Rancher && internal ssl

I seem to remember reading in the rancher docs how it uses ssl to encrypt traffic internally in downstream k8s clusters. My google foo is weak today as I can’t find that information again. So, two quick questions:

  1. is that an accurate memory? Does rancher encrypt traffic internally?
  2. Can someone point to the page that discusses that?

Thanks

Doug O’Leary