I have a multihomed setup with two ISPs with similar bandwidth characteristics. I want to route my traffic to a remote site via ipsec, so that my local network traffic goes through the tunnel and comes out of the remote site endpoint (with no regard to which one of ISP was used in the process). This should be somewhat similar to link aggregation and lacp — in order to avoid reordering of tcp packets one stream is being sent via exactly one link even if more than one is available (based on some hashing).
Is the similar scheme achievable with ipsec? I mean use two ISPs to route ipsec traffic, withstand failure of single ISP and do balancing over ISPs per stream (not per packet).