How to send data across security domains?

[whitelotusking]

Content:

We have two separate Zabbix installations running in different security domains:

• Domain A: Lowest security zone
• Domain B: Highest security zone

Our goal is to make monitoring data from both domains available in Domain A, but with the following requirements:

1. We do not want to use Zabbix Proxy as a solution because the proxy in Domain B could theoretically be configured or influenced from Domain A, which violates our security policies.
2. We only want to send aggregated data (e.g., SLA, availability, summarized metrics) from Zabbix in Domain B to Zabbix in Domain A.
3. The solution should require minimal customization or scripting.
4. Communication must be strictly one-way from Domain B to Domain A, with no possibility of changing configuration in Domain B from Domain A.

Question:
What is the best way to achieve this? Does Zabbix have built-in functionality to export and send aggregated data between two separate installations?
Our zabbix infrastructure is configured with agentless metrics from Vcenters and no agents.

[troffasky]

You can't just copy data between Zabbix instances.
How you proceed depends on how you define "minimal".
I think you just want read-only Zabbix users on Domain B for users in Domain A to use.

[cyber]

As already said, Zabbix has no such functionality, that you can push data from one instance to another. You can export data and events to third party like Elastic, but then you have to use some other tool to visualize it also...

[troffasky]

You could in theory use Grafana to pull in data from both. I don't know if the Grafana Zabbix plugin supports multiple instances.

[cyber]

You could in theory use Grafana to pull in data from both. I don't know if the Grafana Zabbix plugin supports multiple instances.

I think you just need to add 2 different data sources ... But it all works against their one requirements, making everything in domain A but having traffic stricktly from B to A... So they cannot install stuff in A which makes queries towards B....