【Zabbix】Zabbix 分布式监控—创建Proxy主机

2022-02-26 本文已影响0人宝耶需努力

参考链接

阿里巴巴开源镜像站-OPSX镜像站-阿里云开发者社区 (aliyun.com)

zabbix镜像-zabbix下载地址-zabbix安装教程-阿里巴巴开源镜像站 (aliyun.com)

Zabbix三种架构

Server-Agent

Server-Node-Agent

Server-Proxy-Agent

配置介绍

Zabbix Proxy的配置

Server-Node-Agent
Server-Proxy-Agent

1、配置proxy主机

① 安装相应的zabbix包

 zabbix-proxy-mysql zabbix-get zabbix-agent zabbix-sender

② 准备数据库

 创建、授权用户、导入schema.sql

③ 修改配置文件

④ 在server端添加此Proxy

 Administration ——> Proxies

⑤ 在Server端配置通过此Proxy监控的主机

注意：zabbix agent端要允许zabbix proxy主机执行数据采集操作

实战演练—分布式监控

实验部署架构

主机名称	IP地址	服务角色	架构类型
zabbix-server	192.168.200.60	Zabbix 监控端	/
zabbix-agent-centos	192.168.200.70	Zabbix 客户端	Server-Agent
zbxproxy	192.168.200.90	Zabbix Proxy	/
zabbix-agent-02	192.168.200.100	Zabbix 客户端	Server-Proxy-Agent

1、实验前期准备(Server端、Proxy端)

配置服务端和代理端时间同步

 # 服务端和代理端安装ntpdate服务包
     yum install -y ntpdate
     
     # 服务端和代理端同步阿里云时间服务器
     ntpdate ntp1.aliyun.com

关闭防火墙、SELinux安全模式

 systemctl stop firewalld
     systemctl disable firewalld
     
     setenforce 0
     getenforce
     
     iptables -nL

设置主机名

 [root@zabbix-server ~]# hostnamectl set-hostname zabbix-server 
     [root@zabbix-proxy ~]# hostnamectl set-hostname zbxproxy.xybdiy.com
     [root@zabbix-agent-02 ~]# hostnamectl set-hostname zabbix-agent-02

配置域名解析

 [root@zabbix-agent-02 ~]# cat /etc/hosts
     127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
     ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
     192.168.200.60  zabbix-server
     192.168.200.90  zbxproxy.xybdiy.com zbxproxy
     192.168.200.100 zabbix-agent-02

> zabbix-server 直接监控一台主机zabbix-agent-centos
> 
> zabbix-server 通过代理zbproxy 监控zabbix-agent-02

2、在代理服务器上配置MySQL

创建MariaDB.repo

 [root@zbproxy yum.repos.d]# vim mariadb.repo
 [root@zbproxy yum.repos.d]# cat mariadb.repo
 [mariadb]
 name = MariaDB
 baseurl = http://mirrors.ustc.edu.cn/mariadb/yum/10.2/centos7-amd64/
 gpgkey=http://mirrors.ustc.edu.cn/mariadb/yum/RPM-GPG-KEY-MariaDB
 gpgcheck=1

安装mariadb

 [root@zbproxy ~]# yum install -y MariaDB-server MariaDB-client

image-20220216152841900

修改数据库配置文件

 [root@zbproxy ~]# vim /etc/my.cnf.d/server.cnf 
 [mysqld]
 skip_name_resolve = ON      # 跳过主机名解析
 innodb_file_per_table = ON  # 开启独立表空间
 innodb_buffer_pool_size = 256M  # 缓存池大小
 max_connections = 2000      # 最大连接数
 log-bin = master-log      # 开启二进制日志

启动数据库服务

[root@zbproxy ~]# systemctl start mariadb
 [root@zbproxy ~]# systemctl enable mariadb

初始化数据库

 [root@zbproxy ~]# mysql_secure_installation 
 
 NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
  SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!
 
 In order to log into MariaDB to secure it, we'll need the current
 password for the root user.  If you've just installed MariaDB, and
 you haven't set the root password yet, the password will be blank,
 so you should just press enter here.
 
 Enter current password for root (enter for none): 
 OK, successfully used password, moving on...
 
 Setting the root password ensures that nobody can log into the MariaDB
 root user without the proper authorisation.
 
 Set root password? [Y/n] y 
 New password: 
 Re-enter new password: 
 Password updated successfully!
 Reloading privilege tables..
  ... Success!
 
 
 By default, a MariaDB installation has an anonymous user, allowing anyone
 to log into MariaDB without having to have a user account created for
 them.  This is intended only for testing, and to make the installation
 go a bit smoother.  You should remove them before moving into a
 production environment.
 
 Remove anonymous users? [Y/n] y
  ... Success!
 
 Normally, root should only be allowed to connect from 'localhost'.  This
 ensures that someone cannot guess at the root password from the network.
 
 Disallow root login remotely? [Y/n] n
  ... skipping.
 
