---
title: "IP Functions are Generally Available, bringing high-performance network analytics to the Lakehouse"
description: "The announcement introduces the general availability of IP Functions, a feature that brings high-performance network analytics to the Lakehouse by enabling SQL-based processing of IP addresses. The post explains that IP data is warehousing data, as firewalls, load balancers, VPNs, CDN edges, DNS resolvers, Kubernetes clusters, and application servers emit streams of records keyed on IP addresses, generating tens of billions of events daily for large enterprises. These streams support valuable analytics such as threat detection, fraud investigation, and network governance. The post notes that network analytics used to be painful because IP addresses were deceptively hard to handle in SQL, with no regex support. The feature aims to simplify this by providing native IP functions for the Lakehouse."
---

# IP Functions are Generally Available, bringing high-performance network analytics to the Lakehouse

[Databricks](https://yomu.fyi/company/databricks) · Michael Andersen, Benjamin Mathew · Oct 1, 2026

**Type:** Announcement

## Summary

The announcement introduces the general availability of IP Functions, a feature that brings high-performance network analytics to the Lakehouse by enabling SQL-based processing of IP addresses. The post explains that IP data is warehousing data, as firewalls, load balancers, VPNs, CDN edges, DNS resolvers, Kubernetes clusters, and application servers emit streams of records keyed on IP addresses, generating tens of billions of events daily for large enterprises. These streams support valuable analytics such as threat detection, fraud investigation, and network governance. The post notes that network analytics used to be painful because IP addresses were deceptively hard to handle in SQL, with no regex support. The feature aims to simplify this by providing native IP functions for the Lakehouse.

## Context

The post announces the general availability of IP Functions for the Lakehouse, addressing the historical difficulty of handling IP addresses in SQL for network analytics.

## Takeaways

- IP Functions are now generally available, enabling high-performance network analytics directly on the Lakehouse.
- IP data is warehousing data, as every firewall, load balancer, VPN, CDN edge, DNS resolver, Kubernetes cluster, and application server emits records keyed on IP addresses.
- Large enterprises generate tens of billions of IP-keyed events daily, which are foundational for threat detection, fraud investigation, and network governance.

## FAQ

### What are IP Functions and why are they important?

IP Functions are a new feature that brings high-performance network analytics to the Lakehouse. They are important because they enable SQL-based processing of IP addresses, which are key to the streams of records emitted by network infrastructure like firewalls, load balancers, and DNS resolvers.

### Why was network analytics painful in the past?

Network analytics was painful because IP addresses were deceptively hard to handle in SQL. The post notes that there was no regex support, making it difficult to process and analyze IP data efficiently.

### What kind of data does IP data represent?

IP data represents warehousing data, as it comes from streams of records keyed on IP addresses from various network components. These streams generate tens of billions of events daily for large enterprises and are foundational for analytics like threat detection and fraud investigation.

**Tags:** [IP Functions](https://yomu.fyi/topic/ip-functions), [Lakehouse](https://yomu.fyi/topic/lakehouse), [Network Analytics](https://yomu.fyi/topic/network-analytics), [SQL](https://yomu.fyi/topic/sql)

- Source: [Databricks](https://www.databricks.com/blog/ip-functions-are-generally-available-bringing-high-performance-network-analytics-lakehouse)
- Source URL: https://www.databricks.com/blog/ip-functions-are-generally-available-bringing-high-performance-network-analytics-lakehouse
- Ingested by Yomu: 2026-10-01T00:00:10.992Z

[Read original post](https://www.databricks.com/blog/ip-functions-are-generally-available-bringing-high-performance-network-analytics-lakehouse)