1# This is a configuration file for Zabbix proxy daemon 2# To get more information about Zabbix, visit http://www.zabbix.com 3 4############ GENERAL PARAMETERS ################# 5 6### Option: ProxyMode 7# Proxy operating mode. 8# 0 - proxy in the active mode 9# 1 - proxy in the passive mode 10# 11# Mandatory: no 12# Default: 13# ProxyMode=0 14 15### Option: Server 16# If ProxyMode is set to active mode: 17# IP address or DNS name of Zabbix server to get configuration data from and send data to. 18# If ProxyMode is set to passive mode: 19# List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of Zabbix server. 20# Incoming connections will be accepted only from the addresses listed here. 21# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally 22# and '::/0' will allow any IPv4 or IPv6 address. 23# '0.0.0.0/0' can be used to allow any IPv4 address. 24# Example: Server=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com 25# 26# Mandatory: yes 27# Default: 28# Server= 29 30Server=127.0.0.1 31 32### Option: ServerPort 33# Port of Zabbix trapper on Zabbix server. 34# For a proxy in the passive mode this parameter will be ignored. 35# 36# Mandatory: no 37# Range: 1024-32767 38# Default: 39# ServerPort=10051 40 41### Option: Hostname 42# Unique, case sensitive Proxy name. Make sure the Proxy name is known to the server! 43# Value is acquired from HostnameItem if undefined. 44# 45# Mandatory: no 46# Default: 47# Hostname= 48 49Hostname=Zabbix proxy 50 51### Option: HostnameItem 52# Item used for generating Hostname if it is undefined. 53# Ignored if Hostname is defined. 54# 55# Mandatory: no 56# Default: 57# HostnameItem=system.hostname 58 59### Option: ListenPort 60# Listen port for trapper. 61# 62# Mandatory: no 63# Range: 1024-32767 64# Default: 65# ListenPort=10051 66 67### Option: SourceIP 68# Source IP address for outgoing connections. 69# 70# Mandatory: no 71# Default: 72# SourceIP= 73 74### Option: LogType 75# Specifies where log messages are written to: 76# system - syslog 77# file - file specified with LogFile parameter 78# console - standard output 79# 80# Mandatory: no 81# Default: 82# LogType=file 83 84### Option: LogFile 85# Log file name for LogType 'file' parameter. 86# 87# Mandatory: yes, if LogType is set to file, otherwise no 88# Default: 89# LogFile= 90 91LogFile=/tmp/zabbix_proxy.log 92 93### Option: LogFileSize 94# Maximum size of log file in MB. 95# 0 - disable automatic log rotation. 96# 97# Mandatory: no 98# Range: 0-1024 99# Default: 100# LogFileSize=1 101 102### Option: DebugLevel 103# Specifies debug level: 104# 0 - basic information about starting and stopping of Zabbix processes 105# 1 - critical information 106# 2 - error information 107# 3 - warnings 108# 4 - for debugging (produces lots of information) 109# 5 - extended debugging (produces even more information) 110# 111# Mandatory: no 112# Range: 0-5 113# Default: 114# DebugLevel=3 115 116### Option: EnableRemoteCommands 117# Whether remote commands from Zabbix server are allowed. 118# 0 - not allowed 119# 1 - allowed 120# 121# Mandatory: no 122# Default: 123# EnableRemoteCommands=0 124 125### Option: LogRemoteCommands 126# Enable logging of executed shell commands as warnings. 127# 0 - disabled 128# 1 - enabled 129# 130# Mandatory: no 131# Default: 132# LogRemoteCommands=0 133 134### Option: PidFile 135# Name of PID file. 136# 137# Mandatory: no 138# Default: 139# PidFile=/tmp/zabbix_proxy.pid 140 141### Option: SocketDir 142# IPC socket directory. 143# Directory to store IPC sockets used by internal Zabbix services. 144# 145# Mandatory: no 146# Default: 147# SocketDir=/tmp 148 149### Option: DBHost 150# Database host name. 151# If set to localhost, socket is used for MySQL. 152# If set to empty string, socket is used for PostgreSQL. 153# 154# Mandatory: no 155# Default: 156# DBHost=localhost 157 158### Option: DBName 159# Database name. 160# For SQLite3 path to database file must be provided. DBUser and DBPassword are ignored. 161# Warning: do not attempt to use the same database Zabbix server is using. 162# 163# Mandatory: yes 164# Default: 165# DBName= 166 167DBName=zabbix_proxy 168 169### Option: DBSchema 170# Schema name. Used for IBM DB2 and PostgreSQL. 171# 172# Mandatory: no 173# Default: 174# DBSchema= 175 176### Option: DBUser 177# Database user. Ignored for SQLite. 