 By default, MariaDB comes with a database named 'test' that anyone can
 access.  This is also intended only for testing, and should be removed
 before moving into a production environment.
 
 Remove test database and access to it? [Y/n] y
  - Dropping test database...
  ... Success!
  - Removing privileges on test database...
  ... Success!
 
 Reloading the privilege tables will ensure that all changes made so far
 will take effect immediately.
 
 Reload privilege tables now? [Y/n] y
  ... Success!
 
 Cleaning up...
 
 All done!  If you've completed all of the above steps, your MariaDB
 installation should now be secure.
 
 Thanks for using MariaDB!
 [root@zbproxy ~]# mysql -uroot -p000

创建数据库和授权用户

 create database zbxproxydb character set 'utf8';
 Query OK, 1 row affected (0.00 sec)
 
 # 授权用户zbxproxydb
 MariaDB [(none)]> grant all on zbxproxydb.* to 'zbxproxyuser'@'192.168.200.%' identified by 'zbxproxypass';
 Query OK, 0 rows affected (0.00 sec)
 
 # 刷新，重新加载
 MariaDB [(none)]> flush privileges;
 Query OK, 0 rows affected (0.00 sec)
 
 # 退出
 MariaDB [(none)]> exit
 Bye
 [root@zbproxy ~]#

3、在代理服务器上下载zabbix相应的包。

主要是代理proxy的包

 [root@zbproxy src]# yum localinstall zabbix-agent-5.0.20-1.el7.x86_64.rpm zabbix-proxy-mysql-5.0.20-1.el7.x86_64.rpm zabbix-get-5.0.20-1.el7.x86_64.rpm zabbix-sender-5.0.20-1.el7.x86_64.rpm

image-20220216162920326

初始化数据库

 #查询数据库包
 [root@zbproxy src]# rpm -ql zabbix-proxy-mysql
 /etc/logrotate.d/zabbix-proxy
 /etc/zabbix/zabbix_proxy.conf
 /usr/lib/systemd/system/zabbix-proxy.service
 /usr/lib/tmpfiles.d/zabbix-proxy.conf
 /usr/lib/zabbix/externalscripts
 /usr/sbin/zabbix_proxy_mysql
 /usr/share/doc/zabbix-proxy-mysql-5.0.20
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/AUTHORS
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/COPYING
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/ChangeLog
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/NEWS
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/README
 /usr/share/doc/zabbix-proxy-mysql-5.0.20/schema.sql.gz
 /usr/share/man/man8/zabbix_proxy.8.gz
 /var/log/zabbix
 /var/run/zabbix

zabbix-proxymysql 包里带有导入数据的文件schema.sql.gz

 # 复制schema.sql.gz
 [root@zbproxy ~]# cp /usr/share/doc/zabbix-proxy-mysql-5.0.20/schema.sql.gz .
 [root@zbproxy ~]# ls
 anaconda-ks.cfg  schema.sql.gz
 
 # 解压
 [root@zbproxy ~]# gzip -d schema.sql.gz 
 [root@zbproxy ~]# ls
 anaconda-ks.cfg  schema.sql
 
 # 导入数据，出现以下问题
 [root@zbproxy ~]# mysql -uroot -p000 < schema.sql 
 ERROR 1046 (3D000) at line 1: No database selected
 
 解决办法：
 [root@zbproxy ~]# vim schema.sql 
 在首部添加如下内容：
 USE zbxproxydb;
 按:wq保存退出
 
 [root@zbproxy ~]# mysql -uroot -p000 < schema.sql

查看数据已经生成

 MariaDB [(none)]> show databases;
 +--------------------+
 | Database           |
 +--------------------+
 | information_schema |
 | mysql              |
 | performance_schema |
 | zbxproxydb         |
 +--------------------+
 4 rows in set (0.00 sec)
 
 MariaDB [(none)]> use zbxproxydb;
 Reading table information for completion of table and column names
 You can turn off this feature to get a quicker startup with -A
 
