What private means
A VXC is a separate VLAN between two ports. Other customers on the fabric cannot see or inject traffic into it.
Provider access
Peer1IX operates the fabric but does not inspect the contents of customer traffic. Operational monitoring uses aggregate counters such as bytes and packets.
When to encrypt
If your security policy requires encryption in transit, add it on top: MACsec where supported, IPsec between routers, or TLS at the application layer.
Authorisation
A VXC to your port requires your approval. Review requests carefully.
Governance
Maintain a register of every VXC: who it connects to, why, and who approved it. Remove unused VXCs promptly.
