Hi,
We discovered an issue in sniffer. We have a java proxy server in front of our elasticsearch cluster. The problem is that the proxy is in a different network zone. Addresses of cluster nodes are translated. The proxy sees cluster nodes under different IP address than they really are. Call to the /_nodes/http returns unreachable IP adresses for the proxy.
I found a discussion about very similar issues if running elasticsearch in Docker.
Currently we have disabled the sniffer.
Could we somehow set the masked addresses so the sniffer would recognize them?
Thank you,
Radovan
Hi,
the sniffer reads the publish_address returned in the http section of the nodes info api. Have you tried adapting the publish address of your nodes? See https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-http.html . I don't see how the sniffer could be fixed to solve this problem, I think rather nodes should be properly configured so that the sniffer receives the right addresses.
Cheers
Luca
Hi Luca,
Thank you, that is exactly what we need if a bit tedious to setup. 
Radovan
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.