Firewall Between RAC Primary and RAC Standby - Open TCP Port for All Interfaces?
Hi, DBAs
This is 12.1.0.2 RAC on Oracle Linux 6, so SCAN is in use. We do not use Active Data Guard, and we do use Real Time Apply. My primary cluster is 3 node, and there's a firewall between it and the standby cluster. We mount all instances on the standby cluster, and I'm clear that just one instance applies redo from the primary.
I will request port 1521 be opened between the two clusters, but should it be open for all interfaces? By this I mean: public IP, VIPs, and SCAN? Why or why not for each one?
SCAN relays calls to the VIPs, but I'd really like an good understanding of the connection methods and dependencies for the log transport service activities.