databricks Platform · Updated Apr 28, 2026

Connect Databricks to on-premises resources using an SSH reverse tunnel

You can now connect Databricks classic and serverless compute to on premises resources without opening inbound firewall access by configuring an SSH reverse tunnel with proxy VMs in AWS.

Update Open docs ↗release note ↗

What it does

You can now connect Databricks classic and serverless compute to on premises resources without opening inbound firewall access by configuring an SSH reverse tunnel with proxy VMs in AWS. Connect your on premises resources to Databricks without opening inbound firewall access. An on premises tunnel host opens an outbound SSH connection to proxy virtual machines (VMs) in AWS, allowing Databricks classic and serverless compute to reach your on premises resources.

Why it matters

Reduces operational overhead and unlocks new capabilities for data teams on Databricks.

Key capabilities

Classic compute: peering between the

Classic compute: peering between the Databricks VPC and the proxy hub VPC.

Serverless compute: a private endpoint

Serverless compute: a private endpoint connection using your cloud provider's private connectivity service and a Network…

Both compute types: configure both

Both compute types: configure both paths.

sshd: The SSH daemon accepts

sshd: The SSH daemon accepts incoming reverse tunnels from the on-premises tunnel host and places the tunnel listener on…

Architecture

Databricks Platform → Platform

In short

Read the full documentation ↗

Key takeaway

You can now connect Databricks classic and serverless compute to on premises resources without opening inbound firewall access by configuring an SSH reverse tunnel with proxy VMs in AWS.

2026-04-28-connect-databricks-to-on-premises-resources-using-an-ssh-reverse-tunnel Generated by the Databricks Updates Agent · browse all updates