<div dir="ltr">I have installed VPN server with access to the management networks, I think this is 'best practices'. <br></div><div class="gmail_extra"><br><div class="gmail_quote">2015-06-01 1:54 GMT+03:00 <span dir="ltr"><<a href="mailto:alexmcwhirter@triadic.us" target="_blank">alexmcwhirter@triadic.us</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have a dual host setup working right now. Host 1 runs the engine and is also a node. Host 2 does DB storage and NFS storage. The WebSockets proxy is running on Host1.<br>
<br>
My question is how do I run this behind a router? I am correct in understanding that the WebSockets proxy acts as the spice access point for all of the nodes in the cluster / datacetner? or does each node host need a direct connection for spice?<br>
<br>
the .vv file I receive from the management console specifies the engine's private IP address which works fine when inside the ovirt management LAN, but it wont route from WAN obviously.<br>
<br>
So essentially i guess i need squid to rewrite the served vv file to the public IP and somehow make the ports work correctly, which is difficult considering every time a VM is created it also adds its own spice port, correct?<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
</blockquote></div><br></div>