IPsec observability is mentioned as a desired addition for Network Observability but there is no clear definition of requirements for it.  This spike is to work with PM to clarify the requirements and to start technical R&D.

Possible scenarios:

• verification that cluster-wide E/W IPsec is active
• verification that N/S tunnels to external endpoints are active
• alerting on non-encrypted flows
• IPsec metrics