The IPsec for east west traffic has following issues:

1. When ipsec pod is rebooted due to some reasons, there is unnecessary reboot of pluto service which causes intermittent traffic failure even there is no changes with ipsec connections.

2. CNO is still rendering narrowing=yes which is no longer needed.

3. After IPsec is deployed, when machine config pool goes into progressing state while installing or removing some other machine configs (or) node reboot cause IPsec being disabled in OVN.

    1.
    2.
    3.