fabric-network-remediate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fabric-network-remediate (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Systematic toolkit for diagnosing and resolving network performance issues across Microsoft Fabric workloads including Spark, OneLake, Data Warehouse, Pipelines, and Dataflows.
Install-Module Az -Scope CurrentUser)nslookup, Test-NetConnection, and Resolve-DnsNameSpark startup times vary based on networking configuration. Consult the reference table:
| Scenario | Typical Startup Time |
|---|---|
| Default settings, no libraries | 5-10 seconds |
| Default settings + library dependencies | 5-10 sec + 30 sec-5 min |
| High traffic in region, no libraries | 2-5 minutes |
| High traffic + library dependencies | 2-5 min + 30 sec-5 min |
| Network security (Private Links/VNet) | 2-5 minutes |
| Network security + library dependencies | 2-5 min + 30 sec-5 min |
Run the diagnostic script for automated assessment:
.\scripts\Test-FabricNetworkHealth.ps1 -WorkspaceId "<workspace-id>" -CheckType SparkStartupWhen Private Links or Managed VNets are enabled, Starter Pools are unavailable and Fabric must create clusters on demand, adding 2-5 minutes to session start time.
nslookup sqlserver.corp.contoso.comConfirm the returned IP is a private range (10.x.x.x or 172.x.x.x), not public.
.\scripts\Test-FabricNetworkHealth.ps1 -WorkspaceId "<workspace-id>" -CheckType PrivateEndpointFabric requires specific endpoints and service tags. Run the firewall audit script:
.\scripts\Test-FabricNetworkHealth.ps1 -CheckType FirewallEndpointsFor the complete endpoint reference, see firewall-endpoints.md.
Key service tags for Azure Firewall / NSG rules:
| Tag | Purpose | Direction |
|---|---|---|
| Power BI | Fabric core services | Both |
| DataFactory | Pipeline operations | Both |
| PowerQueryOnline | Dataflow processing | Both |
| SQL | Warehouse connectivity | Outbound |
| EventHub | Real-Time Analytics | Outbound |
| KustoAnalytics | Real-Time Analytics | Both |
When outbound access protection is enabled, public repositories (PyPI, Conda) are blocked. To install libraries in secured environments:
requirements.txt on a machine with internet accesspip download -r requirements.txt -d ./packagesWhen all Spark VCores are consumed, new jobs receive HTTP 430 errors. Formula: 1 Capacity Unit = 2 Spark VCores.
For queue limits by SKU, see capacity-throttling.md.
| Symptom | Likely Cause | First Action |
|---|---|---|
| Spark startup >2 min | Private Link/VNet enabled | Expected; Starter Pools unavailable |
| Connection timeout from Spark | Firewall blocking Fabric subnet | Open required ports (1433 for SQL) |
| DNS resolves to public IP | Private DNS zone not linked | Add A record pointing to private IP |
| MPE status = Failed | PLS rejected or deleted | Re-create MPE, verify PLS exists |
| HTTP 430 error | Capacity VCores exhausted | Cancel jobs or upgrade SKU |
| PyPI install blocked | Outbound access protection | Upload packages as custom libraries |
| Cross-workspace env fails | Network settings mismatch | Ensure same capacity and network config |
| OneLake API 403 | Endpoint URL validation | Use *.dfs.fabric.microsoft.com |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.