17 ms·
The argument is that you can't have an in-depth production guide to Elasticsearch without a section on security. "Production" should be "secure". A better title
by tmpz22 7y ago
The argument is that you can't have an in-depth production guide to Elasticsearch without a section on security. "Production" should be "secure". A better title would be "optimizing Elasticsearch performance in production" or something of the sort.
- isbvhodnvemrwvn 7y agoTo be honest I think if you're responsible for running production systems, it would be a no-brainer to run everything as closed up as it gets, with only access from servers which actually need it.
- judge2020 7y agoYet we see security breaches caused by trivial misconfigurations and bad (or no) firewall setups. Chances are, people building these systems aren't accustomed to security-first deployment and will use and bookmark a guide like this to properly set up instances, rarely if ever going back to the docs or looking at other guides.
- rhizome 7y agoChances are, people building these systems aren't accustomed to security-first deployment and will use and bookmark a guide like this to properly set up instances Or they aren't given the time, running on ASAP-brand project management and/or pushing the POC to prod.