Support macsec dot1q-in-clear on ExpressRoute Direct
If you can add support for macsec dot1q-in-clear on ExpressRoute Direct, it would be EXTREMELY beneficial.
The dot1q-in-clear option makes it possible to use MACSEC over MegaPort using tagged ports. It also makes it possible for MACSEC to transparently flow across Ethernet over MPLS, EPL, and other forms of metro ethernet.
Not supporting dot1q-in-clear drives up our costs and take away quite a bit of flexibility.
It would be even better if you could set up dot1q-in-clear support with connectivity providers.
MACSEC is important because we do not want to trust MegaPort, and MACSEC adds truly negligible latency whereas IPSEC to VNG's or third party virtual appliances is simply horrible.