Oracle 1036规格严格

Oracle 1036规格严格,第1张

Kernel修订

/etc/sysctl.conf:
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 60
net.ipv4.tcp_keepalive_probes = 20

在 sqlnet.ora
SQLNET.INBOUND_CONNECT_TIMEOUT = 0
SQLNET.RECV_TIMEOUT = 0
SQLNET.SEND_TIMEOUT = 0

在 listener.ora 增加:
INBOUND_CONNECT_TIMEOUT_LISTENER = 30

重启监听器:
lsnrctl reload

在警告日志文件中(alert.log)持续出现如下错误:

Tue Jul 18 23:09:22 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:23 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:25 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:30 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:12:15 2006
WARNING: inbound connection timed out (ORA-3136)

同时在sqlnet.log中记录了如下错误:

Fatal NI connect error 12170.

VERSION INFORMATION:
TNS for Linux: Version 10.2.0.2.0 - Production
Oracle Bequeath NT Protocol Adapter for Linux: Version 10.2.0.2.0 - Production
TCP/IP NT Protocol Adapter for Linux: Version 10.2.0.2.0 - Production
Time: 19-JUL-2006 11:25:26
Tracing not turned on.
Tns error struct:
ns main err code: 12535
TNS-12535: TNS:operation timed out
ns secondary err code: 12606
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.123)(PORT=58147))

这是和网络连接相关的一个错误,Metalink上给出了如下的解决方案:

1.set INBOUND_CONNECT_TIMEOUT_<listenername>=0 in listener.ora
2. set SQLNET.INBOUND_CONNECT_TIMEOUT = 0 in sqlnet.ora of server.
3. stop and start both listener and database.
4. Now try to connect to DB and observe the behaviour

这里重起数据库和Listener我认为是没有必要的,我们reload一下Listner应该就可以了.

[oracle@order admin]$ lsnrctl

LSNRCTL for Linux: Version 10.2.0.2.0 - Production on 19-JUL-2006 15:26:33

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Welcome to LSNRCTL, type "help" for information.

LSNRCTL> reload
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
The command completed successfully
LSNRCTL> services
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
Services Summary...
Service "order" has 2 instance(s).
Instance "order", status UNKNOWN, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Instance "order", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0 state:ready
LOCAL SERVER
The command completed successfully

LSNRCTL> show inbound_connect_timeout
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
LISTENER parameter "inbound_connect_timeout" set to 0
The command completed successfully
LSNRCTL> exit

修改之后,观察了一段时间,目前正常.

关于SQLNET.INBOUND_CONNECT_TIMEOUT参数,Oracle建议修改该参数,以避免denial-of-service攻击.

引用一段Oracle文档说明如下:

SQLNET.INBOUND_CONNECT_TIMEOUT
Purpose
Use the SQLNET.INBOUND_CONNECT_TIMEOUT parameter to specify the time, in seconds, for a client to connect with the database server and provide the necessary authentication information.

If the client fails to establish a connection and complete authentication in the time specified, then the database server terminates the connection. In addition, the database server logs the IP address of the client and an ORA-12170: TNS:Connect timeout occurred error message to the sqlnet.log file. The client receives either an ORA-12547: TNS:lost contact or an ORA-12637: Packet receive failed error message.

Without this parameter, a client connection to the database server can stay open indefinitely without authentication. Connections without authentication can introduce possible denial-of-service attacks, whereby malicious clients attempt to flood database servers with connect requests that consume resources.

To protect both the database server and the listener, Oracle Corporation recommends setting this parameter in combination with the INBOUND_CONNECT_TIMEOUT_listener_name parameter in the listener.ora file. When specifying values for these parameters, consider the following recommendations:

Set both parameters to an initial low value.
Set the value of the INBOUND_CONNECT_TIMEOUT_listener_name parameter to a lower value than the SQLNET.INBOUND_CONNECT_TIMEOUT parameter.
For example, you can set INBOUND_CONNECT_TIMEOUT_listener_name to 2 seconds and INBOUND_CONNECT_TIMEOUT parameter to 3 seconds. If clients are unable to complete connections within the specified time due to system or network delays that are normal for the particular environment, then increment the time as needed.

