Comment by ssgao

For SearchGuard, only the basic auth is Apache 2.0. Anything practical you need to pay to use it.