Encrypt traffic between cluster worker nodes
By default, the data exchanged between worker nodes in a cluster is encrypted. Google encrypts data in transit at one or more network layers when data moves outside physical boundaries not controlled by Google or on behalf of Google. All VM-to-VM traffic within a VPC network and peered VPC networks is encrypted. For more information, see the Google whitepaper Encryption in transit.