That is true. However if you have a Gateway Server then you can restrict via IPTABLES   Block Hive Interactive Port(10501) from your gateway server. This way any user on gateway nodes will be unable to connect to LLAP string   /sbin/iptables -A OUTPUT -p tcp -d <HiveInteractive_IP> --dport <HiveInteractive_Port> -j DROP ... View more

@kishore1986 - You can refer below link for configuring the HA Proxy for Hiveserver2.   https://www.cloudera.com/documentation/enterprise/5-9-x/topics/admin_ha_hiveserver2.html ... View more