Shulou(Shulou.com)06/01 Report--

Editor to share with you how Zabbix realizes the communication encryption between Server and Agent through PSK shared key. I hope you will get something after reading this article. Let's discuss it together.

After Zabbix version 3.0, the encryption of communication between Zabbix server, Zabbix proxy, Zabbix agent and zabbix_sender and zabbix_get is supported. The encryption methods include pre-shared key (PSK) and certificate encryption, encryption configuration is optional, some proxies and agents can use certificate authentication to encrypt communication, others can use PSK encryption to encrypt communication, while the rest can communicate without encryption, it should be noted that if you want to use encrypted communication The-with-openssl parameter must be added when compiling.

Generate and add PSK shared key

Use the command openssl rand-hex 32 to produce a string of keys. The configuration steps are as follows:

[root@zabbix scripts] # openssl rand-hex 32ef52cbe2d1a35e6bb3c43b22bd4f1a1d7bf24d1ccb7c47f6a602425970da5432# writes the generated key to the file vim / usr/local/zabbix/etc/zabbix_agentd.conf.d/zabbix_agentd.pskvim / usr/local/zabbix/etc/zabbix_agentd.conf# to join TLSConnect=pskTLSAccept=pskTLSPSKFile=/usr/local/zabbix/etc/zabbix_agentd.conf.d/zabbix_agentd.pskTLSPSKIdentity=PSKTest# and restarts the zabbix_agent process after configuration is completed

Add in zabbix web gui

Zabbix realizes the communication encryption between Server and Agent through PSK shared key.

Test command

Zabbix_get-s 127.0.0.1-k "system.cpu.load [all,avg1]"-- tls-connect=psk-- tls-psk-identity= "PSK 001"-- tls-psk-file=/etc/zabbix/zabbix_agentd.conf.d/zabbix_agentd.psk has read this article. I believe you have some understanding of "how Zabbix encrypts the communication between Server and Agent through PSK shared key". If you want to know more about it. Welcome to follow the industry information channel, thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.