Thanks for that warning, Koen. While we are on the subject, how does querying ES through Arches work, exactly?
On Wednesday, 1 February 2017 03:47:49 UTC-5, Koen Van Daele wrote: > > It might be good to point out that - as Alexei mentioned - opening up your > Elasticsearch instance to the world is a security breach and can get you > hit by ransomware attacks. As has happened recently with elasticsearch > instances around the world: > http://www.zdnet.com/article/elasticsearch-ransomware-attacks-now-number-in-the-thousands/ > So > if you do change the default setup, you need to make sure only Arches can > to talk to Elasticsearch (or you need to setup a good security system in > front of Elasticsearch). > > Cheers, > > Koen > > > *Van Daele Koen * > > Applicatiebeheerder > > > Agentschap *Onroerend Erfgoed* > > *T* 02 553 16 82, *M* 0499 94 93 68 > ------------------------------ > *Van:* [email protected] <javascript:> < > [email protected] <javascript:>> namens Adam Cox < > [email protected] <javascript:>> > *Verzonden:* dinsdag 31 januari 2017 21:52 > *Aan:* Vincent Meijer > *CC:* Arches Project > *Onderwerp:* Re: [Arches] Arches 4: ElasticSearch > > Hey Vincent, glad you brought this up. That graphic does more to show the > resulting system architecture from the commands in the dev installation > than it does to show the possible ways Arches can be setup. So, as Alexei > mentioned it is a little misleading: Arches need not be setup with > elasticsearch inside, but certain install steps allow that to happen out of > convenience. I'll fix some of the text to say that. As mentioned in the > note above the graphic, final distribution architecture isn't set yet > anyway. > > Glad we can work these wrinkles while drafting the documentation! > > Adam > > On Tue, Jan 31, 2017 at 12:25 PM, Vincent Meijer <[email protected] > <javascript:>> wrote: > >> Got it, thanks! >> >> On Tuesday, 31 January 2017 13:19:46 UTC-5, Alexei Peters wrote: >>> >>> Does it mean that external apps can query ElasticSearch only through the >>>> Arches app? >>> >>> >>> Essentially, yes, although you can open up the port to access ES >>> directly, but I would consider that a security breach. >>> >>> >>> Director of Web Development - Farallon Geographics, Inc. - 971.227.3173 >>> >>> On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer <[email protected]> >>> wrote: >>> >>>> Thanks for explaining! Could you please tell a little bit more about >>>> what it means that the Arches app acts as a proxy to ElasticSearch? >>>> Does it mean that external apps can query ElasticSearch only through >>>> the Arches app? >>>> >>>> Vincent >>>> >>>> On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote: >>>>> >>>>> Hi Vincent, >>>>> Good question! This graphic is actually a little misleading and >>>>> should be changed to show Arches app acting as a proxy to to the >>>>> Elasticsearch server. >>>>> Elasticsearch runs as a separate service and additional instances of >>>>> Elasticsearch can be setup on additional machines if needed. >>>>> Cheers, >>>>> Alexei >>>>> >>>>> >>>>> Director of Web Development - Farallon Geographics, Inc. - >>>>> 971.227.3173 >>>>> >>>>> On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer <[email protected]> >>>>> wrote: >>>>> >>>>>> In Arches 4 the ElasticSearch server is incorporated inside Arches >>>>>> itself: >>>>>> >>>>>> https://github.com/archesproject/arches/wiki/Dev-Installation#system-architecture >>>>>> >>>>>> I was wondering how this works and what the idea behind this is. It >>>>>> seems odd to me. >>>>>> E.g. How would it work if you want to run a cluster of Arches >>>>>> instances? >>>>>> >>>>>> Thanks! >>>>>> Vincent >>>>>> >>>>>> -- >>>>>> -- To post, send email to [email protected]. To >>>>>> unsubscribe, send email to [email protected]. For >>>>>> more information, visit >>>>>> https://groups.google.com/d/forum/archesproject?hl=en >>>>>> --- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Arches Project" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> >>>>> -- >>>> -- To post, send email to [email protected]. To unsubscribe, >>>> send email to [email protected]. For more information, >>>> visit https://groups.google.com/d/forum/archesproject?hl=en >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "Arches Project" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> -- >> -- To post, send email to [email protected] <javascript:>. To >> unsubscribe, send email to [email protected] <javascript:>. >> For more information, visit >> https://groups.google.com/d/forum/archesproject?hl=en >> --- >> You received this message because you are subscribed to the Google Groups >> "Arches Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > -- To post, send email to [email protected] <javascript:>. To > unsubscribe, send email to [email protected] <javascript:>. > For more information, visit > https://groups.google.com/d/forum/archesproject?hl=en > --- > You received this message because you are subscribed to the Google Groups > "Arches Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > For more options, visit https://groups.google.com/d/optout. > -- -- To post, send email to [email protected]. To unsubscribe, send email to [email protected]. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
