It is my understanding that the peer link is used for control traffic and that data traffic should not cross the peer-link. I also understand that traffic that enters on a VPC on one chassis and then crosses the peer-link cannot leave the second chassis on a VPC.
Now the question.
Assuming that traffic has entered Chassis A on a VPC and then crossed the peer link to Chassis B. Will the traffic be forwarded if the egress port of Chassis B is not configured for VPC but is just an orphan port????
This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.