RAC instabilities due to firewall (netfilter/iptables) enabled on the cluster interconnect

(Doc ID 554781.1)

Last updated on MAY 18, 2018

Applies to:

Oracle Database - Enterprise Edition - Version and later
Information in this document applies to any platform.
***Checked for relevance on 04-Aug-2010***


Oracle Clusterware may not startup (root.sh on second node fails with "Failure at final check of Oracle CRS stack."), due to a firewall (such as iptables on Linux) configured on the cluster interconnect. Other symptoms include moderate to serious performance and stability issues, directly related to such firewalls. Examples are false evictions of nodes, 'IPC SEND/RECEIVE TIMEOUT' and slow/uneven performance.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms