[ovirt-users] SPICE Through a Router? Squid?

[alexmcwhirter at triadic.us]

I have a dual host setup working right now. Host 1 runs the engine and 
is also a node. Host 2 does DB storage and NFS storage. The WebSockets 
proxy is running on Host1.

My question is how do I run this behind a router? I am correct in 
understanding that the WebSockets proxy acts as the spice access point 
for all of the nodes in the cluster / datacetner? or does each node host 
need a direct connection for spice?

the .vv file I receive from the management console specifies the 
engine's private IP address which works fine when inside the ovirt 
management LAN, but it wont route from WAN obviously.

So essentially i guess i need squid to rewrite the served vv file to the 
public IP and somehow make the ports work correctly, which is difficult 
considering every time a VM is created it also adds its own spice port, 
correct?