Based on our experience and customer feedback, here you can find some Tips & Tricks for Oracle Database Cloud Service:
- Do not disable or close access to the SSH port. Port 22 is the standard TCP/IP port that is assigned to SSH servers. The port of use for SSH, therefore, has to be 22. Remember that the listener port has to be 1521.
- You can open other ports and protocols. See here to know more about enabling access to a Compute Node port. From a security point of view, you can restrict access to a compute node port, to only permit connections from specific IP addresses.
- Do not detach, change file access permissions for, or change the mount point of any storage volume attached to a compute node during the creation of your Database as a Service instance. For details about these volumes, see here.
- Do not change compute node OS users and SSH key settings that were configured during the creation of your Database as a Service instance.
- Do not change the ports for the Oracle Cloud DBaaS Monitor, Oracle Application Express, Oracle GlassFish Server Administration Console, Oracle Net Listener, Enterprise Manager Database Express 12c, or Enterprise Manager 11g Database Control.
- Apply only patches that are available through the Database as a Service. Do not apply patches from any other source unless directed to by Oracle Support.
- Apply the quarterly Patch Set Updates (PSUs) regularly, every quarter if possible.