Lab :35 Point to point connectivity (SL,RT,Firewall) - TanveeKhanDB/OCI GitHub Wiki
Step by step procedure to troubleshoot the Point to point connectivity
Scenario where client want is unable to send anything from his Instace.
In that case will check below mentioned steps one by one and troubleshoot if any issue exits.
- Will check is there any planned outage from Oracle side or not if yes will ask client to wait for sometime.
- Will check RT
- Will check SL
- Will check Firewall
What is a Route Table?
A Route Table is a set of rules (routes) that determine where network traffic should be directed based on the destination IP address.
Key Characteristics
- Operates at: Subnet level
- Based on: Destination IP CIDR and priority
- Routes to: Internet Gateway, NAT Gateway, VPN, DRG, etc.
- Longest prefix match: Most specific route is used
- Default route: 0.0.0.0/0 (catch-all)
What is a Security List? A Security List is a stateful firewall at the subnet/instance level that controls inbound (INGRESS) and outbound (EGRESS) traffic using rules.
Key Characteristics
- Stateful: If you allow outbound traffic, response inbound traffic is automatically allowed
- Operates at: Subnet or instance level
- Rules based on: Protocol, port, source/destination IP/CIDR
- Default behavior: Deny all (unless rule allows)
What is a Firewall? A host-level firewall is software-based traffic control running on the instance OS (separate from Security Lists). It provides an additional layer of security beyond Security Lists.
Key Characteristics
- Operates at: Operating System/Host level
- Tools: iptables (Linux), Windows Firewall (Windows)
- Operates after: Security Lists and Route Tables
- Can be: More granular than Security Lists
- Performance: Slightly higher latency than Security List
Step-by-Step Firewall Configuration (Linux)
# Check if firewall is running
sudo systemctl status firewalld
OR
sudo systemctl status ufw
# Check iptables rules
sudo iptables -L -n
# Check ufw status
sudo ufw status