Monitor VMs in Private Subnet

[imtiaza]

Dear Gurus,
Please see that i have configured the Zabbix to monitor the VMs in Cloud.

The issue is How can i monitor the VMs located in Private Subnet.
Public has internet so no issue with them will install the agent and it will be configured on Zabbix Server and will collect the states.
What about he Private Subnet VMs.

Thanks
Malik Adeel Imtiaz

[guille.rodriguez]

I think you need to install agent and make Active Monitoring (VM sends info to Zabbix) instead Passive (Zabbix ask for info to VM)

Active Monitoring -> No need to open any port in router/firewall. The connection is from VM to Zabbix
Passive Monitoring -> You need to open tcp/10050 (default port) on firewalls to let Zabbix server reach Zabbix Agent installed on VM. The connection is from Zabbix to VM


Just install Agent and select Template Linux Active or Template Windows Active

[imtiaza]

Thanks guille.rodriguez for your reply.
Please confirm if Zabbix_Proxy is a solution for my issue.

If i am thinking correctly.

https://www.zabbix.com/documentation/1.8/en/manual/proxies/why_use_proxy#:~:text=Zabbix%20Proxy%20can%20be%20used,Simplify%20maintenance%20of%20distributed%20monitoring

Thanks
Malik Adeel Imtiaz

[guille.rodriguez]

If all VMs are in same private network (or under same wan connection but in diferent vlans), yes, it's better install a zabbix proxy (active mode) and secure it with psk.

I was thinking about cloud vms but in diferents private subnetworks, but yes, for a building , 1 proxy its a better way.

Also you can tell to computers to send info in active mode, so proxy hardware requierements will be less than passive monitoring, ofc SNMP , WebMonitoring is polling

Check my recent post

https://www.zabbix.com/forum/zabbix-for-large-environments/459330-best-infrastructure-design-for-monitoring-1600-devices

In my work, we have 4 proxies, 1 for every headquarter (every hq has many vlans)

[imtiaza]

Thank you so much.
guille.rodriguez

I got Confused.
So for on-premise Private Subnet VMs (having no internet) we use Proxy Model and for VMs located in Cloud Private Subnet we will use different model.
Am i right ?

Thanks
Adeel Imtiaz

[guille.rodriguez]

Let me explain
Zabbix server is on cloud too? Then Cloud VMs with internet send info to zabbix server (active or passive)

Zabbix Proxy on private subnet, needs to connect and talk with Zabbix server, so if Zabbix server is on cloud, Proxy needs internet access.

All vms in private subnetwork will be monitored by proxy (but proxy just recolletcs info and send to zabbix server, who processes triggers, etc... and have web interface)


https://www.zabbix.com/documentation...xies/proxy.png

As you can see in image, proxy needs to connect to server, but other vms or computers on subnet will be monitored by proxy (VMs don't need internet access because they dont talk with zabbix server, they talk with proxy, zabbix proxy acts as a proxy)