Generally Available: WireGuard In‑Transit Encryption for Azure Kubernetes Service (AKS)

WireGuard in‑transit encryption is now generally available for Azure Kubernetes Service (AKS) clusters using Azure CNI powered by Cilium and Advanced Container Networking Services (ACNS).

This capability enables transparent, node‑level encryption for inter‑node pod traffic using WireGuard’s modern cryptography, helping protect data in transit as it traverses the underlying network infrastructure without requiring application changes.

Key capabilities:

• In‑transit encryption for inter‑node pod traffic within an AKS cluster
• No application or workload changes required
• Fully managed key generation and rotation, handled automatically by AKS
• Minimal operational overhead, with no sidecars or additional control planes

Learn more.