Elasticsearch Plug-in Proxy Settings in CLI_JAVA_OPTS

The Elasticsearch plug-in installer is a separate Java command. Elastic documents CLI_JAVA_OPTS for passing its proxy properties.

For an authorized installation from a POSIX shell, the invocation can take this form:

CLI_JAVA_OPTS="-Dhttp.proxyHost=proxy.example.net -Dhttp.proxyPort=8080 -Dhttps.proxyHost=proxy.example.net -Dhttps.proxyPort=8080" bin/elasticsearch-plugin install analysis-icu

The host properties contain the hostname, without a URL scheme; the HTTP proxy list supplies public endpoint candidates for those fields. Use the destination-protocol properties needed by the plug-in’s actual download URL.

Supply the environment in the account and execution context that runs the installer. If a privilege boundary is involved, preserve the intended CLI options through that boundary rather than assuming an earlier shell assignment was inherited.

A deployment that intercepts TLS can also need the appropriate trust store for this Java process. Elastic documents passing javax.net.ssl.trustStore through CLI_JAVA_OPTS for a custom download host. Keep certificate verification enabled and use the approved trust material.

These settings apply to the tool’s download. They do not configure HTTP clients used later by the installed plug-in in the running server.