# Setting Up SSL/TLS on a Cluster

**URL:** <https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136>\
**Category:** Elasticsearch\
**Created:** [March 29, 2018, 5:45pm UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136 "2018-03-29T17:45:46Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![eramitsinha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eramitsinha/32/35032_2.png) [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Post date:** [March 29, 2018, 5:45pm UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/1 "2018-03-29T17:45:46Z")

</div>

Hi,

I am using Elastic Search 5.2.2, Kibana 5.2.2 and X-Pack 5.2.2. I am planning for Data Encryption.  
I use both Http and TCP call from my Java Code.

Will there be performance over head after SSL/TLS implementation.

I would like to understand performance of cluster post implementation as I have millions of Document In my Index and Size of Indices is around 60 GB.

Thanks,  
Amit Sinha.

---

<div class="post-metadata">

**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\
**Post date:** [April 6, 2018, 2:49pm UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/2 "2018-04-06T14:49:12Z")

</div>

That really depends on what kind of platform your running. Modern OS and hardware has optimizations for fast SSL/TLS support.

I suggest that you do benchmark using [esrally](https://github.com/elastic/rally) in the target platform to verify.

---

<div class="post-metadata">

**Author:** ![eramitsinha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eramitsinha/32/35032_2.png) [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Post date:** [April 6, 2018, 5:09pm UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/3 "2018-04-06T17:09:35Z")

</div>

Thank you. I also have same understanding with modern OS, Hardware and Software, performance overhead should be negligible.

---

<div class="post-metadata">

**Author:** ![Yogesh\_Gaikwad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_gaikwad/32/27025_2.png) [@Yogesh\_Gaikwad](https://discuss.elastic.co/u/Yogesh_Gaikwad)\
**Post date:** [April 9, 2018, 2:46am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/4 "2018-04-09T02:46:13Z")

</div>

Just FYI [https://istlsfastyet.com/](https://istlsfastyet.com/)  
I hope the question is just for `data encryption in transit`, there would be other performance aspect you need to consider when doing `data encryption at rest`.

Regards,  
Yogesh

---

<div class="post-metadata">

**Author:** ![eramitsinha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eramitsinha/32/35032_2.png) [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Post date:** [April 9, 2018, 3:30am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/5 "2018-04-09T03:30:28Z")

</div>

Hi,

Thank you for your input. I am not using Rest from my Java client code now, its Tcp call. My requirement is more of data encryption in transit. But yes some curiosity, if I go for Rest call in future, will there be much difference in performance. And what if I go for ECE cloud in future, where it supports Java REST Client only.

Thanks,  
Amit Sinha.

---

<div class="post-metadata">

**Author:** ![Yogesh\_Gaikwad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_gaikwad/32/27025_2.png) [@Yogesh\_Gaikwad](https://discuss.elastic.co/u/Yogesh_Gaikwad)\
**Post date:** [April 9, 2018, 6:24am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/6 "2018-04-09T06:24:07Z")

</div>

I am sorry if I confused you with `data encryption at rest` as this is not related to RESTful web services. I was talking more on the storage of the data on File system [https://en.wikipedia.org/wiki/Data\_at\_rest](https://en.wikipedia.org/wiki/Data_at_rest).

For REST client access, things should not be different in performance terms.

Regards,  
Yogesh

---

<div class="post-metadata">

**Author:** ![eramitsinha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eramitsinha/32/35032_2.png) [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Post date:** [April 11, 2018, 1:58am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/7 "2018-04-11T01:58:07Z")

</div>

Thank You Yogesh.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 9, 2018, 1:58am UTC](https://discuss.elastic.co/t/setting-up-ssl-tls-on-a-cluster/126136/8 "2018-05-09T01:58:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
