linuser/zabbix-network-topology v5.6.0

v5.6.0 — layout undo/redo, typed LLDP + management IP, PoE budget alert

on GitHub

First public release since v5.5.27. This one release bundles everything in between — the per-version detail is in CHANGELOG.md. The highlights:

Runs on Zabbix 7.0 LTS, 7.4 and 8.0. It's a frontend module (its own page
under Monitoring → Network Topology), not a widget — eight optional dashboard
widgets ship alongside.

✨ New

• Undo / redo for the layout. Drag a node (or several), press Ctrl/Cmd+Z
  to put it back, Ctrl/Cmd+Shift+Z to redo — or use the two toolbar buttons
  (↶ / ↷). Picking a different layout is undoable too, so one undo brings your
  hand-made arrangement back. The history survives a background refresh and
  resets only when you switch view.
• LLDP: the chassis-id is now typed, not guessed. The template collects
  lldpRemChassisIdSubtype, so a neighbour whose identifier is an IP or a name
  is no longer bent into a made-up MAC and mis-matched — fewer wrong edges.
• LLDP: the neighbour's management IP. The module now reads lldpRemManAddr.
  An unresolved neighbour whose advertised management IP belongs to a monitored
  host is linked to it anyway; an unmonitored neighbour shows its IP in the
  detail panel, and "create host" prefills an SNMP interface on it.
• PoE budget: an alert and a trend. The switch PoE budget on the faceplate
  used to read 78 / 95 W in the same muted colour at any load. It now shows the
  percentage, turns amber at ≥ 80 % and red + ⚠ at ≥ 95 %, and draws a
  small sparkline of the last six hours' consumption next to the figure.

🐛 Fixes

• Big maps render again. Wide hierarchy/hop tiers used to be laid out in one
  enormous row and the map zoomed down to nothing; tiers now wrap and large maps
  (1000+ hosts) are visible.
• CDP: opaque hex device-ids no longer invent edges. A five-byte CDP id like
  01 02 03 04 05 was truncated to 01 and matched an unrelated host — a false
  edge, and several such ids collapsed into one phantom ghost. Fixed. (Found in
  the Liberamente fork by Mauro Majeroni.)
• Shared host+hops layouts are kept. A super-admin's shared arrangement saved
  in host+hops focus mode was silently discarded on load; now it survives.
• ClickHouse / Elasticsearch history is read through the storage-safe path for
  the new management-IP and PoE-trend data.

🔒 Security hardening

Addresses an external code/security review (F01–F13):

• Host creation now also requires the Hosts configuration role right (F01).
• The topology-change sender verifies TLS and keeps the password and the
  response out of process arguments (F02/F03/F07).
• deploy.sh is rollback-safe — a failed swap no longer leaves the module
  (or widgets) missing (F04).
• Shared-config writes fail closed instead of overwriting a concurrent change
  with a stale copy (F08); the cache key carries a permission signature (F09).
• Plan background images must be HTTPS and load with referrerpolicy=no-referrer (F11).

⬆️ Upgrade notes

• Re-import the NT LLDP Neighbors by SNMP template to pick up the typed
  chassis-id and the management-IP items (Data collection → Templates → Import,
  Update existing). Nothing else changes for devices that don't send them.
• Plan backgrounds set via URL must be https:// now; http:// URLs are
  rejected. Backgrounds from the Zabbix image store are unaffected.

🇩🇪 Kurzfassung

Undo/Redo fürs Layout (Strg/Cmd+Z), LLDP typisiert die Chassis-ID und
nutzt die Management-IP der Nachbarn (weniger Falschkanten, Geister mit
echter IP, „Host anlegen" füllt ein SNMP-Interface vor), **PoE-Budget mit Alert

• Verlauf**. Fixes: große Karten rendern wieder, CDP-Hex-IDs erfinden keine
  Kanten mehr, geteilte Host+Hops-Anordnungen bleiben erhalten. Dazu
  Security-Härtung (F01–F13). Vor dem Nutzen das LLDP-Template neu importieren.