See www.zabbix.com for the official Zabbix site.

Docs/specs/ZBXNEXT-4181

From Zabbix.org
Jump to: navigation, search

Zabbix proxy should check server IP in passive mode

ZBX-4089

Status: 0.1

Owner: dimir

Summary

There are three problems this specification attempts to solve:

  1. Zabbix proxy in passive mode currently accepts configuration from anywhere. This can result in receiving conflicting Zabbix configuration from different Zabbix server instances. It should be possible to specify one or more locations which proxy would accept Zabbix configuration from.
  2. Zabbix proxy in active mode currently would not accept more than one Server in configuration, which is good. However it would still start and log an error only when trying to connect to the server (Unable to connect to the server [127.0.0.1,192.169.3.29]:11338 [gethostbyname() failed for '127.0.0.1,192.169.3.29': [1] Unknown host]). Zabbix proxy should make sure only one Server is specified in configuration file during start up and fail unless.
  3. Currently Server configuration parameter is ignored for proxy in passive mode. On the other hand Zabbix agent with passive mode enabled (StartAgents!=0) would not start unless Server parameter is specified. This does not look consistent. Zabbix agent with passive mode enabled should also allow empty Server parameter, accepting requests from anywhere in this case (that would solve issues involving server with dynamic IP ZBXNEXT-12).

Specification (passive proxy)

When proxy in passive mode receives request from server, before accepting request, it should:

  1. check if Server parameter was specified in configuration file
  2. if yes, match the IP of incoming connection against entries, otherwise continue
  3. if all specified entries do not match, proxy closes the connection logging incident to the log file, otherwise continue

Specification (active proxy)

When proxy in active mode starts up, when reading mandatory configuration parameter Server, it should:

  • make sure only one entry is specified
  • report an error on the command line and exit immediately if more than one entry specified

Specification (agent)

When agent with passive mode enabled receives request from server/proxy, before accepting request, it should:

  1. check if Server parameter was specified in configuration file
  2. if yes, match the IP of incoming connection against entries, otherwise continue
  3. if all specified entries do not match, agent closes the connection logging incident to the log file, otherwise continue

Documentation

ChangeLog

  • N/A