how to issue TLS to Zabbix proxy Zabbix server exposed by "Traefik"

[nourkonsol]

Hello,

we have docker based zabbix-server, zabbix-web behind Traefic

The web works perfectly but the Proxy cannot connect to the server through a encrypted connection.

zabbix-server on the Docker-compose:


version: '3.5'

services:

zabbix-server:
image: zabbix/zabbix-server-pgsql:alpine-5.0-latest
container_name: zabbix-server
expose:
- "10051"
links:
- zabbix-postgres-server:zabbix-postgres-server

- web - traefik
- default

labels:
- "traefik.enable=true"
- "traefik.tcp.routers.zabbix.rule=HostSNI(`*`)"
- "traefik.tcp.routers.zabbix.entrypoints=zabbix _pro tocol"
- "traefik.tcp.routers.zabbix.tls.certresolver=l etse ncrypt_dns"



on the proxy conf file
AllowRoot=0
User=zabbix

ProxyMode=0
Server=api.i...
Hostname=HQ-LAB

PidFile=/var/tmp/zabbix_proxy.pid
LogFile=/var/packages/...
#TLSConnect=cert
DBName=/var/packages/...
DBUser=zabbix

ProxyOfflineBuffer=24

LogFileSize=2

ConfigFrequency=300
DataSenderFrequency=600
HeartbeatFrequency=60

The proxy is using zabbix.example.com as the address to send active .

Is there anyone who uses Traefik for Zabbix configuration? Any Idea ?

[mrRobit]

Hi nourkonsol.
I am using zabbix in docker with Traefik some some time already.
In my case I am only using Traefik to proxy just the web traffic and I expose port 10051 directly without involving Traefik. Remote Zabbix proxies connect to the server with no problem.
In your docker compose file it would look like:

ports:
- "10051:10051"

I hope it helped.
Tibor