<p>I have deployed an Azure AKS cluster using Azure CNI behind Application Gateway. Currently, internal pod communication is via http. I am trying to make this communication secure by implementing SSL. I didn't find any optimal solution after skimming through MSDN and Kubernetes documentation. Is there any way this can be achieved?</p>

<p>CNI won't automatically encrypt the communication between pods on its own.
You could use external tools like Linkerd or Istio which could encrypt traffic between pods</p>
<p>Linkerd and Isito will encrypt traffic with mTLS out of the box.</p>
<p><a href="https://linkerd.io/2/features/automatic-mtls/" rel="nofollow noreferrer">https://linkerd.io/2/features/automatic-mtls/</a></p>
<p><a href="https://istio.io/v1.4/docs/tasks/security/authentication/auto-mtls/" rel="nofollow noreferrer">https://istio.io/v1.4/docs/tasks/security/authentication/auto-mtls/</a></p>
