Enable both HTTP and HTTP on rest layer

Hello,

I’m using ElasticSearch 6.4.3 and Search Guard 6.4.3-23.1 with Community License.

I’m trying to monitoring my cluster with Sematext, but the Sematext’s agent only talk with cluster on HTTP protocol. I want to permit HTTP requests from localhost, but only HTTPS from external requests. Can I configure Search Guard to deal with it? If yes, how?

Thank you for the attention.

You need to do that in combination with a firewall i think. Setup one (or mode) nodes with https disabled and only allow access to them via firewall rules from localhost.
You can not access a Search Guard secured node with https AND http, you need to chose one of them.

Apart from that: Are you really sure the sematext agent can not talk https? Maybe the better approach then would be to talk to sematext guys/file an issue for them?

···

Am 07.02.2019 um 14:55 schrieb victor@stilingue.com.br:

Hello,

I'm using ElasticSearch 6.4.3 and Search Guard 6.4.3-23.1 with Community License.
I'm trying to monitoring my cluster with Sematext, but the Sematext's agent only talk with cluster on HTTP protocol. I want to permit HTTP requests from localhost, but only HTTPS from external requests. Can I configure Search Guard to deal with it? If yes, how?

Thank you for the attention.

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/c1570958-1945-48b8-b9af-f0463b0e2e77%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.