If your environment requires that data be encrypted at all times, whether at rest or in transit, you can create an init script that configures your clusters to encrypt traffic between worker nodes, using AES 128-bit encryption over a TLS 1.2 connection.

More guidelines mentioned here - https://docs.databricks.com/security/encryption/encrypt-otw.html