[Spice-devel] Spice protocol behind a Firewall

[Oscar Segarra]

Hi Uri,

If you change the squid configuration dynamically you'll need to
make sure a client can to the VM. That may include migration.


What would be interesting is habing a kind of health check that checks
"Port telnet". And if a port is ready, add dinamically the rule to the
squid server.

Sorry, I do not have an answer for that.
Of course it depends on the hardware of the servers, the network etc.

If you test it, please let us know what numbers you get.


My lab enviroment I think is not good enough for this kind of tests
(windows10 --> vmware workstations --> kvm --> windows 10). But I will let
you know when I have it in production environment.

Thanks a lot.


2017-02-21 16:16 GMT+01:00 Uri Lublin <uril at redhat.com>:

> On 02/21/2017 04:44 PM, Oscar Segarra wrote:
>
>> Hi Urii,
>>
>> What I meant is that VMs can move dynamically bethween hypervisors (or
>> hosts) and therefore squid configuration may change according to where
>> VMs are placed on.
>>
>
>
> If you change the squid configuration dynamically you'll need to
> make sure a client can to the VM. That may include migration.
>
> What I can do is opening the whole rank 5634 - 6166 (accodring to
>> https://access.redhat.com/documentation/en-US/Red_Hat_Enterp
>> rise_Virtualization/3.1/html/Administration_Guide/Virtualiz
>> ation_Host_Firewall_Requirements1.html)
>> on each hypervisor.
>>
>
> You can do that.
> The number of ports "opened" depends on your requirements.
>
> I will test it in my lab environment and I will let you know.
>>
>> Have you any advice on the following question:
>>
>> Regarding to sizing the squid server... has anyone tested how many
>> Microsoft Windows 7 (or 8, or 10) can be supported by an unique squid
>> proxy server?
>>
>
> Sorry, I do not have an answer for that.
> Of course it depends on the hardware of the servers, the network etc.
>
> If you test it, please let us know what numbers you get.
>
> Thanks,
>     Uri.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20170221/51594944/attachment.html>