Monitoring isolated networks in multisite deployment

[Gabbs]

Hi,

I am looking for advice on how to monitor the following.

I have a multisite setup with central Zabbix server and currently one Zabbix proxy at each premise. However at a number of these locations I have special computer racks to monitor. In each rack only one physical host (GW or router, if you wish) is connected to the LAN, the rest of the hosts are only available on an internal/isolated network. I need to monitor the GW nodes and all the nodes behind the GW nodes. Although port forwarding and NATing (to reach the isolated network hosts) is technically possible it is not considered due architecture and security constrains.

- Is it possible to daisy chain Zabbix Proxies?
- Besides the already installed Zabbix Proxy at each location I could install an extra Zabbix Proxy, one per rack (on the GW host ) but not sure how that would scale up?
I might have let's say 50 to 100 racks at each location and about ~20-30 Linux hosts per rack. Is this feasible?

Please if you could advise.

Thank you,
Gabbs

[thesubmitter]

You can't chain proxies!
I was in a similar situations and I did do iptables forwarding (custom port on the gateway for each of the end devices, it worked fine)

[thesubmitter]

Servers don't generally get overwhelmed by proxies. Generally I would say the more proxies the better! The proxies have an important buffering role.