Zabbix 6 inside and outside

[alexpebody]

Good afternoon. Colleagues, give advice, best practice? Have Zabbix 6.0 on Ubuntu external real IP, the task of monitoring both external resources on the real IP, and internal behind some of these real IP, so that not to throw a lot of ports behind these IP, is there a more effective solution other than proxy? For example the moment with WG (WireGuard) tunnel linking internal networks of the servers and resources we need to check the inner workings, or there is some aggregator on the Zabbix server side, and then passes the collected data to Zabbix itself? Like with WG tunnel no problem and the speed will be good and encryption, but it seems that there is a more simple and elegant solution? I am very grateful in advance.

[Glencoe]

Hi, the proxy is a recommended way to handle complicated distributed setups. The proxy also stores the data locally for cases when the server is unavailable. For simpler setups when data needs to be sent from private firewalled networks to an external server one can get away with active agents which push data.

[alexpebody]

Hi, the proxy is a recommended way to handle complicated distributed setups. The proxy also stores the data locally for cases when the server is unavailable. For simpler setups when data needs to be sent from private firewalled networks to an external server one can get away with active agents which push data.

Thanks. As I understooding you, I can use proxy on Zabbix side or Client side? And I can using active clients agent software like send monitoring status from intranet to my external servser Zabbix right?

[Glencoe]

You can think of the proxy as a mini-server that does all the data collection (be it agents or other agent-less checks). It doesn't matter where you install it as long as it can contact the server. More info here: https://www.zabbix.com/documentation...concepts/proxy Active agents: https://www.zabbix.com/documentation...-active-checks

[alexpebody]

You can think of the proxy as a mini-server that does all the data collection (be it agents or other agent-less checks). It doesn't matter where you install it as long as it can contact the server. More info here: https://www.zabbix.com/documentation...concepts/proxy Active agents: https://www.zabbix.com/documentation...-active-checks

Thx a lot! )

[cyber]

You should put your proxy on client side. That way it is in clients network, has access to all their equipment and you need to have only one connection between proxy and server.