[Users] VM Console access with isolated virtual hosts

[Michal Skrivanek]

On Aug 21, 2013, at 13:51 , "Peter Bahlyi" <peter.bahlyi at mail.com> wrote:

> Hi Itamar, thanks for reply. I have actually found that and tried. The issue is that client (remote-viewer on F19) still keeps trying to contact directly the hosts. What I also do not understand is an overall idea behind. As far as I have noticed, RHEV-m does not provide spice-proxy functionality on it's own. If I understand well, it only directs clients to a proxy which sits somewhere else, right? If so, what are pre-requisities on such a proxy solution? What should it be?
Hi,
that's correct. you need to set up the proxy yourself, but it's fairly easy, just a simple squid proxy would work…
the only caveat is that you should perhaps increase the timeout just in case the connection is idle for a long time. Something like
> pconn_timeout   12 hours
> request_timeout 12 hours
> read_timeout    12 hours
and ideally set up ACL so only your clients can connect and they can only go to your set of hosts

Thanks,
michal

> 
> Regards, Peter
>  
>> ----- Original Message -----
>> From: Itamar Heim
>> Sent: 08/21/13 01:23 PM
>> To: Peter Bahlyi
>> Subject: Re: [Users] VM Console access with isolated virtual hosts
>>  
>> On 08/21/2013 04:37 AM, Peter Bahlyi wrote: 
>> > Hi everybody, 
>> > I've got a question - what if my hosts are isolated from the rest of 
>> > network but I still need to access consoles of my virtual machines with 
>> > spice protocol? How to get this solved? As far as I've noticed the 
>> > clients (remote-viewer) connect remotely to the hosts on ports assigned 
>> > to virtual machines (5900, 5901, 5902) that are in my case unaccessible. 
>> > I've found something about spice-proxy but there is not any 
>> > documentation around. Does anybody have experience with this? 
>> > 
>> > Thanks for any info. 
>> > 
>> > Regards, 
>> > Peter 
>> > 
>> > 
>> > _______________________________________________ 
>> > Users mailing list 
>> > Users at ovirt.org 
>> > http://lists.ovirt.org/mailman/listinfo/users 
>> > 
>> 
>> have you reviewed http://www.ovirt.org/Features/Spice_Proxy ? 
>> hmmm, it seems to lack information on client version to support this
>> 
>