Encrypted or unencrypted on VLAN Attachment

[Thomasaw]

Hi, everyone

I have a question:
Which should I select 'encrypted' or 'unencrypted' when I deploy VLAN Attachment with Cloud Interconnect?

Also I referred a document below, but I don't make sense.
https://cloud.google.com/network-connectivity/docs/interconnect/how-to/partner/creating-vlan-attachm...
That shows how different that VLAN Attatnment works, but at a point of designing, it is not enough for me.

I hope someone to have a good knowledge about it and share with us.

regards,

[moe54]

Hello,

The difference between encrypted and unencrypted vlan attachment is explained in [1] and I quote here: "You can create unencrypted VLAN attachments or encrypted VLAN attachments. Encrypted VLAN attachments are used in HA VPN over Cloud Interconnect deployments. You can create unencrypted VLAN attachments that are single stack (IPv4 only) or dual-stack (IPv4 and IPv6). However, encrypted VLAN attachments are always configured to be IPv4 only.".

Hence If you want to encrypt the traffic that traverses your Dedicated Interconnect or Partner Interconnect connections, then you should use "HA VPN over Cloud Interconnect" and use the encrypted option for vlan attachments. Please check [2] under references.

References:

[1] https://cloud.google.com/network-connectivity/docs/interconnect/how-to/dedicated/creating-vlan-attac...

[2] https://cloud.google.com/network-connectivity/docs/interconnect/concepts/ha-vpn-interconnect