https://community.databricks.com/t5/data-engineering/why-npip-is-an-optional-and-not-mandatory/m-p/21883#M14951 <P><A href="https://docs.microsoft.com/en-us/azure/databricks/security/secure-cluster-connectivity" alt="https://docs.microsoft.com/en-us/azure/databricks/security/secure-cluster-connectivity" target="_blank">NPIP / secure cluster connectivity&nbsp;</A> requires a NAT gateway (or similar appliance) for outbound traffic from your workspace’s subnets to the Azure backbone and public network. This incurs a small additional cost. Also, it is worth mentioning that network traffic between data plane and control plane travels through Microsoft backbone network&nbsp;irrespective of whether NPIP is enabled or not. </P><P></P><P>But given the fact that you could automate workspace creation via <A href="https://registry.terraform.io/providers/databrickslabs/databricks/latest/docs/guides/azure-workspace" alt="https://registry.terraform.io/providers/databrickslabs/databricks/latest/docs/guides/azure-workspace" target="_blank">terraform etc</A> and low cost for NAT gateway, IMO NPIP is a better choice.</P><P></P><P></P><P></P> Wed, 23 Jun 2021 00:26:34 GMT sajith_appukutt 2021-06-23T00:26:34Z https://community.databricks.com/t5/data-engineering/why-npip-is-an-optional-and-not-mandatory/m-p/21882#M14950 <P>Even though the NPIP is more secure as the network traffic travel through Microsoft backbone network why it is optional , it should be mandatory, is there some limitataion or a case where we may not able to use NPIP .</P> Tue, 22 Jun 2021 09:25:35 GMT https://community.databricks.com/t5/data-engineering/why-npip-is-an-optional-and-not-mandatory/m-p/21882#M14950 User16826994223 2021-06-22T09:25:35Z https://community.databricks.com/t5/data-engineering/why-npip-is-an-optional-and-not-mandatory/m-p/21883#M14951 <P><A href="https://docs.microsoft.com/en-us/azure/databricks/security/secure-cluster-connectivity" alt="https://docs.microsoft.com/en-us/azure/databricks/security/secure-cluster-connectivity" target="_blank">NPIP / secure cluster connectivity&nbsp;</A> requires a NAT gateway (or similar appliance) for outbound traffic from your workspace’s subnets to the Azure backbone and public network. This incurs a small additional cost. Also, it is worth mentioning that network traffic between data plane and control plane travels through Microsoft backbone network&nbsp;irrespective of whether NPIP is enabled or not. </P><P></P><P>But given the fact that you could automate workspace creation via <A href="https://registry.terraform.io/providers/databrickslabs/databricks/latest/docs/guides/azure-workspace" alt="https://registry.terraform.io/providers/databrickslabs/databricks/latest/docs/guides/azure-workspace" target="_blank">terraform etc</A> and low cost for NAT gateway, IMO NPIP is a better choice.</P><P></P><P></P><P></P> Wed, 23 Jun 2021 00:26:34 GMT https://community.databricks.com/t5/data-engineering/why-npip-is-an-optional-and-not-mandatory/m-p/21883#M14951 sajith_appukutt 2021-06-23T00:26:34Z