title: Static IP for Azure Databricks
body: <p>What is the correct way of setting up static public ip (or ip range) for Databricks workspace in Azure? What would be the simplest working solution?</p>
  
  <p>I would like to be able to whitelist Databricks ip in ftp server (running outside of azure), which will be accessed by some jobs. Databricks is already running within VNET, so I tried following scenarios:</p>
  
  <ol>
  <li>NAT gateway - when associate gateway with public subnet clusters fail to start with error: "Network Configuration Failure" and more details"[Nat gateway] cannot be deployed on subnet containing Basic SKU Public IP addresses or Basic SKU Load Balancer. NIC".</li>
  <li>Using firewall and rout table - as described <a href="https://docs.microsoft.com/en-us/azure/databricks/kb/cloud/azure-vnet-single-ip" rel="noreferrer">here</a> - this works partially (I could not get python packages installed - SSLError(SSLError("bad handshake: SysCallError(-1, 'Unexpected EOF')"))). The problem is, that it's quite pricey ~ 1€ per hour.</li>
  <li>Rout traffic through NVA - as described <a href="https://docs.microsoft.com/en-us/azure/databricks/administration-guide/cloud-configurations/azure/on-prem-network#route-via-firewall" rel="noreferrer">here</a> - I did not manage to get it working - it seems also a bit too complicated for my simple deployment.</li>
  </ol>