How to encrypt traffic on 10 gigabits?

Question

System administration

Good day!
There are two offices of the organization (in different buildings), fiber optics are thrown between them and switches with 10g support (cisco 3560-x) are installed.
Please tell me, from experience, routers or gateways for 10g encryption.
Also tell me, if anyone has come across what is used to encrypt traffic according to GOST?

Answer 1

Cisco does not have native certified modules for guest encryption. All in all, this is pretty sad. In general, if it is really necessary to encrypt with a certified guest, then the hardware had to be selected specifically for this, and not vice versa.
Have a look at www.s-terra.com/products/productline/nmervpn
These are modules for cisco with home-grown guest encryption.
Perhaps our other manufacturers have something similar. There aren't many, look around.
There is no foreign hardware with certified encryption. The FSB never certifies it.

Answer 2

How to encrypt traffic on 10 gigabits?
...
what is used to encrypt traffic according to GOST?

Equipment certified by FSB and FSTEC of Russia.

Answer 3

Alex for 3560-x there is a service module C3KX-SM-10G which can encrypt on 40g. Actually, it is designed to protect lan segments.
Read here: www.cisco.com/c/en/us/products/collateral/switches...

Answer 4

Why not make a regular VPN, or do you need to specifically "encrypt"?

Answer 5

You can try asking Mikrotik a question about routerboard.com/CCR1072-1G-8Splus question. they usually answer them willingly.