...Additional layer of encryption provided at the infrastructure layer. Whenever Azure customer traffic moves between data centers-- outside physical boundaries not controlled by Microsoft or on behalf of Microsoft-- a data-link layer encryption method using the IEEE 802.1AE MAC Security Standards (also known as MACsec) is applied from point-to-point across the underlying network hardware.