Oracle Connection Pooling through the LTM

Hi Ken,

 

 

The problem sounds like one of priorities - do you want the app always accessible to (valid) users with the risk of an attacker abusing the connection?

 

 

I'm not certain what we can do for you - we can help you adjust the timeout value or point you at the docs that show how to, but that leaves the security risk. I guess if you have a lot of users hitting the box, it won't necessarily time out - connection pools will live as long as they're being used - which means the risk will already be there for at least some of your connections... So I don't see the level of risk you seem to. Am I missing something?

 

 

You could pin the connections to only between the two boxes, but since the Oracle Client on the webserver is essentially a DB proxy, I don't think that would alleviate your issues, so I'm trying to understand the nature of your security concern.

 

 

Regards,

 

Don.