External LB

[VK18]

Hi Team,

We have the current infrastructure :

UF -> HF -> Indexers

Now, the question here is can we set up external load balancer between UF and HF ? The reason is we got 6 HF's and 20UF's spread across different zones. Opening Firewall ports will be tedious task from 20 UF's to 6 HF's  as this OT environment and we do not want to expose multiple IP's due to security reasons.

Regards
VK

[gcusello]

Hi @VK18,

I confirm the position of Splunk described by @isoutamo  and I add a question:

why should you use an additional expensive resource as a Load Balancer for a role not requested because Splunk already has its own autoloadbalancing only for a configuration in a firewall that can request maximum 30 minutes?

Ciao.

Giuseppe

[isoutamo]

Hi

if you are using s2s between UF and HF the official answer in no. Splunk doesn’t support real LB between those. If you are using http for transportation then (in my understanding, haven’t use it) you can.

r. Ismo