Loading

Remote clusters on Elastic Cloud Hosted

ECH

You can configure an Elastic Cloud Hosted deployment to either connect to remote clusters or accept connections from:

  • Another Elastic Cloud Hosted deployment of your Elastic Cloud organization, across any region or cloud provider (AWS, GCP, Azure…)
  • An Elastic Cloud Hosted deployment of another Elastic Cloud organization
  • A deployment in an Elastic Cloud Enterprise installation
  • A deployment in an Elastic Cloud on Kubernetes installation
  • A self-managed installation.
Note

Refer to Remote clusters and network security for details on how remote clusters interact with network security policies and the implications for your deployments.

To use CCS or CCR, your deployments must meet the following criteria:

  • The local and remote clusters must run on compatible versions of Elasticsearch. Review the version compatibility table.

    Version compatibility table
    • Any node can communicate with another node on the same major version. For example, 9.0 can talk to any 9.x node.
    • Version compatibility is symmetric, meaning that if 7.16 can communicate with 8.0, 8.0 can also communicate with 7.16. The following table depicts version compatibility between local and remote nodes.
    Note

    Version 8.19 is the final minor release in the 8.x series. Unlike past releases, 8.18 was launched simultaneously with 9.0, allowing cross-version compatibility between them. Hence, as shown in the compatibility table, 8.18 can search 9.0 clusters, but only 8.19 supports searching 9.1 and later.
    Remote cluster version
    Local cluster version 7.17 8.0 8.1 8.2 8.3 8.4 8.5 8.6 8.7 8.8 8.9 8.10 8.11 8.12 8.13 8.14 8.15 8.16 8.17 8.18 8.19 9.0 9.1
    7.17 Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.0 Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.1 No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.2 No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.3 No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.4 No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.5 No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.6 No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.7 No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.8 No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.9 No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.10 No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.11 No No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.12 No No No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.13 No No No No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes No No
    8.14 No No No No No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes No No
    8.15 No No No No No No No No No No No No No No No Yes Yes Yes Yes Yes Yes No No
    8.16 No No No No No No No No No No No No No No No No Yes Yes Yes Yes Yes No No
    8.17 No No No No No No No No No No No No No No No No No Yes Yes Yes Yes No No
    8.18 No No No No No No No No No No No No No No No No No No Yes Yes Yes Yes No
    8.19 No No No No No No No No No No No No No No No No No No No Yes Yes Yes Yes
    9.0 No No No No No No No No No No No No No No No No No No No Yes No Yes Yes
    9.1 No No No No No No No No No No No No No No No No No No No No Yes Yes Yes

  • If your deployment was created before February 2021, the Remote clusters page in Kibana must be enabled manually from the Security page of your deployment, by selecting Enable CCR under Trust management.

The steps, information, and authentication method required to configure CCS and CCR can vary depending on where the clusters you want to use as remote are hosted.

If you have network security policies applied to the remote cluster, you might need to take extra steps on the remote side to allow traffic from the local cluster. Some remote cluster configurations have limited compatibility with network security. To learn more, refer to Remote clusters and network security.