Chapter 19. Proxies

Procedure 19.1. Installing Squid on Red Hat Enterprise Linux

1. Install Squid on the Proxy machine:

   # yum install squid

   Copy to Clipboard Toggle word wrap
2. Open /etc/squid/squid.conf. Change:

   http_access deny CONNECT !SSL_ports

   Copy to Clipboard Toggle word wrap
   to:

   http_access deny CONNECT !Safe_ports

   Copy to Clipboard Toggle word wrap
3. Start the proxy:

   # service squid start

   Copy to Clipboard Toggle word wrap
4. Open the default squid port:

   # iptables -A INPUT -p tcp --dport 3128 -j ACCEPT

   Copy to Clipboard Toggle word wrap
5. Make this iptables rule persistent:

   # service iptables save

   Copy to Clipboard Toggle word wrap

Procedure 19.2. Activating SPICE Proxy

1. On the Manager, use the engine-config tool to set a proxy:

   # engine-config -s SpiceProxyDefault=someProxy

   Copy to Clipboard Toggle word wrap
2. Restart the ovirt-engine service:

   # service ovirt-engine restart

   Copy to Clipboard Toggle word wrap
   The proxy must have this form:

   protocol://[host]:[port]

   Copy to Clipboard Toggle word wrap

   Note

   Only SPICE clients shipped with Red Hat Enterprise Linux 6.7, Red Hat Enterprise Linux 7.2, or newer support HTTPS proxies. Older clients only support HTTP. If HTTPS is specified for older clients, the client will ignore the proxy setting and attempt a direct connection to the hypervisor.

Procedure 19.3. Turning Off a SPICE Proxy

1. Log in to the Manager:

   $ ssh root@[IP of Manager]ssh root@[IP of Manager]

   Copy to Clipboard Toggle word wrap
2. Run the following command to clear the SPICE proxy:

   # engine-config -s SpiceProxyDefault=""

   Copy to Clipboard Toggle word wrap
3. Restart the Manager:

   # service ovirt-engine restart

   Copy to Clipboard Toggle word wrap