[Spice-devel] Spice protocol behind a Firewall

[Christophe Fergeau]

On Tue, Feb 21, 2017 at 10:04:52AM +0100, Oscar Segarra wrote:
> Hi Uri,
> 
> Thanks a lot for th example... It looks clarify the security/acl but what
> I'd like to know is if is there any known configuration for an scenario
> like this:
> 
> Hypervisor1 (10.0.0.1)
>     VM1 (port 5900)
>     VM2 (port 5901)
> Hypervisor2 (10.0.0.2)
>     VM3 (port 5902)
>     VM4 (port 5903)
> 
> Of course, VMx can be migrated from one hypervisor to the other (even live).
> 
> What I'd like is to configure
> 
> Internet --> Proxy (listening 5900, 5901, 5902, 5903) --> Hypervisor1 or
> Hypervisor2 (where the port is up)
> 
> I hope not to be the first one with this requirements :S

I think the squid configuration described in
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Installation_Guide/chap-Proxies.html
covers a similar use case.

Christophe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20170221/16020d32/attachment.sig>