See Also:
Oracle9i Net Services Administrator's Guide for information about configuring these parameters

Default
None

Example
SQLNET.INBOUND_CONNECT_TIMEOUT=3

欢迎分享,转载请注明来源:内存溢出

原文地址: https://outofmemory.cn/zaji/2092097.html

(0)
打赏 微信扫一扫 微信扫一扫 支付宝扫一扫 支付宝扫一扫
上一篇 2022-07-22
下一篇 2022-07-22

随机推荐

  • 模数转换器GAD2245在在无线通信系统中的应用

    在无线通信系统中或者成像系统中有很多量都是模拟量,为了实现对这些模拟量的测量、运算和控制,系统中需要一个模拟量和数字量之间的相互转化的过程,而这个任务就是由ADC(模数转换器)来完成的。这里重点提到地

    2022-08-17
    0 0 0
  • 机智云推出生活电器智能化解决方案

    伴随后疫情时代消费升级,健康化、智能化、个性化及场景化成为主流消费趋势。与此同时,跨境出海、直播电商、内容电商等新渠道的蓬勃发展,进一步凸显出小家电产品功能和使用体验创新性的重要性。以空气健康类产品为

    2022-08-17
    0 0 0
  • 现代配电网技术

    行业需要持续的电源来保持其流程运行。公用事业公司努力确保为客户提供尽可能高的供应可用性。在配电过程中,网络运营商需要遵守法规以确保稳定和可用的电力供应。在所有情况下,冗余系统的手动控制都是复杂的,因此

    2022-08-17
    0 0 0
  • 混合式步进电机技术对微型步进电机的影响

    步进电机是当今最具挑战性电机之一,它们具有高精度的步进,高分辨率和平滑的运动,步进电机一般需要定制,在特定应用中才能实现最佳性能。通常自定义的设计属性有定子的缠绕模式、轴配置、自定义外壳和专用轴承,这

    2022-08-17
    0 0 0
  • IA设备的传感器致动器盒的设计方案

    现代工业自动化 (IA) 设备的设计者能够体会到自动化设备是如何迅速地扩展到工厂内数百平方英尺范围的。在控制计算机和工艺区的任何接近传感器、机械臂之间敷设单独的电缆,会使车间地面杂乱无章,延长设备配置

  • I2C总线特征与操作说明

    I2C总线物理拓扑结构I2C 总线在物理连接上非常简单,分别由SDA(串行数据线)和SCL(串行时钟线)及上拉电阻组成。通信原理是通过对SCL和SDA线高低电平时序的控制,来 产生I2C总线协议所需要

    2022-08-17
    0 0 0
  • 电源设计说明:SPICE热模型

    SPICE 模型没有直接管理系统组件和热行为的命令。然而,由于特定数学方程的实现,有一些 SPICE 模型可用于执行与热量相关的模拟。它们被定义为“热模型”。热模型模拟用于在热设计的初始阶段进行粗略估

    2022-08-17
    0 0 0
  • DDR基本介绍与原理图设计

    一、基本介绍1.1 常用SDRAMSDRAM(Synchronous Dynamic random access memory)即同步动态随机存取存储器。常用SDRAM的种类有SDRAM、DDR1-5

    2022-08-17
    0 0 0
  • 小型光伏系统的并网逆变器设计

    作为小型并网能量收集系统的核心,逆变器在来自环境能源的高能量期间向电网输送多余的电力。在设计并网逆变器时,工程师需要确保这种多余的功率与电网紧密同步,通常是通过使用复杂的锁相环 (PLL) 实现。为了

    2022-08-17
    0 0 0

发表评论

登录后才能评论

评论列表(0条)

保存