ElasticSearch: Allow only local requests

Question

How can allow only local requests for elasticsearch? So command like:

curl -XGET \'http://localhost:9200/twitter/_settings\'

can only be r

Answer 1

If your final goal is to deny any requests from outside the host machine, the most reliable way would be to modify the host's iptables so that it denies any incoming requests to the service ports used by ElasticSearch (9200-9300).

If the end goal is to make sure that everyone refers to the service using an exclusive DNS, you're better off achieving this with an HTTP server that can proxy requests such as HTTPd or nginx.