Proxy + Security

[v.q]

Hello,

we are evaluating Zabbix as our monitoring solution for up to 50 locations. We already installed proxies in 2 of them while I started to concern about encryption and security. I successfully installed stunnel to wrap around the connection which is working fine.
I was now wondering about… how do you do this?
Is stunnel the way to go? Is the Active agent authentication encrypted?

[v.q]

Anyone?

How do you do this?

[insider]

maybe it's better to use vpn?

[trikke76]

this guide is pretty clean on how to setup stunnel with zabbix


grtz

http://www.mrvoip.com.au/blog/secure-zabbix-proxy-communications-stunnel

[mushero]

We don't even worry about this - using clear text as we lock down things with iptables and permitted IPs on Agents.

We don't allow actions on agent from server, so all read-only.

Not perfect, but easy, fast, and never a problem - to me, using all the tunnels, etc. just adds overhead and there's not really any data in there I'm concerned about.

If you really need it, then stunnel is decent, OpenVPN but a pain, etc.