Securing your Zabbix MySQL database
Another great added feature for the Zabbix server is the ability to encrypt data between the database and Zabbix components. This is particularly useful when you are running a split database and the Zabbix server over the network. A Man-in-the-Middle (MITM) attack or other attacks can be executed on the network to gain access to your monitoring data.
In this recipe, we’ll set up MySQL encryption between Zabbix components and the database to add another layer of security.
Getting ready
We are going to need a Zabbix setup that uses an external database. I’ll be using the Linux lar-book-secure-db and lar-book-secure-zbx hosts.
The new server called lar-book-secure-zbx will be used to connect externally to the lar-book-secure-db database server. The database servers won’t run our Zabbix server; this process will run on lar-book-secure-zbx.
Make sure that MariaDB is already installed on the lar-book-secure-db host and...