 Database changed
 MariaDB [zbxproxydb]> show tables;
 +----------------------------+
 | Tables_in_zbxproxydb       |
 +----------------------------+
 | acknowledges               |
 | actions                    |
 | alerts                     |
 | application_discovery      |
 | application_prototype      |
 | application_template       |
 | applications               |
 | auditlog                   |
 | auditlog_details           |
 | autoreg_host               |
 | conditions                 |
 | config                     |
 | config_autoreg_tls         |
 | corr_condition             |
 | corr_condition_group       |
 | corr_condition_tag         |
 | corr_condition_tagpair     |
 | corr_condition_tagvalue    |
 | corr_operation             |
 | correlation                |
 | dashboard                  |
 | dashboard_user             |
 | dashboard_usrgrp           |
 | dbversion                  |
 | dchecks                    |
 | dhosts                     |
 | drules                     |
 | dservices                  |
 | escalations                |
 | event_recovery             |
 | event_suppress             |
 | event_tag                  |
 | events                     |
 | expressions                |
 | functions                  |
 | globalmacro                |
 | globalvars                 |
 | graph_discovery            |
 | graph_theme                |
 | graphs                     |
 | graphs_items               |
 | group_discovery            |
 | group_prototype            |
 | history                    |
 | history_log                |
 | history_str                |
 | history_text               |
 | history_uint               |
 | host_discovery             |
 | host_inventory             |
 | host_tag                   |
 | hostmacro                  |
 | hosts                      |
 | hosts_groups               |
 | hosts_templates            |
 | housekeeper                |
 | hstgrp                     |
 | httpstep                   |
 | httpstep_field             |
 | httpstepitem               |
 | httptest                   |
 | httptest_field             |
 | httptestitem               |
 | icon_map                   |
 | icon_mapping               |
 | ids                        |
 | images                     |
 | interface                  |
 | interface_discovery        |
 | interface_snmp             |
 | item_application_prototype |
 | item_condition             |
 | item_discovery             |
 | item_preproc               |
 | item_rtdata                |
 | items                      |
 | items_applications         |
 | lld_macro_path             |
 | lld_override               |
 | lld_override_condition     |
 | lld_override_opdiscover    |
 | lld_override_operation     |
 | lld_override_ophistory     |
 | lld_override_opinventory   |
 | lld_override_opperiod      |
 | lld_override_opseverity    |
 | lld_override_opstatus      |
 | lld_override_optag         |
 | lld_override_optemplate    |
 | lld_override_optrends      |
 | maintenance_tag            |
 | maintenances               |
 | maintenances_groups        |
 | maintenances_hosts         |
 | maintenances_windows       |
 | mappings                   |
 | media                      |
 | media_type                 |
 | media_type_message         |
 | media_type_param           |
 | module                     |
 | opcommand                  |
 | opcommand_grp              |
 | opcommand_hst              |
 | opconditions               |
 | operations                 |
 | opgroup                    |
 | opinventory                |
 | opmessage                  |
 | opmessage_grp              |
 | opmessage_usr              |
 | optemplate                 |
 | problem                    |
 | problem_tag                |
 | profiles                   |
 | proxy_autoreg_host         |
 | proxy_dhistory             |
 | proxy_history              |
 | regexps                    |
 | rights                     |
 | screen_user                |
 | screen_usrgrp              |
 | screens                    |
 | screens_items              |
 | scripts                    |
 | service_alarms             |
 | services                   |
 | services_links             |
 | services_times             |
 | sessions                   |
 | slides                     |
 | slideshow_user             |
 | slideshow_usrgrp           |
 | slideshows                 |
 | sysmap_element_trigger     |
 | sysmap_element_url         |
 | sysmap_shape               |
 | sysmap_url                 |
 | sysmap_user                |
 | sysmap_usrgrp              |
 | sysmaps                    |
 | sysmaps_elements           |
 | sysmaps_link_triggers      |
 | sysmaps_links              |
 | tag_filter                 |
 | task                       |
 | task_acknowledge           |
 | task_check_now             |
 | task_close_problem         |
 | task_data                  |
 | task_remote_command        |
 | task_remote_command_result |
 | task_result                |
 | timeperiods                |
 | trends                     |
 | trends_uint                |
 | trigger_depends            |
 | trigger_discovery          |
 | trigger_tag                |
 | triggers                   |
 | users                      |
 | users_groups               |
 | usrgrp                     |
 | valuemaps                  |
 | widget                     |
 | widget_field               |
 +----------------------------+
 166 rows in set (0.00 sec)
 
 MariaDB [zbxproxydb]>

4、配置proxy端

 [root@zbproxy ~]# vim /etc/zabbix/zabbix_proxy.conf 
 Server=192.168.200.60      # server 的IP
 ServerPort=10051          # server 的端口
 
 Hostname=zbxproxy.xybdiy.com  # 主机名
 ListenPort=10051          # proxy自己的监听端口
 EnableRemoteCommands=1      # 允许远程命令
 LogRemoteCommands=1          # 记录远程命令的日志
 
 DBHost=192.168.200.90
 DBName=zbxproxydb
 DBUser=zbxproxyuser
 DBPassword=zbxproxypass
 
 ConfigFrequency=30          # 意思是多长时间去服务端拖一次有自己监控的操作配置，为了实验更快的生效。这里设置30秒，默认3600s
 DataSenderFrequency=1      # 每一秒向server 端发一次数据，发送频度```
**开启proxy服务**

```sh
 [root@zbxproxy zabbix]# systemctl start zabbix-proxy
 [root@zbxproxy zabbix]# systemctl enable zabbix-proxy

5、配置Agent端允许proxy代理监控

 [root@zabbix-agent-02 ~]# vim /etc/zabbix/zabbix_agentd.conf 
 Server=192.168.200.60,192.168.200.90
 ServerActive=192.168.200.60,192.168.200.90
 [root@zabbix-agent-02 ~]# systemctl restart zabbix-agent