Azure Managed Lustre now supports Virtual Network (VNet) Encryption, enabling encryption of data in transit between Azure Managed Lustre and client virtual machines. This feature helps customers meet compliance requirements for data confidentiality in regulated industries such as finance, healthcare, and government.
VNet Encryption uses Datagram Transport Layer Security (DTLS) 1.2 with AES-GCM-256 encryption and offloads encryption to inline FPGAs on the VM host to maintain high throughput and low latency. It can be enabled on the virtual network hosting Azure Managed Lustre or a peered network with encryption enabled.
Supported VM series include D, E, F, and L. Existing AMLFS clusters require a maintenance event and subsequent reboot to activate encryption.
Customers can validate encrypted traffic using Azure Network Watcher, Azure Monitor, and diagnostic tools.