178# 179# Default: 180# DBUser= 181 182DBUser=zabbix 183 184### Option: DBPassword 185# Database password. Ignored for SQLite. 186# Comment this line if no password is used. 187# 188# Mandatory: no 189# Default: 190# DBPassword= 191 192### Option: DBSocket 193# Path to MySQL socket. 194# 195# Mandatory: no 196# Default: 197# DBSocket= 198 199# Option: DBPort 200# Database port when not using local socket. Ignored for SQLite. 201# 202# Mandatory: no 203# Default: 204# DBPort= 205 206######### PROXY SPECIFIC PARAMETERS ############# 207 208### Option: ProxyLocalBuffer 209# Proxy will keep data locally for N hours, even if the data have already been synced with the server. 210# This parameter may be used if local data will be used by third party applications. 211# 212# Mandatory: no 213# Range: 0-720 214# Default: 215# ProxyLocalBuffer=0 216 217### Option: ProxyOfflineBuffer 218# Proxy will keep data for N hours in case if no connectivity with Zabbix Server. 219# Older data will be lost. 220# 221# Mandatory: no 222# Range: 1-720 223# Default: 224# ProxyOfflineBuffer=1 225 226### Option: HeartbeatFrequency 227# Frequency of heartbeat messages in seconds. 228# Used for monitoring availability of Proxy on server side. 229# 0 - heartbeat messages disabled. 230# For a proxy in the passive mode this parameter will be ignored. 231# 232# Mandatory: no 233# Range: 0-3600 234# Default: 235# HeartbeatFrequency=60 236 237### Option: ConfigFrequency 238# How often proxy retrieves configuration data from Zabbix Server in seconds. 239# For a proxy in the passive mode this parameter will be ignored. 240# 241# Mandatory: no 242# Range: 1-3600*24*7 243# Default: 244# ConfigFrequency=3600 245 246### Option: DataSenderFrequency 247# Proxy will send collected data to the Server every N seconds. 248# For a proxy in the passive mode this parameter will be ignored. 249# 250# Mandatory: no 251# Range: 1-3600 252# Default: 253# DataSenderFrequency=1 254 255############ ADVANCED PARAMETERS ################ 256 257### Option: StartPollers 258# Number of pre-forked instances of pollers. 259# 260# Mandatory: no 261# Range: 0-1000 262# Default: 263# StartPollers=5 264 265### Option: StartIPMIPollers 266# Number of pre-forked instances of IPMI pollers. 267# The IPMI manager process is automatically started when at least one IPMI poller is started. 268# 269# Mandatory: no 270# Range: 0-1000 271# Default: 272# StartIPMIPollers=0 273 274### Option: StartPollersUnreachable 275# Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java). 276# At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers 277# are started. 278# 279# Mandatory: no 280# Range: 0-1000 281# Default: 282# StartPollersUnreachable=1 283 284### Option: StartTrappers 285# Number of pre-forked instances of trappers. 286# Trappers accept incoming connections from Zabbix sender and active agents. 287# 288# Mandatory: no 289# Range: 0-1000 290# Default: 291# StartTrappers=5 292 293### Option: StartPingers 294# Number of pre-forked instances of ICMP pingers. 295# 296# Mandatory: no 297# Range: 0-1000 298# Default: 299# StartPingers=1 300 301### Option: StartDiscoverers 302# Number of pre-forked instances of discoverers. 303# 304# Mandatory: no 305# Range: 0-250 306# Default: 307# StartDiscoverers=1 308 309### Option: StartHTTPPollers 310# Number of pre-forked instances of HTTP pollers. 311# 312# Mandatory: no 313# Range: 0-1000 314# Default: 315# StartHTTPPollers=1 316 317### Option: JavaGateway 318# IP address (or hostname) of Zabbix Java gateway. 319# Only required if Java pollers are started. 320# 321# Mandatory: no 322# Default: 323# JavaGateway= 324 325### Option: JavaGatewayPort 326# Port that Zabbix Java gateway listens on. 327# 328# Mandatory: no 329# Range: 1024-32767 330# Default: 331# JavaGatewayPort=10052 332 333### Option: StartJavaPollers 334# Number of pre-forked instances of Java pollers. 335# 336# Mandatory: no 337# Range: 0-1000 338# Default: 339# StartJavaPollers=0 340 341### Option: StartVMwareCollectors 342# Number of pre-forked vmware collector instances. 