The following patches for the ovirt server / viewer implements an ovirt-speicifc vnc proxy solution in which the client (viewer) sends the vm name which they want to connect to before the connection is actually established and maintained. Thus the ovirt network will need to expose one public port for vnc access