You can find out more about the parameters supported in a Zabbix proxy configuration file in the official documentation. Let’s say if you don’t use ICMP checks then set the “ StartPingers” parameter to 1 or if you don’t use active agents then set “ StartTrappers” to 1 and so on.
This is not a perfect configuration, keep in mind that you can optimize it even more. Save and exit file ( ctrl+ x, followed by y and enter). Open zabbix_nf file with command: “ nano /etc/zabbix/zabbix_nf” and add this configuration anywhere in file: StartPollers=100 Step 8: Optimizing Zabbix Proxy (optional)ĭon’t bother with this optimization if you are monitoring a small number of devices, but if you are planning to monitor a large number of devices then continue with this step. When you are done with configuration click the “ Update” button just as shown in the image below. If you ever lose your generated PSK key check it with command “ cat /etc/zabbix/zabbix_proxy.psk” on the proxy. Next, on the “Encryption” tab set PSK under “Connections from proxy” option and copy and paste “PSK identity” and “PSK” (key) that you have configured on the proxy. We need to enable encryption on the server side so go to web frontend and select your proxy on the “ Proxies” option under the “ Administration” section. Enable PSK encryption on the proxy in Zabbix frontendĬommunication between proxy and server is not yet encrypted because we have enabled PSK encryption on the proxy side but not on the server-side. Keep in mind that “ TLSPSKIdentity” can be anything, so for security reasons set something else – don’t use mine!ĭon’t forget to restart proxy after changing the configuration file: systemctl restart zabbix-proxy c. Open zabbix_nf file with command: “ nano /etc/zabbix/zabbix_nf” and add this configuration anywhere in file: TLSConnect=psk Configure Zabbix proxy to support PSK encryption
0 kommentar(er)
