Elasticsearch 7.1 provides free security components

Elasticsearch B.V. formed new releases of the data search, analysis and storage platform Elasticsearch 6.8.0 and 7.1.0. The releases are notable for providing free security-related features.

The following are now available for free use:

  • Components for traffic encryption using the TLS protocol;
  • Opportunities for creating and managing users;
  • Role-Based Access Control (RBAC) to separate user access to individual APIs and search indexes.

Previously, these components were offered as part of a proprietary edition of the platform and were available only to paid subscribers with “Gold” status. These features are now included in the public builds offered through the Basic bundle. At the same time, in the current open set of these possibilities not included, despite the fact that their code was formally open source about a year ago (despite the presence of the code, the features in question required a paid subscription and were not included in the “Open Source” version).

Only basic security features have been transferred to the free category, and the implementation of a single point of sign-on (SSO), modules for authentication through Active Directory, Kerberos, SAML and OpenID, as well as the ability to restrict access at the level of individual fields and documents remain paid.

Relaxation of the product distribution model was undertaken after formation Amazon, Expedia Group and Netflix have their own completely open and free distribution "Open Distro for Elasticsearch", suitable for use in enterprises and including open components to replace the advanced paid features of the original proprietary edition of Elasticsearch. In addition to security tools, Open Distro for Elasticsearch provides open components for SQL support, event tracking, notification generation, diagnostics, and cluster performance analysis. The latest release of Open Distro for Elasticsearch 0.9 is based on the Elasticsearch platform core 6.7.1.

Source: opennet.ru

Add a comment