Comments (4)
Hi,
not sure I fully understand which use cases you mean. Do you think you can provide more details about your setup?
Do you mean that you install Elasticsearch behind authenticated proxy and you run Bigdesk locally and want to connect to this ES instance? If yes, then most of the browsers should ask for credentials (given the proxy returns correct HTTP response codes like 401 or 407), you can also provide username and password as a part of URL connection string:
https://username:password@es_host:port
(always make sure you use https)
If you mean that you want to give access to Bigdesk to authenticated users only then you have to setup this on your side. But this might be tricky because Bigdesk users standard ES REST API so if you want to restrict access to Bigdesk you should also restrict access to ES instance Bigdesk is connecting to. Otherwise users can bypass Bigdesk and make direct requests to ES.
from bigdesk.
@lukas-vlcek Firstly, I'm trying to host bigdesk in our local infrastructure. Then I want to connect to my proxy endpoint, but right now thats not password secured, its blocked by firewall, meaning our app can only talk to the endpoint, not from outside.
Now I'm planning to put authentication on my proxy and make connection from bigdesk. I'll restrict bigdesk access out of LAN. I think this setup should be secure. Let me know your thoughts. Thanks.
from bigdesk.
I often use Bigdesk in scenario where I make connections like: Bigdesk => Proxy => ES. And it works fine, if the proxy requires authentication, no problem, most of the browsers will ask for credentials. But generally speaking Bigdesk does not have any special features addressing user roles or advanced authentication requirements.
Also keep in mind that Bigdesk can put some load on ES, the more data it pulls from ES the more resources it can require. With growing cluster size (ie. more nodes) there is more data that is send from ES to Bigdesk. So having multiple client (each with his own instance of Bigdesk) connecting to the same ES cluster can go with some cost.
Anyway, closing the ticket for now. Feel free to reopen if you have further questions.
Thanks.
from bigdesk.
ok Thanks.
from bigdesk.
Related Issues (20)
- Problems with Apache reverse proxy and bigdesk plugin HOT 1
- can't install plugin with elasticsearch 2.0.0 HOT 18
- File not found plugin-descriptor.properties HOT 2
- why i can't find plugin-descriptor.properties in this branch HOT 8
- about 'normalizedDeltaToSeconds' on line 43 HOT 2
- _site plugins will be dropped in Elasticsearch HOT 2
- v2.5.0 bigdesk won't show any graphs HOT 2
- big desk installation fails on ES 2.1.0 HOT 2
- can't install plugin with elasticsearch 2.2.0 HOT 6
- Syntax Error HOT 1
- Cant install big desk plugin as plugin-descriptor.properties in plugin zip is missing HOT 16
- Add units in charts(Y-axis) HOT 1
- Bigdesk behind Nginx RP HOT 1
- cannt install bigdesk HOT 6
- Any plan to release a supported version for ES 2.x ? HOT 1
- Empty graphics in bigdesk plugin HOT 2
- Is possible for supporting elasticsearch5.x.y ? HOT 4
- how to support elasticsearch with search-guard HOT 4
- checkVersion error HOT 1
- bigdesk.org HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bigdesk.