doc: Add note not encrypting within the node

Signed-off-by: Chris Tarazi <chris@isovalent.com>
cilium · Jun 16, 2020 · 2d0a508 · 2d0a508
1 parent 9545f6f
commit 2d0a508
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Documentation/gettingstarted/encryption.rst b/Documentation/gettingstarted/encryption.rst
@@ -23,6 +23,12 @@ distributed, but that is not shown here.
     ENI datapath mode. In combination with encapsulation/tunneling, the feature
     is still in beta phase.
 
+.. note::
+
+    Packets destined to the same node they were sent out of are not encrypted.
+    This is a intended behavior as it doesn't provide any benefits because the
+    raw traffic on the node can be seen.
+
 Generate & import the PSK
 =========================