Page MenuHomeVyOS Platform
Create Task
Maniphest T6934

Add preshared keys for zabbix-agent monitoring service
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Add the ability to configure preshared keys for the zabbix-agent monitoring service

https://www.zabbix.com/documentation/6.4/en/manual/encryption/using_pre_shared_keys
https://github.com/zabbix/zabbix/blob/master/src/go/conf/zabbix_agent2.conf

generating PSK

Generating PSK

For example, a 256-bit (32 bytes) PSK can be generated using the following commands:

with OpenSSL:
  $ openssl rand -hex 32
  af8ced32dfe8714e548694e2d29e1a14ba6fa13f216cb35c19d0feb1084b0429

zabbix-agent2 configuration:

TLSConnect=psk
TLSAccept=psk
TLSPSKFile=/home/zabbix/zabbix_agentd.psk
TLSPSKIdentity=PSK 001

Proposed CLI:

set service monitoring zabbix-agent authentication mode pre-shared-secret
set service monitoring zabbix-agent psk id 'PSK_001'
set service monitoring zabbix-agent psk secret 'xxx'

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Related Objects

Event Timeline

Viacheslav created this task.Dec 3 2024, 3:49 PM
Viacheslav triaged this task as Normal priority.
HollyGurza changed the task status from Open to In progress.Dec 9 2024, 10:10 AM
HollyGurza claimed this task.
pasik subscribed.Dec 9 2024, 10:02 PM
HollyGurza added a comment.Dec 11 2024, 7:08 AM

https://github.com/vyos/vyos-1x/pull/4233

Restricted Repository Identity mentioned this in rVYOSONEX73b9eba81999: T6934: Add preshared key for zabbix-agent monitoring service.Dec 18 2024, 6:37 PM
Restricted Repository Identity mentioned this in rVYOSONEXfdb9ce311ae4: Merge pull request #4233 from HollyGurza/T6934.Dec 18 2024, 6:37 PM
Viacheslav closed this task as Resolved.Apr 24 2026, 3:14 PM
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.

Implemented

vyos@r16# set service monitoring zabbix-agent authentication mode 
Possible completions:
   pre-shared-secret    Use a pre-shared secret key
                        

      
[edit]
vyos@r16# set service monitoring zabbix-agent authentication mode pre-shared-secret 
[edit]
vyos@r16# run show ver
Version:          VyOS 1.5.0
Release train:    circinus
Release flavor:   generic