Hi,
The project looks cool, I've tried and it works as I need :-)
However will it be possible to make nodeName IPSecConnection value dynamic, like your-node-name-? bc I'm using nodes in the pool, so after node recreation or maintenance the node name changes its suffix (the external ip remains the same). Probably you can assign some specific label to the node and stick ipsec connection to that label.
Thanks.