Chapter 21. Proxies

Procedure 21.1. Installing Squid on Red Hat Enterprise Linux

1. Install Squid on the Proxy machine:

   # yum install squid

   Copy to Clipboard Toggle word wrap
2. Open /etc/squid/squid.conf. Change:

   http_access deny CONNECT !SSL_ports

   Copy to Clipboard Toggle word wrap
   to:

   http_access deny CONNECT !Safe_ports

   Copy to Clipboard Toggle word wrap
3. Start the proxy:

   # systemctl start squid.service

   Copy to Clipboard Toggle word wrap
4. Open the default squid port:

   # iptables -A INPUT -p tcp --dport 3128 -j ACCEPT

   Copy to Clipboard Toggle word wrap
5. Make this iptables rule persistent:

   # service iptables save

   Copy to Clipboard Toggle word wrap

Procedure 21.2. Activating SPICE Proxy

1. On the Manager, use the engine-config tool to set a proxy:

   # engine-config -s SpiceProxyDefault=someProxy

   Copy to Clipboard Toggle word wrap
2. Restart the ovirt-engine service:

   # systemctl restart ovirt-engine.service

   Copy to Clipboard Toggle word wrap
   The proxy must have this form:

   protocol://[host]:[port]

   Copy to Clipboard Toggle word wrap

   Note

   Only SPICE clients shipped with Red Hat Enterprise Linux 6.7, Red Hat Enterprise Linux 7.2, or later, support HTTPS proxies. Earlier clients only support HTTP. If HTTPS is specified for earlier clients, the client will ignore the proxy setting and attempt a direct connection to the host.

Procedure 21.3. Turning Off a SPICE Proxy

1. Log in to the Manager:

   $ ssh root@[IP of Manager]

   Copy to Clipboard Toggle word wrap
2. Run the following command to clear the SPICE proxy:

   # engine-config -s SpiceProxyDefault=""

   Copy to Clipboard Toggle word wrap
3. Restart the Manager:

   # systemctl restart ovirt-engine.service

   Copy to Clipboard Toggle word wrap