343# 344# Mandatory: no 345# Range: 0-250 346# Default: 347# StartVMwareCollectors=0 348 349### Option: VMwareFrequency 350# How often Zabbix will connect to VMware service to obtain a new data. 351# 352# Mandatory: no 353# Range: 10-86400 354# Default: 355# VMwareFrequency=60 356 357### Option: VMwarePerfFrequency 358# How often Zabbix will connect to VMware service to obtain performance data. 359# 360# Mandatory: no 361# Range: 10-86400 362# Default: 363# VMwarePerfFrequency=60 364 365### Option: VMwareCacheSize 366# Size of VMware cache, in bytes. 367# Shared memory size for storing VMware data. 368# Only used if VMware collectors are started. 369# 370# Mandatory: no 371# Range: 256K-2G 372# Default: 373# VMwareCacheSize=8M 374 375### Option: VMwareTimeout 376# Specifies how many seconds vmware collector waits for response from VMware service. 377# 378# Mandatory: no 379# Range: 1-300 380# Default: 381# VMwareTimeout=10 382 383### Option: SNMPTrapperFile 384# Temporary file used for passing data from SNMP trap daemon to the proxy. 385# Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file. 386# 387# Mandatory: no 388# Default: 389# SNMPTrapperFile=/tmp/zabbix_traps.tmp 390 391### Option: StartSNMPTrapper 392# If 1, SNMP trapper process is started. 393# 394# Mandatory: no 395# Range: 0-1 396# Default: 397# StartSNMPTrapper=0 398 399### Option: ListenIP 400# List of comma delimited IP addresses that the trapper should listen on. 401# Trapper will listen on all network interfaces if this parameter is missing. 402# 403# Mandatory: no 404# Default: 405# ListenIP=0.0.0.0 406 407### Option: HousekeepingFrequency 408# How often Zabbix will perform housekeeping procedure (in hours). 409# Housekeeping is removing outdated information from the database. 410# To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency 411# hours of outdated information are deleted in one housekeeping cycle. 412# To lower load on proxy startup housekeeping is postponed for 30 minutes after proxy start. 413# With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option. 414# In this case the period of outdated information deleted in one housekeeping cycle is 4 times the 415# period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days. 416# 417# Mandatory: no 418# Range: 0-24 419# Default: 420# HousekeepingFrequency=1 421 422### Option: CacheSize 423# Size of configuration cache, in bytes. 424# Shared memory size, for storing hosts and items data. 425# 426# Mandatory: no 427# Range: 128K-64G 428# Default: 429# CacheSize=8M 430 431### Option: StartDBSyncers 432# Number of pre-forked instances of DB Syncers. 433# 434# Mandatory: no 435# Range: 1-100 436# Default: 437# StartDBSyncers=4 438 439### Option: HistoryCacheSize 440# Size of history cache, in bytes. 441# Shared memory size for storing history data. 442# 443# Mandatory: no 444# Range: 128K-2G 445# Default: 446# HistoryCacheSize=16M 447 448### Option: HistoryIndexCacheSize 449# Size of history index cache, in bytes. 450# Shared memory size for indexing history cache. 451# 452# Mandatory: no 453# Range: 128K-2G 454# Default: 455# HistoryIndexCacheSize=4M 456 457### Option: Timeout 458# Specifies how long we wait for agent, SNMP device or external check (in seconds). 459# 460# Mandatory: no 461# Range: 1-30 462# Default: 463# Timeout=3 464 465Timeout=4 466 467### Option: TrapperTimeout 468# Specifies how many seconds trapper may spend processing new data. 469# 470# Mandatory: no 471# Range: 1-300 472# Default: 473# TrapperTimeout=300 474 475### Option: UnreachablePeriod 476# After how many seconds of unreachability treat a host as unavailable. 477# 478# Mandatory: no 479# Range: 1-3600 480# Default: 481# UnreachablePeriod=45 482 483### Option: UnavailableDelay 484# How often host is checked for availability during the unavailability period, in seconds. 485# 486# Mandatory: no 487# Range: 1-3600 488# Default: 489# UnavailableDelay=60 490 491### Option: UnreachableDelay 492# How often host is checked for availability during the unreachability period, in seconds. 493# 494# Mandatory: no 495# Range: 1-3600 496# Default: 497# UnreachableDelay=15 498 499### Option: ExternalScripts 500# Full path to location of external scripts. 501# Default depends on compilation options. 502# To see the default path run command "zabbix_proxy --help". 503# 504# Mandatory: no 505# Default: 506# ExternalScripts=${datadir}/zabbix/externalscripts 507 508### Option: FpingLocation 509# Location of fping. 