OK, one last data point here, and I understand why this bugged me so much. This regressed from 1.20.x where I last tried this.
If you install 1.20.x from trusty, you will notice that the secondary nodes in the deployment all download from 'streams' (which can be proxied just fine). But now that tools download is routed through the bootstrap node, this failure is now evident to me.
OK, one last data point here, and I understand why this bugged me so much. This regressed from 1.20.x where I last tried this.
If you install 1.20.x from trusty, you will notice that the secondary nodes in the deployment all download from 'streams' (which can be proxied just fine). But now that tools download is routed through the bootstrap node, this failure is now evident to me.