My Oracle Support Banner

RAC instabilities due to firewall (netfilter/iptables) enabled on the cluster interconnect (Doc ID 554781.1)

Last updated on DECEMBER 13, 2022

Applies to:

Oracle Database - Enterprise Edition - Version and later
Oracle Database Cloud Schema Service - Version N/A and later
Gen 1 Exadata Cloud at Customer (Oracle Exadata Database Cloud Machine) - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Oracle Database Cloud Exadata Service - Version N/A and later
Information in this document applies to any platform.


Oracle Clusterware may not startup ( on second node fails with "Failure at final check of Oracle CRS stack."), due to a firewall (such as iptables on Linux) configured on the cluster interconnect. Other symptoms include moderate to serious performance and stability issues, directly related to such firewalls. Examples are false evictions of nodes, 'IPC SEND/RECEIVE TIMEOUT' and slow/uneven performance.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.