All three traffic can be secured by using TLS connection protected by certificates:

• Postgres traffic from Client Application to FEPCluster

• Patroni RESTAPI within FEPCluster

• Postgres traffic within FEPCluster (e.g. replication, rewind)