2.4 Network Access to Oracle Exadata Storage Servers

Oracle Exadata System Software includes the cellwall service, which implements a firewall on each cell.

Additionally, the SSH server is configured to respond to connection requests only on the management network (NET0) and the RDMA Network Fabric.

Starting with Oracle Exadata System Software release 25.1.0, the cellwall service implements a firewall using the Linux nftables framework. To review the nftables firewall rules, run the following command as the root user:

# nft list ruleset

Before Oracle Exadata System Software release 25.1.0, the iptables framework was used. To review the iptables firewall rules, run:

# iptables --list

Note:

There is no firewall automatically configured for the database servers. You can implement a firewall on each database server to meet your network security requirements.