# Understanding network under the hood with cross cluster search

**URL:** <https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126>\
**Category:** Elasticsearch\
**Tags:** ccs-cross-cluster-search\
**Created:** [June 11, 2019, 8:40am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126 "2019-06-11T08:40:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![michal1](https://avatars.discourse-cdn.com/v4/letter/m/b77776/32.png) [@michal1](https://discuss.elastic.co/u/michal1)\
**Post date:** [June 11, 2019, 8:40am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/1 "2019-06-11T08:40:14Z")

</div>

Hi, i would like to understand - is the communication made from coordinator node to the remote clusters done the same way as communication between nodes in single cluster, in tcp?  
Or is there a http connection done there?  
Can you link a description on the internals of this communication?

Thanks

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [June 11, 2019, 8:55am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/2 "2019-06-11T08:55:38Z")

</div>

> [@michal1](#):
>
> is the communication made from coordinator node to the remote clusters done the same way as communication between nodes in single cluster, in tcp?

The way that CCS works "under the hood" is something of an implementation detail. As it stands today, remote cluster connections use the so-called _transport_ protocol, just like connections between nodes in a single cluster. This means that Elasticsearch opens multiple parallel TCP connections and keeps them open for an extended period of time even when they're not in use. However there's no real guarantee this'll be true in all future versions.

> [@michal1](#):
>
> Can you link a description on the internals of this communication?

Not really. The internals are an implementation detail, so there isn't a lot to document outside of the code and its tests. If you have a more specific question, perhaps about how to set up your network for CCS, then perhaps we can help with that.

---

<div class="post-metadata">

**Author:** ![michal1](https://avatars.discourse-cdn.com/v4/letter/m/b77776/32.png) [@michal1](https://discuss.elastic.co/u/michal1)\
**Post date:** [June 11, 2019, 9:17am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/3 "2019-06-11T09:17:09Z")

</div>

Great, thanks.  
I am asking as a part of my attempt to understand how to secure the cluster when using CCS.  
If the communication is as you say, it means that i can't use http & ssl for encryption.  
As there a way to secure this other then using the security plugin (which was added on 6.8 but we are currently using version 5.6 ).  
Thanks

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [June 11, 2019, 9:24am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/4 "2019-06-11T09:24:56Z")

</div>

The security plugin does exist in 5.6, although it's not covered by the basic licence there. But upgrading is recommended, because [5.6 is past the end of its supported life](https://www.elastic.co/support/eol).

I think the simplest way to secure communications between two 5.6 clusters without the security plugin would be to set up a VPN, because this should be transparent to Elasticsearch.

---

<div class="post-metadata">

**Author:** ![michal1](https://avatars.discourse-cdn.com/v4/letter/m/b77776/32.png) [@michal1](https://discuss.elastic.co/u/michal1)\
**Post date:** [June 11, 2019, 9:42am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/5 "2019-06-11T09:42:33Z")

</div>

Great, thanks for the reply.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 9, 2019, 9:42am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126/6 "2019-07-09T09:42:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
