Thursday, November 19, 2015

Valid Node Checking for Registration (VNCR) Implementation on Oracle

Valid Node Checking and Registration (VNCR) is a new feature introduced in versions 11.2.0.4 and 12c of Oracle. VNCR allows registrations to the Oracle Listener more secure such that, they are only allowed from known servers/nodes; hence the namesake. The main advantage of VNCR is to get by without implementing Class of Secure Transport (COST) configurations that, tend to be much more complicated and expensive. VNCR is relatively simple to implement - Following MOS Notes contain the directions and other useful resources.
  • Valid Node Checking For Registration (VNCR) (Doc ID 1600630.1)
  • How to Enable VNCR on RAC Database to Register only Local Instances (Doc ID 1914282.1)
The following example shows how to implement VNCR on RAC to register the local RAC instances:
VALID_NODE_CHECKING_REGISTRATION_LISTENER=1
VALID_NODE_CHECKING_REGISTRATION_LISTENER_SCAN1=1
REGISTRATION_INVITED_NODES_LISTENER_SCAN1=(<enter the list of public ip's of all nodes separated by commas>)

VALID_NODE_CHECKING_REGISTRATION_LISTENER_SCAN2=1
REGISTRATION_INVITED_NODES_LISTENER_SCAN2=(<enter the list of public ip's of all nodes separated by commas>)

VALID_NODE_CHECKING_REGISTRATION_LISTENER_SCAN3=1
REGISTRATION_INVITED_NODES_LISTENER_SCAN3=(<enter the list of public ip's of all nodes separated by commas>)