Authentication for Prometheus remote_write ElasticSearch

[Federico Murciano]

Hello everyone,

I am using Prometheus to gather metrics from users which access the Internet using a Quectel 5G Modem and a SIM card. I cant collect metrics with a central Prometheus server from its IP:port end-points as the MNO wont allow that. 

The easiest approach that I can imagine is to deploy the Prometheus server directly at the client and use the remote_write feature to store the metrics remotely in my central server, which can be accessed using a public IP.

I am using ElasticSearch to store the metrics, which I want to query afterwards using Grafana. The  issue here is that I want to secure the port used for Prometheus remote_write using an authentication method. 

Any ideas of how can I do it? I already check for ElasticSearch authentication methods but it looks more like they secure ElasticSearch main port to allow users to interact with it, but nothing about the remote_writing port.

Thanks everyone in advance!

Bests,

Feder