1. Proposed title of this feature request

Provide IPSec over transport mode for NetApp OnTap 9.8+

2. What is the nature and description of the request?

NetApp does not do IPSec over tunnels, only transport mode. See:

https://docs.netapp.com/us-en/ontap/networking/configure_ip_security_@ipsec@_over_wire_encryption.html

3. Why does the customer need this? (List the business requirements here)

Many OCP customers - Government, FSI, et al. - use NetApp storage devices and require encrypted data-in-motion. NetApp does provide encrypted transmission over Kerberized NFS, but the performance is 20% that of IPSec.

Unfortunately, NetApp does not provide support for IPSec over tunnel, only transport mode.

4. List any affected packages or components.

SDN/OVN

The following epics are related, but for IPSec over tunnel mode:

https://issues.redhat.com/browse/HATSTRAT-33
https://issues.redhat.com/browse/CTONET-2505