510# Make sure that fping binary has root ownership and SUID flag set. 511# 512# Mandatory: no 513# Default: 514# FpingLocation=/usr/local/sbin/fping 515 516### Option: Fping6Location 517# Location of fping6. 518# Make sure that fping6 binary has root ownership and SUID flag set. 519# Make empty if your fping utility is capable to process IPv6 addresses. 520# 521# Mandatory: no 522# Default: 523# Fping6Location=/usr/local/sbin/fping6 524 525### Option: SSHKeyLocation 526# Location of public and private keys for SSH checks and actions. 527# 528# Mandatory: no 529# Default: 530# SSHKeyLocation= 531 532### Option: LogSlowQueries 533# How long a database query may take before being logged (in milliseconds). 534# Only works if DebugLevel set to 3 or 4. 535# 0 - don't log slow queries. 536# 537# Mandatory: no 538# Range: 1-3600000 539# Default: 540# LogSlowQueries=0 541 542LogSlowQueries=3000 543 544### Option: TmpDir 545# Temporary directory. 546# 547# Mandatory: no 548# Default: 549# TmpDir=/tmp 550 551### Option: AllowRoot 552# Allow the proxy to run as 'root'. If disabled and the proxy is started by 'root', the proxy 553# will try to switch to the user specified by the User configuration option instead. 554# Has no effect if started under a regular user. 555# 0 - do not allow 556# 1 - allow 557# 558# Mandatory: no 559# Default: 560# AllowRoot=0 561 562### Option: User 563# Drop privileges to a specific, existing user on the system. 564# Only has effect if run as 'root' and AllowRoot is disabled. 565# 566# Mandatory: no 567# Default: 568# User=zabbix 569 570### Option: Include 571# You may include individual files or all files in a directory in the configuration file. 572# Installing Zabbix will create include directory in /usr/local/etc/zabbix4, unless modified during the compile time. 573# 574# Mandatory: no 575# Default: 576# Include= 577 578# Include=/usr/local/etc/zabbix4/zabbix_proxy.general.conf 579# Include=/usr/local/etc/zabbix4/zabbix_proxy.conf.d/ 580# Include=/usr/local/etc/zabbix4/zabbix_proxy.conf.d/*.conf 581 582### Option: SSLCertLocation 583# Location of SSL client certificates. 584# This parameter is used only in web monitoring. 585# Default depends on compilation options. 586# To see the default path run command "zabbix_proxy --help". 587# 588# Mandatory: no 589# Default: 590# SSLCertLocation=${datadir}/zabbix/ssl/certs 591 592### Option: SSLKeyLocation 593# Location of private keys for SSL client certificates. 594# This parameter is used only in web monitoring. 595# Default depends on compilation options. 596# To see the default path run command "zabbix_proxy --help". 597# 598# Mandatory: no 599# Default: 600# SSLKeyLocation=${datadir}/zabbix/ssl/keys 601 602### Option: SSLCALocation 603# Location of certificate authority (CA) files for SSL server certificate verification. 604# If not set, system-wide directory will be used. 605# This parameter is used only in web monitoring. 606# 607# Mandatory: no 608# Default: 609# SSLCALocation= 610 611### Option: StatsAllowedIP 612# List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances. 613# Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests 614# will be accepted. 615# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally 616# and '::/0' will allow any IPv4 or IPv6 address. 617# '0.0.0.0/0' can be used to allow any IPv4 address. 618# Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com 619# 620# Mandatory: no 621# Default: 622# StatsAllowedIP= 623 624####### LOADABLE MODULES ####### 625 626### Option: LoadModulePath 627# Full path to location of proxy modules. 628# Default depends on compilation options. 629# To see the default path run command "zabbix_proxy --help". 630# 631# Mandatory: no 632# Default: 633# LoadModulePath=${libdir}/modules 634 635### Option: LoadModule 636# Module to load at proxy startup. Modules are used to extend functionality of the proxy. 637# Formats: 638# LoadModule=<module.so> 639# LoadModule=<path/module.so> 640# LoadModule=</abs_path/module.so> 641# Either the module must be located in directory specified by LoadModulePath or the path must precede the module name. 642# If the preceding path is absolute (starts with '/') then LoadModulePath is ignored. 643# It is allowed to include multiple LoadModule parameters. 