Hi Guys, I'm setting up IC Cloud and have configured it to work with Elasticsearch from Elastic.co. That's working. However, I'd like to try this with my own Elasticsearch server because the price is less than half of what Elastic.co will charge for the hosted service.

I want to lock down my server with UFW firewall rules, so only IC Cloud can access Elasticsearch on my server. This is pretty easy for most things, using a simple rules like this:

sudo ufw allow from IP_ADDRESS to any port 9200

IC Cloud obviously doesn't have a single IP address. Perhaps it has range, which I can also use.

Question: Is there an IP range used by IC Cloud or is there another way people use to lockdown services to only allow their IC Cloud sites to access them?

There is no specific IPs we are able to give unfortunately. However as the service utilises Amazons services, they do have facilities for you to look up any IP ranges being used at a given time, if that helps?

https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-work-with.html

Just now, Marc said:

There is no specific IPs we are able to give unfortunately. However as the service utilises Amazons services, they do have facilities for you to look up any IP ranges being used at a given time, if that helps?

https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-work-with.html

Thanks Marc. That helps, but I wonder if that's a bit too broad. Allowing all AWS hosts to access the server might be more risky than I want.

If there was an IC Cloud add-on for Elasticsearch, I'd be very interested.

Narrowing it down to US-East-1 will get you close. I can get that confirmed, but I think thats as close as you are going to get there

8 minutes ago, Marc said:

Narrowing it down to US-East-1 will get you close. I can get that confirmed, but I think thats as close as you are going to get there

Ok, that's helpful. I pulled all the IP ranges for US-East-1 and only EC2 as the service.