[ovirt-users] SPICE Through a Router? Squid?

I have a dual host setup working right now. Host 1 runs the engine and is also a node. Host 2 does DB storage and NFS storage. The WebSockets proxy is running on Host1. My question is how do I run this behind a router? I am correct in understanding that the WebSockets proxy acts as the spice access point for all of the nodes in the cluster / datacetner? or does each node host need a direct connection for spice? the .vv file I receive from the management console specifies the engine's private IP address which works fine when inside the ovirt management LAN, but it wont route from WAN obviously. So essentially i guess i need squid to rewrite the served vv file to the public IP and somehow make the ports work correctly, which is difficult considering every time a VM is created it also adds its own spice port, correct?