Some components running in a remote site may need to access the DR and MR servers running in the central site.   The proxy running in the remote site should include DR and MR in the set of proxied services.

message-router – local port 3904 – central site external port 30277 (http)
                                local port 3905 - central site external port 30276 (https)

dmaap-dr-prov – local port 8080 - central site external port 30259 (http)
                              local port 8443 --central site external port 30269 (https)

Requires changes to the Helm templates to support https (using an http pass-through stream so that TLS is terminated at the upstream server, not on the remote site proxy) and to allow multiple ports for the same service.