# How to create ingress TCP for logstash beats

**URL:** <https://discuss.elastic.co/t/how-to-create-ingress-tcp-for-logstash-beats/380790>\
**Category:** Logstash\
**Created:** [August 6, 2025, 8:10am UTC](https://discuss.elastic.co/t/how-to-create-ingress-tcp-for-logstash-beats/380790 "2025-08-06T08:10:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![anhtaw](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@anhtaw](https://discuss.elastic.co/u/anhtaw)\
**Post date:** [August 6, 2025, 8:10am UTC](https://discuss.elastic.co/t/how-to-create-ingress-tcp-for-logstash-beats/380790/1 "2025-08-06T08:10:54Z")

</div>

I'm deploying Logstash on EKS and trying to expose it on port 443 using HAProxy Ingress. I'm using Filebeat to send logs to Logstash via the Beats protocol (Lumberjack), but I’m getting the following errors:

```auto
Failed to connect to backoff(async(tcp://<my-domain>:443)): EOF
failed-to-publish-events-caused-by-lumberjack-protocol-error

```

Here is my Ingress configuration. Am I missing something, or is it wrong to expose Beats protocol via HTTP Ingress? test local Failed to connect to backoff(async(tcp://:443)): EOF","service.name":"filebeat","ecs.version":"1.6.0"} or failed-to-publish-events-caused-by-lumberjack-protocol-error my config

```auto
apiVersion: networking .k8s .io/v1
kind: Ingress
metadata:
  name: filebeat-http
  namespace: k8s-alert
  uid: c2f1a533-bc3e-4f97-8b21-9f53ec97081d
  resourceVersion: '267388500'
  generation: 1
  creationTimestamp: '2025-08-06T02:12:25Z'
  labels:
    k8slens-edit-resource-version: v1
  annotations:
    cert-manager.io/cluster-issuer: cncf-le
    haproxy.org/ssl-redirect: 'true'
    haproxy.org/ssl-passthrough: "true"
    ingress.kubernetes.io/backend-protocol: TCP
spec:
  ingressClassName: haproxy-k8s
  tls:
    - hosts:
        - filebeats io
      secretName: tls-filebeats-ingress
  rules:
    - host: filebeat .io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: logstash
                port:
                  number: 5044

```