Re: [Users] VM Console access with isolated virtual hosts
On Aug 21, 2013, at 13:51 , "Peter Bahlyi" <peter.bahlyi(a)mail.com> wrote:
Hi Itamar, thanks for reply. I have actually found that and tried.
The issue is that client (remote-viewer on F19) still keeps trying to contact directly the
hosts. What I also do not understand is an overall idea behind. As far as I have noticed,
RHEV-m does not provide spice-proxy functionality on it's own. If I understand well,
it only directs clients to a proxy which sits somewhere else, right? If so, what are
pre-requisities on such a proxy solution? What should it be?
Hi,
that's correct. you need to set up the proxy yourself, but it's fairly easy, just
a simple squid proxy would work…
the only caveat is that you should perhaps increase the timeout just in case the
connection is idle for a long time. Something like
pconn_timeout 12 hours
request_timeout 12 hours
read_timeout 12 hours
and ideally set up ACL so only your clients can connect
and they can only go to your set of hosts
Thanks,
michal
Regards, Peter
> ----- Original Message -----
> From: Itamar Heim
> Sent: 08/21/13 01:23 PM
> To: Peter Bahlyi
> Subject: Re: [Users] VM Console access with isolated virtual hosts
>
> On 08/21/2013 04:37 AM, Peter Bahlyi wrote:
> > Hi everybody,
> > I've got a question - what if my hosts are isolated from the rest of
> > network but I still need to access consoles of my virtual machines with
> > spice protocol? How to get this solved? As far as I've noticed the
> > clients (remote-viewer) connect remotely to the hosts on ports assigned
> > to virtual machines (5900, 5901, 5902) that are in my case unaccessible.
> > I've found something about spice-proxy but there is not any
> > documentation around. Does anybody have experience with this?
> >
> > Thanks for any info.
> >
> > Regards,
> > Peter
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users(a)ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
> have you reviewed http://www.ovirt.org/Features/Spice_Proxy ?
> hmmm, it seems to lack information on client version to support this
>