Zabbix Porxy?

[ggs_admin]

Hello,

I want to monitor some servers without direct access from the Zabbix server.
Let me explain my question in more detail.
I have 20 servers ("10-A" servers and "10-B" servers). The "10-B" servers aren't accessible to Zabbix due to security reasons. But "10-B" servers are accessible FROM "10-A" servers
So my question is: Is it possible to monitor servers "10-B" through "10-A" servers? If so then how can I do that?

[LenR]

You would install the Zabbix Proxy on the 10-A network. You could install the proxy on an existing 10-A server if they are the right platform, but it would probably be better to have something dedicated.

[ggs_admin]

Hi there, 

So I should install a standard zabbix client on "10-B" servers and zabbix-proxy on "10-A" servers.
But how the zabbix server should "know" that it should check "10-B" servers through proxy on "10-A" servers?

[olegus]

Do 10-B hosts have outbound connections? Can you ping Zabbix server from them? If so, you can run zabbix agents in Active mode there.
Proxy is also an option - you can install it inside of 10-B network and run it in Active mode - Proxy will PULL data from hosts and PUSH it to a server, just allow proxy outbound traffic.
If 10-B does not have outbound connection at all and is exposed only to 10-A, you can install proxy there.

[ggs_admin]

Do 10-B hosts have outbound connections? Can you ping Zabbix server from them? If so, you can run zabbix agents in Active mode there.
Proxy is also an option - you can install it inside of 10-B network and run it in Active mode - Proxy will PULL data from hosts and PUSH it to a server, just allow proxy outbound traffic.
If 10-B does not have outbound connection at all and is exposed only to 10-A, you can install proxy there.

Hello,

The 10-B servers are accessible from 10-A servers only through the local network.
But on the 10-A servers works both types of network: local and public.
Currently, Zabbix monitor 10-A servers through the public network.
I want to add monitoring the 10-B servers to that monitoring by using the 10-A servers like a proxy.
But how it's should be added to monitoring dash on zabbix server?

[olegus]

Hello,

The 10-B servers are accessible from 10-A servers only through the local network.
But on the 10-A servers works both types of network: local and public.
Currently, Zabbix monitor 10-A servers through the public network.
I want to add monitoring the 10-B servers to that monitoring by using the 10-A servers like a proxy.
But how it's should be added to monitoring dash on zabbix server?

Hi, you can try this-
- Install a proxy on 10A and decide if you want Active or Passive mode (depends on if 10A can accept traffic to 10050 port from zabbix server). We usually set it to Active mode - less configuration
- Add this Proxy to Zabbix server under Administration/Proxies. For Active proxies, just add its name
- Configure agents in 10-B to point to that proxy. If 10B are not accessible from 10A, set agents to Active mode, otherwise in passive (we usually set it in "both", i.e. set both Server and ServerActive values to proxy/server hostname/ip).
- To automate onboarding you can create autoregistration action in Zabbix and add condition for a proxy:

On Operations tab add needed host group and template . Select template according to the agent mode- for Active agents template should contain "Active" suffix. You may need to restart agents to trigger this .
- Or just add a host manually, specifying local IP as interface IP as it is seen from a proxy and then select a proxy from the list.