Filebeat to logstash using proxy_url

Elastic Stack Beats
1

Hi,

Can somebody provide practical use case to use proxy_url when connecting logstash using filbeat output.logstash plugin?

br,
Sunil

2

Did you already check out the docs here? https://www.elastic.co/guide/en/beats/filebeat/5.0/logstash-output.html#_proxy_url_2

3

Hi Ruflin,
I am not good in networking.

We have F5 and A10 load balancers in our environments.
Can I use proxy_url setting using SOCKS5 protocol to send message to logstash behind this load balancer?

br,
Sunil

4

Hi,
Or other way round:

What kind of configurations need to be supportd by F5 and A10 load balancers or reverse proxy, when we want to use above configuration? (proxy_url)

I understood one thing is, it should support SOCKS5 protocol. Is that correct? anything apart from this?

br,
Sunil

5

If your intended architecture is FB -> LB -> LS then you don't need a SOCKS5 proxy. You can just point the Logstash output in Filebeat at the load balancer. But be aware that the connection to LS is persistent (see https://github.com/elastic/beats/issues/661).

                                         +----->  Logstash 0
                +-------------------+    |            .
Filebeat  +-->  |Load Balancer (TCP)|   +------>      .
                +-------------------+    |            .
                                         +----->  Logstash n
6

Hi Andrew,

Thanks for your comment.
Just slight more information about our network.

There is a DMZ in between, client(filebeat) and the logging infrastructure (Logstash). Load balancers are in front of DMZ.
Now please guide me, How to proceed? Whether with proxy_url or without?

br,
Sunil.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.