# Is it possible to install searchguard on ES5 without enabling ssl/tls **URL:** \ **Category:** Search Guard\ **Created:** [April 26, 2017, 3:01pm UTC](https://forum.search-guard.com/t/is-it-possible-to-install-searchguard-on-es5-without-enabling-ssl-tls/442 "2017-04-26T15:01:23Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![waseempresenso](https://avatars.discourse-cdn.com/v4/letter/w/6de8d8/32.png) [@waseempresenso](https://forum.search-guard.com/u/waseempresenso)\ **Post date:** [April 26, 2017, 3:01pm UTC](https://forum.search-guard.com/t/is-it-possible-to-install-searchguard-on-es5-without-enabling-ssl-tls/442/1 "2017-04-26T15:01:23Z")
Good day, We have a server which includes a cluster with multiple ES5 nodes. Our system processes big data on real-time so we have strict performance consideration. Therefore, we have no internal security protocols securing the transfers between nodes, instead, we have external security for our servers. Is there still a way to install searchguard on ES5 without enabling ssl/tls? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [April 28, 2017, 5:46pm UTC](https://forum.search-guard.com/t/is-it-possible-to-install-searchguard-on-es5-without-enabling-ssl-tls/442/2 "2017-04-28T17:46:03Z")
Quick answer is: TLS is mandatory on the transport layer (inter-node), and optional on the REST layer. So, no, you cannot disable TLS on the transport layer, because this would introduce all kinds of security flaws. If you’re interested in why we are so strict about this, we’ve written an article about our decision here: > **[Security and Alerting for Elasticsearch and Kibana | Search Guard](https://search-guard.com/)** > > Search Guard is an Open Source security plugin for Elasticsearch, Kibana and the entire ELK stack. Search Guard offers encryption, authentication, authorization, audit logging, compliance as well as alerting and anomaly detection features. > **···** > > On Wednesday, April 26, 2017 at 5:01:24 PM UTC+2, [waseempresenso@gmail.com](mailto:waseempresenso@gmail.com) wrote: > > > Good day, > > > We have a server which includes a cluster with multiple ES5 nodes. Our system processes big data on real-time so we have strict performance consideration. Therefore, we have no internal security protocols securing the transfers between nodes, instead, we have external security for our servers. > > > > > > Is there still a way to install searchguard on ES5 without enabling ssl/tls? ---
**Author:** ![waseempresenso](https://avatars.discourse-cdn.com/v4/letter/w/6de8d8/32.png) [@waseempresenso](https://forum.search-guard.com/u/waseempresenso)\ **Post date:** [April 30, 2017, 8:09am UTC](https://forum.search-guard.com/t/is-it-possible-to-install-searchguard-on-es5-without-enabling-ssl-tls/442/3 "2017-04-30T08:09:44Z")
Many thanks for your response. I will consider that before start working with the searchguard. Best regards > **···** > > On Friday, April 28, 2017 at 8:46:04 PM UTC+3, Jochen Kressin wrote: > > > Quick answer is: TLS is mandatory on the transport layer (inter-node), and optional on the REST layer. So, no, you cannot disable TLS on the transport layer, because this would introduce all kinds of security flaws. > > > If you’re interested in why we are so strict about this, we’ve written an article about our decision here: > > > > > > [https://floragunn.com/search-guard-ssl-tls/](https://floragunn.com/search-guard-ssl-tls/) > > > > On Wednesday, April 26, 2017 at 5:01:24 PM UTC+2, [waseemp...@gmail.com](mailto:waseemp...@gmail.com) wrote: > > > > > Good day, > > > > We have a server which includes a cluster with multiple ES5 nodes. Our system processes big data on real-time so we have strict performance consideration. Therefore, we have no internal security protocols securing the transfers between nodes, instead, we have external security for our servers. > > > > > > > > Is there still a way to install searchguard on ES5 without enabling ssl/tls? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [May 9, 2017, 7:29pm UTC](https://forum.search-guard.com/t/is-it-possible-to-install-searchguard-on-es5-without-enabling-ssl-tls/442/4 "2017-05-09T19:29:49Z")
BTW - looks like Elastic / X-Pack is going the same route: [https://www.elastic.co/blog/elasticsearch-6-0-0-alpha1-released](https://www.elastic.co/blog/elasticsearch-6-0-0-alpha1-released) "TLS between nodes is required in X-Pack in 6.0 " > **···** > > On Sunday, April 30, 2017 at 10:09:44 AM UTC+2, [waseempresenso@gmail.com](mailto:waseempresenso@gmail.com) wrote: > > > Many thanks for your response. I will consider that before start working with the searchguard. > > > > Best regards > > > On Friday, April 28, 2017 at 8:46:04 PM UTC+3, Jochen Kressin wrote: > > > > > Quick answer is: TLS is mandatory on the transport layer (inter-node), and optional on the REST layer. So, no, you cannot disable TLS on the transport layer, because this would introduce all kinds of security flaws. > > > > If you’re interested in why we are so strict about this, we’ve written an article about our decision here: > > > > > > > > [https://floragunn.com/search-guard-ssl-tls/](https://floragunn.com/search-guard-ssl-tls/) > > > > > > On Wednesday, April 26, 2017 at 5:01:24 PM UTC+2, [waseemp...@gmail.com](mailto:waseemp...@gmail.com) wrote: > > > > > > > Good day, > > > > > We have a server which includes a cluster with multiple ES5 nodes. Our system processes big data on real-time so we have strict performance consideration. Therefore, we have no internal security protocols securing the transfers between nodes, instead, we have external security for our servers. > > > > > > > > > > Is there still a way to install searchguard on ES5 without enabling ssl/tls?