Re: [Arches] Arches 4: ElasticSearch

2017-02-01 Thread Vincent Meijer 
Thanks for that warning, Koen.

While we are on the subject, how does querying ES through Arches work, 
exactly? 


On Wednesday, 1 February 2017 03:47:49 UTC-5, Koen Van Daele wrote:
>
> It might be good to point out that - as Alexei mentioned - opening up your 
> Elasticsearch instance to the world is a security breach and can get you 
> hit by ransomware attacks. As has happened recently with elasticsearch 
> instances around the world: 
> http://www.zdnet.com/article/elasticsearch-ransomware-attacks-now-number-in-the-thousands/
>  So 
> if you do change the default setup, you need to make sure only Arches can 
> to talk to Elasticsearch (or you need to setup a good security system in 
> front of Elasticsearch).
>
> Cheers,
>
> Koen
>
>
> *Van Daele Koen *
>
> Applicatiebeheerder
>
>
> Agentschap *Onroerend Erfgoed*
>
> *T* 02 553 16 82, *M* 0499 94 93 68
> --
> *Van:* arches...@googlegroups.com  <
> arches...@googlegroups.com > namens Adam Cox <
> mr.ad...@gmail.com >
> *Verzonden:* dinsdag 31 januari 2017 21:52
> *Aan:* Vincent Meijer
> *CC:* Arches Project
> *Onderwerp:* Re: [Arches] Arches 4: ElasticSearch 
>  
> Hey Vincent, glad you brought this up. That graphic does more to show the 
> resulting system architecture from the commands in the dev installation 
> than it does to show the possible ways Arches can be setup. So, as Alexei 
> mentioned it is a little misleading: Arches need not be setup with 
> elasticsearch inside, but certain install steps allow that to happen out of 
> convenience. I'll fix some of the text to say that. As mentioned in the 
> note above the graphic, final distribution architecture isn't set yet 
> anyway. 
>
> Glad we can work these wrinkles while drafting the documentation!
>
> Adam
>
> On Tue, Jan 31, 2017 at 12:25 PM, Vincent Meijer <meijer@gmail.com 
> > wrote:
>
>> Got it, thanks!
>>
>> On Tuesday, 31 January 2017 13:19:46 UTC-5, Alexei Peters wrote: 
>>>
>>> Does it mean that external apps can query ElasticSearch only through the 
>>>> Arches app? 
>>>
>>>
>>> Essentially, yes, although you can open up the port to access ES 
>>> directly, but I would consider that a security breach.   
>>>
>>>
>>> Director of Web Development - Farallon Geographics, Inc. - 971.227.3173
>>>
>>> On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer <meijer@gmail.com> 
>>> wrote:
>>>
>>>> Thanks for explaining! Could you please tell a little bit more about 
>>>> what it means that the Arches app acts as a proxy to ElasticSearch?  
>>>> Does it mean that external apps can query ElasticSearch only through 
>>>> the Arches app? 
>>>>
>>>> Vincent
>>>>
>>>> On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote: 
>>>>>
>>>>> Hi Vincent, 
>>>>> Good question!  This graphic is actually a little misleading and 
>>>>> should be changed to show Arches app acting as a proxy to to the 
>>>>> Elasticsearch server.
>>>>> Elasticsearch runs as a separate service and additional instances of 
>>>>> Elasticsearch can be setup on additional machines if needed.
>>>>> Cheers,
>>>>> Alexei
>>>>>
>>>>>
>>>>> Director of Web Development - Farallon Geographics, Inc. - 
>>>>> 971.227.3173
>>>>>
>>>>> On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer <meijer@gmail.com> 
>>>>> wrote:
>>>>>
>>>>>> In Arches 4 the ElasticSearch server is incorporated inside Arches 
>>>>>> itself: 
>>>>>>
>>>>>> https://github.com/archesproject/arches/wiki/Dev-Installation#system-architecture
>>>>>>
>>>>>> I was wondering how this works and what the idea behind this is. It 
>>>>>> seems odd to me.
>>>>>> E.g. How would it work if you want to run a cluster of Arches 
>>>>>> instances? 
>>>>>>
>>>>>> Thanks!
>>>>>> Vincent
>>>>>>
>>>>>> -- 
>>>>>> -- To post, send email to arches...@googlegroups.com. To 
>>>>>> unsubscribe, send email to archesprojec...@googlegroups.com. For 
>>>>>> more information, visit 
>>>>>> https://groups.google.com/d/forum/archesproject?hl=en
>>>>>> --- 
>

