All your networking is secured behind layer 2 VXLANs, for secure networking with minimum overhead.
With VPCs your internal traffic is transmitted over secured VXLAN overlay networks.
All clusters come configured with VPCs by default.
Traffic within the VPC network is completely free of charge and doesn't count towards monthly quotas.