We currently need to rely on looking at various command outputs like:

ipsec status
ipsec trafficstatus
ip xfrm state
ip xfrm policy
ovs-appctl -t ovs-monitor-ipsec tunnels/show

 to get know health status for every IPsec tunnel on the cluster between nodes.

There should be a metric to be introduced on every node and exported to prometheus server which gives status of every tunnel.
An appropriate alert rule must be defined when ipsec is not configured or not active within particular period.