How can we block a certain TPC/IP channel for RAC Node Eviction testing ?
Use lsof to find the port we are interested in:
# lsof | egrep 'COMMAND|hrac2int' | egrep 'UDP|COMMAND'
On hrac2 ( not OCR master Node )
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
ohasd.bin 2555 root 665u IPv4 37296 0t0 UDP hrac2int:11083
ntpd 2600 ntp 25u IPv4 11979 0t0 UDP hrac2int:ntp
gipcd.bin 2861 grid 36u IPv4 32610 0t0 UDP hrac2int:37751
ocssd.bin 2925 grid 54u IPv4 33130 0t0 UDP hrac2int:18652
octssd.bi 3185 root 44u IPv4 36506 0t0 UDP hrac2int:28645
evmd.bin 3206 grid 53u IPv4 83358 0t0 UDP hrac2int:32005
crsd.bin 3410 root 40u IPv4 76677 0t0 UDP hrac2int:31482
Now let’s block UPD channel with port 18652 used by ocssd.bin process:
Note 192.168.17.172 is the IP address for our cluster interconnect:
# iptables -A OUTPUT -s 192.168.17.172 -p udp --sport 18652 -j DROP
Verify the rules now in place:
# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP udp -- hrac2int anywhere udp spt:18652
Delete all the rules and verify:
# iptables -F
Verifiy settings
# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination