Has anyone achieved line-speed or close to line-speed throughput on a SINGLE IPSec tunnel on a 10Gbps port? If this is not possible, what would be a reasonable throughput (w.r.t interface speed) to expect out of a single IPSec tunnel? I have an assumption that live back haul networks always split the load across multiple IPSec tunnels to achieve better throughput. Is this correct?
EDIT: "back-haul" is wrong. What I meant was access-network-to-core connection. (Ex: radio access network to core in a telco network). Hence, the need for IPSec. Again, I would like to highlight the "single tunnel" term. The server class machines (ex: HP Gen 8/9) running DPDK based routing solution does not seem to handle "single" flows well. The whole RSS (receive side scaling) works only if there are multiple flows. So, when there is only one flow, this becomes a bottleneck. That is, the throughput achieved is what a single core can handle. If there are multiple flows, meaning multiple IPSec tunnels, there is no problem in achieving throughput somewhere close to line speed. So, my question is "does anyone also face this issue with the usage of a single IPSec tunnel and had to use multiple tunnels for better throughput on cisco/juniper?"