> ## Documentation Index
> Fetch the complete documentation index at: https://siderolabs-fe86397c-1-11-reference.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a Hybrid Cluster

This guide shows you how to create a cluster consisting of any combination of bare metal, cloud virtual machines, on-premise virtual machines, or SBCs, using KubeSpan. KubeSpan is a feature of Talos Linux that provides full node-to-node network encryption with WireGuard, and enables Kubernetes to operate securely even when machines in the cluster are on different networks.

Refer to the general guide on creating a cluster to get started. To create a hybrid cluster, navigate to the cluster, then apply the following cluster patch by clicking on "Config Patches", and create a new patch with the target of "Cluster":

<img src="https://mintcdn.com/siderolabs-fe86397c-1-11-reference/YGuga1UT8xktZXw3/omni/cluster-management/images/create-a-hybrid-cluster-create-patch-kubescan-enabled.png?fit=max&auto=format&n=YGuga1UT8xktZXw3&q=85&s=122ade542a5684fc38fdd12c8ba48484" alt="Create Patch" width="768" height="272" data-path="omni/cluster-management/images/create-a-hybrid-cluster-create-patch-kubescan-enabled.png" />

```yaml
machine:
  network:
    kubespan:
      enabled: true
```

All machines in this cluster will have this patch applied to them, and use WireGuard encryption for all node-to-node traffic.