8:50 a.m.
------=_Part_5022_39979720.1410875418148
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
How do I get the spice client to connect to a VM through the portal instead of attempting
to connect directly to the VM? For example. I allow access to the engine portal over our
WAN to a NATed IP address. The users on the other side of the WAN do not have access to
the real VM IP addresses. When they click on the console access button, they are unable to
connect to the VM. I believe this is because it using attempting a direct connection
instead of proxying through the portal.
------=_Part_5022_39979720.1410875418148
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html><body><div style="font-family: times new roman, new york, times,
serif; font-size: 12pt; color: #000000"><div>How do I get the spice client
to connect to a VM through the portal instead of attempting to connect directly to the VM?
For example. I allow access to the engine portal over our WAN to a NATed IP address. The
users on the other side of the WAN do not have access to the real VM IP addresses. When
they click on the console access button, they are unable to connect to the VM. I believe
this is because it using attempting a direct connection instead of proxying through the
portal.<br
data-mce-bogus="1"></div></div></body></html>
------=_Part_5022_39979720.1410875418148--
9:02 a.m.
On Tue, Sep 16, 2014 at 3:50 PM, Maurice James <mjames(a)media-node.com>
wrote:
How do I get the spice client to connect to a VM through the portal
instead of attempting to connect directly to the VM? For example. I allow
access to the engine portal over our WAN to a NATed IP address. The users
on the other side of the WAN do not have access to the real VM IP
addresses. When they click on the console access button, they are unable to
connect to the VM. I believe this is because it using attempting a direct
connection instead of proxying through the portal.
see:
http://www.ovirt.org/Features/Spice_Proxy
more tech details also from rhev docs:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtuali...
I don't remember if it is ok and works to set up the squid part on engine
itself.... but I think it would be cleaner design to put it on another
dedicated infrastructure host, perhaps already existing in your infra for
similar reasons.
Gianluca
9:48 a.m.
On Út, 2014-09-16 at 16:02 +0200, Gianluca Cecchi wrote:
On Tue, Sep 16, 2014 at 3:50 PM, Maurice James
<mjames(a)media-node.com>
wrote:
How do I get the spice client to connect to a VM through the
portal instead of attempting to connect directly to the VM?
For example. I allow access to the engine portal over our WAN
to a NATed IP address. The users on the other side of the WAN
do not have access to the real VM IP addresses.
Please note that the client is actually connecting to _host_ IP, not to
VM IP address. The VM may be configured with no NIC (so w/o any network
connectivity) and you'll still be able to connect to it using Spice (or
VNC). Only RDP needs connectivity to the VM.
When they click on the console access button, they are
unable
to connect to the VM. I believe this is because it using
attempting a direct connection instead of proxying through the
portal.
see:
http://www.ovirt.org/Features/Spice_Proxy
more tech details also from rhev docs:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtuali...
I don't remember if it is ok and works to set up the squid part on
engine itself....
In principle, there's no reason why it shouldn't work. ovirt-engine &
friends don't care about squid and squid doesn't care about the rest of
the system as long as the machine has enough power/bandwidth to run
both.
but I think it would be cleaner design to put it on another
dedicated
infrastructure host, perhaps already existing in your infra for
similar reasons.
Agreed.
David
Gianluca
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:13 a.m.
So I only need to make sure that the users on the other side of the WAN can connect on the
spice ports?
----- Original Message -----
From: "David Jaša" <djasa(a)redhat.com>
To: "Maurice James" <mjames(a)media-node.com>
Cc: "users" <users(a)ovirt.org>
Sent: Tuesday, September 16, 2014 10:48:27 AM
Subject: Re: [ovirt-users] Spice client with engine portal
On Út, 2014-09-16 at 16:02 +0200, Gianluca Cecchi wrote:
On Tue, Sep 16, 2014 at 3:50 PM, Maurice James
<mjames(a)media-node.com>
wrote:
How do I get the spice client to connect to a VM through the
portal instead of attempting to connect directly to the VM?
For example. I allow access to the engine portal over our WAN
to a NATed IP address. The users on the other side of the WAN
do not have access to the real VM IP addresses.
Please note that the client is actually connecting to _host_ IP, not to
VM IP address. The VM may be configured with no NIC (so w/o any network
connectivity) and you'll still be able to connect to it using Spice (or
VNC). Only RDP needs connectivity to the VM.
When they click on the console access button, they are
unable
to connect to the VM. I believe this is because it using
attempting a direct connection instead of proxying through the
portal.
see:
http://www.ovirt.org/Features/Spice_Proxy
more tech details also from rhev docs:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtuali...
I don't remember if it is ok and works to set up the squid part on
engine itself....
In principle, there's no reason why it shouldn't work. ovirt-engine &
friends don't care about squid and squid doesn't care about the rest of
the system as long as the machine has enough power/bandwidth to run
both.
but I think it would be cleaner design to put it on another
dedicated
infrastructure host, perhaps already existing in your infra for
similar reasons.
Agreed.
David
Gianluca
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3:13 a.m.
On Út, 2014-09-16 at 11:13 -0400, Maurice James wrote:
So I only need to make sure that the users on the other side of the
WAN can connect on the spice ports?
Yes, that's all you need.
David
----- Original Message -----
From: "David Jaša" <djasa(a)redhat.com>
To: "Maurice James" <mjames(a)media-node.com>
Cc: "users" <users(a)ovirt.org>
Sent: Tuesday, September 16, 2014 10:48:27 AM
Subject: Re: [ovirt-users] Spice client with engine portal
On Út, 2014-09-16 at 16:02 +0200, Gianluca Cecchi wrote:
> On Tue, Sep 16, 2014 at 3:50 PM, Maurice James <mjames(a)media-node.com>
> wrote:
> How do I get the spice client to connect to a VM through the
> portal instead of attempting to connect directly to the VM?
> For example. I allow access to the engine portal over our WAN
> to a NATed IP address. The users on the other side of the WAN
> do not have access to the real VM IP addresses.
Please note that the client is actually connecting to _host_ IP, not to
VM IP address. The VM may be configured with no NIC (so w/o any network
connectivity) and you'll still be able to connect to it using Spice (or
VNC). Only RDP needs connectivity to the VM.
> When they click on the console access button, they are unable
> to connect to the VM. I believe this is because it using
> attempting a direct connection instead of proxying through the
> portal.
>
>
>
>
> see:
> http://www.ovirt.org/Features/Spice_Proxy
>
>
>
> more tech details also from rhev docs:
>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtuali...
>
>
>
> I don't remember if it is ok and works to set up the squid part on
> engine itself....
In principle, there's no reason why it shouldn't work. ovirt-engine &
friends don't care about squid and squid doesn't care about the rest of
the system as long as the machine has enough power/bandwidth to run
both.
> but I think it would be cleaner design to put it on another dedicated
> infrastructure host, perhaps already existing in your infra for
> similar reasons.
Agreed.
David
>
>
> Gianluca
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3916
days inactive
3917
days old
4 comments
3 participants
participants (3)
-
David Jaša -
Gianluca Cecchi -
Maurice James