Databricks has launched Private Network Gateway (PNG), a managed service giving its serverless compute a sole private route into customers’ own networks.

In public preview on Microsoft Azure and private preview on Amazon Web Services, with Google Cloud support in development, PNG is designed to remove the networking hurdles that keep workloads on classic compute.

Databricks said more than 75% of surveyed users said the complexity of dealing with network changes to their current configuration was the main reason specific workloads stayed on classic compute instead of moving to serverless.

With PNG, customers delegate one subnet to Databricks, which runs and maintains the gateway, replacing the per-resource private endpoints, load balancers, and proxy virtual machines previously needed. The service encompasses two distinct modes, with users able to send only listed domain names through PNG, or route all outbound traffic through the customer’s network.

“Before PNG, enabling private connectivity for Databricks Serverless required significant network setup and coordination. PNG simplified the whole process, reduced operational overhead, and helped us run jobs faster – making serverless much easier to integrate into our existing environment,” outlined Primož Gale, lead technical architect at Slovenian banking group NLB.

Without mentioning the sovereignty angle by name, Databricks touted PNG as a means for private connectivity, with egress controls remaining unchanged. Databricks confirmed that isolation is enforced through each gateway via encapsulation and network security rules, with workspace-level access controls also in place before any traffic leaves.

“With PNG, we can securely access internal services directly and centrally manage outbound traffic through our existing controls, making operations simpler, faster, and easier to govern,” added Michel Schwandner, a platform engineer at furniture hardware manufacturer Julius Blum.