CODEWITHSUNDEEP
elasticsearch
jerry_sjtu
jerry_sjtu

Reputation: 5456

How to disable elasticsearch http module?

The default value of "http.enabled" option in elasticsearch's configuration file is true which means that we can search and admin the cluster from http command, for example:DELETE /index_* request can delete all indexes. But this is not safe when deployment the service to the production environment. How can I fix this problem?

Upvotes: 0

Views: 724

Answers (1)

Olly Cruickshank
Olly Cruickshank

Reputation: 6180

You can either implement shield - this is free if you are paying for one of the Elasticsearch support packages.

Or implement a reverse proxy which checks each request and the user running the request, for example nginx.

Upvotes: 1

Related Questions