Zabbix Proxy throught SSH

[chronikeur]

Hi everybody,

Since several years I use Zabbix on my personnal environment and it work very well.
Thank you Alexei for this wonderful software, easy to deploy and easy to configure.

So, I recently meet a problem to configure a zabbix_proxy additionaly with zabbix_agent through an SSH Tunnel.
I choosed the actif mode to configure zabbix_proxy, thus it's zabbix_proxy that have to communicate with zabbix_server.

I just forwarded the port 10051 through this SSH Tunnel and the zabbix_proxy can communicate with the zabbix_server but a strange message appear everytime "Heartbeat message failed".

Here the part of zabbix_proxy.log when I restart the service.

682:20101201:153513.571 Starting Zabbix Proxy. Zabbix 1.8.3 (revision 13928).
682:20101201:153513.571 **** Enabled features ****
682:20101201:153513.571 SNMP monitoring: YES
682:20101201:153513.571 IPMI monitoring: NO
682:20101201:153513.571 WEB monitoring: YES
682:20101201:153513.571 ODBC: NO
682:20101201:153513.571 SSH2 support: NO
682:20101201:153513.571 IPv6 support: NO
682:20101201:153513.571 **************************
684:20101201:153513.585 server #1 started [Configuration syncer]
685:20101201:153513.587 server #2 started [Datasender]
686:20101201:153513.632 server #3 started [Poller. SNMP:YES]
687:20101201:153513.640 server #4 started [Poller. SNMP:YES]
691:20101201:153513.646 server #8 started [Trapper]
692:20101201:153513.653 server #9 started [Trapper]
693:20101201:153513.659 server #10 started [Trapper]
694:20101201:153513.665 server #11 started [Trapper]
695:20101201:153513.669 server #12 started [Trapper]
696:20101201:153513.672 server #13 started [ICMP pinger]
697:20101201:153513.672 server #14 started [Housekeeper]
697:20101201:153513.673 Executing housekeeper
688:20101201:153513.673 server #5 started [Poller. SNMP:YES]
698:20101201:153513.673 server #15 started [HTTP Poller]
701:20101201:153513.685 server #17 started [DB Syncer]
702:20101201:153513.685 server #18 started [DB Syncer]
689:20101201:153513.718 server #6 started [Poller. SNMP:YES]
699:20101201:153513.722 server #16 started [Discoverer. SNMP:YES]
705:20101201:153513.722 server #20 started [DB Syncer]
682:20101201:153513.723 server #0 started [Heartbeat sender]
682:20101201:153513.728 Heartbeat message failed
703:20101201:153513.733 server #19 started [DB Syncer]
690:20101201:153513.755 server #7 started [Poller. SNMP:YES]
697:20101201:153513.788 Deleted 0 records from history [0.001563 seconds]

--------------------------------------------------------------------------------------------------------

For the SSH Tunnel Configuration on zabbix_server :

Host Proxy
Hostname (IP Public)
Port 22
Protocole 2
LocalForward 10051 127.0.0.1:10051

Need I to forward another specific Port ???

For additionnal information, I have another Proxy configured in my LAN and it work fine.

------------------------------------------------------------------------------------------

Here the comportment when I start the SSH Tunnel (only):
[root@zabbix_server ~]# netstat -an | grep 10051
tcp 0 0 127.0.0.1:10051 0.0.0.0:* LISTEN
tcp 0 0 ::1:10051 :::* LISTEN

Now, I start the zabbix_server process :
[root@zabbix_server ~]# netstat -an | grep 10051
tcp 0 0 192.168.42.229:10051 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:10051 0.0.0.0:* LISTEN
tcp 0 0 ::1:10051 :::* LISTEN

And In the Zabbix Proxy Side, I have that :
[root@zabbix_proxy ~]# netstat -an | grep 10051
tcp 0 0 127.0.0.1:10051 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:10051 127.0.0.1:35380 TIME_WAIT
tcp 0 0 127.0.0.1:10051 127.0.0.1:35379 TIME_WAIT

I really need help !!!!!!
ANY IDEAS ????

[chronikeur]

Another question

I tried a lot of configuration.... and didn't find a solution for that kind of connection.
Can anyone say to me JUST if it's possible to configure a proxy-zabbix with a server-zabbix through a SSH Tunnel ????

Thank you in advance

[chronikeur]

Passive mode work but it's not the purpose

Ok, it work between an agent and the server through a tunnel SSH.
But in this configuration that's not possible to use snmp because SSH don't support UDP (Only TCP).
Zabbix proxy work as well as passif mode through SSH, but it's not the purpose, I wish a configuration where proxies have to communicate directly with the server (and not the opposite).

Is there someone that already tries that kind of implementation.???
Need help !!!!

[chronikeur]

nevermind

Success !!!
Now my configuration : Proxy zabbix and agent zabbix work very well with server zabbix through SSH.
This thread can be close.