After bending the knee at the altar of Open-Source, the blog post recommends Open Distro for Elasticsearch's Security plugin. ODfE's Security plugin is a fork

After bending the knee at the altar of Open-Source, the blog post recommends Open Distro for Elasticsearch's Security plugin. ODfE's Security plugin is a fork of floragunn GmbH's mixed-license Search Guard product, including the bits that floragunn charges for. This seems to have been done with floragunn's blessing - presumably Amazon paid floragunn for this. But Elasticsearch B.V (the company) accuses floragunn of stealing Elastic's non-free X-Pack security software to create Search Guard, putting both Search Guard and ODfE's Security plugin on shaky legal ground. I remember reading about this lawsuit on Elasticsearch's (admittedly slanted) blog, not sure how far the lawsuit has gone from there: https://www.elastic.co/blog/dear-search-guard-users-including-amazon-elasticsearch-service-open-distro-and-others https://www.elastic.co/blog/dear-search-guard-users-includin... Amazon of course says that Elasticsearch's claims are baseless: https://aws.amazon.com/blogs/opensource/launching-open-distro-for-elasticsearch-security-features-on-amazon-elasticsearch-service/ https://aws.amazon.com/blogs/opensource/launching-open-distr... In either case, I'm not sure that ODfE will be trouble-free in terms of licensing issues, depending on how these lawsuits go.