Chapter 19. Using Proxies to Monitor Remote Locations

The Zabbix server can do monitoring using lots of different methods—it can communicate with Zabbix agents, SNMP devices, and IPMI devices; run commands; and a whole lot of other things. A problem arises when the number of devices to be monitored increases—a single endpoint (our Zabbix server) is supposed to communicate with lots of others, and a large number of connections can cause problems both on the Zabbix server and in the network components between the Zabbix server and monitored devices.

It gets worse if we have to monitor remote environments—be it a branch office, another data center, or a customer site. Zabbix agents? Port 10050 must be open to all servers. SNMP? Port 161 must be open to all devices. It becomes unmanageable real quick.

A solution is to use Zabbix proxies. A Zabbix proxy is a remote data collector process that is capable of collecting data using all the methods the Zabbix server supports. In this chapter, we will set up a Zabbix proxy, use it for data gathering, and discuss the best methods to determine whether the proxy itself is available.

Note

Zabbix proxies are not available for Windows.

Active proxy, passive proxy

The Zabbix proxy first appeared in Zabbix version 1.6, back in 2008. Since then, it has proven to be a very good solution. When the Zabbix proxy first appeared, it supported connecting to the Zabbix server only, similarly to active agent. Zabbix version 1.8.3 introduced a capability of the server to connect to the proxy, and now active proxies and passive proxies are available. While the Zabbix agent can communicate with the server in both ways at the same time by having active and passive items on the same host, the Zabbix proxy communicates with the server only in one way at a time—the whole proxy is designated active or passive.

The proxy mode does not change the direction of connections to or from the monitored devices. If using active items through a proxy, the agent will still be the one making the connections, and if using passive items, the agent will be accepting connections. It's just that instead of the server, the agent will now communicate with the proxy.

In both active and passive mode, server-proxy communication requires a single TCP port, to a single address only, to be open. That is much easier to handle on the firewall level than allowing connections to and from all of the monitored devices. There are more benefits a proxy may provide—but let's discuss those once we have a proxy running.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.225.57.223