This addon provides the agent for monitoring the IPFire instance by Zabbix Monitoring.

Requirements
You need a running Zabbix Server and you should be aware of how to integrate hosts monitored by agents into your environment.
Installation
- Install the addon via Pakfire
- Modify the configuration files to fit your needs as described under the next heading
- Restart the agent to apply your changed config
- Create firewall rule(s) to allow the communication between the agent and your server/proxy
Upgrade
Sometimes, during a new release, new defaults are defined in /etc/zabbix_agentd/zabbix_agentd.conf
, but those defaults will only apply for new installations. You are free to apply those new defaults on your existing, upgraded, installation, adapt them to your own needs or ignore them:
Version | Setting | IPFire Default | Notes |
---|---|---|---|
Core Update 170 / zabbix_agentd addon v6.0.6 | ListenIP |
GREEN IP address | Overrides Zabbix default to listen on all IP's. |
Core Update 193 / zabbix_agentd addon v7.0.11 | StartAgents |
3 |
Overrides Zabbix Agent v7.0 default of 10 forks for passive checks back to the 'old' Zabbix default of 3 , which should be plenty for monitoring IPFire since it is recommended to use active checks as much as possible.This parameter can be increased up to 100 if you have a lot of slow-running passive checks, and the agent acts as the bottleneck. Or set to 0 to disable passive checks. |
Configuration
The addon is shipped with a default configuration file and some additional directories and files:
Path | Notes |
---|---|
/etc/zabbix_agentd/zabbix_agentd.conf |
The main configuration file. This file is included in the backup of this addon. See /etc/zabbix_agentd/zabbix_agentd.conf.example or the original documentation for help.
|
/etc/zabbix_agentd/zabbix_agentd.d |
Files containing UserParameters should go here. They need to have the extension *.conf . This directory is included in the backup of this addon. |
/etc/zabbix_agentd/scripts |
Additional scripts e.g. for UserParameters should go here. This directory is included in the backup of this addon. |
/usr/lib/zabbix |
Custom agent modules go here. This directory is included in the backup of this addon. |
/etc/sudoers.d/zabbix_agentd |
Sudoers file required for IPFire specific userparameters. Do not alter this file as it is not included in the addon backup and will be overwritten on next update. |
/etc/sudoers.d/zabbix_agentd_user |
This file can be modified to allow certain commands to be executed with sudo if needed by a UserParameter. This file will be included in a backup of this addon. Do not change the filename! |
/var/log/zabbix/zabbix_agentd.log |
Deprecated LogFile. Since IPFire 2.27 CU 175 Zabbix Agentd logs are integrated in the IPFire's web interface. If you upgraded from a previous version, this file can be safely removed and will no longer be updated. |
Usage
Next to the default Zabbix Agent item keys the addon also includes a number of IPFire specific item keys that can be checked by Zabbix:
- IPFire services (default IPFire services and possible Addon services)
- Pakfire status (Installed version, Available update(s))
- Network stats (Line quality, Open Connections, Firewall hits; IPS Throughput)
- OpenVPN Clients (Bytes receives/sent, Client properties, Connections status, Certificates, ...)
An IPFire instance with the zabbix_agentd addon installed can thus be monitored by Zabbix using these templates:
- Linux by Zabbix Agent Active (recommended) or Linux by Zabbix Agent - For monitoring base Linux OS (CPU, memory, FS, ...)
Note: the itemsystem.sw.packages.get
of that template will fail as IPFire has no package manager that is natively supported by Zabbix Agent. Disable that item in Zabbix on your IPFire host to prevent zabbix-agentd to periodically log about that item not being supported. -
Template App Squid SNMP - For monitoring IPFire Proxy
For this to work you have to enable Squid SNMP access for the Zabbix server by editing/var/ipfire/proxy/advanced/acls/include.acl
and adding:snmp_port 3401 acl zabbix_server src <zabbix_server_ip>/32 acl zabbix_user snmp_community public snmp_access allow zabbix_user zabbix_server
(Add your Zabbix Server IP address and optionally change snmp_port and snmp_community if desired)
Then click on "Save and restart" on the IPFire Services > Web Proxy webUI page to regenerate the squid config and restart squid.
Make sure to adapt the usermacro's defined in the template. -
IPFire by Zabbix Agent Active - for monitoring the IPFire specific item keys.