docs: Add note about WireGuard in cluster mesh

Signed-off-by: Sebastian Wicki <sebastian@isovalent.com>
cilium · Oct 25, 2021 · f8db94f · f8db94f
1 parent c16acbb
commit f8db94f
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/Documentation/gettingstarted/encryption-wireguard.rst b/Documentation/gettingstarted/encryption-wireguard.rst
@@ -199,6 +199,17 @@ must hold:
  - ``peers[*].allowed-ips`` should contain a list of pod IP addresses running
    on the remote.
 
+Cluster Mesh
+============
+
+WireGuard enabled Cilium clusters can be connected via :ref:`Cluster Mesh`. The
+``clustermesh-apiserver`` will forward the necessary WireGuard public keys
+automatically to remote clusters.
+In such a setup, it is important to note that all participating clusters must
+have WireGuard encryption enabled, i.e. mixed mode is currently not supported.
+In addition, UDP traffic between nodes of different clusters on port ``51871``
+must be allowed.
+
 Limitations
 ===========