[Users] VM Console access with isolated virtual hosts
Hi everybody, I've got a question - what if my hosts are isolated from the rest of network but I still need to access consoles of my virtual machines with spice protocol? How to get this solved? As far as I've noticed the clients (remote-viewer) connect remotely to the hosts on ports assigned to virtual machines (5900, 5901, 5902) that are in my case unaccessible. I've found something about spice-proxy but there is not any documentation around. Does anybody have experience with this? Thanks for any info. Regards, Peter ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Console access with isolated virtual hosts
On 08/21/2013 04:37 AM, Peter Bahlyi wrote: Hi everybody, I've got a question - what if my hosts are isolated from the rest of network but I still need to access consoles of my virtual machines with spice protocol? How to get this solved? As far as I've noticed the clients (remote-viewer) connect remotely to the hosts on ports assigned to virtual machines (5900, 5901, 5902) that are in my case unaccessible. I've found something about spice-proxy but there is not any documentation around. Does anybody have experience with this? Thanks for any info. Regards, Peter ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users have you reviewed http://www.ovirt.org/Features/Spice_Proxy ? hmmm, it seems to lack information on client version to support this ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Console access with isolated virtual hosts
Hi Itamar, thanks for reply. I have actually found that and tried. The issue is that client (remote-viewer on F19) still keeps trying to contact directly the hosts. What I also do not understand is an overall idea behind. As far as I have noticed, RHEV-m does not provide spice-proxy functionality on it's own. If I understand well, it only directs clients to a proxy which sits somewhere else, right? If so, what are pre-requisities on such a proxy solution? What should it be? Regards, Peter - Original Message - From: Itamar Heim Sent: 08/21/13 01:23 PM To: Peter Bahlyi Subject: Re: [Users] VM Console access with isolated virtual hosts On 08/21/2013 04:37 AM, Peter Bahlyi wrote: Hi everybody, I've got a question - what if my hosts are isolated from the rest of network but I still need to access consoles of my virtual machines with spice protocol? How to get this solved? As far as I've noticed the clients (remote-viewer) connect remotely to the hosts on ports assigned to virtual machines (5900, 5901, 5902) that are in my case unaccessible. I've found something about spice-proxy but there is not any documentation around. Does anybody have experience with this? Thanks for any info. Regards, Peter ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users have you reviewed http://www.ovirt.org/Features/Spice_Proxy ? hmmm, it seems to lack information on client version to support this ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Console access with isolated virtual hosts
On Aug 21, 2013, at 13:51 , Peter Bahlyi peter.bah...@mail.com wrote: Hi Itamar, thanks for reply. I have actually found that and tried. The issue is that client (remote-viewer on F19) still keeps trying to contact directly the hosts. What I also do not understand is an overall idea behind. As far as I have noticed, RHEV-m does not provide spice-proxy functionality on it's own. If I understand well, it only directs clients to a proxy which sits somewhere else, right? If so, what are pre-requisities on such a proxy solution? What should it be? Hi, that's correct. you need to set up the proxy yourself, but it's fairly easy, just a simple squid proxy would work… the only caveat is that you should perhaps increase the timeout just in case the connection is idle for a long time. Something like pconn_timeout 12 hours request_timeout 12 hours read_timeout12 hours and ideally set up ACL so only your clients can connect and they can only go to your set of hosts Thanks, michal Regards, Peter - Original Message - From: Itamar Heim Sent: 08/21/13 01:23 PM To: Peter Bahlyi Subject: Re: [Users] VM Console access with isolated virtual hosts On 08/21/2013 04:37 AM, Peter Bahlyi wrote: Hi everybody, I've got a question - what if my hosts are isolated from the rest of network but I still need to access consoles of my virtual machines with spice protocol? How to get this solved? As far as I've noticed the clients (remote-viewer) connect remotely to the hosts on ports assigned to virtual machines (5900, 5901, 5902) that are in my case unaccessible. I've found something about spice-proxy but there is not any documentation around. Does anybody have experience with this? Thanks for any info. Regards, Peter ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users have you reviewed http://www.ovirt.org/Features/Spice_Proxy ? hmmm, it seems to lack information on client version to support this ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
