About firewall setting against 11gR2 RAC SCAN setting
801906Oct 27 2010 — edited Sep 13 2011Hi Gurus,
My understanding for 11gR2 RAC set up with SCAN feature is when there is a database connection request from client, then one of the 3 SCAN listeners will pick up the request(by round-robin), and pass it to the database instance local listener.
Therefore at the SCAN level, we will have requests route to local listener load balanced; And if also turn on load balance from database instance local listener, then I assume database instance level it is also dispatched equally. Of course, actual workload depends on connected session specific SQL statement.
My question is regarding firewall setting, is there any best practice on this topic, and should client should allow all accesses to all RAC instances.
Thanks,
Fisher