# Inefficient Private Link routing to Azure Databricks Canonical: https://www.pointfive.co/efficiency-hub/inefficiencies/inefficient-private-link-routing-to-azure-databricks In Azure Databricks environments that rely on Private Link for secure networking, it's common to route traffic through multi-tiered network architectures. By: Benjamin van der Maas Updated: 2026-09-28 [Cloud Efficiency Hub](https://www.pointfive.co/efficiency-hub) # Inefficient Private Link Routing to Azure Databricks The short version In Azure Databricks environments that rely on Private Link for secure networking, it's common to route traffic through multi-tiered network architectures. [Benjamin van der Maas](https://www.linkedin.com/in/benjamin-van-der-maas-71168466/) Manager, Cloud FinOps @ Johnson & Johnson Azure service [Azure Databricks](https://www.pointfive.co/efficiency-hub/cloud-services/azure-databricks) Category [Networking](https://www.pointfive.co/efficiency-hub/service-category/networking) Reference CER-0068 Type Inefficient Configuration ## Explanation Why the waste happens and who it affects. This often includes multiple VNets, Private Link endpoints, or peered subscriptions between data sources (e.g., ADLS) and the Databricks compute plane. While these architectures may be designed for isolation or compliance, they frequently introduce redundant routing paths that add cost without improving performance. Each additional hop may result in duplicated Private Link ingress and egress charges. Without regular review, this can create persistent and unrecognized network inefficiencies tied to Databricks usage. ## Billing model The pricing dimensions that drive this cost. Azure networking charges are incurred based on: - Private endpoint hourly charge (per endpoint) plus Private Link inbound and outbound data processing (per GB) - VNet peering ingress/egress (per GB) - Regional vs. cross-region data transfer Unnecessary network hops can compound these charges, even when they serve no functional or security purpose. ## How to detect 5 checks to find it in your estate. - Review network costs in the Azure subscription hosting your Databricks environment - Identify high Private Link ingress charges or VNet peering transfer fees - Trace end-to-end data paths between storage and Databricks compute - Count how many Private Link or peering hops exist along the path - Assess whether all network segments are functionally required ## How to fix 4 ways to remove the waste. - Simplify routing by colocating Databricks and storage in the same region and reaching storage through a single private endpoint, or through service endpoints (no extra charge) where security policy allows - Eliminate redundant Private Link endpoints that add no security or compliance value - Use direct peering or shared services models to reduce network traversal - Continuously audit Databricks data paths to align architecture with minimum-cost, minimum-hop configurations ## Documentation Vendor references for pricing and configuration. - [Azure Private Link Pricing azure.microsoft.com](https://azure.microsoft.com/en-us/pricing/details/private-link/) - [Private Link concepts - Azure Databricks learn.microsoft.com](https://learn.microsoft.com/en-us/azure/databricks/security/network/concepts/privatelink-concepts) - [Azure virtual network service endpoints learn.microsoft.com](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview) - [Deploy Azure Databricks in your Azure virtual network (VNet injection) learn.microsoft.com](https://learn.microsoft.com/en-us/azure/databricks/security/network/classic/vnet-inject) ## Related inefficiencies [Browse the library](https://www.pointfive.co/efficiency-hub) - Azure Databricks CER-0452 ### [Missing Databricks Commit Unit Prepurchase for Steady Azure Databricks Usage](https://www.pointfive.co/efficiency-hub/inefficiencies/missing-databricks-commit-unit-prepurchase-for-steady-azure-databricks-usage) Azure Databricks charges DBUs for every workload on top of the virtual machines, storage and networking it runs on. Teams that run Databricks at a steady, predictable level for months often pay the pay-as-you-go DBU rate for all of it,... Compute - Azure Load Balancer CER-0223 ### [Suboptimal Load Balancer Rule Configuration in Azure Standard Load Balancer](https://www.pointfive.co/efficiency-hub/inefficiencies/suboptimal-load-balancer-rule-configuration-in-azure-standard-load-balancer) As organizations migrate from the Basic to the Standard tier of Azure Load Balancer (driven by Microsoft's retirement of the Basic tier), they may unknowingly inherit cost structures they didn't previously face. Specifically, each load... Networking - Azure Firewall CER-0414 ### [Non-Production Azure Firewalls Left Allocated Outside Working Hours](https://www.pointfive.co/efficiency-hub/inefficiencies/non-production-azure-firewalls-left-allocated-outside-working-hours) Azure Firewall charges a fixed hourly deployment fee for every hour a firewall is allocated, regardless of how much traffic it processes. Firewalls in development, test, lab and training environments are typically needed only during... Networking --- Source: the public page above. Product screenshots and illustrative interfaces are examples, not live customer data.