SPICE Through a Router? Squid?

I have a dual host setup working right now. Host 1 runs the engine and is also a node. Host 2 does DB storage and NFS storage. The WebSockets proxy is running on Host1. My question is how do I run this behind a router? I am correct in understanding that the WebSockets proxy acts as the spice access point for all of the nodes in the cluster / datacetner? or does each node host need a direct connection for spice? the .vv file I receive from the management console specifies the engine's private IP address which works fine when inside the ovirt management LAN, but it wont route from WAN obviously. So essentially i guess i need squid to rewrite the served vv file to the public IP and somehow make the ports work correctly, which is difficult considering every time a VM is created it also adds its own spice port, correct?

I have installed VPN server with access to the management networks, I think this is 'best practices'. 2015-06-01 1:54 GMT+03:00 <alexmcwhirter@triadic.us>:
I have a dual host setup working right now. Host 1 runs the engine and is also a node. Host 2 does DB storage and NFS storage. The WebSockets proxy is running on Host1.
My question is how do I run this behind a router? I am correct in understanding that the WebSockets proxy acts as the spice access point for all of the nodes in the cluster / datacetner? or does each node host need a direct connection for spice?
the .vv file I receive from the management console specifies the engine's private IP address which works fine when inside the ovirt management LAN, but it wont route from WAN obviously.
So essentially i guess i need squid to rewrite the served vv file to the public IP and somehow make the ports work correctly, which is difficult considering every time a VM is created it also adds its own spice port, correct? _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Please refer to this[1] page. [1] http://www.ovirt.org/Features/Spice_Proxy ----- Original Message -----
From: "Юрий Полторацкий" <y.poltoratskiy@gmail.com> To: alexmcwhirter@triadic.us Cc: users@ovirt.org Sent: Monday, June 1, 2015 10:14:48 AM Subject: Re: [ovirt-users] SPICE Through a Router? Squid?
I have installed VPN server with access to the management networks, I think this is 'best practices'.
2015-06-01 1:54 GMT+03:00 < alexmcwhirter@triadic.us > :
I have a dual host setup working right now. Host 1 runs the engine and is also a node. Host 2 does DB storage and NFS storage. The WebSockets proxy is running on Host1.
My question is how do I run this behind a router? I am correct in understanding that the WebSockets proxy acts as the spice access point for all of the nodes in the cluster / datacetner? or does each node host need a direct connection for spice?
the .vv file I receive from the management console specifies the engine's private IP address which works fine when inside the ovirt management LAN, but it wont route from WAN obviously.
So essentially i guess i need squid to rewrite the served vv file to the public IP and somehow make the ports work correctly, which is difficult considering every time a VM is created it also adds its own spice port, correct? _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (3)
-
alexmcwhirter@triadic.us
-
Alon Bar-Lev
-
Юрий Полторацкий