best practices for accessing elasticsearch on proxmox ct

[emileplas]

Hey everyone!

I am running elasticsearch and kibana on a ct on my proxmox server. In order to let users of my webapp use the elasticsearch server, I need a public access to elasticsearch. What are the best practices to set this up? Do I just do a port forward to the elasticsearch ct or are there other best practices that need to be taken into account?

Thank you in advance and kind regards.
Emile

 

[oguz]

hi,

I need a public access to elasticsearch. What are the best practices to set this up? Do I just do a port forward to the elasticsearch ct or are there other best practices that need to be taken into account?

yeah, you can make a portforward to your container's IP address and the port for the elastic search. you can take a look here [0] if you only have a single public IP address available for your node.

for the actual port forwarding basically you can just run an iptables command:

INTERFACE=enp1s0 # change this to your interface's name, check with 'ip a'
EXT_PORT=${1}
INTERN_IP=${2}
INTERN_PORT=${3}
iptables -t nat -A PREROUTING -i $INTERFACE -p tcp --dport $EXT_PORT -j DNAT --to $INTERN_IP:$INTERN_PORT

if you need to forward a udp port, change the -p tcp part to [/icode]-p udp[/icode]

[0]: https://pve.proxmox.com/wiki/Networ...ith_tt_span_class_monospaced_iptables_span_tt