unknown request received from "x.x.x.x": [proxy tasks]

[joranc]

Hello,

I have been a Zabbix user for some time now and i am reinstalling my whole environment.
My new server has been installed with Zabbix 7.0.0 (49955f1fb5c) and is behind NAT (Zabbix Server -> Router(NAT) -> Public internet)

zabbix_server (Zabbix) 7.0.0
Revision 49955f1fb5c 3 June 2024, compilation time: Jun  3 2024 05:55:33

Copyright (C) 2024 Zabbix SIA
License AGPLv3: GNU Affero General Public License version 3 <https://www.gnu.org/licenses/>.
This is free software: you are free to change and redistribute it according to
the license. There is NO WARRANTY, to the extent permitted by law.

This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit (http://www.openssl.org/).

Compiled with OpenSSL 3.0.9 30 May 2023
Running with OpenSSL 3.0.13 30 Jan 2024

I've got 2 proxies (proxy01 and proxy02) on a public network, reachable from everywhere with no firewalls.
They keep spitting out these messages, where X.X.X.X is the natted public IP of the server.

  4255:20240708:114030.423 unknown request received from "X.X.X.X": [proxy tasks]
  4255:20240708:114031.426 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114032.429 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114033.433 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114034.436 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114035.440 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114036.443 unknown request received from "X.X.X.X": [proxy tasks]
  4252:20240708:114037.446 unknown request received from "X.X.X.X": [proxy tasks]
  4252:20240708:114038.450 unknown request received from "X.X.X.X": [proxy tasks]
  4252:20240708:114039.453 unknown request received from "X.X.X.X": [proxy tasks]
  4256:20240708:114040.456 unknown request received from "X.X.X.X": [proxy tasks]
  4255:20240708:114041.460 unknown request received from "X.X.X.X": [proxy tasks]
  4253:20240708:114042.463 unknown request received from "X.X.X.X": [proxy tasks]

These are running the same version and revision as the server.

zabbix_proxy (Zabbix) 7.0.0
Revision 49955f1fb5c 3 June 2024, compilation time: Jun  3 2024 05:55:33

Copyright (C) 2024 Zabbix SIA
License AGPLv3: GNU Affero General Public License version 3 <https://www.gnu.org/licenses/>.
This is free software: you are free to change and redistribute it according to
the license. There is NO WARRANTY, to the extent permitted by law.

This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit (http://www.openssl.org/).

Compiled with OpenSSL 3.0.9 30 May 2023
Running with OpenSSL 3.0.13 30 Jan 2024

Is this a bug? Or am i doing something wrong?

Thanks in advance guys.

[Markku]

This sounds interesting: there is no "proxy tasks" request in any version of the server-proxy protocol as far as I can see.

Capturing and analyzing the traffic (preferably on the server side) would maybe give you some insight. This gives you instructions how to decrypt TLS if you are unable to disable TLS during the investigation:

https://blog.zabbix.com/decrypting-z...reshark/26832/

Markku

[Hamardaban]

In what mode do the proxies work? Active or passive?
What is the server address specified in the proxy config?