公网环境部署zabbix5.0

实验环境

虚拟机两台，一台公网地址为 1.1.1.1，部署 zabbix server，一台公网地址为 1.1.1.2，部署 zabbix proxy，系统为centos7.2。

1 zabbix server部署

1.1 准备工作

配置防火墙

systemctl start firewalld
systemctl enable firewalld
firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="1.1.1.2/32" port port="10051" protocol="tcp" accept"
firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="1.1.1.2/32" port port="123" protocol="udp" accept"
firewall-cmd --reload

配置selinux

setenforce 0

vim /etc/sysconfig/selinux
SELINUX=disabled

1.2 安装 server

安装 zabbix库

rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
yum clean all

如果出现 curl: (60) The certificate issuer's certificate has expired. Check your system date and time 报错，则需要更新证书

yum install -y ca-certificates
update-ca-trust extract

安装 zabbix server

mariadb

yum install -y zabbix-server-mysql

PostgreSQL

yum install -y zabbix-server-pgsql

安装 zabbix 前端

yum install -y centos-release-scl

vim /etc/yum.repos.d/zabbix.repo
[zabbix-frontend]
enabled=1

Mariadb

yum install -y zabbix-web-mysql-scl zabbix-apache-conf-scl

PostgreSQL

yum install -y zabbix-web-pgsql-scl zabbix-apache-conf-scl

安装 mariadb

yum install -y mariadb-server

vim /etc/my.cnf
max_connections = 4096
character-set-server = utf8

systemctl start mariadb
systemctl enable mariadb
mysql_secure_installation 设置root密码为r00tP@ssw0rd
mysql -uroot -p'r00tP@ssw0rd'
mysql> create database zabbix character set utf8 collate utf8_bin;
mysql> create user zabbix@localhost identified by 'z@bbixP@ssw0rd';
mysql> grant all privileges on zabbix.* to zabbix@localhost;
mysql> quit;
zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p'z@bbixP@ssw0rd' zabbix

安装 PostgreSQL

yum install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm
yum install -y postgresql14-server
/usr/pgsql-14/bin/postgresql-14-setup initdb

配置

systemctl enable postgresql-14
systemctl start postgresql-14
sudo -u postgres createuser --pwprompt zabbix 设置密码为z@bbixP@ssw0rd
sudo -u postgres createdb -O zabbix zabbix

zcat /usr/share/doc/zabbix-server-pgsql*/create.sql.gz | sudo -u zabbix psql zabbix

安装timescaledb

tee /etc/yum.repos.d/timescale_timescaledb.repo <<EOL
[timescale_timescaledb]
name=timescale_timescaledb
baseurl=https://packagecloud.io/timescale/timescaledb/el/$(rpm -E %{rhel})/\$basearch
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/timescale/timescaledb/gpgkey
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
EOL

yum -y update
yum install -y timescaledb-2-postgresql-14
timescaledb-tune --pg-config=/usr/pgsql-14/bin/pg_config
systemctl restart postgresql-14

sudo -u zabbix psql zabbix
CREATE EXTENSION IF NOT EXISTS timescaledb;

zcat /usr/share/doc/zabbix-server-pgsql*/timescaledb.sql.gz | sudo -u zabbix psql zabbix

配置 php

修改时区

vim /etc/opt/rh/rh-php72/php-fpm.d/zabbix.conf
php_value[date.timezone] = Asia/Shanghai

修改端口

vim /etc/httpd/conf/httpd.conf
Listen 12345

启动 zabbix server

vim /etc/zabbix/zabbix_server.conf
DBPassword=z@bbixP@ssw0rd

systemctl start zabbix-server httpd rh-php72-php-fpm
systemctl enable zabbix-server httpd rh-php72-php-fpm

配置zabbix前端

访问 http://1.1.1.1:12345/zabbix 按照提示配置，默认密码 Admin/zabbix，立即修改，并限制guest访问

1.3 配置ntp服务端

由于agent与server之间时间相差过大容易造成nodata的误告警，强烈建议设置时间同步

yum install –y ntp

vim /etc/ntp.conf
Server ntp.ntsc.ac.cn iburst

systemctl start ntpd
systemctl enable ntpd

检查ntp服务状态

ntpstat
ntpq -p

1.4 安装agent

yum install -y zabbix-agent
systemctl start zabbix-agent
systemctl enable zabbix-agent

2 zabbix proxy部署

2.1 准备工作

配置防火墙

systemctl start firewalld
systemctl enable firewalld
firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="1.1.1.1/32" port port="10050" protocol="tcp" accept"
firewall-cmd --reload

配置selinux

setenforce 0

vim /etc/sysconfig/selinux
SELINUX=disabled

配置时间同步

vim /etc/chrony.conf
server 1.1.1.1 iburst

systemctl start chronyd

2.2 安装 proxy

安装 proxy

rpm -ivh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
yum-config-manager --enable rhel-7-server-optional-rpms
yum install -y zabbix-proxy-mysql

如果出现 curl: (60) The certificate issuer's certificate has expired. Check your system date and time 报错，则需要更新证书

yum install -y ca-certificates
update-ca-trust extract

安装 mariadb

yum install -y mariadb-server

vim /etc/my.cnf
max_connections = 4096

systemctl start mariadb
systemctl enable mariadb
mysql_secure_installation 设置root密码为r00tP@ssw0rd
mysql -uroot -p'r00tP@ssw0rd'
mysql> create database zabbix_proxy character set utf8 collate utf8_bin;
mysql> create user zabbix@localhost identified by 'z@bbixP@ssw0rd';
mysql> grant all privileges on zabbix_proxy.* to zabbix@localhost;
mysql> quit;
zcat /usr/share/doc/zabbix-proxy-mysql*/schema.sql.gz | mysql -uzabbix -p'z@bbixP@ssw0rd' zabbix_proxy

启动 proxy

web配置

vim /etc/zabbix/zabbix_proxy.conf
Server=1.1.1.1
Hostname=ZabbixProxy01
DBPassword=z@bbixP@ssw0rd

systemctl start zabbix-proxy
systemctl enable zabbix-proxy

2.3 安装agent

web配置

yum install -y zabbix-agent

vim /etc/zabbix/zabbix_agentd.conf
Hostname=ZabbixProxy01
Server=1.1.1.1

systemctl start zabbix-agent
systemctl enable zabbix-agent