Differences

This shows you the differences between two versions of the page.

--- userdoc:tt_zabbix_monitoring [2018/03/08 13:50]
abelbeck [Encryption via Stunnel]
+++ userdoc:tt_zabbix_monitoring [2018/03/08 14:00]
abelbeck [Encryption via Stunnel]
@@ Line 65: / Line 65: @@
 ==== Encryption via Stunnel ====
-Zabbix 3.0 or later supports encrypted communications between Zabbix server, Zabbix proxy and Zabbix agent using Transport Layer Security (TLS) protocol v.1.2.\\
+Zabbix 3.0 or later supports encrypted communications between Zabbix server, Zabbix proxy and Zabbix agent using Transport Layer Security (TLS) protocol v.1.2.
-[[https://www.zabbix.com/documentation/3.0/manual/encryption|Zabbix Encryption]]
+AstLinux 1.3.3 or later users may continue to use "stunnel" as outlined below, though new configurations should look at the native encryption support described here:
+[[https://www.zabbix.com/documentation/3.0/manual/encryption|Zabbix 3.0 Encryption]]
-Currently, Zabbix does not provide native support for encryption or certificate authentication for the zabbix_agentd or zabbix_proxy data streams.  If the cleartext data that Zabbix exchanges with the server contains information that you don't want to share with the public internet, some sort of SSL wrapper is required.  Using OpenVPN is one choice, but a simpler solution in this case is to use "stunnel".
+Earlier versions of Zabbix did not provide native support for encryption or certificate authentication for the zabbix_agentd or zabbix_proxy data streams.  If the cleartext data that Zabbix exchanges with the server contains information that you don't want to share with the public internet, some sort of SSL wrapper is required.  Using OpenVPN is one choice, but a simpler solution in this case is to use "stunnel".
 The example below demonstrates how to use stunnel to encrypt the zabbix_proxy connection to the Zabbix server, while the zabbix_agentd is also routed via the zabbix_proxy connection.