x-pack ip filtering

1. ip filtering enable/disable

xpack.security.transport.filter.enabled: false

xpack.security.http.filter.enabled: true

2. ip filtering 설정

transport 설정

xpack.security.transport.filter.allow: localhost

xpack.security.transport.filter.deny: '*.google.com'

http 설정

xpack.security.http.filter.allow: 172.16.0.0/16

xpack.security.http.filter.deny: _all

3. dynamicall updating ip filter

transport allow 설정

curl -XPUT localhost:9200/_cluster/settings -d '{

    "persistent" : {

        "xpack.security.transport.filter.allow" : "172.16.0.0/24"

    }

}'

ip filtering disable

curl -XPUT localhost:9200/_cluster/settings -d '{

    "persistent" : {

        "xpack.security.transport.filter.enabled" : false

    }

}'