How to connect a Search Head to an Indexer via Proxy Server?

[akanno]

Hi all.

I want to connect a Search Head to an Indexer via Proxy Server like so:
Search Head <===> Proxy Server <====> Indexer

I'm setting the following on the Search Head server:
http_proxy=172.31.48.51:8089
https_proxy=172.31.48.51:8089

Therefore, the Search Head was able to connect to the internet (e.g apps.splunk.com) via Proxy Server.

Search Head <===> Proxy Server <====> internet(e.g apps.splunk.com)

But the Search Head has connected directly to the Indexer.
I want to connect the search head to the indexer via Proxy Server!

Can I connect a search head to an indexer via proxy server?

[sunrise · Accepted solution]

You cannot connect from the search head to the indexer via proxy, a forward proxy server.
Because the session between a search head and an indexer may be not http, or https session as grijhwani said.

[grijhwani]

Provided the proxy has routing to the indexer, knows to proxy on the port specified, and firewalling is not intercepting the traffic as being to a non-standard port, it should be fine.

But you need to bear in mind that just because the search head can use the proxy for http/https traffic on the standard ports (80/443) doesn't mean anything with regard to its ability to relay the Splunk traffic (default destination ports 8089 and 9997 depending, on the nature of the traffic).