topic External LB in Getting Data In

External LB

VK18 — Fri, 07 Jul 2023 01:20:17 GMT

Hi Team,

We have the current infrastructure :

UF -> HF -> Indexers

Now, the question here is can we set up external load balancer between UF and HF ? The reason is we got 6 HF's and 20UF's spread across different zones. Opening Firewall ports will be tedious task from 20 UF's to 6 HF's as this OT environment and we do not want to expose multiple IP's due to security reasons.

Regards
VK

Re: External LB

isoutamo — Fri, 07 Jul 2023 05:54:09 GMT

if you are using s2s between UF and HF the official answer in no. Splunk doesn’t support real LB between those. If you are using http for transportation then (in my understanding, haven’t use it) you can.

r. Ismo

Re: External LB

gcusello — Fri, 07 Jul 2023 06:07:29 GMT

Hi @VK18,

I confirm the position of Splunk described by @isoutamo and I add a question:

why should you use an additional expensive resource as a Load Balancer for a role not requested because Splunk already has its own autoloadbalancing only for a configuration in a firewall that can request maximum 30 minutes?

Ciao.

Giuseppe