# Trying to setup stunnel for es **URL:** \ **Category:** Elasticsearch\ **Created:** [August 21, 2014, 2:22pm UTC](https://discuss.elastic.co/t/trying-to-setup-stunnel-for-es/19391 "2014-08-21T14:22:16Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![javadevmtl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/javadevmtl/32/45613_2.png) [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Post date:** [August 21, 2014, 2:22pm UTC](https://discuss.elastic.co/t/trying-to-setup-stunnel-for-es/19391/1 "2014-08-21T14:22:16Z")
I'm running: Ubuntu 14.04 stunnel4 Elasticsearch 1.3.1 In Elasticsearch.yml I bind ES to localhost only. network.bind\_host: 127.0.0.1 In my stunnel config... client = no [elasticsearch] accept = 9600 connect = 127.0.0.1:9300 cert = /etc/stunnel/stunnel.pem Then I run elasticsearch. I have not tried to connect a client yet until I resolve the below exceptions... [2014-08-21 10:09:17,511][INFO][node] [Archenemy] version[1.3.0], pid[31396], build[1265b14/2014-07-23T13:46:36Z] [2014-08-21 10:09:17,511][INFO][node] [Archenemy] initializing ... [2014-08-21 10:09:17,519][INFO][plugins] [Archenemy] loaded [marvel], sites [marvel, HQ] [2014-08-21 10:09:20,088][INFO][node] [Archenemy] initialized [2014-08-21 10:09:20,088][INFO][node] [Archenemy] starting ... [2014-08-21 10:09:20,329][INFO][transport] [Archenemy] bound\_address {inet[/127.0.0.1:9300]}, publish\_address {inet[/10.0.0.xxx:9300]} [2014-08-21 10:09:20,346][INFO][discovery] [Archenemy] esdashboard/OoIM73WsQYmQANs5Z7TlgQ [2014-08-21 10:09:20,444][WARN][cluster.service] [Archenemy] failed to connect to node [[Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]]] org.elasticsearch.transport.ConnectTransportException: [Archenemy][inet[/10.0.0.xxx:9300]] connect\_timeout[30s] at org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) at org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) at org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) at org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) at org.elasticsearch.cluster.service.InternalClusterService$UpdateTask.run(InternalClusterService.java:424) at org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$TieBreakingPrioritizedRunnable.run(PrioritizedEsThreadPoolExecutor.java:153) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Caused by: java.net.ConnectException: Connection refused: /10.0.0.xxx:9300 at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) at sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:712) at org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:150) at org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105) at org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79) at org.elasticsearch.common.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:318) at org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42) at org.elasticsearch.common.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) at org.elasticsearch.common.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) ... 3 more [2014-08-21 10:09:23,357][INFO][cluster.service] [Archenemy] new\_master [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]], reason: zen-disco-join (elected\_as\_master) [2014-08-21 10:09:23,481][INFO][http] [Archenemy] bound\_address {inet[/127.0.0.1:9200]}, publish\_address {inet[/10.0.0.xxx:9200]} [2014-08-21 10:09:23,482][INFO][node] [Archenemy] started [2014-08-21 10:09:24,128][INFO][gateway] [Archenemy] recovered [33] indices into cluster\_state [2014-08-21 10:10:20,158][WARN][cluster.service] [Archenemy] failed to reconnect to node [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[[xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] org.elasticsearch.transport.ConnectTransportException: [Archenemy][inet[[xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] connect\_timeout[30s] at org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) at org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) at org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) at org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) at org.elasticsearch.cluster.service.InternalClusterService$ReconnectToNodes.run(InternalClusterService.java:537) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Caused by: java.net.ConnectException: Connection refused: [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300) Any config I'm missing? Thanks -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8eb3d3cf-f8ab-47a0-b754-425b7dada4ce%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8eb3d3cf-f8ab-47a0-b754-425b7dada4ce%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![javadevmtl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/javadevmtl/32/45613_2.png) [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Post date:** [August 21, 2014, 2:53pm UTC](https://discuss.elastic.co/t/trying-to-setup-stunnel-for-es/19391/2 "2014-08-21T14:53:01Z")
