i try to revive this thread, iam searching for something really similar to this topic.
we know that transport layer 9300 should stay in the backend in a special DMZ so it shouldnt need a secure application transport layer ( could be enought an ipsec tunnel ) , but how can we secure the http layer ? i mean we send documents with logstash from toons of source around the world , how Logstash can send documents with Https enabled ? ( From Elasticsearch side i can setup e nginx istance that has load balancing and reverse proxy activated obviusly with https enabled and a self signed certificate, but i didnt find any https or ssl support for Logstash and his Elasticsearch output plugin ). VPN isent a good choice only if there nothing better.. Regards Stefano Il giorno giovedì 9 gennaio 2014 14:31:32 UTC+1, David Pilato ha scritto: > > We don't have that at this time. > Basically, elasticsearch nodes are very often in a backend layer so > securing transport is not something really needed as it comes also with a > cost. > > Could you secure your transmissions on a network level? > > -- > David ;-) > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > Le 9 janv. 2014 à 13:30, Maciej Stoszko <[email protected] <javascript:>> > a écrit : > > > Thanks David, > > Does it mean that, at least currently, there is no avenue to secure > transport layer with SSL? > > Maciej > > > > -- > > You received this message because you are subscribed to the Google > Groups "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] <javascript:>. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/9a48efe8-143f-49ab-b216-7cca6f95f25e%40googlegroups.com. > > > > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/cedc5914-4e17-43c0-a78c-075c341a4fa0%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
