Oracle

Enable your new Oracle server instance to send and receive internet traffic

published on

By default, once you have created a new Oracle instance it won't be able to connect to the internet because the Oracle firewall will block access.

You will need to set up some new rules on the firewall in your Oracle control panel first. This guide will show you how.

Enable internet access to your new Oracle server instance

Open the menu on the left-hand side, choose Compute and then choose Instances. Click on the name of your instance and select the Networking tab.

At the bottom, under Connect public subnet to internet, click on Connect. Now click on the subnet name in the Subnet section.

Select the Security tab then click on the Default security list. Now select the Security rules tab.

Delete the two existing ICMP rules under Ingress Rules and then click on Add Ingress Rules.

Add a rule with the following information:

Stateless: disabled
Source Type: CIDR
Source CIDR: 0.0.0.0/0
IP Protocol: TCP 
Source Port Range: (leave blank)
Destination Port Range 80,443
Description: Allow HTTP1.1/2 traffic on ports 80 and 443

Click on + Another Ingress Rule and add another rule with the following information:

Stateless: disabled
Source Type: CIDR
Source CIDR: 0.0.0.0/0
IP Protocol: UDP
Source Port Range: (leave blank)
Destination Port Range 443
Description: Allow HTTP3 traffic on port 443

Click on + Another Ingress Rule and add another rule with the following information:

Stateless: disabled
Source Type: CIDR
Source CIDR: 0.0.0.0/0
IP Protocol: ICMP
Type: (leave blank)
Code: (leave blank)
Description: Allow ping

Now click on Add Ingress Rules.

Conclusion

You should now be able to send and receive data on your server. 

Bear in mind that Oracle use IPTables on your server and this doesn't work very well with UFW. If you wish to use a firewall on your server you will either need to stick with IPTables, use firewalld or remove IPTables and set up appropriate rules using your favoured firewall instead.