With respect to the 2.0 docs Bitfusion encrypts control traffic, but does not encrypt data traffic.

Actually, for vm traffic encryption there are some restrictions with PVRDMA for GPUhost-to-client-traffic, vSAN for data-in-transit encryption and in Bitfusion client' package Netlink Protocol Library Suite (libnl).

A Bitfusion-aware Horizon accessible Ubuntu desktop might be the way to go.

fyi A docker-biased alternative + your own tunnel encryption is thinkable as well.

https://github.com/vmware/bitfusion-with-kubernetes-integration