从 Heroku 访问 AWS VPC elasticsearch 节点

Question

I have a VPC for elasticsearch nodes in AWS behind an internal load balancer. How can I access the nodes from a Heroku Ruby application.

I can't have the ES nodes as public facing.

Should I instead use a proxy to secure Elasticsearch and reach the proxy from the ruby app with some URL key? Is there a simpler way?

Answer 1

You probably want to look at a proxy Authentication mechanism. I personally would recommend using something like Squid

You can read more about its Authentication support here:

http://wiki.squid-cache.org/Features/Authentication

This is a another post that talks about a similar workflow to what you have:

HTTP Spec: Proxy-Authorization and Authorization headers