It might be good to point out that - as Alexei mentioned - opening up your Elasticsearch instance to the world is a security breach and can get you hit by ransomware attacks. As has happened recently with elasticsearch instances around the world: http://www.zdnet.com/article/elasticsearch-ransomware-attacks-now-number-in-the-thousands/ So if you do change the default setup, you need to make sure only Arches can to talk to Elasticsearch (or you need to setup a good security system in front of Elasticsearch).
Cheers, Koen Van Daele Koen Applicatiebeheerder Agentschap Onroerend Erfgoed T 02 553 16 82, M 0499 94 93 68 ________________________________ Van: archesproject@googlegroups.com <archesproject@googlegroups.com> namens Adam Cox <mr.adam...@gmail.com> Verzonden: dinsdag 31 januari 2017 21:52 Aan: Vincent Meijer CC: Arches Project Onderwerp: Re: [Arches] Arches 4: ElasticSearch Hey Vincent, glad you brought this up. That graphic does more to show the resulting system architecture from the commands in the dev installation than it does to show the possible ways Arches can be setup. So, as Alexei mentioned it is a little misleading: Arches need not be setup with elasticsearch inside, but certain install steps allow that to happen out of convenience. I'll fix some of the text to say that. As mentioned in the note above the graphic, final distribution architecture isn't set yet anyway. Glad we can work these wrinkles while drafting the documentation! Adam On Tue, Jan 31, 2017 at 12:25 PM, Vincent Meijer <meijer.vinc...@gmail.com<mailto:meijer.vinc...@gmail.com>> wrote: Got it, thanks! On Tuesday, 31 January 2017 13:19:46 UTC-5, Alexei Peters wrote: Does it mean that external apps can query ElasticSearch only through the Arches app? Essentially, yes, although you can open up the port to access ES directly, but I would consider that a security breach. Director of Web Development - Farallon Geographics, Inc. - 971.227.3173<tel:(971)%20227-3173> On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer <meijer....@gmail.com> wrote: Thanks for explaining! Could you please tell a little bit more about what it means that the Arches app acts as a proxy to ElasticSearch? Does it mean that external apps can query ElasticSearch only through the Arches app? Vincent On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote: Hi Vincent, Good question! This graphic is actually a little misleading and should be changed to show Arches app acting as a proxy to to the Elasticsearch server. Elasticsearch runs as a separate service and additional instances of Elasticsearch can be setup on additional machines if needed. Cheers, Alexei Director of Web Development - Farallon Geographics, Inc. - 971.227.3173 On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer <meijer....@gmail.com> wrote: In Arches 4 the ElasticSearch server is incorporated inside Arches itself: https://github.com/archesproject/arches/wiki/Dev-Installation#system-architecture I was wondering how this works and what the idea behind this is. It seems odd to me. E.g. How would it work if you want to run a cluster of Arches instances? Thanks! Vincent -- -- To post, send email to arches...@googlegroups.com. To unsubscribe, send email to archesprojec...@googlegroups.com. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesprojec...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to arches...@googlegroups.com. To unsubscribe, send email to archesprojec...@googlegroups.com. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesprojec...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to archesproject@googlegroups.com<mailto:archesproject@googlegroups.com>. To unsubscribe, send email to archesproject+unsubscr...@googlegroups.com<mailto:archesproject%2bunsubscr...@googlegroups.com>. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesproject+unsubscr...@googlegroups.com<mailto:archesproject+unsubscr...@googlegroups.com>. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to archesproject@googlegroups.com. To unsubscribe, send email to archesproject+unsubscr...@googlegroups.com. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesproject+unsubscr...@googlegroups.com<mailto:archesproject+unsubscr...@googlegroups.com>. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to archesproject@googlegroups.com. To unsubscribe, send email to archesproject+unsubscr...@googlegroups.com. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesproject+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
