During node initialization, an access filter is automatically created for the IP address used to access the node. This does not necessarily include the addresses of monitored hosts or other Zabbix components. Add the required addresses manually.

See Node configuration — Access filters for more information.

Proxy node

Add the IP addresses or subnets from which connections to the proxy are expected.

If monitored hosts use active agent checks, the agents initiate connections to the proxy, so the IP address or subnet of the monitored hosts must be allowed by the proxy node's access filters.

If Proxy Passive was set as a proxy mode, the Zabbix server connects to the proxy, so the IP address or subnet of the Zabbix server must be allowed by the proxy node's access filters.

If Proxy passive was selected and a server node is used:

1. Navigate to the Overview tab of your server node, and copy the IPv4 or IPv6 address of the node.

2. Navigate to the Access filters tab of your proxy node, click Add new filter > Add.

3. Paste the copied address to the IP addresses or CIDRs field, and add description to the Optional access filter group description field.

4. Click Add.

Do steps 2-4 for the IP address of a Zabbix agent using active checks.

Server node

If the Zabbix server is hosted on Zabbix Cloud, configure access filters on the server node as well.

For a proxy in the active mode, add the IP address or CIDR of the proxy node to the server node's access filters, because the proxy initiates the connection to the server.

1. Navigate to the Overview tab of your proxy node, and copy the IPv4 or IPv6 address of the node.

2. Navigate to the Access filters tab of your server node, click Add new filter > Add.

3. Paste the copied address to the IP addresses or CIDRs field, and add description to the Optional access filter group description field.

4. Select the appropriate filter type.

5. Click Add.

Configure the proxy

The proxy must be configured on the Zabbix frontend to communicate with the Zabbix server.

Open Administration > Proxies in the Zabbix frontend and configure the proxy as required:

1. Add the proxy name to the Proxy name field. It must match the proxy hostname configured for the proxy. Type it in, or copy it from the Overview tab of your proxy.

2. Select the Proxy mode corresponding to the one selected during proxy creation.

3. For an active proxy, enter the IP address or DNS name of the proxy.

4. Click Add.

For more information, see Distributed monitoring using proxies.

Configure monitored hosts

Add the hosts that should be monitored through the proxy.

1. Go to Data collection > Hosts.

2. Create a host or open an existing host.

3. In Monitored by, select the Proxy and either type in the proxy name to search and select, or press the Select button to open a list of proxies to select from.

4. Configure the host interface and other parameters.

5. Click Add or Update.

A host configured to be monitored by a proxy sends or receives monitoring data through that proxy, depending on the item type and agent mode.

Configure Zabbix agent

When a monitored host uses Zabbix agent or Zabbix agent 2, configure the agent to communicate with the appropriate Zabbix component.

The configuration depends on whether the agent uses passive or active checks.

Passive agent checks

With passive checks, the Zabbix proxy initiates connections to the agent and requests monitoring data.

Open the Zabbix agent configuration file and update the Server parameter to allow connections from the IP address of the Zabbix Cloud proxy.

For example:

Server=<proxy_IP>

Make sure that the monitored host allows incoming TCP connections from the proxy on the agent port, which is 10050 by default.

The proxy must be able to reach the monitored host over the network.

Active agent checks

With active checks, the agent initiates connections to the Zabbix proxy and sends collected monitoring data.

Open the Zabbix agent configuration file and update the ServerActive parameter with the address of the Zabbix Cloud proxy.

For example:

ServerActive=<proxy_IP>:<proxy_listen_port>

Replace <proxy_IP> with the IP address of the Zabbix Cloud proxy and <proxy_listen_port> with the listen port configured when the proxy node was created. The default listen port is 10051.

If a proxy is specified in ServerActive, the agent obtains its active-check configuration from the proxy rather than directly from the Zabbix server.

Make sure that the monitored host can establish an outgoing TCP connection to the proxy on the configured listen port.

For more information about passive and active agent checks, see Passive and active agent checks.

External Zabbix server

A Zabbix Cloud proxy can also communicate with a Zabbix server deployed outside Zabbix Cloud.

In this case, the external Zabbix server must be able to communicate with the cloud proxy according to the selected proxy mode.

For a proxy in the active mode, the proxy initiates the connection to the external Zabbix server. Configure the external Zabbix server to accept connections from the proxy and make sure that the proxy can reach the server over the network.

For a passive proxy, the Zabbix server initiates the connection to the proxy. Add the IP address or subnet of the external Zabbix server to the proxy node's access filters and make sure that the server can reach the proxy over the network.

The external Zabbix server does not use Zabbix Cloud access filters. Instead, configure the required firewall and network rules on the external environment.

The monitored hosts can be located in the same environment as the external Zabbix server, in another network, or in a network accessible by the proxy.

When agents use active checks, configure their ServerActive parameter to point to the Zabbix Cloud proxy. When agents use passive checks, configure their Server parameter to allow connections from the proxy.

Verify the configuration

After configuring the proxy, agents, access filters, and network connectivity, verify that the proxy is communicating with the Zabbix server.

1. Go to Administration > Proxies.

2. Check the proxy State.

3. Go to Monitoring > Latest data and check that recent item values are available.

If the proxy is not communicating with the server, verify:

the proxy mode;
the server address and port;
proxy access filters;
server access filters, when the server is hosted on Zabbix Cloud;
agent configuration;
firewall and routing rules;
the address configured in Server or ServerActive.

Что дальше?

Центр разработчика

Docs

Set up a Zabbix Cloud proxy

Overview

Prerequisites

Create a proxy node

Configure access filters