title: Elasticsearch endpoint as public api
body: <p>I created new elasticsearch and exposed it publicly on port 9200</p>
  
  <p>I do not want use any authorization publicly so i want to only "SELECT" operation can be done via public host. 
  In other word i want to block any "INSERT/DELETE/UPDATE" operations on public host but this operations should be done still on "localhost". How can i configure this? </p>
  
  <p>Is this common practice and is this save to expose elasticsearch endpoint directly publicly? I do not want use any middleware api that affect response speed.  </p>