If you have a fiber optic line connecting two spaces, you may be concerned about someone tapping into the line and capturing data. Surprisingly, tapping into copper cables was once common, but now, tapping into optical fibers is possible and easy, demonstrated by notorious hacker Kevin Mitnick. Encryption is the best solution to prevent data breaches, but finding the right encryption method can be complicated. MACsec, a Cisco-designed standard, may not be the best option due to shortcomings in hiding MAC addresses. An alternative solution is using VXLAN and Wireguard on native Linux kernel features, offering high-speed encryption at a fraction of the cost of traditional methods.
https://www.synacktiv.com/en/publications/defend-against-vampires-with-10-gbps-network-encryption