Package org.elasticsearch.xpack.security.transport.filter

Class IPFilter

java.lang.Object

org.elasticsearch.xpack.security.transport.filter.IPFilter

public class IPFilter
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final org.elasticsearch.common.settings.Setting<Boolean>	ALLOW_BOUND_ADDRESSES_SETTING
static final SecurityIpFilterRule	DEFAULT_PROFILE_ACCEPT_ALL
static final Map<String,Object>	DISABLED_USAGE_STATS
static final org.elasticsearch.common.settings.Setting<List<String>>	HTTP_FILTER_ALLOW_SETTING
static final org.elasticsearch.common.settings.Setting<List<String>>	HTTP_FILTER_DENY_SETTING
static final String	HTTP_PROFILE_NAME	.http has been chosen for handling HTTP filters, which are not part of the profiles The profiles are only handled for the transport protocol, so we need an own kind of profile for HTTP.
static final org.elasticsearch.common.settings.Setting<Boolean>	IP_FILTER_ENABLED_HTTP_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	IP_FILTER_ENABLED_SETTING
static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	PROFILE_FILTER_ALLOW_SETTING
static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	PROFILE_FILTER_DENY_SETTING
static final org.elasticsearch.common.settings.Setting<List<String>>	TRANSPORT_FILTER_ALLOW_SETTING
static final org.elasticsearch.common.settings.Setting<List<String>>	TRANSPORT_FILTER_DENY_SETTING

Constructor Summary

Constructors

Constructor	Description
IPFilter(org.elasticsearch.common.settings.Settings settings, AuditTrailService auditTrailService, org.elasticsearch.common.settings.ClusterSettings clusterSettings, org.elasticsearch.license.XPackLicenseState licenseState)

Method Summary

Modifier and Type	Method	Description
boolean	accept(String profile, InetSocketAddress peerAddress)
static void	addSettings(List<org.elasticsearch.common.settings.Setting<?>> settings)
void	setBoundHttpTransportAddress(org.elasticsearch.common.transport.BoundTransportAddress boundHttpTransportAddress)
void	setBoundTransportAddress(org.elasticsearch.common.transport.BoundTransportAddress boundTransportAddress, Map<String,org.elasticsearch.common.transport.BoundTransportAddress> profileBoundAddress)
Map<String,Object>	usageStats()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

HTTP_PROFILE_NAME

public static final String HTTP_PROFILE_NAME

.http has been chosen for handling HTTP filters, which are not part of the profiles The profiles are only handled for the transport protocol, so we need an own kind of profile for HTTP. This name starts withs a dot, because no profile name can ever start like that due to how we handle settings

See Also:

• Constant Field Values

ALLOW_BOUND_ADDRESSES_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> ALLOW_BOUND_ADDRESSES_SETTING

IP_FILTER_ENABLED_HTTP_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> IP_FILTER_ENABLED_HTTP_SETTING

IP_FILTER_ENABLED_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> IP_FILTER_ENABLED_SETTING

TRANSPORT_FILTER_ALLOW_SETTING

public static final org.elasticsearch.common.settings.Setting<List<String>> TRANSPORT_FILTER_ALLOW_SETTING

TRANSPORT_FILTER_DENY_SETTING

public static final org.elasticsearch.common.settings.Setting<List<String>> TRANSPORT_FILTER_DENY_SETTING

PROFILE_FILTER_DENY_SETTING

public static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> PROFILE_FILTER_DENY_SETTING

PROFILE_FILTER_ALLOW_SETTING

public static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> PROFILE_FILTER_ALLOW_SETTING

HTTP_FILTER_ALLOW_SETTING

public static final org.elasticsearch.common.settings.Setting<List<String>> HTTP_FILTER_ALLOW_SETTING

HTTP_FILTER_DENY_SETTING

public static final org.elasticsearch.common.settings.Setting<List<String>> HTTP_FILTER_DENY_SETTING

DISABLED_USAGE_STATS

public static final Map<String,Object> DISABLED_USAGE_STATS

DEFAULT_PROFILE_ACCEPT_ALL

public static final SecurityIpFilterRule DEFAULT_PROFILE_ACCEPT_ALL

Constructor Details

IPFilter

public IPFilter(org.elasticsearch.common.settings.Settings settings,
 AuditTrailService auditTrailService,
 org.elasticsearch.common.settings.ClusterSettings clusterSettings,
 org.elasticsearch.license.XPackLicenseState licenseState)

Method Details

usageStats

public Map<String,Object> usageStats()

accept

public boolean accept(String profile,
 InetSocketAddress peerAddress)

setBoundTransportAddress

public void setBoundTransportAddress(org.elasticsearch.common.transport.BoundTransportAddress boundTransportAddress,
 Map<String,org.elasticsearch.common.transport.BoundTransportAddress> profileBoundAddress)

setBoundHttpTransportAddress

public void setBoundHttpTransportAddress(org.elasticsearch.common.transport.BoundTransportAddress boundHttpTransportAddress)

addSettings

public static void addSettings(List<org.elasticsearch.common.settings.Setting<?>> settings)