WireGuard in‑transit encryption is now generally
available for Azure Kubernetes Service (AKS) clusters using Azure CNI
powered by Cilium and Advanced Container Networking Services (ACNS).
This capability enables transparent, node‑level encryption
for inter‑node pod traffic using WireGuard’s modern cryptography, helping
protect data in transit as it traverses the underlying network
infrastructure without requiring application changes.
Key
capabilities:
- In‑transit encryption for inter‑node pod
traffic within an AKS cluster
- No application or workload changes required
- Fully managed key generation and rotation, handled
automatically by AKS
- Minimal operational overhead, with no sidecars or
additional control planes
Learn
more.