RE: [Arches] Arches 4: ElasticSearch

2017-02-01 Thread Van Daele, Koen 
It might be good to point out that - as Alexei mentioned - opening up your 
Elasticsearch instance to the world is a security breach and can get you hit by 
ransomware attacks. As has happened recently with elasticsearch instances 
around the world: 
http://www.zdnet.com/article/elasticsearch-ransomware-attacks-now-number-in-the-thousands/
 So if you do change the default setup, you need to make sure only Arches can 
to talk to Elasticsearch (or you need to setup a good security system in front 
of Elasticsearch).

Cheers,

Koen

Van Daele Koen

Applicatiebeheerder


Agentschap Onroerend Erfgoed

T 02 553 16 82, M 0499 94 93 68


Van: archesproject@googlegroups.com <archesproject@googlegroups.com> namens 
Adam Cox <mr.adam...@gmail.com>
Verzonden: dinsdag 31 januari 2017 21:52
Aan: Vincent Meijer
CC: Arches Project
Onderwerp: Re: [Arches] Arches 4: ElasticSearch

Hey Vincent, glad you brought this up. That graphic does more to show the 
resulting system architecture from the commands in the dev installation than it 
does to show the possible ways Arches can be setup. So, as Alexei mentioned it 
is a little misleading: Arches need not be setup with elasticsearch inside, but 
certain install steps allow that to happen out of convenience. I'll fix some of 
the text to say that. As mentioned in the note above the graphic, final 
distribution architecture isn't set yet anyway.

Glad we can work these wrinkles while drafting the documentation!

Adam

On Tue, Jan 31, 2017 at 12:25 PM, Vincent Meijer 
<meijer.vinc...@gmail.com<mailto:meijer.vinc...@gmail.com>> wrote:
Got it, thanks!

On Tuesday, 31 January 2017 13:19:46 UTC-5, Alexei Peters wrote:
Does it mean that external apps can query ElasticSearch only through the Arches 
app?

Essentially, yes, although you can open up the port to access ES directly, but 
I would consider that a security breach.


Director of Web Development - Farallon Geographics, Inc. - 
971.227.3173<tel:(971)%20227-3173>

On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer <meijer@gmail.com> wrote:
Thanks for explaining! Could you please tell a little bit more about what it 
means that the Arches app acts as a proxy to ElasticSearch?
Does it mean that external apps can query ElasticSearch only through the Arches 
app?

Vincent

On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote:
Hi Vincent,
Good question!  This graphic is actually a little misleading and should be 
changed to show Arches app acting as a proxy to to the Elasticsearch server.
Elasticsearch runs as a separate service and additional instances of 
Elasticsearch can be setup on additional machines if needed.
Cheers,
Alexei


Director of Web Development - Farallon Geographics, Inc. - 971.227.3173

On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer <meijer@gmail.com> wrote:
In Arches 4 the ElasticSearch server is incorporated inside Arches itself:
https://github.com/archesproject/arches/wiki/Dev-Installation#system-architecture

I was wondering how this works and what the idea behind this is. It seems odd 
to me.
E.g. How would it work if you want to run a cluster of Arches instances?