I set network.host: 127.0.0.1 And now both bind and publish host are bound to 127.0.0.1 and there is no exceptions. Is that right? Now theoretically I should be able to stunnel my node client from another boxing through the 9500 port? On Thursday, 21 August 2014 10:22:16 UTC-4, John Smith wrote: > I'm running: > > Ubuntu 14.04 > stunnel4 > Elasticsearch 1.3.1 > > In Elasticsearch.yml I bind ES to localhost only. > > network.bind\_host: 127.0.0.1 > > In my stunnel config... > client = no > [elasticsearch] > accept = 9600 > connect = 127.0.0.1:9300 > cert = /etc/stunnel/stunnel.pem > > Then I run elasticsearch. I have not tried to connect a client yet until I > resolve the below exceptions... > > [2014-08-21 10:09:17,511][INFO][node] [Archenemy] > version[1.3.0], pid[31396], build[1265b14/2014-07-23T13:46:36Z] > [2014-08-21 10:09:17,511][INFO][node] [Archenemy] > initializing ... > [2014-08-21 10:09:17,519][INFO][plugins] [Archenemy] > loaded [marvel], sites [marvel, HQ] > [2014-08-21 10:09:20,088][INFO][node] [Archenemy] > initialized > [2014-08-21 10:09:20,088][INFO][node] [Archenemy] > starting ... > [2014-08-21 10:09:20,329][INFO][transport] [Archenemy] > bound\_address {inet[/127.0.0.1:9300]}, publish\_address > {inet[/10.0.0.xxx:9300]} > [2014-08-21 10:09:20,346][INFO][discovery] [Archenemy] > esdashboard/OoIM73WsQYmQANs5Z7TlgQ > [2014-08-21 10:09:20,444][WARN][cluster.service] [Archenemy] > failed to connect to node > [[Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]]] > org.elasticsearch.transport.ConnectTransportException: > [Archenemy][inet[/10.0.0.xxx:9300]] connect\_timeout[30s] > at > org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) > at > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) > at > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) > at > org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) > at > org.elasticsearch.cluster.service.InternalClusterService$UpdateTask.run(InternalClusterService.java:424) > at > org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$TieBreakingPrioritizedRunnable.run(PrioritizedEsThreadPoolExecutor.java:153) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.net.ConnectException: Connection refused: /10.0.0.xxx:9300 > at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) > at > sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:712) > at > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:150) > at > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105) > at > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79) > at > org.elasticsearch.common.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:318) > at > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42) > at > org.elasticsearch.common.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > at > org.elasticsearch.common.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > ... 3 more > [2014-08-21 10:09:23,357][INFO][cluster.service] [Archenemy] > new\_master > [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]], > reason: zen-disco-join (elected\_as\_master) > [2014-08-21 10:09:23,481][INFO][http] [Archenemy] > bound\_address {inet[/127.0.0.1:9200]}, publish\_address > {inet[/10.0.0.xxx:9200]} > [2014-08-21 10:09:23,482][INFO][node] [Archenemy] > started > [2014-08-21 10:09:24,128][INFO][gateway] [Archenemy] > recovered [33] indices into cluster\_state > [2014-08-21 10:10:20,158][WARN][cluster.service] [Archenemy] > failed to reconnect to node > [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[ > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] > org.elasticsearch.transport.ConnectTransportException: [Archenemy][inet[ > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] connect\_timeout[30s] > at > org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) > at > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) > at > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) > at > org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) > at > org.elasticsearch.cluster.service.InternalClusterService$ReconnectToNodes.run(InternalClusterService.java:537) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.net.ConnectException: Connection refused: > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300) > > Any config I'm missing? > > Thanks -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5ce54c85-d247-4dc6-aa90-10b4c171121f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5ce54c85-d247-4dc6-aa90-10b4c171121f%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![javadevmtl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/javadevmtl/32/45613_2.png) [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Post date:** [August 21, 2014, 7:38pm UTC](https://discuss.elastic.co/t/trying-to-setup-stunnel-for-es/19391/3 "2014-08-21T19:38:54Z")
Ok so i got it work on single node but i can't make it bridge for multinode using unicast.... On server 1 i have... Stunnel config... [es-server-native] accept = 10.0.0.xx0:9300 connect = 127.0.0.1:9300 cert = stunnel.pem elasticsearch.yml network.host: 127.0.0.1 discovery.zen.ping.multicast.enabled: false discovery.zen.ping.unicast.hosts: ["what do i put here since now the nodes are not accessible externally"] On server 2 i have... Stunnel config... [es-server-native] accept = 10.0.0.xx1:9300 connect = 127.0.0.1:9300 cert = stunnel.pem elasticsearch.yml network.host: 127.0.0.1 discovery.zen.ping.multicast.enabled: false discovery.zen.ping.unicast.hosts: ["what do i put here since now the nodes are not accessible externally"] If I try to make the local es machine a client of itself. And start Elasticsearch I