背景：

項目需要通過zabbix-proxy 來獲取監控數據【網絡是單向的，zabbix-proxy 通過公網主動連接 zabbix-server ，上報監控數據，已達到監控的目的】

需求：

因為是單向網絡，proxy 掛了后，zabbix master 都無法獲取到 zabbix-proxy 和 下面的agent 機器的離線的狀態，更不會觸發告警;現需要對 zabbix-proxy 的狀態實行監控，利用 zabbix-proxy 主動上傳到 zabbix 頁面上的 agent 代理程序的 狀態 來判斷 zabbix-proxy 的存活

思路：

通過獲取 zabbix api 中 Proxy 代理 的 信息 來實現 監控

官方api說明：

版本：zabbix4.0

1. 獲取token：https://www.zabbix.com/documentation/4.0/zh/manual/api/reference/user/login
3. 獲取proxy 代理信息： https://www.zabbix.com/documentation/4.0/zh/manual/api/reference/proxy/get

#獲取token：

1. #入參：
2. curl -s -X POST -H 'Content-Type: application/json' -d '
3. {
4. "jsonrpc": "2.0",
5. "method": "user.login",
6. "params": {
7. "user": "Admin",
8. "password": "PASSWORD"
9. },
10. "id": 1
11. }' http://172.16.10.37:8888/api_jsonrpc.php;
13. #回參：
14. {"jsonrpc":"2.0","result":"為0qwewerwrsdfdsfdsafsd","id":1}
16. #得到token 為0qwewerwrsdfdsfdsafsd

#獲取proxy 代理信息

1. #利用上面獲取的token，來獲取api 中proxy 的代理信息
3. #入參：
4. curl -s -X POST -H 'Content-Type: application/json' -d '
5. {
6. "jsonrpc": "2.0",
7. "method": "proxy.get",
8. "params": {
9. "output": "extend",
10. "selectInterface": "extend"
11. },
12. "auth": "0qwewerwrsdfdsfdsafsd",
13. "id": 1
14. }' http://172.16.10.37:8888/api_jsonrpc.php
17. #回參
18. {
19. "jsonrpc": "2.0",
20. "result": [
21. {
22. "proxy_hostid": "0",
23. "host": "a-proxy",
24. "status": "5",
25. "disable_until": "0",
26. "error": "",
27. "available": "0",
28. "errors_from": "0",
29. "lastaccess": "1637806905",
30. "ipmi_authtype": "-1",
31. "ipmi_privilege": "2",
32. "ipmi_username": "",
33. "ipmi_password": "",
34. "ipmi_disable_until": "0",
35. "ipmi_available": "0",
36. "snmp_disable_until": "0",
37. "snmp_available": "0",
38. "maintenanceid": "0",
39. "maintenance_status": "0",
40. "maintenance_type": "0",
41. "maintenance_from": "0",
42. "ipmi_errors_from": "0",
43. "snmp_errors_from": "0",
44. "ipmi_error": "",
45. "snmp_error": "",
46. "jmx_disable_until": "0",
47. "jmx_available": "0",
48. "jmx_errors_from": "0",
49. "jmx_error": "",
50. "name": "",
51. "flags": "0",
52. "templateid": "0",
53. "description": "a-proxy",
54. "tls_connect": "1",
55. "tls_accept": "1",
56. "tls_issuer": "",
57. "tls_subject": "",
58. "tls_psk_identity": "",
59. "tls_psk": "",
60. "proxy_address": "1.1.1.1",
61. "auto_compress": "1",
62. "discover": "0",
63. "proxyid": "10385",
64. "interface": []
65. },
66. {
67. "proxy_hostid": "0",
68. "host": "b-proxy",
69. "status": "5",
70. "disable_until": "0",
71. "error": "",
72. "available": "0",
73. "errors_from": "0",
74. "lastaccess": "1637806906",
75. "ipmi_authtype": "-1",
76. "ipmi_privilege": "2",
77. "ipmi_username": "",
78. "ipmi_password": "",
79. "ipmi_disable_until": "0",
80. "ipmi_available": "0",
81. "snmp_disable_until": "0",
82. "snmp_available": "0",
83. "maintenanceid": "0",
84. "maintenance_status": "0",
85. "maintenance_type": "0",
86. "maintenance_from": "0",
87. "ipmi_errors_from": "0",
88. "snmp_errors_from": "0",
89. "ipmi_error": "",
90. "snmp_error": "",
91. "jmx_disable_until": "0",
92. "jmx_available": "0",
93. "jmx_errors_from": "0",
94. "jmx_error": "",
95. "name": "",
96. "flags": "0",
97. "templateid": "0",
98. "description": "b-proxy",
99. "tls_connect": "1",
100. "tls_accept": "1",
101. "tls_issuer": "",
102. "tls_subject": "",
103. "tls_psk_identity": "",
104. "tls_psk": "",
105. "proxy_address": "1.1.1.1",
106. "auto_compress": "1",
107. "discover": "0",
108. "proxyid": "10402",
109. "interface": []
110. },
111. {
112. "proxy_hostid": "0",
113. "host": "c_proxy",
114. "status": "5",
115. "disable_until": "0",
116. "error": "",
117. "available": "0",
118. "errors_from": "0",
119. "lastaccess": "1637806905",
120. "ipmi_authtype": "-1",
121. "ipmi_privilege": "2",
122. "ipmi_username": "",
123. "ipmi_password": "",
124. "ipmi_disable_until": "0",
125. "ipmi_available": "0",
126. "snmp_disable_until": "0",
127. "snmp_available": "0",
128. "maintenanceid": "0",
129. "maintenance_status": "0",
130. "maintenance_type": "0",
131. "maintenance_from": "0",
132. "ipmi_errors_from": "0",
133. "snmp_errors_from": "0",
134. "ipmi_error": "",
135. "snmp_error": "",
136. "jmx_disable_until": "0",
137. "jmx_available": "0",
138. "jmx_errors_from": "0",
139. "jmx_error": "",
140. "name": "",
141. "flags": "0",
142. "templateid": "0",
143. "description": "c_proxy",
144. "tls_connect": "1",
145. "tls_accept": "1",
146. "tls_issuer": "",
147. "tls_subject": "",
148. "tls_psk_identity": "",
149. "tls_psk": "",
150. "proxy_address": "1.1.1.1",
151. "auto_compress": "1",
152. "discover": "0",
153. "proxyid": "10445",
154. "interface": []
155. }
156. ],
157. "id": 1
158. }

