Ad Widget

**rozols** · 17-08-2026, 13:49

Hi,

Checked you provided details to me it seems that there is some misconfiguration in config or TLS encryption.

I tried to replicate the issue and managed to do so to some extent using your provided config for agents on docker server.
Agent config:

Code:

PidFile=/run/zabbix/zabbix_agent2.pid
LogFile=/var/log/zabbix/zabbix_agent2.log
LogFileSize=0
Server=xxx.28.96.110 <--- Proxy IP
ServerActive=xxx.28.96.110 <-- Proxy IP
Hostname=docker01.example.com
PluginSocket=/run/zabbix/agent.plugin.sock
ControlSocket=/run/zabbix/agent.sock
TLSConnect=psk
TLSPSKIdentity=docker01-tk
TLSPSKFile=/etc/zabbix/certs/docker01.psk
Include=/etc/zabbix/zabbix_agent2.d/plugins.d/*.conf
Include=/etc/zabbix/zabbix_agent2.d/*.conf

Zabbix-Get:

Code:

zabbix_get -s xxx.28.96.112 -k docker.info
{"ID":"2e40e3f8-209f-49ac-8cfd-7ffdb82f8afc","Containers":2,"ContainersRunning":2,"ContainersPaused":0,"ContainersStopped":0,"Images":2,"Driver":"overlayfs","MemoryLimit":true,"SwapLimit":true,"CpuCfsPeriod":true,"CpuCfsQuota":true,"CPUShares":true,"CPUSet":true,"PidsLimit":true,"IPv4Forwarding":true,"Debug":false,"NFd":37,"OomKillDisable":false,"NGoroutines":60,"LoggingDriver":"json-file","CgroupDriver":"systemd","NEventsListener":0,"KernelVersion":"6.12.0-211.16.1.el10_2.0.1.x86_64","OperatingSystem":"Rocky Linux 10.2 (Red Quartz)","OSVersion":"10.2","OSType":"linux","Architecture":"x86_64","IndexServerAddress":"https://index.docker.io/v1/","NCPU":2,"MemTotal":1036238848,"DockerRootDir":"/var/lib/docker","Name":"docker01.example.com","ExperimentalBuild":false,"ServerVersion":"29.7.2","DefaultRuntime":"runc","LiveRestoreEnabled":false,"InitBinary":"docker-init","SecurityOptions":["name=seccomp,profile=builtin","name=cgroupns"],"Warnings":null}

With this config everything worked i got container information via passive checks using template (Docker by Zabbix agent 2) and server information with active checks using template (Linux by Zabbix agent active), to me it seems you have either misconfiguration on frontend or in the conf file on docker host.

Few things to checks -

In frontend under Administration → Proxies → [your proxy] — does it show a recent "Last seen"?
Check the hosts Encryption tab — is PSK required for "Connections to host" and "Connections from host"? If PSK is used for both options then you need to add TLSAccept=psk in agent config on docker hosts.
In agent config the Server/ServerActive ip address is proxy IP, not Zabbix server?
Check /var/log/zabbix/zabbix_agent2.log on a docker host right after a poll cycle — in my repro, both bugs produced clear log lines once I looked, even though you mentioned seeing nothing in your logs. If yours are truly silent, it's possible the proxies connection isn't reaching the agent at all (firewall dropping the packet before either side logs anything) rather than being actively rejected — worth checking connectivity from the proxy to the host on port 10050 directly.

**aenright** · 2026-08-18T22:09:26+00:00

Hi rozols,

Thanks for helping out!

Under Administration -> Proxies -> the proxy is seen with a matter of seconds:

The proxy in question is FNT Proxy.

I have 'No encryption' for 'Conections to host' and PSK for 'Connections from host':

Later tonight I'll try completely disabling PSK for one of the hosts to see if that changes the behavior

In the agent config, the Server/ServerActive is set to the IP of the proxy (and the Linux by Agent active collection is working as expected on the hosts)

I restarted the proxy hoping that would kick off a poll cycle but didn't see anything in the docker hosts zabbix_agent2.log I left a tail up on the log for a while to see if anything came through and unless I restarted the agent, I wasn't getting any log messages.

I assume zabbix_get -s <IP> -k docker.info FROM the proxy hosts connects to the docker host on port 10050 but I installed telnet and tested just to be sure. I was able to connect via telnet and after a few moments the agent closed the connection and logged an i/o timeout message in zabbix_agent2.log.

I'll post back once I disable PSK for connections from host and test again.

Best,
Arthur

**rozols** · 2026-08-19T06:49:00+00:00

Hi,

From your provided details seems like the PSK is not the issue as it is configured the same way i have in testlab, more it seems like something is failing to poll the data via the proxy.

For more details in proxy log you could increase the debug level to 4 and then tail -f proxy log to see some errors.

Code:

sudo zabbix_proxy -c /etc/zabbix/zabbix_proxy.conf -R log_level_increase

This increases the debug level at runtime, so no need to restart proxy after.

Few things to check -

in latest data for the docker items do you see some kind of error a red indication where it shows error why data is not collected or maybe on host?
are the items enabled on host to collect?
in host settings Linux by Agent active is using active checks, but Docker template is using passive checks, so interface is needed for the host, has this been setup?

Example log entry -
3830:20260819:094541.428 In zbx_async_check_agent() itemid:50981 key:'docker.container_stats["/test-redis"]' host:'docker01.example.com' addr:'xxx.28.96.112' conn:'unencrypted'
3830:20260819:094541.429 End of zbx_async_check_agent():SUCCEED

My host config in frontend -

Ad Widget

Monitor a docker host through zabbix-proxy

Monitor a docker host through zabbix-proxy

Comment

Comment

Comment