get bind address error and elasticsearch wont start. On Server 1 [es-client-native] client = yes accept = 127.0.0.1:9300 connect = 10.0.0.xx1:9300 On Server 2 [es-client-native] client = yes accept = 127.0.0.1:9300 connect = 10.0.0.xx0:9300 On Thursday, 21 August 2014 10:53:01 UTC-4, John Smith wrote: > I set network.host: 127.0.0.1 > > And now both bind and publish host are bound to 127.0.0.1 and there is no > exceptions. > > Is that right? > > Now theoretically I should be able to stunnel my node client from another > boxing through the 9500 port? > > On Thursday, 21 August 2014 10:22:16 UTC-4, John Smith wrote: > > > I'm running: > > > > Ubuntu 14.04 > > stunnel4 > > Elasticsearch 1.3.1 > > > > In Elasticsearch.yml I bind ES to localhost only. > > > > network.bind\_host: 127.0.0.1 > > > > In my stunnel config... > > client = no > > [elasticsearch] > > accept = 9600 > > connect = 127.0.0.1:9300 > > cert = /etc/stunnel/stunnel.pem > > > > Then I run elasticsearch. I have not tried to connect a client yet until > > I resolve the below exceptions... > > > > [2014-08-21 10:09:17,511][INFO][node] [Archenemy] > > version[1.3.0], pid[31396], build[1265b14/2014-07-23T13:46:36Z] > > [2014-08-21 10:09:17,511][INFO][node] [Archenemy] > > initializing ... > > [2014-08-21 10:09:17,519][INFO][plugins] [Archenemy] > > loaded [marvel], sites [marvel, HQ] > > [2014-08-21 10:09:20,088][INFO][node] [Archenemy] > > initialized > > [2014-08-21 10:09:20,088][INFO][node] [Archenemy] > > starting ... > > [2014-08-21 10:09:20,329][INFO][transport] [Archenemy] > > bound\_address {inet[/127.0.0.1:9300]}, publish\_address > > {inet[/10.0.0.xxx:9300]} > > [2014-08-21 10:09:20,346][INFO][discovery] [Archenemy] > > esdashboard/OoIM73WsQYmQANs5Z7TlgQ > > [2014-08-21 10:09:20,444][WARN][cluster.service] [Archenemy] > > failed to connect to node > > [[Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]]] > > org.elasticsearch.transport.ConnectTransportException: > > [Archenemy][inet[/10.0.0.xxx:9300]] connect\_timeout[30s] > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) > > at > > org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) > > at > > org.elasticsearch.cluster.service.InternalClusterService$UpdateTask.run(InternalClusterService.java:424) > > at > > org.elasticsearch.common.util.concurrent.PrioritizedEsThreadPoolExecutor$TieBreakingPrioritizedRunnable.run(PrioritizedEsThreadPoolExecutor.java:153) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > at java.lang.Thread.run(Thread.java:745) > > Caused by: java.net.ConnectException: Connection refused: /10.0.0.xxx:9300 > > at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) > > at > > sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:712) > > at > > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:150) > > at > > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105) > > at > > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79) > > at > > org.elasticsearch.common.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:318) > > at > > org.elasticsearch.common.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42) > > at > > org.elasticsearch.common.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) > > at > > org.elasticsearch.common.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) > > ... 3 more > > [2014-08-21 10:09:23,357][INFO][cluster.service] [Archenemy] > > new\_master > > [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[/10.0.0.xxx:9300]], > > reason: zen-disco-join (elected\_as\_master) > > [2014-08-21 10:09:23,481][INFO][http] [Archenemy] > > bound\_address {inet[/127.0.0.1:9200]}, publish\_address > > {inet[/10.0.0.xxx:9200]} > > [2014-08-21 10:09:23,482][INFO][node] [Archenemy] > > started > > [2014-08-21 10:09:24,128][INFO][gateway] [Archenemy] > > recovered [33] indices into cluster\_state > > [2014-08-21 10:10:20,158][WARN][cluster.service] [Archenemy] > > failed to reconnect to node > > [Archenemy][OoIM73WsQYmQANs5Z7TlgQ][xxxxxx][inet[ > > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] > > org.elasticsearch.transport.ConnectTransportException: [Archenemy][inet[ > > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300)]] connect\_timeout[30s] > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:733) > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:662) > > at > > org.elasticsearch.transport.netty.NettyTransport.connectToNode(NettyTransport.java:630) > > at > > org.elasticsearch.transport.TransportService.connectToNode(TransportService.java:146) > > at > > org.elasticsearch.cluster.service.InternalClusterService$ReconnectToNodes.run(InternalClusterService.java:537) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > at java.lang.Thread.run(Thread.java:745) > > Caused by: java.net.ConnectException: Connection refused: > > [xxxxxx.xxxxxx.net/10.0.0.xxx:9300](http://xxxxxx.xxxxxx.net/10.0.0.xxx:9300) > > > > Any config I'm missing? > > > > Thanks -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c07e5c64-bad8-42ef-920f-88096528b937%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c07e5c64-bad8-42ef-920f-88096528b937%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:07am UTC](https://discuss.elastic.co/t/trying-to-setup-stunnel-for-es/19391/4 "2017-07-06T01:07:08Z")