Split monitoring of a host between zabbix proxy (for simple checks) and agent-active?

[maxmm]

Hi,

is it possible to monitor one host in two different ways at the same time? Meaning: The zabbix server will be running in a DMZ behind a firewall and...
- all agent active check items configured for this host will enable the agent running on the host to send data directly to the server through the firewall via an adequate firewall forwarding rule.
- all simple checks will be executed via zabbix proxy (equipped with an external WAN-IP), which relays the incoming data (ping and ssh) back to the zabbix server through the same firewall.

Reason is that machines to install the zabbix server on with redundancy and backup wil only be available in the DMZ, but simple checks require direct contact to the host.
This specific firewall breaks up connections into two separate ones, meaning a simple check from the server will always have a successful connect to the firewall no matter if the firewall can connect to the remote host on it's external side or not.
Running everything through the proxy on the other hand would turn the proxy into a single point of failure and must therefore be avoided.

From what I gather from the documentation and some posts here in the forum I think it should be possible: if a proxy X is configured as a host, linked with the template for the simple checks, and then the host to be monitored is configured with agent active, plus set to "Monitored by" proxy X.

Can anyone confirm my interpretation, or even has experience with such a setup and can maybe provide some useful hints for the configuration of it? That would be greatly appreciated
Zabbix 5.0, Upgrade to 6.0 is planned.

Regards
Max

[cyber]

If you read the manual, then you would see that "ServerActive" parameter defines "Zabbix server/proxy address or cluster configuration to get active checks from." (and send values back later) If you have configured a host to be monitored by a proxy, then all responsibility about this host is given to proxy - active, passive, webchecks, snmp ... everything . So agent config and "GUI config" have to match for those items to work properly. There is also "If Zabbix proxy is specified then Zabbix server/cluster for that proxy should not be specified."
Server will refuse data, if host is monitored by proxy.

[cyber]

If you set host to be "monitored by proxy X", then everything goes through that proxy. Agent will send its active data to proxy, not to server directly. Simple checks are performed by that proxy, not by server etc.
You might need to define 2 hosts (-int, -ext for example), one which is directly connected to server and other via proxy.

[Micha2222]

Yes, I am working the same way. Just create 2 host configuration for the host and confiure one with proxy monitoring other with Agent.

[maxmm]

If you set host to be "monitored by proxy X", then everything goes through that proxy. Agent will send its active data to proxy, not to server directly. Simple checks are performed by that proxy, not by server etc.
You might need to define 2 hosts (-int, -ext for example), one which is directly connected to server and other via proxy.

But should not a host with

ServerActive=<Zabbix-Server>

only send its data to the Zabbix server, and never contact the Zabbix proxy, as it does not know about that proxy?
Or would the Zabbix server refuse the data, as the host is set to 'Monitored by Proxy'?
The Proxy could still do the Simple Checks (and wonder why he was never contacted by the Host).

[cyber]

If you read the manual, then you would see that "ServerActive" parameter defines "Zabbix server/proxy address or cluster configuration to get active checks from." (and send values back later) If you have configured a host to be monitored by a proxy, then all responsibility about this host is given to proxy - active, passive, webchecks, snmp ... everything . So agent config and "GUI config" have to match for those items to work properly. There is also "If Zabbix proxy is specified then Zabbix server/cluster for that proxy should not be specified."
Server will refuse data, if host is monitored by proxy.

[maxmm]

Ok, thanks for the clarification and your feedback!