From patchwork Fri Mar 28 23:23:32 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Robin Roevens X-Patchwork-Id: 8568 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4ZPcP56rLkz3xGq for ; Fri, 28 Mar 2025 23:36:41 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "E5" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZPcP46B8Pz5GB for ; Fri, 28 Mar 2025 23:36:40 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZPcP45W6qz335R for ; Fri, 28 Mar 2025 23:36:40 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZPcP168Hrz32MJ for ; Fri, 28 Mar 2025 23:36:37 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZPcP12FVNz2Cv for ; Fri, 28 Mar 2025 23:36:37 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=OU5qaCw7; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1743204997; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=RWzMFsPJv1edN5CgTatOq3kP13E6gWWT9SXRcuBEQho=; b=QpkM1yCPA5N1qPMp9+XSW92TWAYbB8i7MtBpXl2XxKULaBT7u/g18gRCDjXupvlrE1TBiG zpYPksJKHskkr6dVsE4/ZVrMZj5yIQ24ftVW/afO60iJ62DbcAEDuQ3kREeA0/D2WGQv2e X1Cx1ljVuZvY1Bg77EZGsQX3I2TBcKI3yJ1LM//SX+iyJ+QsA0+XXlxuLRutKhL5a9vmZI UB1vdaKAyhpJJGo/8H2jR+E8KmMM2lI+BofSKZT/pjkgxJBynwD6t5zpsxsEsp/m6Lyhc7 Y6U0nWtrj9lCqYXK6IZ+t8rllvzim3ddWzFoNMaf2ITJPrV4OjA0u/g4iQF49w== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=OU5qaCw7; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1743204997; a=rsa-sha256; cv=none; b=IME8p+tvQ2B5ekA3/8BGztX8rbQ48xdipOaxVFH9Ts+sXkWxZtneDtVP7rwsFDipFWGoWK jrZVH9X+MkUEDYcKPp/X0BgK9XTXyLqSixEtLQoWfHjMNYNrSY3lEf855EhBhObCh1F5UT V6wa73PjPLNPBdcCj1apVuEhpkALDlcXJQql3WZry1zZ7BAWL6lm0+NYLHDSFOBe8CmN/Q oFfTKhpY/lrX0WxwfQfj66jr662gygZz9GRnvbHCD4SNW1sTUhEPLerpml9680lJiF3tdf vzJCzynnqdFneZ6MMnomkB4tydBCepRsISmWlHfVbC0Ptg0RRbhAkcPMN8ORGQ== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id F12F4258D8 for ; Sat, 29 Mar 2025 00:36:36 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id v4FtrBOe0BIe for ; Sat, 29 Mar 2025 00:36:36 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1743204996; bh=L4TivCZQ8BIBd4ulzs53DeW17ZXg+NEfzg4qUws62cU=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=OU5qaCw7gykedyU8BPHONGOy0Sc4NC3pa4JUkiPPNYFp2hooISQQEBLU6eieGwEB3 +qQil6iv7QoHOt/A/TTyQn/bE4eay8ETxftPvU1Wc+FkH+AyMem3OE2tDgULZ8d1dB d+g/SGSf5Hd9CX5D8uocl3koOFZyLXFrNVFVSImrFL7fbR3Q8SBG9gbuCPsz2lBCVC H4O5s9OQNeHerNMwl3HOIVWBa+hVmMW7RCAYtExZutIcAsHN1cgDTOEx9Gou51UyUh /I8SF/NLYaL/0P7i3F79xVhdo4DwwDELOmMjzb8N18b046XzdWku86fUy5Z/E4S0q8 7dH4MGZC9L+oA== Received: from chojin.roevenslambrechts.be (Chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id B00913017F9; Sat, 29 Mar 2025 00:36:33 +0100 (CET) From: Robin Roevens To: development@lists.ipfire.org Cc: Robin Roevens Subject: [PATCH] zabbix_agentd: Set passive check agents to 3 by default on new installations. Date: Sat, 29 Mar 2025 00:23:32 +0100 Message-ID: <20250328233625.68561-2-robin.roevens@disroot.org> In-Reply-To: <20250328233625.68561-1-robin.roevens@disroot.org> References: <20250328233625.68561-1-robin.roevens@disroot.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 X-RoevensLambrechts-MailScanner-ID: B00913017F9.AB5A3 X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1743809794.41087@/fl35t9RIjq+JkC6CjixBA X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4ZPcP12FVNz2Cv X-Spamd-Result: default: False [-3.56 / 11.00]; BAYES_HAM(-2.98)[99.92%]; SPF_REPUTATION_SPAM(2.38)[0.7930749196059]; R_DKIM_ALLOW(-1.70)[disroot.org:s=mail]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM(-0.98)[-0.979]; DKIM_REPUTATION(-0.97)[-0.96841160586569]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+a:c]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.00)[asn: 50673(0.00), country: NL(-0.00), ip: 178.21.23.139(0.00)]; RCPT_COUNT_TWO(0.00)[2]; FUZZY_RATELIMITED(0.00)[rspamd.com]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MISSING_XM_UA(0.00)[]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; RCVD_TLS_LAST(0.00)[]; DKIM_TRACE(0.00)[disroot.org:+]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; RBL_SENDERSCORE_REPUT_BLOCKED(0.00)[178.21.23.139:from] X-Rspamd-Action: no action Zabbix Agent since v7 by default forks 10 instances to listen for and concurrently execute incoming (passive) checks. This was only 3 in previous versions and should be plenty on an IPFire instance where resources can be scarce. Users with an existing installation will have to manually add the parameter to their config if they don't want the Zabbix new default of 10 . This will be documented in the wiki. Signed-off-by: Robin Roevens --- config/zabbix_agentd/zabbix_agentd.conf | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/config/zabbix_agentd/zabbix_agentd.conf b/config/zabbix_agentd/zabbix_agentd.conf index a5a608d83..c9e041113 100644 --- a/config/zabbix_agentd/zabbix_agentd.conf +++ b/config/zabbix_agentd/zabbix_agentd.conf @@ -13,12 +13,13 @@ Server=127.0.0.1 ServerActive=127.0.0.1 -# Number of pre-forked instances of zabbix_agentd that process passive checks. -# On IPFire this is set to 0 to disable passive checks and only allow active -# checks by default. -# Set this value in a range of 1-100 to enable passive checks or comment it -# out to revert to the Zabbix agent default (10). -StartAgents=0 +# Number of pre-forked instances of zabbix_agentd that concurrently process +# passive checks. +# On IPFire this is by default set to 3 to minimize the required resources. +# This parameter can be increased up to 100 if you have a lot of slow-running +# checks, and the agent acts as the bottleneck. +# Or set to 0 to disable passive checks. +StartAgents=3 # List of comma delimited IP addresses that the agent should listen on # for passive checks.