---
title: "Encryption of Data Over-the-Wire"
slug: "encryption-of-data-over-the-wire"
updated: 2026-10-27T17:23:45Z
published: 2026-10-27T17:23:45Z
canonical: "docs.vastdata.com/encryption-of-data-over-the-wire"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Encryption of Data Over-the-Wire

Encryption of data over-the-wire is the encryption of data as it is transmitted over network connections to protect the data in transit from unauthorized access.

In a VAST Cluster deployment, data can be encrypted in transit between the client network and the cluster and on the internal cluster network.

## Encryption of data between the client network and the cluster

Data is encrypted on the following connections:

- Clients using the S3 protocol can connect with the cluster over HTTPS connection. The HTTPS connection is encrypted with FIPS 140-3 capable encryption. For more information, see [Enabling an HTTPS Connection](/docs-5-3/docs/en/enabling-an-https-connection).
- Client connections over NFSv4 can be encrypted with [Kerberos](/docs-5-3/docs/en/kerberos-authentication-for-nfsv41) or with [TLS](/docs-5-3/docs/en/configuring-tls-encryption-with-nfsv41). Configuring TLS Encryption with NFSv4.1
- Client connections over NFSv3 can be encrypted with [TLS](/docs-5-3/docs/en/configuring-tls-encryption-with-nfsv41). Configuring TLS Encryption with NFSv4.1
- The connection between replication peers is encrypted with FIPS 140-3 capable encryption. See [Encrypting Replication with mTLS](/docs-5-3/docs/en/encrypting-replication-with-mtls) for details.Encrypting Replication with mTLS
- VMS traffic is encrypted using TLS. For details, see [Installing an SSL Certificate for VMS](/docs-5-3/docs/en/installing-an-ssl-certificate-for-vms).
- Connection to an external LDAP server can be encrypted using TLS. This is an optional setting in the LDAP configuration.

## Encryption of Data on the Internal Network

When [encryption is enabled on the cluster](/docs-5-3/docs/encryption-of-data-at-rest), data transferred between the servers and switches in the VAST Cluster network is encrypted with FIPS 140-3 capable encryption. Encryption at Data at Rest