diff --git a/releasenotes/notes/ipsec-8e24afb777de48e3.yaml b/releasenotes/notes/ipsec-8e24afb777de48e3.yaml
new file mode 100644
index 0000000000..7e595c4d89
--- /dev/null
+++ b/releasenotes/notes/ipsec-8e24afb777de48e3.yaml
@@ -0,0 +1,11 @@
+---
+features:
+  - |
+    Encryption of the internal network's communications through IPSec has been
+    added. To enable you need to add the OS::TripleO::Services::Ipsec service
+    to your roles if it's not there already. And you need to add the file
+    environments/ipsec.yaml to your overcloud deploy.
+  - |
+    The ``IpsecVars`` parameter was added in order to configure the parameters
+    in the tripleo-ipsec ansible role that configures IPSec tunnels if they're
+    enabled.