Zabbix into a Unidirectional Network

[setshocker]

Hi all! I would like to deploy something like this...



I will have a FW between my Zproxy and my Zserver...and this FW only allow traffic in one direction (Proxy -> Server) and I think that this will be problematic.

I know that "Active proxy" would be the best option in this case, but in zabbix documentation says that "Active Proxy - the proxy will connect to the Zabbix server and request configuration data".

I think that I will have problems with "request configuration" right? Is there any solution?

I really appreciate any help you can provide, bye!

[kloczek]

As you wrote what you are looking for is normal active proxy setup.
RTFM: https://www.zabbix.com/documentation...toring/proxies

[setshocker]

Thanks kloczek,

I'm reading in your link that..."The proxy requires only one TCP connection to the Zabbix server. This way it is easier to get around a firewall as you only need to configure one firewall rule."

So that's would be great for me...but in zabbix_proxy conf guide:

https://www.zabbix.com/documentation/2.2/manual/appendix/config/zabbix_proxy

There's a parameter (ConfigFrequency) that say "How often proxy retrieves configuration data from Zabbix server in seconds. Active proxy parameter. Ignored for passive proxies (see ProxyMode parameter)."

Could I disable "ConfigFrequency"? How?

Thanks for all

[steveboyson]

There is no need to disable it since it is a param for the proxy.

It is in fact very simple:
Every $ConfigFrequency the proxy connects to the server and receives the needed parameters.

[setshocker]

thanks for your reply steveboyson,

Maybe I have a "network gap" but...if my FW dont allow traffic Zserver -> Zproxy, Zproxy never receive "needed parameters" right?

Thanks seriously, this is something that I dont understand at all.

[steveboyson]

No no no.
Once the proxy connects to the server, the server sends the configuration params over this proxy-initiated connection back to the proxy.

Proxy -> Server: Hello. Anything new?
Server -> Proxy: Yes. Hold on.
Server -> Proxy: <parameters>blablabla</parameters>
Proxy -> Server: Got it. Thanks.
Server -> Proxy: Ok. Bye.
Proxy -> Server: Bye.

[setshocker]

oh, great example. Understood!

Thanks!!

[Elsanto]

setshocker or anyone else with the same problem, have you ever been able to make this setup work?