Zabbix Proxy on 2.7.3

beloc

Hello,

We run Zabbix 7, and I noticed that the proxy and agent version on the latest pfSense is only 6.4. This will cause some interoperability issues with Zabbix. Is there a way to update the Zabbix version on the pfSense without having to wait for the package to be updated, or am I stuck finding an alternative way to monitor items at these locations?

bmeeks

The only safe way to that would be to compile your own Zabbix 7 proxy and agent packages on a pfSense-compatible package builder. That task is definitely not for the faint of heart. It is almost totally undocumented and requires a LOT of tweaking and customizing of the published build scripts to make it all work. You can find some details if you search the DEVELOPMENT sub-forum. Here is a very long thread discussion of the issue: https://forum.netgate.com/topic/169749/pfsense-compile-requirements-for-3rd-party-software.

You can't just install an updated package from a different repo (as in non-pfSense) because the version of various dependent shared libraries that may get pulled in will likely be incompatible with the kernel used in pfSense. You really need a package built using the exact same shared library package versions as those used to build pfSense itself.

beloc

@bmeeks thank you for the reply.

I don't want to do that. That introduces instability. It looks like I will be loading a proxy on-site until it's updated.

gallenat0r

I recently asked TAC about the status of Zabbix 7 support on pfSense+ and was directed to this redmine feature request with 0% progress..
https://redmine.pfsense.org/issues/15548

While there are zabbix-agent(2) binaries available from the zabbix download page, they're compiled against FreeBSD 13.1

conejero

@gallenat0r
Still NO Updates???

gallenat0r

@conejero I as a netgate customer do not have any updates for you. But if you take a look at the redmine link above, you can see that it has been pushed down the line a bit.

steve.scotter

I've been forced to upgrade to Zabbix 7.0 due to the previous LTS version 6.0 going EOL on February 28, 2025. (https://www.zabbix.com/life_cycle_and_release_policy)

The Zabbix Proxies I have are also 6.0 LTS and I've just discovered there is no 7.0 package.

I'm also seeing a lot of the following messages in my zabbix logs...

9868:20250208:120811.048 Proxy "FW-1" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9861:20250208:120811.086 Proxy "FW-2" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9868:20250208:120811.269 Proxy "FW-3" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9868:20250208:120811.366 Proxy "FW-4" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9861:20250208:120811.393 Proxy "FW-5" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9861:20250208:120811.403 Proxy "FW-6" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9861:20250208:120811.436 Proxy "FW-7" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9868:20250208:120811.489 Proxy "FW-8" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9866:20250208:120811.644 Proxy "FW-9" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.
9866:20250208:120811.700 Proxy "FW-10" version 6.0.27 is outdated, only data collection and remote execution is available with server version 7.0.9.
9868:20250208:120811.911 Proxy "FW-11" version 6.0.22 is outdated, only data collection and remote execution is available with server version 7.0.9.

So I'm basically stuff. Rolling my Zabbix server back isn't an option due to EOL/compliance issues. And I seem unable to install the Zabbix 7 agent or proxy on pfsense.

It seems as though the pfsense communication edition is dead?