[ovirt-users] any configuration when clients can't directly access oVirt cluster?

Hello, Under my environment, clients must go through a proxy to reach the oVirt cluster(physical nodes), so that I applied DNAT rules for engine and VM IPs to clients. but there were still some issues like VNC console(+browser) don't work, and I'm not sure other features work well. so, I'm wondering whether there is any oVirt configuration or some guides for such case using the proxy. Thanks,