Zabbix uses PSK shared key to encrypt communication between Server and Agent

Since Zabbix version 3.0, it has supported encrypted communication between Zabbix server, Zabbix proxy, Zabbix agent, zabbix_sender and zabbix_get. The encryption methods include pre-shared key (PSK) and certificate encryption. Encryption configuration is optional. Some proxies and agents can use certificate authentication to encrypt communication, others can use PSK encryption, and the rest can communicate without encryption. It should be noted that if you want to use encrypted communication, you must add the –with-openssl parameter when compiling.

Generate and add a PSK shared key

Use the command openssl rand -hex 32 to generate a string of keys. The configuration steps are as follows:

[root@zabbix scripts]# openssl rand -hex 32
ef52cbe2d1a35e6bb3c43b22bd4f1a1d7bf24d1ccb7c47f6a602425970da5432
# Write the generated key to the file vim /usr/local/zabbix/etc/zabbix_agentd.conf.d/zabbix_agentd.psk
vim /usr/local/zabbix/etc/zabbix_agentd.conf
#Add TLSConnect=psk
TLSAccept=psk
TLSPSKFile=/usr/local/zabbix/etc/zabbix_agentd.conf.d/zabbix_agentd.psk
TLSPSKIdentity=PSKTest
#Restart the zabbix_agent process after the configuration is completed

Add in zabbix web gui

Zabbix uses PSK shared key to encrypt communication between Server and Agent

Test Command

zabbix_get -s 127.0.0.1 -k "system.cpu.load[all,avg1]" --tls-connect=psk --tls-psk-identity="PSK 001" --tls-psk-file=/etc/zabbix/zabbix_agentd.conf.d/zabbix_agentd.psk

Summarize

The above is what I introduced to you about Zabbix using PSK shared key to realize communication encryption between Server and Agent. I hope it will be helpful to you. If you have any questions, please leave me a message and I will reply to you in time!