmpZagpGE-jJuiwXJM0KWVY6vBBHuZe5rCvb5zMZsAQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:21am UTC](https://discuss.elastic.co/t/security-suggestion-in-elasticsearch/22997/6 "2017-07-06T00:21:58Z")