Differences

This shows you the differences between two versions of the page.

--- userdoc:tt_zabbix_monitoring [2018/03/08 13:37]
abelbeck [Zabbix - Networks and Applications Monitoring]
+++ userdoc:tt_zabbix_monitoring [2018/03/08 14:00]
abelbeck [Encryption via Stunnel]
@@ Line 20: / Line 20: @@
 !!Tip ->!! Before upgrading AstLinux be sure to see if your zabbix_server version is in the same series or newer than what the latest AstLinux includes.  You may need to first, migrate your zabbix_server to a newer version.
+!!Note ->!! AstLinux 1.3.3 or later requires a Zabbix 3.0 or later zabbix_server.
 Be sure to check the [[https://www.zabbix.com/documentation/3.0/|Zabbix Documentation]] page for version specific details.
@@ Line 63: / Line 65: @@
 ==== Encryption via Stunnel ====
-Currently, Zabbix does not provide native support for encryption or certificate authentication for the zabbix_agentd or zabbix_proxy data streams.  If the cleartext data that Zabbix exchanges with the server contains information that you don't want to share with the public internet, some sort of SSL wrapper is required.  Using OpenVPN is one choice, but a simpler solution in this case is to use "stunnel".
+Zabbix 3.0 or later supports encrypted communications between Zabbix server, Zabbix proxy and Zabbix agent using Transport Layer Security (TLS) protocol v.1.2.
+AstLinux 1.3.3 or later users may continue to use "stunnel" as outlined below, though new configurations should look at the native encryption support described here:
+[[https://www.zabbix.com/documentation/3.0/manual/encryption|Zabbix 3.0 Encryption]]
+Earlier versions of Zabbix did not provide native support for encryption or certificate authentication for the zabbix_agentd or zabbix_proxy data streams.  If the cleartext data that Zabbix exchanges with the server contains information that you don't want to share with the public internet, some sort of SSL wrapper is required.  Using OpenVPN is one choice, but a simpler solution in this case is to use "stunnel".
 The example below demonstrates how to use stunnel to encrypt the zabbix_proxy connection to the Zabbix server, while the zabbix_agentd is also routed via the zabbix_proxy connection.