I see many big companies using VPNs to secure traffic between their empoyees' computers and their servers or just between different servers.
At what point does that become necessary for a smaller-scale company?
I guess the best answer should be to do an in-depth threats and risks analysis, but is this something many startups (or SMEs) set up?
Also, how often do companies set up VPNs between servers in the same datacenter? For example, we have several dedicated servers at OVH, with some services speaking cleartext (Redis for example), what is the risk of interception?