One Way Connection with Zabbix

[rolfrolf]

Hey Guys i got a question and i havent found an answer in this forum yes.

Is there a way with Zabbix to have a one way Connection with an agent? So that i install the agent on the machine and the agent asks the server/proxy what he should send, gets the config file and from then on he sends the data and asks in an interval for a new item file.

Is there a way of doing this or is the procedure of (server sends config file to proxy, proxy to agent and then agent sends the active checks) unavoidable?

thanks in advance

[Atsushi]

If you can connect to the Zabbix server from the monitored server with Zabbix agent installed, you can monitor by using "Zabbix agent (active)" as the item type.
I don't know the network configuration of your environment, but use Zabbix proxy if you have a large number of monitored servers or a large number of monitored targets in a remote data center or office I think that stable monitoring can be done.

[rolfrolf]

yes i know about zabbix agent (active) but when i use these items the server is sending a configuration file to the proxy and then the proxy to the agent so that he knows what he should send.
i need to know if theres an option that the agent or the proxy in the remote location ask for the configuration file so that i dont have to open ports in the firewall of the remote connection.

[Atsushi]

I don't know what the environment or configuration you are using, so I don't understand what is unknown.
Do you monitor all monitored servers with Zabbix agent installed via Zabbix proxy? If so, the firewall will only allow communication between the Zabbix server and Zabbix proxy. If the communication between Zabbix server and Zabbix proxy can only be connected from either side, configure it as active or passive proxy according to the connection direction.

[rolfrolf]

the configuration should look like this:
zabbix server in our company is reachable for the proxy from the outside on port 10051; the proxy would be installed in the LAN of the costumer so that we can monitor all servers in there; now it should be so that the proxy in the remote location should request the conf file for the active items because i dont want/can open ports on the firewall of the costumer;(my boss doesnt want to open ports on customer firewalls). so that there is a one way connection from the proxy to the server and the server only recieves the data.

[Atsushi]

If you can only connect from Zabbix server to Zabbix proxy, is it configured as a passive proxy? If configured as a passive proxy, no connection from Zabbix proxy to Zabbix server is required.

[rolfrolf]

No only the proxy should connect to the server. The servers only function should be to receive the data from the proxy nothing more. It should look like this: proxy asks for conf of active checks for his monitored agents-> Then sends the list of items to check to the agents -> agents send the data to the proxy and the proxy to the server .
no connection from the server should be made

[rolfrolf]

No only the proxy should connect to the server. The servers only function should be to receive the data from the proxy nothing more. It should look like this: proxy asks for conf of active checks for his monitored agents-> Then sends the list of items to check to the agents -> agents send the data to the proxy and the proxy to the server .
no connection from the server should be made

[Atsushi]

I still don't understand what you want to see.
All monitoring settings are on the Zabbix server. Zabbix proxy receives from Zabbix server what to monitor and how to monitor. Zabbix agent on the server monitored via Zabbix proxy connects to Zabbix proxy, receives the information of the item that it monitors, and starts acquiring data for monitoring.
When passing data from Zabbix server to Zabbix proxy, proxy is switched between passive and active depending on which side is connected.