RAC instabilities due to firewall (netfilter/iptables) enabled on the cluster interconnect
(Doc ID 554781.1)
Last updated on DECEMBER 13, 2022
Applies to:Oracle Database - Enterprise Edition - Version 184.108.40.206 and later
Oracle Database Cloud Schema Service - Version N/A and later
Gen 1 Exadata Cloud at Customer (Oracle Exadata Database Cloud Machine) - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Oracle Database Cloud Exadata Service - Version N/A and later
Information in this document applies to any platform.
Oracle Clusterware may not startup (root.sh on second node fails with "Failure at final check of Oracle CRS stack."), due to a firewall (such as iptables on Linux) configured on the cluster interconnect. Other symptoms include moderate to serious performance and stability issues, directly related to such firewalls. Examples are false evictions of nodes, 'IPC SEND/RECEIVE TIMEOUT' and slow/uneven performance.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document