再次過濾，找到lastaccess字段，該字段的值表示 proxy 當前的 時間戳，每5秒 內會發生變化;通過對比該字段的值 和 zabbix-server 當前時間戳的 時間差，來判斷 proxy 的狀態是否正常

添加監控項：

獲取 lastaccess字段 的值

創建監控腳本：

1. [root@sre ~]# cd /etc/zabbix/zabbix_agentd.d
3. [root@sre zabbix_agentd.d]# vim a-proxy-check.sh
4. #!/bin/bash
5. curl -s -X POST -H 'Content-Type: application/json' -d '
6. {
7. "jsonrpc": "2.0",
8. "method": "proxy.get",
9. "params": {
10. "output": "extend",
11. "selectInterface": "extend"
12. },
13. "auth": "0qwewerwrsdfdsfdsafsd",
14. "id": 1
15. }' http://172.16.10.37:8888/api_jsonrpc.php | awk -F '{"' '{print $3}' | awk -F ',' '{print $8}' | awk -F '"' '{print $4}'
18. [root@sre zabbix_agentd.d]# chmod +x /etc/zabbix/zabbix_agentd.d/a-proxy-check.sh

修改 zabbix_agentd.conf 配置文件，創建KEY ，指定腳本路徑

1. [root@sre ~]# vim /etc/zabbix/zabbix_agentd.conf
2. ........
3. UnsafeUserParameters=1
4. #自定義一個key,監控a_proxy的狀態
5. UserParameter=a_proxy_status,/bin/bash /etc/zabbix/zabbix_agentd.d/a-proxy-check.sh
6. ........

重啟 zabbix-agent

1. systemctl restart zabbix-agent

登錄到zabbix-server 使用zabbix-get 測試監控項

1. [root@sre zabbix]# zabbix_get -s 172.16.10.37 -p 10050 -k "a_proxy_status"
2. 1637923240

登錄到zabbix web 控制臺，

#添加監控項

#添加觸發器

觸發器表達式表示： 當a-proxy 時間戳的 值 和 zabbix 當前時間戳的值 ，相差60 秒 ，觸發告警

修改觸發器值，模擬觸發告警

總結： 本篇文能寫出來也是被逼無奈，單向網絡，跨互聯網監控，也是生產上一個案例吧.

原文鏈接：https://www.toutiao.com/a7034827437355614750/