secure Elasticsearch without SSL

Question

I'd like to secure elasticsearch without SSL reason being, it's just too much work to maintain certificates ..

Is there a way to secure ES by setting up userid/password as we could for example with redis?

I see bunch of meos index and I think some bots are deleting our .kibana index from time to time.

This thread might help: stackoverflow.com/q/63067062/4604579 — Val
– Val, Commented Jul 31, 2020 at 3:50

Val · Accepted Answer · 2020-07-31 04:08:55Z

2

Yes, you've been meowed. See this thread for more detailed information.

As soon as you turn on XPack security, you have to configure TLS/SSL for internode-communication, that's a requirement. So it is not possible to just have basic authentication turned on and no SSL between the nodes UNLESS you have a single node. But since you're worried about too much work to maintain certificates, I assume you have several nodes, otherwise it wouldn't be an issue.

An alternative if you just want BASIC auth is to use the free version of the Readonly REST plugin.

edited Jul 31, 2020 at 4:08

answered Jul 31, 2020 at 3:55

Val

218k14 gold badges377 silver badges384 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

secure Elasticsearch without SSL

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related