I built a simple nodejs-based proxy that's meant to sit in front of a world exposed solr instance: https://github.com/dergachev/solr-security-proxy/

Perhaps it could be adapted to the elasticsearch scenario.