This discussion is archived
3 Replies Latest reply: Oct 8, 2012 4:28 PM by jschellSomeoneStoleMyAlias RSS

JDBC and firewalls

user771103 Newbie
Currently Being Moderated
JDBC 11.2.0.2.0 causes issues when using the firewalls:
FWSM Firewall v4.1
ASA Firewall v8.4
But no issues occur with JDBC 11.2.0.3.0. Please advise if the above firewalls are supported.

Detailed description of the problem
--------------------------------------------
We have a connection issue with one few our application (heartbeat,manifestgen) server.
The symptoms were a rapid increase in "dba_queue_subscribers" to max limits (1024) on the queue
"DEVICE_STATUS_MSG_QUEUE" (select count(1) from dba_queue_subscribers where queue_name = 'DEVICE_STATUS_MSG_QUEUE';).
As a result of this behavior, we have seen this number reach the Oracle limit of 1024 which causes the
Application (heartbeat and manifestgenserver) to no longer fully function.

There is no change is code* .The same setup working in other environment.

Below is a summary of our testing results:

Test 1: heartbeat server on with the 11.2.0.2 driver and the manifestgenserver off
Test 1 Results: "dba_queue_subscribers" increased by 1 every few seconds.

Test 2: manifestgenserver on with the 11.2.0.2 driver and the heartbeat server off
Test 2 Results: "dba_queue_subscribers" increased by 1 every few seconds.

Test 3: heartbeat server on with the 11.2.0.3 driver and the manifestgenserver off
Test 3 Results: "dba_queue_subscribers" did not increase

Test 4: manifestgenserver on with the 11.2.0.3 driver and the heartbeat server off
Test 4 Results: "dba_queue_subscribers" did not increase

Test 5: Eliminate the firewall by shutting down the mangenserver in the 10.x.11.X pod and powering it on in the 10.x.7 pod
which is where the DBs reside so that we could bypass the firewall.
Test 5 Result: "dba_queue_subscribers" did not increase

Test 6: Reintroduce the firewall by shutting down the mangenserver in 10.x.7.X pod and powering it on in the 10.x.11.X pod
so that the traffic traverses the firewall..
Test 6 Results: "dba_queue_subscribers" increased by 1 every few seconds.

Test 8: Shutdown the public interface on the mangenserver as to eliminate any F5 traffic and restart the app
Test 8 Result: "dba_queue_subscribers" increased by 1 every few seconds.

So given the test results it appears as if the new firewalls may be causing an issue in this environment with the 11.2.0.2
driver. It appears that this is fixed in the 11.2.0.3 driver.Our question would be why are we having issues with the new
firewalls and not the old BB firewalls. Are we missing a new setting? Is there a known bug.
--------------------
  • 1. Re: JDBC and firewalls
    rp0428 Guru
    Currently Being Moderated
    >
    We have a connection issue with one few our application (heartbeat,manifestgen) server.
    . . .
    So given the test results it appears as if the new firewalls may be causing an issue in this environment with the 11.2.0.2
    driver. It appears that this is fixed in the 11.2.0.3 driver.Our question would be why are we having issues with the new
    firewalls and not the old BB firewalls.
    >
    I'm not sure how you expect anyone to help when you don't post ANY information about what your code, your tests or your apps are actually doing.

    You need to either post the code or describe in detail what the code is doing or trying to do.

    What JDBC jars (jar names) are you testing with? What type of connections are you creating? How are you creating them?
  • 2. Re: JDBC and firewalls
    EJP Guru
    Currently Being Moderated
    It appears that this is fixed in the 11.2.0.3 driver.Our question would be why are we having issues with the new
    firewalls
    My question would be why you aren't just using the 11.2.0.3 driver if it works for you.
  • 3. Re: JDBC and firewalls
    jschellSomeoneStoleMyAlias Expert
    Currently Being Moderated
    user771103 wrote:
    There is no change is code* .The same setup working in other environment.
    Test 5: Eliminate the firewall by shutting down the mangenserver in the _10.x.11.X pod and powering it on in the 10.x.7 pod_
    which is where the DBs reside so that we could bypass the firewall.
    Test 5 Result: "dba_queue_subscribers" did not increase
    My guess would be that it has nothing to do with the driver and everything to do with the environment.

    It works on one because something is different - like the firewall rules.

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points