a few quick questions about zabbix proxy

[Coma]

Hi

I have used the Zabbix Appliance ISO to create a Appliance server, and a proxy server. I hope someone can answer a few quick questions, that i couldent seem to find the answer to.

1: The Proxy server is supposed to be on a diffrent network, what firewall rules are needed to allow the Server to get agent info from the Proxy server?

2: The agents running on the same network as the proxy server, just need to be told to use the proxy ip address instead of the server ip adress?

3: do i need to install the zabbix client on the zabbix server and proxy?

4: When using the appliance iso and installing it as a proxy, do i need to set anything else up ? or should it work out of the box? (ie. i only need to add the proxy to the zabbix server?)

[MightBeAWizard]

Hi Coma,

I am not 100% about appliance, but I would think it works exactly the way it would when installing from sources or packets. But some answers:

1. You need to allow incoming connection for port 10050 or 10051 by default, this can be set up when adding proxies from server (as well as making configurations for proxy when you set up ip and port)

2.Agents are configured to proxy ip, that is correct. Also you need to add them from server side to be monitored by proxy (Configuration -> hosts -> edit host -> monitored by proxy)

3.This is not needed, however you can if you wish to do so

4. I would say only config files should be modified, not sure if there is need to make modifications to other stuff, try it out

[Coma]

Hi Coma,

I am not 100% about appliance, but I would think it works exactly the way it would when installing from sources or packets. But some answers:

1. You need to allow incoming connection for port 10050 or 10051 by default, this can be set up when adding proxies from server (as well as making configurations for proxy when you set up ip and port)

2.Agents are configured to proxy ip, that is correct. Also you need to add them from server side to be monitored by proxy (Configuration -> hosts -> edit host -> monitored by proxy)

3.This is not needed, however you can if you wish to do so

4. I would say only config files should be modified, not sure if there is need to make modifications to other stuff, try it out

Thanks for taking your time to answer my questions.

About part 2:

if i want to find client in the same network as the proxy, would it be enought that the discovery rules are made on the server ?

[MightBeAWizard]

In theory, yes. You can make discovery rules to be applied by your proxy only, haven't really used that so I can't be 100% sure about this how painless it works Good luck tho!

[Coma]

In theory, yes. You can make discovery rules to be applied by your proxy only, haven't really used that so I can't be 100% sure about this how painless it works Good luck tho!

Thanks!

I have added my Proxy in the Zabbix Server, i have then changed the zabbox_proxy.conf with the ip andport of the zabbix server. How ever the Zabbix Server says it havent seen the proxy.

in the zabbix_proxy log i have this:

1044:20161005:094231.865 cannot send list of active checks to "172.18.124.112": host [UNVAD3] not found
1040:20161005:094235.826 cannot send list of active checks to "172.18.124.115": host [UNVAD4] not found
1040:20161005:094301.747 cannot send list of active checks to "127.0.0.1": host [Zabbix server] not found

the first 2 lines are 2 host i created on the zabbix server, so that tells me the proxy is getting some information from the zabbix server? i have only opned the port 10051, that that port is configured in the proxy.conf, so what should be enought right?

the last line, i have the Server=172.18.131.153 in my zabbix_proxy.conf, and i did a reboot after changeing it, so any idea why its saying 127.0.0.1 in the log?

[MightBeAWizard]

double check config, also I assume you pointed that same port from server end aswell when you added that proxy there? Is your proxy mode equal to your configuration on server side? I encountered problem with ip:s once, I solved it by manually removing wrong IP:s from database on proxy side.

Are you seeing server side logs that "sending configuration data to proxy "proxyname" at "xxx.xxx.xxx.xxx", datalen <somenumber>" ?

pretty much only things you need to configure on proxy side are:
1) Proxymode= 1 or 0
2) Server=<ip address of your zabbix server>
3) Hostname=<IP address or DNS name of your proxy> (must be equal with server side)
4) Listenport=<port you want to use, must be equal with server side(administration->proxy)>
5) SourceIP=<IP of proxy, not quite sure if mandatory or not tho>
6) DBName=/var/lib/sqlite/databasename.db (or where you want your db to be)

[Coma]

double check config, also I assume you pointed that same port from server end aswell when you added that proxy there? Is your proxy mode equal to your configuration on server side? I encountered problem with ip:s once, I solved it by manually removing wrong IP:s from database on proxy side.

Are you seeing server side logs that "sending configuration data to proxy "proxyname" at "xxx.xxx.xxx.xxx", datalen <somenumber>" ?

pretty much only things you need to configure on proxy side are:

5) SourceIP=<IP of proxy, not quite sure if mandatory or not tho>

Source ip, is that in the Zabbix Server config? there is no souch entry in my zaabix_proxy.conf

i think its a combination of something in my firewall and something else, but i am getting close, thanks to your help.

i get this error in the zabbix log.

cannot send history data to server at "172.18.131.153": empty string received

[MightBeAWizard]

soruceIP in zabbix_proxy.conf, atleast I dont have it in my server.conf

[MightBeAWizard]

also, try telnet from your zabbix server to proxy and other way around
from server: telnet proxyip portnumber eg. telnet 172.16.2.10 10050
from proxy: telnet serverip portnumber eg. telnet 192.168.1.5 10050

[Coma]

I think i got it working now, well almost..

a few things on the proxy log

1057:20161006:144245.082 cannot send list of active checks to "127.0.0.1": host [Zabbix server] not found
1056:20161006:144254.007 cannot send list of active checks to "172.18.124.112": host [UNVAD3] not found
1057:20161006:144310.688 cannot send list of active checks to "172.18.124.115": host [UNVAD4] not found

I can ping those ip addresses just fine, and the agent is installed on UNVAD3 and UNVAD4, pointing to the Zabbix PROXY IP. any idea whats going on?

also what that about the 127.0.0.1 ? is there a config somewhere i missed ?

This is the proxy conf
http://pastebin.com/j3MapsmR

this is the server conf
http://pastebin.com/2gMB0cBC

on the zabbix server, i have these errors in the log

977:20161006:145139.879 cannot send list of active checks to "172.18.131.140": host [ADMTEST-01] not found
978:20161006:145155.718 cannot send list of active checks to "172.18.131.155": host [ADMMONITOR] not found

there are 2 servers on the same network as the zabbix server, with the agent on. its collectiong data just fine it seems, but i keep getting these errors?