AWS Firewall Websocket Settings

[crvkumar]

Hello,

Our architecture has customer-managed VPC which sits behind the AWS Firewall. I followed the databricks documentation and I created a stateful domain rule group for .cloud.databricks.com but I am not clear about creating outbound Websocket opening to *.cloud.databricks.com. 

With just domain rule group, clusters are not running(data plane can not communicate with control plane).

It would be helpful if anyone can guide on how to enable outbound databricks websocket communication in AWS Firewall.

[crvkumar]

Hello Kaniz,

Thanks for the reply. But this is exactly what is in the Databricks documentation.

Can you elaborate on how to set up firewall rules to allow Websocket traffic in AWS Firewall? Clearly creating only stateful rule group allowing .cloud.databricks.com is not sufficient.

Regards,

Venki.