Thanks!
Vincent

--
-- To post, send email to arches...@googlegroups.com. To unsubscribe, send 
email to archesprojec...@googlegroups.com. For more information, visit 
https://groups.google.com/d/forum/archesproject?hl=en
---
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesprojec...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--
-- To post, send email to arches...@googlegroups.com. To unsubscribe, send 
email to archesprojec...@googlegroups.com. For more information, visit 
https://groups.google.com/d/forum/archesproject?hl=en
---
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesprojec...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--
-- To post, send email to 
archesproject@googlegroups.com<mailto:archesproject@googlegroups.com>. To 
unsubscribe, send email to 
archesproject+unsubscr...@googlegroups.com<mailto:archesproject%2bunsubscr...@googlegroups.com>.
 For more information, visit 
https://groups.google.com/d/forum/archesproject?hl=en
---
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
archesproject+unsubscr...@googlegroups.com<mailto:archesproject+unsubscr...@googlegroups.com>.
For more options, visit https://groups.google.com/d/optout.


--
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, sen

Re: [Arches] Arches 4: ElasticSearch

2017-01-31 Thread Adam Cox 
Hey Vincent, glad you brought this up. That graphic does more to show the
resulting system architecture from the commands in the dev installation
than it does to show the possible ways Arches can be setup. So, as Alexei
mentioned it is a little misleading: Arches need not be setup with
elasticsearch inside, but certain install steps allow that to happen out of
convenience. I'll fix some of the text to say that. As mentioned in the
note above the graphic, final distribution architecture isn't set yet
anyway.

Glad we can work these wrinkles while drafting the documentation!

Adam

On Tue, Jan 31, 2017 at 12:25 PM, Vincent Meijer 
wrote:

> Got it, thanks!
>
> On Tuesday, 31 January 2017 13:19:46 UTC-5, Alexei Peters wrote:
>>
>> Does it mean that external apps can query ElasticSearch only through the
>>> Arches app?
>>
>>
>> Essentially, yes, although you can open up the port to access ES
>> directly, but I would consider that a security breach.
>>
>>
>> Director of Web Development - Farallon Geographics, Inc. - 971.227.3173
>> <(971)%20227-3173>
>>
>> On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer 
>> wrote:
>>
>>> Thanks for explaining! Could you please tell a little bit more about
>>> what it means that the Arches app acts as a proxy to ElasticSearch?
>>> Does it mean that external apps can query ElasticSearch only through the
>>> Arches app?
>>>
>>> Vincent
>>>
>>> On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote:

 Hi Vincent,
 Good question!  This graphic is actually a little misleading and should
 be changed to show Arches app acting as a proxy to to the Elasticsearch
 server.
 Elasticsearch runs as a separate service and additional instances of
 Elasticsearch can be setup on additional machines if needed.
 Cheers,
 Alexei


 Director of Web Development - Farallon Geographics, Inc. - 971.227.3173

 On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer 
 wrote:

> In Arches 4 the ElasticSearch server is incorporated inside Arches
> itself:
> https://github.com/archesproject/arches/wiki/Dev-Installatio
> n#system-architecture
>
> I was wondering how this works and what the idea behind this is. It
> seems odd to me.
> E.g. How would it work if you want to run a cluster of Arches
> instances?
>
> Thanks!
> Vincent
>
> --
> -- To post, send email to arches...@googlegroups.com. To unsubscribe,
> send email to archesprojec...@googlegroups.com. For more information,
> visit https://groups.google.com/d/forum/archesproject?hl=en
> ---
> You received this message because you are subscribed to the Google
> Groups "Arches Project" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to archesprojec...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

 --
>>> -- To post, send email to arches...@googlegroups.com. To unsubscribe,
>>> send email to archesprojec...@googlegroups.com. For more information,
>>> visit https://groups.google.com/d/forum/archesproject?hl=en
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "Arches Project" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to archesprojec...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>> --
> -- To post, send email to archesproject@googlegroups.com. To unsubscribe,
> send email to archesproject+unsubscr...@googlegroups.com. For more
> information, visit https://groups.google.com/d/forum/archesproject?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Arches Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to archesproject+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, send 
email to archesproject+unsubscr...@googlegroups.com. For more information, 
visit https://groups.google.com/d/forum/archesproject?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesproject+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Arches] Arches 4: ElasticSearch

2017-01-31 Thread Alexei Peters 
>
> Does it mean that external apps can query ElasticSearch only through the
> Arches app?


