Appendix F. Proxies

Procedure

1. Install Squid on the Proxy machine:

   # dnf install squid

2. Open /etc/squid/squid.conf. Change:

   http_access deny CONNECT !SSL_ports

   to:

   http_access deny CONNECT !Safe_ports

3. Start the squid service and enable it to run automatically after reboot:

   # systemctl enable squid.service --now

4. Enable incoming requests to the squid service in the default firewalld zone:

   # firewall-cmd --permanent --add-service=squid

5. Make this firewall rule persistent in the runtime configuration:

   # firewall-cmd --reload

6. Confirm that the squid service appears in the list of firewall services:

   # firewall-cmd --list-services
   ssh dhcpv6-client squid

Procedure

1. On the Manager, use the engine-config tool to set a proxy:

   # engine-config -s SpiceProxyDefault=someProxy

2. Restart the ovirt-engine service:

   # systemctl restart ovirt-engine.service

   The proxy must have this form:

   protocol://[host]:[port]

   Note

   Only SPICE clients shipped with Red Hat Enterprise Linux 6.7, Red Hat Enterprise Linux 7.2, or later, support HTTPS proxies. Earlier clients only support HTTP. If HTTPS is specified for earlier clients, the client will ignore the proxy setting and attempt a direct connection to the host.

Procedure

1. Log in to the Manager:

   $ ssh root@[IP of Manager]

2. Run the following command to clear the SPICE proxy:

   # engine-config -s SpiceProxyDefault=""

3. Restart the Manager:

   # systemctl restart ovirt-engine.service