+`migration`: `[type=]<secure|insecure> [,network=<CIDR>]` ::
+
+For cluster wide migration settings.
+
+`network`=`<CIDR>` ;;
+
+CIDR of the (sub) network that is used for migration.
+
+`type`=`<insecure | secure>` ('default =' `secure`);;
+
+Migration traffic is encrypted using an SSH tunnel by default. On secure, completely private networks this can be disabled to increase performance.
+
+`migration_unsecure`: `<boolean>` ::