Apache configuration for securing ElasticSearch server.

es.conf

<VirtualHost *:80>
        DocumentRoot /var/www/html
        ServerName app-example.rhcloud.com
        ServerAlias alias1-example.rhcloud.com
        ProxyRequests Off
        ProxyVia Off
        Header set Access-Control-Allow-Origin "*"

        # Proxy Redirect for ElasticSearch.
        ProxyPass /es http://localhost:9200 connectiontimeout=5 timeout=300
        ProxyPassReverse /es http://localhost:9200

        <LocationMatch /es>
                Order deny,allow
                Deny from all
        </LocationMatch>

        <LocationMatch "/es/.+/_search">
                Order allow,deny
                Allow from all
                <Limit PUT DELETE>
                        Deny from all
                </Limit>
        </LocationMatch>

        # Additionally, on SELinux enabled hosts
        # # setsebool -P httpd_can_network_connect true


</VirtualHost>