Chapter 19. Proxies

Procedure 19.1. Installing Squid on Red Hat Enterprise Linux

1. Install Squid on the Proxy machine:

   # yum install squid

   Copy to Clipboard
2. Open /etc/squid/squid.conf. Change:

   http_access deny CONNECT !SSL_ports

   Copy to Clipboard
   to:

   http_access deny CONNECT !Safe_ports

   Copy to Clipboard
3. Start the proxy:

   # service squid start

   Copy to Clipboard
4. Open the default squid port:

   # iptables -A INPUT -p tcp --dport 3128 -j ACCEPT

   Copy to Clipboard
5. Make this iptables rule persistent:

   # service iptables save

   Copy to Clipboard

Procedure 19.2. Activating SPICE Proxy

1. On the Manager, use the engine-config tool to set a proxy:

   # engine-config -s SpiceProxyDefault=someProxy

   Copy to Clipboard
2. Restart the ovirt-engine service:

   # service ovirt-engine restart

   Copy to Clipboard
   The proxy must have this form:

   protocol://[host]:[port]

   Copy to Clipboard

   Note

   Only SPICE clients shipped with Red Hat Enterprise Linux 6.7, Red Hat Enterprise Linux 7.2, or newer support HTTPS proxies. Older clients only support HTTP. If HTTPS is specified for older clients, the client will ignore the proxy setting and attempt a direct connection to the hypervisor.

Procedure 19.3. Turning Off a SPICE Proxy

1. Log in to the Manager:

   $ ssh root@[IP of Manager]

   Copy to Clipboard
2. Run the following command to clear the SPICE proxy:

   # engine-config -s SpiceProxyDefault=""

   Copy to Clipboard
3. Restart the Manager:

   # service ovirt-engine restart

   Copy to Clipboard