cancel
Showing results for 
Search instead for 
Did you mean: 
Administration & Architecture
Explore discussions on Databricks administration, deployment strategies, and architectural best practices. Connect with administrators and architects to optimize your Databricks environment for performance, scalability, and security.
cancel
Showing results for 
Search instead for 
Did you mean: 

Serverless Access to Public internet

jpm2617
Visitor

Hi

I am trying to run notebooks on serverless compute but I cannot access the public internet. I cannot perform a get on google.com getting "[Errno -3] Temporary failure in name resolution". 

I checked my admin console network policies and they all were on the default provided by databricks so I am not sure what I am missing. Could you please provide support? 

Thanks 

3 REPLIES 3

szymon_dybczak
Esteemed Contributor III

Hi  @jpm2617 ,

Network policies have two primary modes: Full Access (unrestricted outbound internet) and Restricted Access (tightly controlled outbound connections). The default policy is associated with all workspaces that have no explicit network policy assignment. 

The key thing to check is what your default policy's internet access mode is actually set to. "Default provided by Databricks" doesn't automatically mean "Full Access" - if your account admin (or a previous admin) has modified the default policy to restricted mode, public internet will be blocked.

As an account admin, do the following:

  1. Go to the Account Console -> Security -> Networking tab
  2. Under Policies, click Context-based ingress & egress control
  3. Open the default policy (or whichever policy is attached to your workspace)
  4. Click the Egress tab and check the internet access setting
  5. Set it to "Allow access to all destinations" for unrestricted outbound internet access or add domains you want to reach to "Allowed domains"

szymon_dybczak_0-1777477574615.png

 

 

If my answer was helpful, please consider marking it as accepted solution

Hi, 
I cannot find the place that you have in your screenshot, this is what my network tab looks like. 

Thanks,

jpm2617_0-1777479933379.png

 

I can also see that my default_policy attached to my workspace looks like this: 

jpm2617_1-1777480168524.png