Essentially, yes, although you can open up the port to access ES directly,
but I would consider that a security breach.


Director of Web Development - Farallon Geographics, Inc. - 971.227.3173

On Tue, Jan 31, 2017 at 10:14 AM, Vincent Meijer 
wrote:

> Thanks for explaining! Could you please tell a little bit more about what
> it means that the Arches app acts as a proxy to ElasticSearch?
> Does it mean that external apps can query ElasticSearch only through the
> Arches app?
>
> Vincent
>
> On Tuesday, 31 January 2017 12:44:33 UTC-5, Alexei Peters wrote:
>>
>> Hi Vincent,
>> Good question!  This graphic is actually a little misleading and should
>> be changed to show Arches app acting as a proxy to to the Elasticsearch
>> server.
>> Elasticsearch runs as a separate service and additional instances of
>> Elasticsearch can be setup on additional machines if needed.
>> Cheers,
>> Alexei
>>
>>
>> Director of Web Development - Farallon Geographics, Inc. - 971.227.3173
>> <(971)%20227-3173>
>>
>> On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer 
>> wrote:
>>
>>> In Arches 4 the ElasticSearch server is incorporated inside Arches
>>> itself:
>>> https://github.com/archesproject/arches/wiki/Dev-Installatio
>>> n#system-architecture
>>>
>>> I was wondering how this works and what the idea behind this is. It
>>> seems odd to me.
>>> E.g. How would it work if you want to run a cluster of Arches instances?
>>>
>>> Thanks!
>>> Vincent
>>>
>>> --
>>> -- To post, send email to arches...@googlegroups.com. To unsubscribe,
>>> send email to archesprojec...@googlegroups.com. For more information,
>>> visit https://groups.google.com/d/forum/archesproject?hl=en
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "Arches Project" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to archesprojec...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>> --
> -- To post, send email to archesproject@googlegroups.com. To unsubscribe,
> send email to archesproject+unsubscr...@googlegroups.com. For more
> information, visit https://groups.google.com/d/forum/archesproject?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Arches Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to archesproject+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, send 
email to archesproject+unsubscr...@googlegroups.com. For more information, 
visit https://groups.google.com/d/forum/archesproject?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesproject+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Arches] Arches 4: ElasticSearch

2017-01-31 Thread Alexei Peters 
Hi Vincent,
Good question!  This graphic is actually a little misleading and should be
changed to show Arches app acting as a proxy to to the Elasticsearch server.
Elasticsearch runs as a separate service and additional instances of
Elasticsearch can be setup on additional machines if needed.
Cheers,
Alexei


Director of Web Development - Farallon Geographics, Inc. - 971.227.3173

On Tue, Jan 31, 2017 at 8:28 AM, Vincent Meijer 
wrote:

> In Arches 4 the ElasticSearch server is incorporated inside Arches itself:
> https://github.com/archesproject/arches/wiki/Dev-Installation#system-
> architecture
>
> I was wondering how this works and what the idea behind this is. It seems
> odd to me.
> E.g. How would it work if you want to run a cluster of Arches instances?
>
> Thanks!
> Vincent
>
> --
> -- To post, send email to archesproject@googlegroups.com. To unsubscribe,
> send email to archesproject+unsubscr...@googlegroups.com. For more
> information, visit https://groups.google.com/d/forum/archesproject?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Arches Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to archesproject+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, send 
email to archesproject+unsubscr...@googlegroups.com. For more information, 
visit https://groups.google.com/d/forum/archesproject?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesproject+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.