Lance Lakey wrote:

Leave port 9200 open to everything but only allow search requests so that all web clients can access ES but can only search

Configure application servers to use port 9500 to communicate with ES Configure firewalls to only allow application servers access to ES port 9500 Allow all commands on port 9500 Eventually set up authentication on port 9500

Use a proxy listening on different ports (or vhosts, each with different authorization) to redirect to the single ES port.

Drew

--
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/m238fuyk54.fsf%40mid.raines.me.
For more options, visit https://groups.google.com/d/optout.

Reply via email to