// Module included in the following assemblies:
//
// * networking/openshift_network_security/configuring-ipsec-ovn.adoc

:_mod-docs-content-type: CONCEPT
[id="pod-to-pod-ipsec_{context}"]
= IPsec encryption for pod-to-pod traffic

[role="_abstract"]
For IPsec encryption of pod-to-pod traffic, the following sections describe which specific pod-to-pod traffic is encrypted, what kind of encryption protocol is used, and how X.509 certificates are handled. These sections do not apply to IPsec encryption between the cluster and external hosts, which you must configure manually for your specific external network infrastructure.