644# 645# Mandatory: no 646# Default: 647# LoadModule= 648 649####### TLS-RELATED PARAMETERS ####### 650 651### Option: TLSConnect 652# How the proxy should connect to Zabbix server. Used for an active proxy, ignored on a passive proxy. 653# Only one value can be specified: 654# unencrypted - connect without encryption 655# psk - connect using TLS and a pre-shared key 656# cert - connect using TLS and a certificate 657# 658# Mandatory: yes, if TLS certificate or PSK parameters are defined (even for 'unencrypted' connection) 659# Default: 660# TLSConnect=unencrypted 661 662### Option: TLSAccept 663# What incoming connections to accept from Zabbix server. Used for a passive proxy, ignored on an active proxy. 664# Multiple values can be specified, separated by comma: 665# unencrypted - accept connections without encryption 666# psk - accept connections secured with TLS and a pre-shared key 667# cert - accept connections secured with TLS and a certificate 668# 669# Mandatory: yes, if TLS certificate or PSK parameters are defined (even for 'unencrypted' connection) 670# Default: 671# TLSAccept=unencrypted 672 673### Option: TLSCAFile 674# Full pathname of a file containing the top-level CA(s) certificates for 675# peer certificate verification. 676# 677# Mandatory: no 678# Default: 679# TLSCAFile= 680 681### Option: TLSCRLFile 682# Full pathname of a file containing revoked certificates. 683# 684# Mandatory: no 685# Default: 686# TLSCRLFile= 687 688### Option: TLSServerCertIssuer 689# Allowed server certificate issuer. 690# 691# Mandatory: no 692# Default: 693# TLSServerCertIssuer= 694 695### Option: TLSServerCertSubject 696# Allowed server certificate subject. 697# 698# Mandatory: no 699# Default: 700# TLSServerCertSubject= 701 702### Option: TLSCertFile 703# Full pathname of a file containing the proxy certificate or certificate chain. 704# 705# Mandatory: no 706# Default: 707# TLSCertFile= 708 709### Option: TLSKeyFile 710# Full pathname of a file containing the proxy private key. 711# 712# Mandatory: no 713# Default: 714# TLSKeyFile= 715 716### Option: TLSPSKIdentity 717# Unique, case sensitive string used to identify the pre-shared key. 718# 719# Mandatory: no 720# Default: 721# TLSPSKIdentity= 722 723### Option: TLSPSKFile 724# Full pathname of a file containing the pre-shared key. 725# 726# Mandatory: no 727# Default: 728# TLSPSKFile= 729 730####### For advanced users - TLS ciphersuite selection criteria ####### 731 732### Option: TLSCipherCert13 733# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 734# Override the default ciphersuite selection criteria for certificate-based encryption. 735# 736# Mandatory: no 737# Default: 738# TLSCipherCert13= 739 740### Option: TLSCipherCert 741# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 742# Override the default ciphersuite selection criteria for certificate-based encryption. 743# Example for GnuTLS: 744# NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509 745# Example for OpenSSL: 746# EECDH+aRSA+AES128:RSA+aRSA+AES128 747# 748# Mandatory: no 749# Default: 750# TLSCipherCert= 751 752### Option: TLSCipherPSK13 753# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 754# Override the default ciphersuite selection criteria for PSK-based encryption. 755# Example: 756# TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 757# 758# Mandatory: no 759# Default: 760# TLSCipherPSK13= 761 762### Option: TLSCipherPSK 763# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 764# Override the default ciphersuite selection criteria for PSK-based encryption. 765# Example for GnuTLS: 766# NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL 767# Example for OpenSSL: 768# kECDHEPSK+AES128:kPSK+AES128 769# 770# Mandatory: no 771# Default: 772# TLSCipherPSK= 773 774### Option: TLSCipherAll13 775# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 776# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. 777# Example: 778# TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 779# 780# Mandatory: no 781# Default: 782# TLSCipherAll13= 783 784### Option: TLSCipherAll 785# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 786# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. 787# Example for GnuTLS: 788# NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509 789# Example for OpenSSL: 790# EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128 791# 792# Mandatory: no 793# Default: 794# TLSCipherAll= 795