Re: Spice protocol behind a Firewall

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Uri, 

If you change the squid configuration dynamically you'll need to
make sure a client can to the VM. That may include migration.

What would be interesting is habing a kind of health check that checks "Port telnet". And if a port is ready, add dinamically the rule to the squid server.

Sorry, I do not have an answer for that.
Of course it depends on the hardware of the servers, the network etc.

If you test it, please let us know what numbers you get.

My lab enviroment I think is not good enough for this kind of tests (windows10 --> vmware workstations --> kvm --> windows 10). But I will let you know when I have it in production environment.

Thanks a lot.


2017-02-21 16:16 GMT+01:00 Uri Lublin <uril@xxxxxxxxxx>:
On 02/21/2017 04:44 PM, Oscar Segarra wrote:
Hi Urii,

What I meant is that VMs can move dynamically bethween hypervisors (or
hosts) and therefore squid configuration may change according to where
VMs are placed on.


If you change the squid configuration dynamically you'll need to
make sure a client can to the VM. That may include migration.

What I can do is opening the whole rank 5634 - 6166 (accodring to
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Administration_Guide/Virtualization_Host_Firewall_Requirements1.html)
on each hypervisor.

You can do that.
The number of ports "opened" depends on your requirements.

I will test it in my lab environment and I will let you know.

Have you any advice on the following question:

Regarding to sizing the squid server... has anyone tested how many
Microsoft Windows 7 (or 8, or 10) can be supported by an unique squid
proxy server?

Sorry, I do not have an answer for that.
Of course it depends on the hardware of the servers, the network etc.

If you test it, please let us know what numbers you get.

Thanks,
    Uri.


_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]     [Monitors]