Ad Widget

Collapse

zabbix agent to zabbix server communication through stunnel doesn't work

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • espai
    Junior Member
    • Sep 2018
    • 2

    #1

    zabbix agent to zabbix server communication through stunnel doesn't work

    Hello forum,

    I'm succesfully monitoring a number of Windows and Linux servers with zabbix using psk-encrypted tunnels.

    There are however two Synology NASes I want to monitor, for which only a TLS-unaware zabbix agent is available
    (installed through entware-ng repository using opkg).

    Unsecured communication between passive zabbix agents and the zabbix server is working nicely.

    In order to secure the communication between the zabbix agents on the two NASes in question and my zabbix server
    I've set up two tunnels with stunnel.

    The two stunnel tunnels do work - I've managed to write something on a terminal session on the NASes using netcat.

    The communication between the zabbix agent on the NASes and the zabbix server however fails.

    Here's my setup

    zabbix agent:

    Server = localhost
    ListenPort = <HIGHPORT_BELOW_32767>

    zabbix server:

    Configuration -> Hosts -> Interface: 127.0.0.1: <HIGHPORT_BELOW_32767>

    However the zabbix server cannot connect to the zabbix agents over the stunnel.
    Under Configuration -> Hosts -> Availability the ZBX icon is red with the following remark:

    Get value from agent failed. Cannot connect to [[127.0..01]:<HIGHPORT_BELOW_32767>]: [111] Connection refused

    Any ideas anyone?



  • kloczek
    Senior Member
    • Jun 2006
    • 1771

    #2
    first try t confirm that communication over tunnel is working
    http://uk.linkedin.com/pub/tomasz-k%...zko/6/940/430/
    https://kloczek.wordpress.com/
    zapish - Zabbix API SHell binding https://github.com/kloczek/zapish
    My zabbix templates https://github.com/kloczek/zabbix-templates

    Comment

    • espai
      Junior Member
      • Sep 2018
      • 2

      #3
      Hello kloczek,

      It's working now - I've solved the riddle myself.

      I've simply swapped roles and configured the NASes as stunnel servers and the zabbix server as a stunnel client.
      Now I'm receiving data from the zabbix agents on the NASes over stunnel.

      Case dismissed.

      Comment

      Working...