Serverside Configuration   «Prev  Next»

Lesson 18

Oracle Net Services – Module 5 Conclusion

In this module you learned how an Oracle database accepts network connections through the Oracle Net Listener. You created and interpreted a listener.ora, reviewed how dynamic service registration lets instances advertise themselves to the listener, and practiced essential operations with lsnrctl: start, stop, status, services, and reload. You also saw where tracing and logging are configured for troubleshooting.

How clients find and reach a Database Service

Oracle supports several naming methods. In practice, prioritize them in this order:

1) Easy Connect / Easy Connect Plus (Recommended)

Minimal client setup; great for dev, containers, and automation. Examples:


sqlplus hr@//dbhost.acme.com:1521/ORCLPDB1
sqlplus "hr@//dbhost.acme.com/ORCLPDB1?ssl_server_dn_match=yes&wallet_location=/opt/wallet"
      

Use query parameters for TLS options and timeouts. Works with SQL*Plus, JDBC Thin, and other Oracle clients.

2) Directory Naming (LDAP: OUD/OID)

Centralize service metadata in an LDAP directory such as Oracle Unified Directory (OUD) or Oracle Internet Directory (OID). Clients resolve a simple net service name (e.g., sales_rw) without maintaining local files. Best for enterprises needing consistency and role-based access across many apps.

3) Local Naming (tnsnames.ora)

A per-host alias file that maps names to connect descriptors. Simple and reliable, but requires change management when endpoints move. Keep it for edge cases, air‑gapped systems, or as a fallback if LDAP is unavailable.

Legacy note: Oracle Names

Oracle Names was retired long ago in favor of standards‑based LDAP directories. Do not deploy it.

Security essentials you should apply

  • Enable TLS on server and clients; prefer mTLS for mutual authentication.
  • Use Oracle wallets (auto‑login for services) and set TLS in sqlnet.ora or via Easy Connect Plus parameters.
  • Integrate with enterprise identity where required (Kerberos/AD, RADIUS). Some features may require Oracle Advanced Security.

Scale, HA, and performance pointers

  • RAC/SCAN Listeners: Use SCAN to decouple clients from node IPs and enable load balancing and failover.
  • Service-level routing: Define services (RW/RO, OLTP/Batch) and use goal‑based load balancing.
  • DRCP (Database Resident Connection Pool): Improves scalability for high-connection, short-lived client apps.

What’s next

You now understand the server side: listeners, services, security, and naming resolution. In the next module, we configure clients, choosing a naming method, setting TLS and wallets, and validating connections end‑to‑end.

Oracle Listener Concepts – Quiz

Before moving on, verify your understanding with a short quiz:

Oracle Listener Concepts – Quiz