Authentication proxy

Question

I have deployed an opnesource public webservice (elasticsearch) on my Ubuntu. Problem is - no security at all (only if you pay).

I've researched a bit about blocking port only to internal requests while allowing external access only through authentication proxy.

The simplest way was nginx with basic authentication.

But what's the best practice in those cases? What are my other options?

Answer 1

这个问题可以在ServerFault上找到更好的家，但是您可能会发现您将要使用iptables阻止所有端口（“身份验证代理”除外）上的所有外部IP。