https://liangjinzhi.com/tags/%E6%B7%B7%E5%90%88%E4%BA%91/Recent content in 混合云 on 梁锦志 | 运维与开发笔记Hugozh-cnSat, 29 Aug 2026 22:45:00 +0800https://liangjinzhi.com/posts/zabbix-hybrid-cloud/Sat, 29 Aug 2026 22:45:00 +0800https://liangjinzhi.com/posts/zabbix-hybrid-cloud/<p>在企业实际运维场景中，业务往往分布在本地自建机房（内网）和公有云（如阿里云）之间。为实现集中监控，本文记录一种典型的 <strong>Zabbix 混合云监控架构</strong>——基于 <strong>Zabbix Proxy 被动中继</strong> 模式，实现跨网络的安全采集。</p> <hr> <h2 id="1-整体架构设计与流程">1. 整体架构设计与流程</h2> <p>系统采用 <strong>被动模式（Passive Proxy）</strong> 架构。阿里云侧的 Proxy 不主动穿透内网，而是由内网的 Zabbix Server 按照调度周期主动向公网 Proxy 发起请求抓取监控数据。</p> <p>[Zabbix 混合云监控架构拓扑图] <img alt="alt text" loading="lazy" src="https://liangjinzhi.com/posts/zabbix-hybrid-cloud/image.png"></p> <h3 id="核心流转逻辑">核心流转逻辑：</h3> <ol> <li><strong>云内采集</strong>：阿里云 ECS Agent 节点将监控指标提交至同 VPC 内的 Zabbix Proxy（端口 <code>10051</code>）。</li> <li><strong>跨云传输</strong>：内网 Zabbix Server 主动连接阿里云 Proxy 的公网 IP（端口 <code>10051</code>）轮询获取数据。</li> <li><strong>本地监控</strong>：内网 Agent 节点直接由内网 Zabbix Server 抓取，不经过跨云链路。</li> </ol> <hr> <h2 id="2-核心服务脱敏配置">2. 核心服务脱敏配置</h2> <p>以下为生产环境实际运行配置（关键 IP、域名及凭证均已做脱敏处理）。</p> <h3 id="21-内网主控端配置zabbix-server">2.1 内网主控端配置（Zabbix Server）</h3> <p>配置文件路径：<code>/etc/zabbix/zabbix_server.conf</code></p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-ini" data-lang="ini"><span style="display:flex;"><span><span style="color:#a6e22e">LogFile</span><span style="color:#f92672">=</span><span style="color:#e6db74">/var/log/zabbix/zabbix_server.log</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">LogFileSize</span><span style="color:#f92672">=</span><span style="color:#e6db74">0</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">PidFile</span><span style="color:#f92672">=</span><span style="color:#e6db74">/run/zabbix/zabbix_server.pid</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">SocketDir</span><span style="color:#f92672">=</span><span style="color:#e6db74">/run/zabbix</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#75715e"># 数据库配置</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">DBName</span><span style="color:#f92672">=</span><span style="color:#e6db74">zabbix</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">DBUser</span><span style="color:#f92672">=</span><span style="color:#e6db74">zabbix</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">DBPassword</span><span style="color:#f92672">=</span><span style="color:#e6db74">&lt;YOUR_DB_PASSWORD&gt;</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#75715e"># 监听与轮询配置</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">ListenPort</span><span style="color:#f92672">=</span><span style="color:#e6db74">10051</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">ListenIP</span><span style="color:#f92672">=</span><span style="color:#e6db74">0.0.0.0</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">StartProxyPollers</span><span style="color:#f92672">=</span><span style="color:#e6db74">1 # 启用 Proxy 轮询线程（关键）</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#75715e"># 性能与日志</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">SNMPTrapperFile</span><span style="color:#f92672">=</span><span style="color:#e6db74">/var/log/snmptrap/snmptrap.log</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">Timeout</span><span style="color:#f92672">=</span><span style="color:#e6db74">4</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">LogSlowQueries</span><span style="color:#f92672">=</span><span style="color:#e6db74">3000</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">StatsAllowedIP</span><span style="color:#f92672">=</span><span style="color:#e6db74">127.0.0.1</span> </span></span><span style="display:flex;"><span><span style="color:#a6e22e">EnableGlobalScripts</span><span style="color:#f92672">=</span><span style="color:#e6db74">0</span> </span></span></code></pre></div><h3 id="22-阿里云中继端配置zabbix-proxy">2.2 阿里云中继端配置（Zabbix Proxy）</h3> <p>配置文件路径：/etc/zabbix/zabbix_proxy.conf</p>