[pve-devel] [PATCH 1/2] add spiceproxy api2

[Dietmar Maurer]

> > I think we can add http connect proxy later, maybe when https will be
> > supported.
> 
> >>sure, but what for? We can do everything without that?
> 
> with proxy, we just need 1 port open. (could be great for enterprise users with
> firewall restrictions, network admin don't like to open big ranges of port ;)
> 
> But this can wait, it's just an improvement.

Well, we already have the requirement to open port 5900-6000 for VNC.
But yes, that would be an advantage.

Second, I would be possible to check the ticket earlier by the proxy. The current code
proxies everything to kvm (not good).

BTW, the current code forks 5 socat processes per spice  - can we avoid that (do not fork)?